etlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
10:16:09 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0)
10:16:09 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0xc0189436, &(0x7f0000000040)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}, 'batadv_slave_0\x00'})
[ 2805.655240][ T3303] device bridge1769 entered promiscuous mode
[ 2805.796903][ T3311] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2805.802249][ T3306] device macvtap2159 entered promiscuous mode
[ 2805.823887][ T3311] CPU: 1 PID: 3311 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2805.834266][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2805.844334][ T3311] Call Trace:
[ 2805.847617][ T3311]
[ 2805.850555][ T3311] dump_stack_lvl+0xd1/0x138
[ 2805.855171][ T3311] dump_header+0x10b/0x85f
[ 2805.859605][ T3311] oom_kill_process.cold+0x10/0x15
[ 2805.864736][ T3311] out_of_memory+0x35c/0x14a0
[ 2805.869449][ T3311] ? find_held_lock+0x2d/0x110
[ 2805.874254][ T3311] ? oom_killer_disable+0x280/0x280
[ 2805.879479][ T3311] ? find_held_lock+0x2d/0x110
[ 2805.884269][ T3311] mem_cgroup_out_of_memory+0x206/0x270
[ 2805.889834][ T3311] ? mem_cgroup_margin+0x130/0x130
[ 2805.894960][ T3311] ? lock_downgrade+0x6e0/0x6e0
[ 2805.899853][ T3311] try_charge_memcg+0xef8/0x12f0
[ 2805.904819][ T3311] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2805.910820][ T3311] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2805.916557][ T3311] ? lock_downgrade+0x6e0/0x6e0
[ 2805.921460][ T3311] obj_cgroup_charge+0x2af/0x5e0
[ 2805.926428][ T3311] ? vm_area_dup+0x85/0x380
[ 2805.930949][ T3311] kmem_cache_alloc+0xa3/0x3d0
[ 2805.935739][ T3311] vm_area_dup+0x85/0x380
[ 2805.940085][ T3311] ? mt_slot+0xa1/0x170
[ 2805.944254][ T3311] ? mas_next_nentry+0x610/0xab0
[ 2805.949206][ T3311] ? mas_next_node+0x547/0xa00
[ 2805.954002][ T3311] ? mas_find+0x211/0xd10
[ 2805.958360][ T3311] ? vm_area_alloc+0x100/0x100
[ 2805.963139][ T3311] ? validate_mm_mt+0x149/0x1b0
[ 2805.968015][ T3311] ? remove_vma+0x130/0x130
[ 2805.972544][ T3311] ? can_vma_merge_before+0x390/0x390
[ 2805.977943][ T3311] __split_vma+0xae/0x5e0
[ 2805.982296][ T3311] ? vma_merge+0x2cf/0x870
[ 2805.986739][ T3311] split_vma+0xa3/0xe0
[ 2805.990830][ T3311] mprotect_fixup+0x6cb/0x960
[ 2805.995538][ T3311] ? mas_find+0x211/0xd10
[ 2805.999880][ T3311] ? change_protection+0x4290/0x4290
[ 2806.005199][ T3311] do_mprotect_pkey+0x6fd/0xa70
[ 2806.010083][ T3311] ? mprotect_fixup+0x960/0x960
[ 2806.014959][ T3311] ? up_write+0x1b0/0x520
[ 2806.019351][ T3311] __x64_sys_mprotect+0x78/0xb0
[ 2806.024231][ T3311] do_syscall_64+0x39/0xb0
[ 2806.028669][ T3311] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2806.034582][ T3311] RIP: 0033:0x7f8325a8c1e7
[ 2806.039010][ T3311] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2806.058629][ T3311] RSP: 002b:00007fff9cb6b1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2806.067055][ T3311] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f8325a8c1e7
[ 2806.075032][ T3311] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f8326769000
[ 2806.083008][ T3311] RBP: 00007fff9cb6b2d0 R08: 00000000ffffffff R09: 00007f8326788700
[ 2806.090995][ T3311] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff9cb6b3f0
[ 2806.098972][ T3311] R13: 00007f8326788700 R14: 0000000000000000 R15: 0000000000022000
[ 2806.106968][ T3311]
[ 2806.170236][ T3311] memory: usage 307200kB, limit 307200kB, failcnt 63849
[ 2806.180498][ T3311] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2806.188201][ T3311] Memory cgroup stats for /syz2:
[ 2806.188431][ T3311] anon 143360
[ 2806.188431][ T3311] file 417792
[ 2806.188431][ T3311] kernel 314011648
[ 2806.188431][ T3311] kernel_stack 65536
[ 2806.188431][ T3311] pagetables 77824
[ 2806.188431][ T3311] sec_pagetables 0
[ 2806.188431][ T3311] percpu 5357600
[ 2806.188431][ T3311] sock 0
[ 2806.188431][ T3311] vmalloc 0
[ 2806.188431][ T3311] shmem 417792
[ 2806.188431][ T3311] zswap 0
[ 2806.188431][ T3311] zswapped 0
[ 2806.188431][ T3311] file_mapped 417792
[ 2806.188431][ T3311] file_dirty 0
[ 2806.188431][ T3311] file_writeback 0
[ 2806.188431][ T3311] swapcached 0
[ 2806.188431][ T3311] anon_thp 0
[ 2806.188431][ T3311] file_thp 0
[ 2806.188431][ T3311] shmem_thp 0
[ 2806.188431][ T3311] inactive_anon 147456
[ 2806.188431][ T3311] active_anon 413696
[ 2806.188431][ T3311] inactive_file 0
[ 2806.188431][ T3311] active_file 0
[ 2806.188431][ T3311] unevictable 0
[ 2806.188431][ T3311] slab_reclaimable 14280
[ 2806.188431][ T3311] slab_unreclaimable 308463520
[ 2806.285327][ T3307] device macvtap2160 entered promiscuous mode
[ 2806.295664][ T3311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3311,uid=0
[ 2806.316562][ T3311] Memory cgroup out of memory: Killed process 3311 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2806.350193][ T3322] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2806.365536][ T3322] CPU: 0 PID: 3322 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2806.375891][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2806.385956][ T3322] Call Trace:
[ 2806.389226][ T3322]
[ 2806.392146][ T3322] dump_stack_lvl+0xd1/0x138
[ 2806.396733][ T3322] dump_header+0x10b/0x85f
[ 2806.401142][ T3322] oom_kill_process.cold+0x10/0x15
[ 2806.406245][ T3322] out_of_memory+0x35c/0x14a0
[ 2806.410919][ T3322] ? oom_killer_disable+0x280/0x280
[ 2806.416119][ T3322] ? find_held_lock+0x2d/0x110
[ 2806.420900][ T3322] mem_cgroup_out_of_memory+0x206/0x270
[ 2806.426474][ T3322] ? mem_cgroup_margin+0x130/0x130
[ 2806.431596][ T3322] ? lock_downgrade+0x6e0/0x6e0
[ 2806.436495][ T3322] try_charge_memcg+0xef8/0x12f0
[ 2806.441463][ T3322] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2806.447467][ T3322] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2806.453202][ T3322] ? lock_downgrade+0x6e0/0x6e0
[ 2806.458098][ T3322] obj_cgroup_charge+0x2af/0x5e0
[ 2806.463061][ T3322] ? vm_area_dup+0x85/0x380
[ 2806.467577][ T3322] kmem_cache_alloc+0xa3/0x3d0
[ 2806.472373][ T3322] vm_area_dup+0x85/0x380
[ 2806.476715][ T3322] ? mt_slot+0xa1/0x170
[ 2806.480882][ T3322] ? mas_next_nentry+0x610/0xab0
[ 2806.485838][ T3322] ? mas_next_node+0x547/0xa00
[ 2806.490633][ T3322] ? mas_find+0x211/0xd10
[ 2806.494986][ T3322] ? vm_area_alloc+0x100/0x100
[ 2806.499760][ T3322] ? validate_mm_mt+0x149/0x1b0
[ 2806.504631][ T3322] ? remove_vma+0x130/0x130
[ 2806.509157][ T3322] ? can_vma_merge_before+0x390/0x390
[ 2806.514576][ T3322] __split_vma+0xae/0x5e0
[ 2806.518935][ T3322] ? vma_merge+0x2cf/0x870
[ 2806.523380][ T3322] split_vma+0xa3/0xe0
[ 2806.527478][ T3322] mprotect_fixup+0x6cb/0x960
[ 2806.532186][ T3322] ? mas_find+0x211/0xd10
[ 2806.536536][ T3322] ? change_protection+0x4290/0x4290
[ 2806.541859][ T3322] do_mprotect_pkey+0x6fd/0xa70
[ 2806.546749][ T3322] ? mprotect_fixup+0x960/0x960
[ 2806.551631][ T3322] ? up_write+0x1b0/0x520
[ 2806.556026][ T3322] __x64_sys_mprotect+0x78/0xb0
[ 2806.560911][ T3322] do_syscall_64+0x39/0xb0
[ 2806.565355][ T3322] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2806.571277][ T3322] RIP: 0033:0x7f69a668c1e7
[ 2806.575703][ T3322] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2806.595324][ T3322] RSP: 002b:00007ffea4dd30a8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2806.603755][ T3322] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f69a668c1e7
[ 2806.611736][ T3322] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f69a744d000
[ 2806.619716][ T3322] RBP: 00007ffea4dd3180 R08: 00000000ffffffff R09: 00007f69a746c700
[ 2806.627696][ T3322] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffea4dd32a0
[ 2806.635674][ T3322] R13: 00007f69a746c700 R14: 0000000000000000 R15: 0000000000022000
[ 2806.643684][ T3322]
[ 2806.659073][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 10263
[ 2806.666056][ T3322] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2806.673108][ T3317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2806.682476][ T3322] Memory cgroup stats for /syz1:
[ 2806.682777][ T3322] anon 143360
[ 2806.682777][ T3322] file 393216
[ 2806.682777][ T3322] kernel 314036224
[ 2806.682777][ T3322] kernel_stack 65536
[ 2806.682777][ T3322] pagetables 81920
[ 2806.682777][ T3322] sec_pagetables 0
[ 2806.682777][ T3322] percpu 5356416
[ 2806.682777][ T3322] sock 0
[ 2806.682777][ T3322] vmalloc 0
[ 2806.682777][ T3322] shmem 385024
[ 2806.682777][ T3322] zswap 0
[ 2806.682777][ T3322] zswapped 0
[ 2806.682777][ T3322] file_mapped 385024
[ 2806.682777][ T3322] file_dirty 0
[ 2806.682777][ T3322] file_writeback 0
[ 2806.682777][ T3322] swapcached 0
[ 2806.682777][ T3322] anon_thp 0
[ 2806.682777][ T3322] file_thp 0
[ 2806.682777][ T3322] shmem_thp 0
[ 2806.682777][ T3322] inactive_anon 188416
[ 2806.682777][ T3322] active_anon 339968
[ 2806.682777][ T3322] inactive_file 4096
[ 2806.682777][ T3322] active_file 4096
[ 2806.682777][ T3322] unevictable 0
[ 2806.682777][ T3322] slab_reclaimable 16512
[ 2806.682777][ T3322] slab_unreclaimable 308471536
10:16:11 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x6558}, 0x0)
10:16:11 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc004743e, &(0x7f0000000000)=0xb90d0100)
10:16:11 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x7f)
[ 2806.799698][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3322,uid=0
[ 2806.831109][ T3322] Memory cgroup out of memory: Killed process 3322 (syz-executor.1) total-vm:54672kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
10:16:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3303}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:11 executing program 4:
r0 = socket(0xa, 0x3, 0x2)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)
[ 2806.897325][ T3324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
10:16:11 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc004743e, &(0x7f0000000000))
[ 2807.070610][ T3334] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[ 2807.113724][ T3334] CPU: 1 PID: 3334 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2807.124101][ T3334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2807.134180][ T3334] Call Trace:
[ 2807.137476][ T3334]
[ 2807.140425][ T3334] dump_stack_lvl+0xd1/0x138
[ 2807.145043][ T3334] dump_header+0x10b/0x85f
[ 2807.149476][ T3334] oom_kill_process.cold+0x10/0x15
[ 2807.154625][ T3334] out_of_memory+0x35c/0x14a0
[ 2807.159345][ T3334] ? find_held_lock+0x2d/0x110
[ 2807.164145][ T3334] ? oom_killer_disable+0x280/0x280
[ 2807.169355][ T3334] ? find_held_lock+0x2d/0x110
[ 2807.174173][ T3334] mem_cgroup_out_of_memory+0x206/0x270
[ 2807.179754][ T3334] ? mem_cgroup_margin+0x130/0x130
[ 2807.184891][ T3334] ? lock_downgrade+0x6e0/0x6e0
[ 2807.189804][ T3334] try_charge_memcg+0xef8/0x12f0
[ 2807.194786][ T3334] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2807.200807][ T3334] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2807.206559][ T3334] ? lock_downgrade+0x6e0/0x6e0
[ 2807.211460][ T3334] ? lock_downgrade+0x6e0/0x6e0
[ 2807.216375][ T3334] __memcg_kmem_charge_page+0x16e/0x3b0
[ 2807.221961][ T3334] __alloc_pages+0x1f3/0x5b0
[ 2807.226594][ T3334] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0
[ 2807.233397][ T3334] ? find_held_lock+0x2d/0x110
[ 2807.238213][ T3334] alloc_pages+0x1aa/0x270
[ 2807.242669][ T3334] pte_alloc_one+0x1a/0x230
[ 2807.247195][ T3334] __pte_alloc+0x6d/0x260
[ 2807.251536][ T3334] ? pmd_install+0x160/0x160
[ 2807.256164][ T3334] ? hugepage_vma_check+0x24e/0x830
[ 2807.261405][ T3334] ? _raw_spin_unlock+0x28/0x40
[ 2807.266278][ T3334] ? __pmd_alloc+0x30c/0x5d0
[ 2807.270878][ T3334] __handle_mm_fault+0x3527/0x3a40
[ 2807.276026][ T3334] ? vm_iomap_memory+0x190/0x190
[ 2807.281023][ T3334] handle_mm_fault+0x1cc/0x780
[ 2807.285810][ T3334] do_user_addr_fault+0x475/0x1210
[ 2807.290935][ T3334] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2807.296525][ T3334] exc_page_fault+0x98/0x170
[ 2807.301147][ T3334] asm_exc_page_fault+0x26/0x30
[ 2807.306023][ T3334] RIP: 0033:0x7f8325a2bd79
[ 2807.310444][ T3334] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2807.330077][ T3334] RSP: 002b:00007fff9cb6b2a0 EFLAGS: 00010246
[ 2807.336160][ T3334] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2807.344132][ T3334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555b4e2e8
[ 2807.352124][ T3334] RBP: 00007fff9cb6b398 R08: 0000000000000000 R09: 0000000000000000
[ 2807.360117][ T3334] R10: 00007f83256000c8 R11: 0000000000000246 R12: 00000000002ad4dd
[ 2807.368113][ T3334] R13: 00007fff9cb6b3c0 R14: 00007f8325babf80 R15: 0000000000000032
[ 2807.376109][ T3334]
[ 2807.383317][ T3334] memory: usage 307200kB, limit 307200kB, failcnt 63978
[ 2807.390679][ T3334] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2807.397894][ T3334] Memory cgroup stats for /syz2:
[ 2807.398091][ T3334] anon 135168
[ 2807.398091][ T3334] file 417792
[ 2807.398091][ T3334] kernel 314019840
[ 2807.398091][ T3334] kernel_stack 65536
[ 2807.398091][ T3334] pagetables 73728
[ 2807.398091][ T3334] sec_pagetables 0
[ 2807.398091][ T3334] percpu 5357600
[ 2807.398091][ T3334] sock 0
[ 2807.398091][ T3334] vmalloc 0
[ 2807.398091][ T3334] shmem 417792
[ 2807.398091][ T3334] zswap 0
[ 2807.398091][ T3334] zswapped 0
[ 2807.398091][ T3334] file_mapped 417792
[ 2807.398091][ T3334] file_dirty 0
[ 2807.398091][ T3334] file_writeback 0
[ 2807.398091][ T3334] swapcached 0
[ 2807.398091][ T3334] anon_thp 0
[ 2807.398091][ T3334] file_thp 0
[ 2807.398091][ T3334] shmem_thp 0
[ 2807.398091][ T3334] inactive_anon 110592
[ 2807.398091][ T3334] active_anon 413696
[ 2807.398091][ T3334] inactive_file 0
[ 2807.398091][ T3334] active_file 0
[ 2807.398091][ T3334] unevictable 0
[ 2807.398091][ T3334] slab_reclaimable 14280
[ 2807.398091][ T3334] slab_unreclaimable 308469280
[ 2807.496747][ T3334] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3334,uid=0
10:16:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3400}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x39, @local}]}, 0x48}}, 0x0)
[ 2807.512845][ T3334] Memory cgroup out of memory: Killed process 3334 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000
[ 2807.544806][ T3331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2807.619113][ T3331] device bridge1770 entered promiscuous mode
[ 2807.671223][ T3341] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2807.682641][ T3341] CPU: 0 PID: 3341 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2807.693009][ T3341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2807.703090][ T3341] Call Trace:
[ 2807.706383][ T3341]
[ 2807.709331][ T3341] dump_stack_lvl+0xd1/0x138
[ 2807.713968][ T3341] dump_header+0x10b/0x85f
[ 2807.718421][ T3341] oom_kill_process.cold+0x10/0x15
[ 2807.723567][ T3341] out_of_memory+0x35c/0x14a0
[ 2807.728284][ T3341] ? find_held_lock+0x2d/0x110
[ 2807.733080][ T3341] ? oom_killer_disable+0x280/0x280
[ 2807.738310][ T3341] ? find_held_lock+0x2d/0x110
[ 2807.743116][ T3341] mem_cgroup_out_of_memory+0x206/0x270
[ 2807.748681][ T3341] ? mem_cgroup_margin+0x130/0x130
[ 2807.753806][ T3341] ? lock_downgrade+0x6e0/0x6e0
[ 2807.758703][ T3341] try_charge_memcg+0xef8/0x12f0
[ 2807.763667][ T3341] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2807.769670][ T3341] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2807.775406][ T3341] ? lock_downgrade+0x6e0/0x6e0
[ 2807.780303][ T3341] obj_cgroup_charge+0x2af/0x5e0
[ 2807.785276][ T3341] ? __anon_vma_prepare+0x64/0x580
[ 2807.790398][ T3341] kmem_cache_alloc+0xa3/0x3d0
[ 2807.795188][ T3341] __anon_vma_prepare+0x64/0x580
[ 2807.800139][ T3341] ? __pmd_alloc+0x30c/0x5d0
[ 2807.804744][ T3341] __handle_mm_fault+0x35bc/0x3a40
[ 2807.809884][ T3341] ? vm_iomap_memory+0x190/0x190
[ 2807.814862][ T3341] handle_mm_fault+0x1cc/0x780
[ 2807.819645][ T3341] do_user_addr_fault+0x475/0x1210
[ 2807.824779][ T3341] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2807.830359][ T3341] exc_page_fault+0x98/0x170
[ 2807.834965][ T3341] asm_exc_page_fault+0x26/0x30
[ 2807.839838][ T3341] RIP: 0033:0x7f8325a2bd79
[ 2807.844262][ T3341] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2807.863878][ T3341] RSP: 002b:00007fff9cb6b2a0 EFLAGS: 00010246
[ 2807.869957][ T3341] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2807.877934][ T3341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555b4e2e8
[ 2807.885912][ T3341] RBP: 00007fff9cb6b398 R08: 0000000000000000 R09: 0000000000000000
[ 2807.893888][ T3341] R10: 00007f83256000c8 R11: 0000000000000246 R12: 00000000002ad72c
[ 2807.901867][ T3341] R13: 00007fff9cb6b3c0 R14: 00007f8325babf80 R15: 0000000000000032
[ 2807.909865][ T3341]
[ 2807.945825][ T3333] device macvtap2160 entered promiscuous mode
[ 2807.954870][ T3341] memory: usage 307200kB, limit 307200kB, failcnt 64069
[ 2807.972293][ T3341] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2807.991928][ T3341] Memory cgroup stats for /syz2:
[ 2807.992136][ T3341] anon 135168
[ 2807.992136][ T3341] file 417792
[ 2807.992136][ T3341] kernel 314019840
[ 2807.992136][ T3341] kernel_stack 65536
[ 2807.992136][ T3341] pagetables 77824
[ 2807.992136][ T3341] sec_pagetables 0
[ 2807.992136][ T3341] percpu 5357600
[ 2807.992136][ T3341] sock 0
[ 2807.992136][ T3341] vmalloc 0
[ 2807.992136][ T3341] shmem 417792
[ 2807.992136][ T3341] zswap 0
[ 2807.992136][ T3341] zswapped 0
[ 2807.992136][ T3341] file_mapped 417792
[ 2807.992136][ T3341] file_dirty 0
[ 2807.992136][ T3341] file_writeback 0
[ 2807.992136][ T3341] swapcached 0
[ 2807.992136][ T3341] anon_thp 0
[ 2807.992136][ T3341] file_thp 0
[ 2807.992136][ T3341] shmem_thp 0
[ 2807.992136][ T3341] inactive_anon 139264
[ 2807.992136][ T3341] active_anon 413696
[ 2807.992136][ T3341] inactive_file 0
[ 2807.992136][ T3341] active_file 0
[ 2807.992136][ T3341] unevictable 0
[ 2807.992136][ T3341] slab_reclaimable 14280
[ 2807.992136][ T3341] slab_unreclaimable 308469280
[ 2808.064291][ T3336] device macvtap2161 entered promiscuous mode
[ 2808.092846][ T3341] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3341,uid=0
[ 2808.108871][ T3341] Memory cgroup out of memory: Killed process 3341 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2808.126902][ T3343] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2808.143306][ T3343] CPU: 0 PID: 3343 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2808.153675][ T3343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2808.163753][ T3343] Call Trace:
[ 2808.167046][ T3343]
[ 2808.169993][ T3343] dump_stack_lvl+0xd1/0x138
[ 2808.174620][ T3343] dump_header+0x10b/0x85f
[ 2808.179078][ T3343] oom_kill_process.cold+0x10/0x15
[ 2808.184232][ T3343] out_of_memory+0x35c/0x14a0
[ 2808.188959][ T3343] ? oom_killer_disable+0x280/0x280
[ 2808.194186][ T3343] ? find_held_lock+0x2d/0x110
[ 2808.198970][ T3343] mem_cgroup_out_of_memory+0x206/0x270
[ 2808.204548][ T3343] ? mem_cgroup_margin+0x130/0x130
[ 2808.209686][ T3343] ? lock_downgrade+0x6e0/0x6e0
[ 2808.214598][ T3343] try_charge_memcg+0xef8/0x12f0
[ 2808.219579][ T3343] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2808.225603][ T3343] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2808.231356][ T3343] ? lock_downgrade+0x6e0/0x6e0
[ 2808.236245][ T3343] obj_cgroup_charge+0x2af/0x5e0
[ 2808.241189][ T3343] ? vm_area_dup+0x85/0x380
[ 2808.245688][ T3343] kmem_cache_alloc+0xa3/0x3d0
[ 2808.250464][ T3343] vm_area_dup+0x85/0x380
[ 2808.254813][ T3343] ? mt_slot+0xa1/0x170
[ 2808.258985][ T3343] ? mas_next_nentry+0x610/0xab0
[ 2808.263939][ T3343] ? mas_next_node+0x547/0xa00
[ 2808.268734][ T3343] ? mas_find+0x211/0xd10
[ 2808.273093][ T3343] ? vm_area_alloc+0x100/0x100
[ 2808.277870][ T3343] ? validate_mm_mt+0x149/0x1b0
[ 2808.282741][ T3343] ? remove_vma+0x130/0x130
[ 2808.287272][ T3343] ? can_vma_merge_before+0x390/0x390
[ 2808.292676][ T3343] __split_vma+0xae/0x5e0
[ 2808.297022][ T3343] ? vma_merge+0x2cf/0x870
[ 2808.301466][ T3343] split_vma+0xa3/0xe0
[ 2808.305559][ T3343] mprotect_fixup+0x6cb/0x960
[ 2808.310268][ T3343] ? mas_find+0x211/0xd10
[ 2808.314613][ T3343] ? change_protection+0x4290/0x4290
[ 2808.319935][ T3343] do_mprotect_pkey+0x6fd/0xa70
[ 2808.324816][ T3343] ? mprotect_fixup+0x960/0x960
[ 2808.329689][ T3343] ? up_write+0x1b0/0x520
[ 2808.334075][ T3343] __x64_sys_mprotect+0x78/0xb0
[ 2808.338955][ T3343] do_syscall_64+0x39/0xb0
[ 2808.343397][ T3343] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2808.349317][ T3343] RIP: 0033:0x7f69a668c1e7
[ 2808.353743][ T3343] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2808.373359][ T3343] RSP: 002b:00007ffea4dd30a8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2808.381782][ T3343] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f69a668c1e7
[ 2808.389760][ T3343] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f69a744d000
10:16:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3401}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2808.397735][ T3343] RBP: 00007ffea4dd3180 R08: 00000000ffffffff R09: 00007f69a746c700
[ 2808.405712][ T3343] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffea4dd32a0
[ 2808.413689][ T3343] R13: 00007f69a746c700 R14: 0000000000000000 R15: 0000000000022000
[ 2808.421688][ T3343]
[ 2808.434255][ T3343] memory: usage 307200kB, limit 307200kB, failcnt 10424
[ 2808.459792][ T3343] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2808.468524][ T3343] Memory cgroup stats for /syz1:
[ 2808.468700][ T3343] anon 143360
[ 2808.468700][ T3343] file 393216
[ 2808.468700][ T3343] kernel 314036224
[ 2808.468700][ T3343] kernel_stack 65536
[ 2808.468700][ T3343] pagetables 81920
[ 2808.468700][ T3343] sec_pagetables 0
[ 2808.468700][ T3343] percpu 5356416
[ 2808.468700][ T3343] sock 0
[ 2808.468700][ T3343] vmalloc 0
[ 2808.468700][ T3343] shmem 385024
[ 2808.468700][ T3343] zswap 0
[ 2808.468700][ T3343] zswapped 0
[ 2808.468700][ T3343] file_mapped 385024
[ 2808.468700][ T3343] file_dirty 0
[ 2808.468700][ T3343] file_writeback 0
[ 2808.468700][ T3343] swapcached 0
[ 2808.468700][ T3343] anon_thp 0
[ 2808.468700][ T3343] file_thp 0
[ 2808.468700][ T3343] shmem_thp 0
[ 2808.468700][ T3343] inactive_anon 188416
[ 2808.468700][ T3343] active_anon 339968
[ 2808.468700][ T3343] inactive_file 4096
[ 2808.468700][ T3343] active_file 4096
[ 2808.468700][ T3343] unevictable 0
[ 2808.468700][ T3343] slab_reclaimable 16512
10:16:12 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x6800}, 0x0)
[ 2808.468700][ T3343] slab_unreclaimable 308477696
[ 2808.568184][ T3344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2808.577464][ T3343] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3343,uid=0
10:16:12 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x32, 0x0, 0x0)
[ 2808.602014][ T3343] Memory cgroup out of memory: Killed process 3343 (syz-executor.1) total-vm:54672kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2808.659560][ T3345] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2808.679296][ T3345] CPU: 1 PID: 3345 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2808.689673][ T3345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2808.699748][ T3345] Call Trace:
[ 2808.703049][ T3345]
[ 2808.706000][ T3345] dump_stack_lvl+0xd1/0x138
[ 2808.710647][ T3345] dump_header+0x10b/0x85f
[ 2808.715100][ T3345] oom_kill_process.cold+0x10/0x15
[ 2808.720247][ T3345] out_of_memory+0x35c/0x14a0
[ 2808.724964][ T3345] ? find_held_lock+0x2d/0x110
[ 2808.729779][ T3345] ? oom_killer_disable+0x280/0x280
[ 2808.735015][ T3345] ? find_held_lock+0x2d/0x110
[ 2808.739822][ T3345] mem_cgroup_out_of_memory+0x206/0x270
[ 2808.745401][ T3345] ? mem_cgroup_margin+0x130/0x130
[ 2808.750544][ T3345] ? lock_downgrade+0x6e0/0x6e0
[ 2808.755461][ T3345] try_charge_memcg+0xef8/0x12f0
[ 2808.760448][ T3345] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2808.766469][ T3345] ? rcu_read_unlock+0x9/0x60
[ 2808.771159][ T3345] ? lock_downgrade+0x6e0/0x6e0
[ 2808.776055][ T3345] charge_memcg+0x99/0x3b0
[ 2808.780500][ T3345] __mem_cgroup_charge+0x2b/0x90
[ 2808.785458][ T3345] ? _compound_head+0x5d/0x150
[ 2808.790246][ T3345] __handle_mm_fault+0x17e7/0x3a40
[ 2808.795380][ T3345] ? vm_iomap_memory+0x190/0x190
[ 2808.800359][ T3345] handle_mm_fault+0x1cc/0x780
[ 2808.805148][ T3345] do_user_addr_fault+0x475/0x1210
[ 2808.810278][ T3345] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2808.815853][ T3345] exc_page_fault+0x98/0x170
[ 2808.820458][ T3345] asm_exc_page_fault+0x26/0x30
[ 2808.825333][ T3345] RIP: 0033:0x7f8325a2bd79
[ 2808.829759][ T3345] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2808.849389][ T3345] RSP: 002b:00007fff9cb6b2a0 EFLAGS: 00010246
[ 2808.855471][ T3345] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2808.863453][ T3345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555b4e2e8
[ 2808.871430][ T3345] RBP: 00007fff9cb6b398 R08: 0000000000000000 R09: 0000000000000000
[ 2808.879408][ T3345] R10: 00007f83256000c8 R11: 0000000000000246 R12: 00000000002adb1b
[ 2808.887388][ T3345] R13: 00007fff9cb6b3c0 R14: 00007f8325babf80 R15: 0000000000000032
[ 2808.895388][ T3345]
10:16:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x3d, @local}]}, 0x48}}, 0x0)
10:16:13 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc0189436, &(0x7f0000000000))
[ 2808.914341][ T3345] memory: usage 307200kB, limit 307200kB, failcnt 64171
[ 2808.957578][ T3348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
10:16:13 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x1)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0))
10:16:13 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x7f)
[ 2809.023169][ T3348] device bridge1771 entered promiscuous mode
[ 2809.048084][ T3345] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2809.058727][ T3345] Memory cgroup stats for /syz2:
[ 2809.058958][ T3345] anon 135168
[ 2809.058958][ T3345] file 417792
[ 2809.058958][ T3345] kernel 314019840
[ 2809.058958][ T3345] kernel_stack 65536
[ 2809.058958][ T3345] pagetables 77824
[ 2809.058958][ T3345] sec_pagetables 0
[ 2809.058958][ T3345] percpu 5357600
[ 2809.058958][ T3345] sock 0
[ 2809.058958][ T3345] vmalloc 0
[ 2809.058958][ T3345] shmem 417792
[ 2809.058958][ T3345] zswap 0
[ 2809.058958][ T3345] zswapped 0
[ 2809.058958][ T3345] file_mapped 417792
[ 2809.058958][ T3345] file_dirty 0
[ 2809.058958][ T3345] file_writeback 0
[ 2809.058958][ T3345] swapcached 0
[ 2809.058958][ T3345] anon_thp 0
[ 2809.058958][ T3345] file_thp 0
[ 2809.058958][ T3345] shmem_thp 0
[ 2809.058958][ T3345] inactive_anon 139264
[ 2809.058958][ T3345] active_anon 413696
[ 2809.058958][ T3345] inactive_file 0
[ 2809.058958][ T3345] active_file 0
[ 2809.058958][ T3345] unevictable 0
[ 2809.058958][ T3345] slab_reclaimable 14280
[ 2809.058958][ T3345] slab_unreclaimable 308469680
10:16:13 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x7fffffe, 0x360, 0xe8, 0x280, 0xffffffff, 0x0, 0x280, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'caif0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @remote, @dev, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@dev, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @port, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "363d0c859743257a3dfcb1ce13432ada5d0a91af9780ad1845ba756b1831"}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@broadcast, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0)
10:16:13 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3402}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2809.165840][ T3345] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3345,uid=0
[ 2809.183870][ T3345] Memory cgroup out of memory: Killed process 3345 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2809.261493][ T3350] device macvtap2161 entered promiscuous mode
[ 2809.329946][ T3352] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2809.366564][ T3352] CPU: 1 PID: 3352 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
10:16:13 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8917, &(0x7f0000000180)={'sit0\x00', 0x0})
[ 2809.376944][ T3352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2809.387025][ T3352] Call Trace:
[ 2809.390316][ T3352]
[ 2809.393263][ T3352] dump_stack_lvl+0xd1/0x138
[ 2809.397895][ T3352] dump_header+0x10b/0x85f
[ 2809.402345][ T3352] oom_kill_process.cold+0x10/0x15
[ 2809.407498][ T3352] out_of_memory+0x35c/0x14a0
[ 2809.412220][ T3352] ? find_held_lock+0x2d/0x110
[ 2809.417031][ T3352] ? oom_killer_disable+0x280/0x280
[ 2809.422270][ T3352] ? find_held_lock+0x2d/0x110
[ 2809.427087][ T3352] mem_cgroup_out_of_memory+0x206/0x270
[ 2809.432670][ T3352] ? mem_cgroup_margin+0x130/0x130
[ 2809.437817][ T3352] ? lock_downgrade+0x6e0/0x6e0
[ 2809.442736][ T3352] try_charge_memcg+0xef8/0x12f0
[ 2809.447716][ T3352] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2809.453732][ T3352] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2809.459471][ T3352] ? lock_downgrade+0x6e0/0x6e0
[ 2809.464373][ T3352] obj_cgroup_charge+0x2af/0x5e0
[ 2809.469336][ T3352] ? vm_area_dup+0x85/0x380
[ 2809.473850][ T3352] kmem_cache_alloc+0xa3/0x3d0
[ 2809.478636][ T3352] vm_area_dup+0x85/0x380
[ 2809.482977][ T3352] ? mt_slot+0xa1/0x170
[ 2809.487151][ T3352] ? mas_next_nentry+0x610/0xab0
[ 2809.492105][ T3352] ? mas_next_node+0x547/0xa00
[ 2809.496899][ T3352] ? mas_find+0x211/0xd10
[ 2809.501256][ T3352] ? vm_area_alloc+0x100/0x100
[ 2809.506031][ T3352] ? validate_mm_mt+0x149/0x1b0
[ 2809.510903][ T3352] ? remove_vma+0x130/0x130
[ 2809.515433][ T3352] ? can_vma_merge_before+0x390/0x390
[ 2809.520848][ T3352] __split_vma+0xae/0x5e0
[ 2809.525206][ T3352] ? vma_merge+0x2cf/0x870
[ 2809.529657][ T3352] split_vma+0xa3/0xe0
[ 2809.533755][ T3352] mprotect_fixup+0x6cb/0x960
[ 2809.538464][ T3352] ? mas_find+0x211/0xd10
[ 2809.542815][ T3352] ? change_protection+0x4290/0x4290
[ 2809.548146][ T3352] do_mprotect_pkey+0x6fd/0xa70
[ 2809.553036][ T3352] ? mprotect_fixup+0x960/0x960
[ 2809.557915][ T3352] ? up_write+0x1b0/0x520
[ 2809.562306][ T3352] __x64_sys_mprotect+0x78/0xb0
[ 2809.567185][ T3352] do_syscall_64+0x39/0xb0
[ 2809.571625][ T3352] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2809.577539][ T3352] RIP: 0033:0x7f69a668c1e7
[ 2809.581966][ T3352] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2809.601586][ T3352] RSP: 002b:00007ffea4dd30a8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2809.610018][ T3352] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f69a668c1e7
[ 2809.617998][ T3352] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f69a744d000
[ 2809.625990][ T3352] RBP: 00007ffea4dd3180 R08: 00000000ffffffff R09: 00007f69a746c700
[ 2809.633968][ T3352] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffea4dd32a0
[ 2809.641948][ T3352] R13: 00007f69a746c700 R14: 0000000000000000 R15: 0000000000022000
[ 2809.649962][ T3352]
[ 2809.673538][ T3352] memory: usage 307200kB, limit 307200kB, failcnt 10553
[ 2809.680842][ T3352] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2809.688410][ T3352] Memory cgroup stats for /syz1:
[ 2809.688661][ T3352] anon 143360
[ 2809.688661][ T3352] file 393216
[ 2809.688661][ T3352] kernel 314036224
[ 2809.688661][ T3352] kernel_stack 65536
[ 2809.688661][ T3352] pagetables 81920
[ 2809.688661][ T3352] sec_pagetables 0
[ 2809.688661][ T3352] percpu 5356416
[ 2809.688661][ T3352] sock 0
[ 2809.688661][ T3352] vmalloc 0
[ 2809.688661][ T3352] shmem 385024
[ 2809.688661][ T3352] zswap 0
[ 2809.688661][ T3352] zswapped 0
[ 2809.688661][ T3352] file_mapped 385024
[ 2809.688661][ T3352] file_dirty 0
[ 2809.688661][ T3352] file_writeback 0
[ 2809.688661][ T3352] swapcached 0
[ 2809.688661][ T3352] anon_thp 0
[ 2809.688661][ T3352] file_thp 0
[ 2809.688661][ T3352] shmem_thp 0
[ 2809.688661][ T3352] inactive_anon 188416
[ 2809.688661][ T3352] active_anon 339968
[ 2809.688661][ T3352] inactive_file 4096
[ 2809.688661][ T3352] active_file 4096
[ 2809.688661][ T3352] unevictable 0
[ 2809.688661][ T3352] slab_reclaimable 16512
[ 2809.688661][ T3352] slab_unreclaimable 308477696
[ 2809.706690][ T3353] device macvtap2162 entered promiscuous mode
[ 2809.788229][ T3352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3352,uid=0
[ 2809.806357][ T3352] Memory cgroup out of memory: Killed process 3352 (syz-executor.1) total-vm:54672kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2809.836533][ T3365] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2809.861179][ T3365] CPU: 0 PID: 3365 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2809.871545][ T3365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2809.881625][ T3365] Call Trace:
[ 2809.884925][ T3365]
[ 2809.887876][ T3365] dump_stack_lvl+0xd1/0x138
[ 2809.892509][ T3365] dump_header+0x10b/0x85f
[ 2809.896963][ T3365] oom_kill_process.cold+0x10/0x15
[ 2809.902114][ T3365] out_of_memory+0x35c/0x14a0
[ 2809.906833][ T3365] ? find_held_lock+0x2d/0x110
[ 2809.911639][ T3365] ? oom_killer_disable+0x280/0x280
[ 2809.916880][ T3365] ? find_held_lock+0x2d/0x110
[ 2809.921692][ T3365] mem_cgroup_out_of_memory+0x206/0x270
[ 2809.927269][ T3365] ? mem_cgroup_margin+0x130/0x130
[ 2809.932409][ T3365] ? lock_downgrade+0x6e0/0x6e0
[ 2809.937332][ T3365] try_charge_memcg+0xef8/0x12f0
[ 2809.942328][ T3365] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2809.948357][ T3365] ? rcu_read_unlock+0x9/0x60
[ 2809.953065][ T3365] ? lock_downgrade+0x6e0/0x6e0
[ 2809.957983][ T3365] charge_memcg+0x99/0x3b0
[ 2809.962443][ T3365] __mem_cgroup_charge+0x2b/0x90
[ 2809.967430][ T3365] ? _compound_head+0x5d/0x150
[ 2809.972238][ T3365] __handle_mm_fault+0x17e7/0x3a40
[ 2809.977382][ T3365] ? vm_iomap_memory+0x190/0x190
[ 2809.982360][ T3365] handle_mm_fault+0x1cc/0x780
[ 2809.987145][ T3365] do_user_addr_fault+0x475/0x1210
[ 2809.992280][ T3365] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2809.997855][ T3365] exc_page_fault+0x98/0x170
[ 2810.002464][ T3365] asm_exc_page_fault+0x26/0x30
[ 2810.007334][ T3365] RIP: 0033:0x7f8325a2bd79
[ 2810.011763][ T3365] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2810.031383][ T3365] RSP: 002b:00007fff9cb6b2a0 EFLAGS: 00010246
[ 2810.037460][ T3365] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2810.045437][ T3365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555b4e2e8
[ 2810.053416][ T3365] RBP: 00007fff9cb6b398 R08: 0000000000000000 R09: 0000000000000000
[ 2810.061395][ T3365] R10: 00007f83256000c8 R11: 0000000000000246 R12: 00000000002adfc0
[ 2810.069374][ T3365] R13: 00007fff9cb6b3c0 R14: 00007f8325babf80 R15: 0000000000000032
[ 2810.077378][ T3365]
[ 2810.128652][ T3365] memory: usage 307200kB, limit 307200kB, failcnt 64289
[ 2810.141310][ T3365] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2810.160621][ T3365] Memory cgroup stats for /syz2:
[ 2810.160867][ T3365] anon 135168
[ 2810.160867][ T3365] file 417792
[ 2810.160867][ T3365] kernel 314003456
[ 2810.160867][ T3365] kernel_stack 65536
[ 2810.160867][ T3365] pagetables 77824
[ 2810.160867][ T3365] sec_pagetables 0
[ 2810.160867][ T3365] percpu 5357600
[ 2810.160867][ T3365] sock 0
[ 2810.160867][ T3365] vmalloc 0
[ 2810.160867][ T3365] shmem 417792
[ 2810.160867][ T3365] zswap 0
[ 2810.160867][ T3365] zswapped 0
[ 2810.160867][ T3365] file_mapped 417792
[ 2810.160867][ T3365] file_dirty 0
[ 2810.160867][ T3365] file_writeback 0
[ 2810.160867][ T3365] swapcached 0
[ 2810.160867][ T3365] anon_thp 0
[ 2810.160867][ T3365] file_thp 0
[ 2810.160867][ T3365] shmem_thp 0
[ 2810.160867][ T3365] inactive_anon 139264
[ 2810.160867][ T3365] active_anon 413696
[ 2810.160867][ T3365] inactive_file 0
[ 2810.160867][ T3365] active_file 0
[ 2810.160867][ T3365] unevictable 0
[ 2810.160867][ T3365] slab_reclaimable 14280
[ 2810.160867][ T3365] slab_unreclaimable 308458584
[ 2810.263540][ T3365] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3365,uid=0
[ 2810.279452][ T3365] Memory cgroup out of memory: Killed process 3365 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
10:16:14 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3403}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:14 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x6c00}, 0x0)
10:16:14 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x7f)
[ 2810.493641][ T3360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2810.616873][ T3369] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2810.652681][ T3369] CPU: 0 PID: 3369 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2810.663058][ T3369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2810.673136][ T3369] Call Trace:
[ 2810.676429][ T3369]
[ 2810.679380][ T3369] dump_stack_lvl+0xd1/0x138
[ 2810.684013][ T3369] dump_header+0x10b/0x85f
[ 2810.688465][ T3369] oom_kill_process.cold+0x10/0x15
[ 2810.693609][ T3369] out_of_memory+0x35c/0x14a0
[ 2810.698338][ T3369] ? find_held_lock+0x2d/0x110
[ 2810.703139][ T3369] ? oom_killer_disable+0x280/0x280
[ 2810.708376][ T3369] ? find_held_lock+0x2d/0x110
[ 2810.713177][ T3369] mem_cgroup_out_of_memory+0x206/0x270
[ 2810.718743][ T3369] ? mem_cgroup_margin+0x130/0x130
[ 2810.723869][ T3369] ? lock_downgrade+0x6e0/0x6e0
[ 2810.728762][ T3369] try_charge_memcg+0xef8/0x12f0
[ 2810.733737][ T3369] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2810.739740][ T3369] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2810.745474][ T3369] ? lock_downgrade+0x6e0/0x6e0
[ 2810.750374][ T3369] obj_cgroup_charge+0x2af/0x5e0
[ 2810.755338][ T3369] ? __anon_vma_prepare+0x64/0x580
[ 2810.760470][ T3369] kmem_cache_alloc+0xa3/0x3d0
[ 2810.765261][ T3369] __anon_vma_prepare+0x64/0x580
[ 2810.770210][ T3369] ? __pmd_alloc+0x30c/0x5d0
[ 2810.774818][ T3369] __handle_mm_fault+0x35bc/0x3a40
[ 2810.779951][ T3369] ? vm_iomap_memory+0x190/0x190
[ 2810.784930][ T3369] handle_mm_fault+0x1cc/0x780
[ 2810.789714][ T3369] do_user_addr_fault+0x475/0x1210
[ 2810.794848][ T3369] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2810.800423][ T3369] exc_page_fault+0x98/0x170
[ 2810.805032][ T3369] asm_exc_page_fault+0x26/0x30
[ 2810.809901][ T3369] RIP: 0033:0x7f8325a2bd79
[ 2810.814327][ T3369] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2810.833949][ T3369] RSP: 002b:00007fff9cb6b2a0 EFLAGS: 00010246
[ 2810.840032][ T3369] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2810.848009][ T3369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555555b4e2e8
[ 2810.855987][ T3369] RBP: 00007fff9cb6b398 R08: 0000000000000000 R09: 0000000000000000
[ 2810.863965][ T3369] R10: 00007f83256000c8 R11: 0000000000000246 R12: 00000000002ae2b0
[ 2810.871946][ T3369] R13: 00007fff9cb6b3c0 R14: 00007f8325babf80 R15: 0000000000000032
[ 2810.879943][ T3369]
[ 2810.895612][ T3369] memory: usage 307200kB, limit 307200kB, failcnt 64387
[ 2810.903084][ T3369] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2810.910717][ T3369] Memory cgroup stats for /syz2:
[ 2810.910961][ T3369] anon 135168
[ 2810.910961][ T3369] file 417792
[ 2810.910961][ T3369] kernel 314019840
[ 2810.910961][ T3369] kernel_stack 65536
[ 2810.910961][ T3369] pagetables 77824
[ 2810.910961][ T3369] sec_pagetables 0
[ 2810.910961][ T3369] percpu 5357600
[ 2810.910961][ T3369] sock 0
[ 2810.910961][ T3369] vmalloc 0
[ 2810.910961][ T3369] shmem 417792
[ 2810.910961][ T3369] zswap 0
[ 2810.910961][ T3369] zswapped 0
[ 2810.910961][ T3369] file_mapped 417792
[ 2810.910961][ T3369] file_dirty 0
[ 2810.910961][ T3369] file_writeback 0
[ 2810.910961][ T3369] swapcached 0
10:16:15 executing program 4:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc004743e, &(0x7f0000000000)=0x2000)
[ 2810.910961][ T3369] anon_thp 0
[ 2810.910961][ T3369] file_thp 0
[ 2810.910961][ T3369] shmem_thp 0
[ 2810.910961][ T3369] inactive_anon 139264
[ 2810.910961][ T3369] active_anon 413696
[ 2810.910961][ T3369] inactive_file 0
[ 2810.910961][ T3369] active_file 0
[ 2810.910961][ T3369] unevictable 0
[ 2810.910961][ T3369] slab_reclaimable 14280
[ 2810.910961][ T3369] slab_unreclaimable 308469280
[ 2811.035263][ T3371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2811.054020][ T3369] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3369,uid=0
10:16:15 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x4a, @local}]}, 0x48}}, 0x0)
10:16:15 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3500}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2811.079673][ T3369] Memory cgroup out of memory: Killed process 3369 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2811.111609][ T3371] device bridge1772 entered promiscuous mode
[ 2811.270658][ T3374] device macvtap2162 entered promiscuous mode
[ 2811.371481][ T3382] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000
[ 2811.388616][ T3382] CPU: 1 PID: 3382 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2811.398989][ T3382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2811.409064][ T3382] Call Trace:
[ 2811.412364][ T3382]
[ 2811.415313][ T3382] dump_stack_lvl+0xd1/0x138
[ 2811.419944][ T3382] dump_header+0x10b/0x85f
[ 2811.424393][ T3382] oom_kill_process.cold+0x10/0x15
[ 2811.429540][ T3382] out_of_memory+0x35c/0x14a0
[ 2811.434255][ T3382] ? find_held_lock+0x2d/0x110
[ 2811.439057][ T3382] ? oom_killer_disable+0x280/0x280
[ 2811.444300][ T3382] ? find_held_lock+0x2d/0x110
[ 2811.449115][ T3382] mem_cgroup_out_of_memory+0x206/0x270
[ 2811.454697][ T3382] ? mem_cgroup_margin+0x130/0x130
[ 2811.459838][ T3382] ? lock_downgrade+0x6e0/0x6e0
[ 2811.464750][ T3382] try_charge_memcg+0xef8/0x12f0
[ 2811.469731][ T3382] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2811.475749][ T3382] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2811.481505][ T3382] ? lock_downgrade+0x6e0/0x6e0
[ 2811.486402][ T3382] ? lock_downgrade+0x6e0/0x6e0
[ 2811.491296][ T3382] ? rcu_read_unlock+0x9/0x60
[ 2811.496015][ T3382] obj_cgroup_charge+0x2af/0x5e0
[ 2811.500998][ T3382] kmem_cache_alloc_node+0xa9/0x410
[ 2811.506229][ T3382] ? copy_process+0x5c2/0x7190
[ 2811.511030][ T3382] copy_process+0x5c2/0x7190
[ 2811.515665][ T3382] ? find_held_lock+0x2d/0x110
[ 2811.520474][ T3382] ? find_held_lock+0x2d/0x110
[ 2811.525285][ T3382] ? __cleanup_sighand+0xb0/0xb0
[ 2811.530253][ T3382] ? __handle_mm_fault+0x2d0f/0x3a40
[ 2811.535571][ T3382] ? lock_downgrade+0x6e0/0x6e0
[ 2811.540461][ T3382] ? folio_flags.constprop.0+0x53/0x150
[ 2811.546058][ T3382] ? folio_add_lru+0x37b/0x680
[ 2811.550879][ T3382] kernel_clone+0xeb/0x980
[ 2811.555331][ T3382] ? create_io_thread+0xf0/0xf0
[ 2811.560222][ T3382] ? find_held_lock+0x2d/0x110
[ 2811.565041][ T3382] __do_sys_clone+0xba/0x100
[ 2811.569667][ T3382] ? kernel_clone+0x980/0x980
[ 2811.574391][ T3382] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2811.580322][ T3382] do_syscall_64+0x39/0xb0
[ 2811.584779][ T3382] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2811.590711][ T3382] RIP: 0033:0x7f69a668d501
[ 2811.595150][ T3382] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2811.614783][ T3382] RSP: 002b:00007ffea4dd3058 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2811.623227][ T3382] RAX: ffffffffffffffda RBX: 00007f69a746c700 RCX: 00007f69a668d501
[ 2811.631228][ T3382] RDX: 00007f69a746c9d0 RSI: 00007f69a746c2f0 RDI: 00000000003d0f00
[ 2811.639225][ T3382] RBP: 00007ffea4dd32a0 R08: 00007f69a746c700 R09: 00007f69a746c700
[ 2811.647221][ T3382] R10: 00007f69a746c9d0 R11: 0000000000000206 R12: 00007ffea4dd310e
[ 2811.655218][ T3382] R13: 00007ffea4dd310f R14: 00007f69a746c300 R15: 0000000000022000
[ 2811.663234][ T3382]
[ 2811.692609][ T3376] device macvtap2163 entered promiscuous mode
[ 2811.699272][ T3382] memory: usage 307196kB, limit 307200kB, failcnt 10678
[ 2811.706561][ T3382] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2811.714239][ T3382] Memory cgroup stats for /syz1:
[ 2811.714464][ T3382] anon 147456
[ 2811.714464][ T3382] file 393216
[ 2811.714464][ T3382] kernel 314028032
[ 2811.714464][ T3382] kernel_stack 65536
[ 2811.714464][ T3382] pagetables 81920
[ 2811.714464][ T3382] sec_pagetables 0
[ 2811.714464][ T3382] percpu 5356416
[ 2811.714464][ T3382] sock 0
[ 2811.714464][ T3382] vmalloc 0
[ 2811.714464][ T3382] shmem 385024
[ 2811.714464][ T3382] zswap 0
[ 2811.714464][ T3382] zswapped 0
[ 2811.714464][ T3382] file_mapped 385024
[ 2811.714464][ T3382] file_dirty 0
[ 2811.714464][ T3382] file_writeback 0
[ 2811.714464][ T3382] swapcached 0
[ 2811.714464][ T3382] anon_thp 0
[ 2811.714464][ T3382] file_thp 0
[ 2811.714464][ T3382] shmem_thp 0
[ 2811.714464][ T3382] inactive_anon 180224
[ 2811.714464][ T3382] active_anon 339968
[ 2811.714464][ T3382] inactive_file 4096
[ 2811.714464][ T3382] active_file 4096
[ 2811.714464][ T3382] unevictable 0
[ 2811.714464][ T3382] slab_reclaimable 16512
[ 2811.714464][ T3382] slab_unreclaimable 308470328
[ 2811.814554][ T3382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3382,uid=0
[ 2811.832014][ T3382] Memory cgroup out of memory: Killed process 3382 (syz-executor.1) total-vm:54672kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2811.850793][ T3383] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2811.868442][ T3383] CPU: 1 PID: 3383 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2811.878804][ T3383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2811.888879][ T3383] Call Trace:
[ 2811.892177][ T3383]
[ 2811.895126][ T3383] dump_stack_lvl+0xd1/0x138
[ 2811.899754][ T3383] dump_header+0x10b/0x85f
[ 2811.904196][ T3383] oom_kill_process.cold+0x10/0x15
[ 2811.909329][ T3383] out_of_memory+0x35c/0x14a0
[ 2811.914035][ T3383] ? oom_killer_disable+0x280/0x280
[ 2811.919256][ T3383] ? find_held_lock+0x2d/0x110
[ 2811.924047][ T3383] mem_cgroup_out_of_memory+0x206/0x270
[ 2811.929616][ T3383] ? mem_cgroup_margin+0x130/0x130
[ 2811.934738][ T3383] ? lock_downgrade+0x6e0/0x6e0
[ 2811.939632][ T3383] try_charge_memcg+0xef8/0x12f0
[ 2811.944598][ T3383] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2811.950604][ T3383] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2811.956344][ T3383] ? lock_downgrade+0x6e0/0x6e0
[ 2811.961243][ T3383] obj_cgroup_charge+0x2af/0x5e0
[ 2811.966210][ T3383] ? vm_area_dup+0x85/0x380
[ 2811.970723][ T3383] kmem_cache_alloc+0xa3/0x3d0
[ 2811.975509][ T3383] vm_area_dup+0x85/0x380
[ 2811.979848][ T3383] ? mt_slot+0xa1/0x170
[ 2811.984018][ T3383] ? mas_next_nentry+0x610/0xab0
[ 2811.988971][ T3383] ? mas_next_node+0x547/0xa00
[ 2811.993766][ T3383] ? mas_find+0x211/0xd10
[ 2811.998124][ T3383] ? vm_area_alloc+0x100/0x100
[ 2812.002903][ T3383] ? validate_mm_mt+0x149/0x1b0
[ 2812.007778][ T3383] ? remove_vma+0x130/0x130
[ 2812.012307][ T3383] ? can_vma_merge_before+0x390/0x390
[ 2812.017709][ T3383] __split_vma+0xae/0x5e0
[ 2812.022056][ T3383] ? vma_merge+0x2cf/0x870
[ 2812.026502][ T3383] split_vma+0xa3/0xe0
[ 2812.030597][ T3383] mprotect_fixup+0x6cb/0x960
[ 2812.035309][ T3383] ? mas_find+0x211/0xd10
[ 2812.039651][ T3383] ? change_protection+0x4290/0x4290
[ 2812.044972][ T3383] do_mprotect_pkey+0x6fd/0xa70
[ 2812.049854][ T3383] ? mprotect_fixup+0x960/0x960
[ 2812.054726][ T3383] ? up_write+0x1b0/0x520
[ 2812.059119][ T3383] __x64_sys_mprotect+0x78/0xb0
[ 2812.063995][ T3383] do_syscall_64+0x39/0xb0
[ 2812.068435][ T3383] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2812.074348][ T3383] RIP: 0033:0x7f8325a8c1e7
[ 2812.078772][ T3383] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2812.098393][ T3383] RSP: 002b:00007fff9cb6b1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2812.106815][ T3383] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f8325a8c1e7
[ 2812.114792][ T3383] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f8326769000
[ 2812.122771][ T3383] RBP: 00007fff9cb6b2d0 R08: 00000000ffffffff R09: 00007f8326788700
[ 2812.130747][ T3383] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff9cb6b3f0
10:16:16 executing program 0:
socket(0x10, 0x3, 0x87)
[ 2812.138724][ T3383] R13: 00007f8326788700 R14: 0000000000000000 R15: 0000000000022000
[ 2812.146719][ T3383]
[ 2812.207659][ T3383] memory: usage 307200kB, limit 307200kB, failcnt 64476
[ 2812.215880][ T3383] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2812.238077][ T3383] Memory cgroup stats for /syz2:
[ 2812.238276][ T3383] anon 143360
[ 2812.238276][ T3383] file 417792
[ 2812.238276][ T3383] kernel 314011648
[ 2812.238276][ T3383] kernel_stack 65536
[ 2812.238276][ T3383] pagetables 77824
[ 2812.238276][ T3383] sec_pagetables 0
[ 2812.238276][ T3383] percpu 5357600
[ 2812.238276][ T3383] sock 0
[ 2812.238276][ T3383] vmalloc 0
[ 2812.238276][ T3383] shmem 417792
[ 2812.238276][ T3383] zswap 0
[ 2812.238276][ T3383] zswapped 0
[ 2812.238276][ T3383] file_mapped 417792
[ 2812.238276][ T3383] file_dirty 0
[ 2812.238276][ T3383] file_writeback 0
[ 2812.238276][ T3383] swapcached 0
[ 2812.238276][ T3383] anon_thp 0
[ 2812.238276][ T3383] file_thp 0
[ 2812.238276][ T3383] shmem_thp 0
10:16:16 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @broadcast}, 0x28, {0x2, 0x0, @empty}, 'veth1_to_hsr\x00'})
[ 2812.238276][ T3383] inactive_anon 147456
[ 2812.238276][ T3383] active_anon 413696
[ 2812.238276][ T3383] inactive_file 0
[ 2812.238276][ T3383] active_file 0
[ 2812.238276][ T3383] unevictable 0
[ 2812.238276][ T3383] slab_reclaimable 14280
[ 2812.238276][ T3383] slab_unreclaimable 308463520
[ 2812.342474][ T3383] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3383,uid=0
10:16:16 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x7400}, 0x0)
[ 2812.358809][ T3383] Memory cgroup out of memory: Killed process 3383 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2812.363811][ T3384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
10:16:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x63, @local}]}, 0x48}}, 0x0)
[ 2812.516544][ T3385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
10:16:16 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x7f)
10:16:16 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8942, &(0x7f0000000080)={'wlan1\x00'})
10:16:16 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3501}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2812.649864][ T3393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
10:16:16 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4623, @local}, 0x10)
[ 2812.727545][ T3393] device bridge1773 entered promiscuous mode
10:16:17 executing program 4:
syz_emit_ethernet(0x1f, &(0x7f0000000040)={@random="8da525806ecf", @dev, @void, {@ipv4={0x800, @dccp={{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "df3682", 0x0, "e60900"}, "a965406f049a14107c32e98ff8cec25a42fe3c2bed032d05d129f92578900747d36fa13fca7bcddbf05d38ddbe5168a6f6ad0b5753671c981fab3fca5bf32688ed18669e24db8ea437c6c6ce7f5e3570dd1e9fdbb4f9ecc398dec872c3a6847c4910aa4f700a50576b26ec06371de39a86d4040000000000008adaea8bf1b5737fba33d5a34d647ad652"}}}}}, 0x0)
[ 2812.820919][ T3397] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2812.857255][ T3394] device macvtap2163 entered promiscuous mode
[ 2812.873454][ T3397] CPU: 0 PID: 3397 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2812.883831][ T3397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2812.893904][ T3397] Call Trace:
[ 2812.897197][ T3397]
[ 2812.900143][ T3397] dump_stack_lvl+0xd1/0x138
[ 2812.904769][ T3397] dump_header+0x10b/0x85f
[ 2812.909213][ T3397] oom_kill_process.cold+0x10/0x15
[ 2812.914340][ T3397] out_of_memory+0x35c/0x14a0
[ 2812.919055][ T3397] ? find_held_lock+0x2d/0x110
[ 2812.923848][ T3397] ? oom_killer_disable+0x280/0x280
[ 2812.929071][ T3397] ? find_held_lock+0x2d/0x110
[ 2812.933866][ T3397] mem_cgroup_out_of_memory+0x206/0x270
[ 2812.939427][ T3397] ? mem_cgroup_margin+0x130/0x130
[ 2812.944552][ T3397] ? lock_downgrade+0x6e0/0x6e0
[ 2812.949450][ T3397] try_charge_memcg+0xef8/0x12f0
[ 2812.954417][ T3397] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2812.960425][ T3397] ? rcu_read_unlock+0x9/0x60
[ 2812.965114][ T3397] ? lock_downgrade+0x6e0/0x6e0
[ 2812.970016][ T3397] charge_memcg+0x99/0x3b0
[ 2812.974458][ T3397] __mem_cgroup_charge+0x2b/0x90
[ 2812.979416][ T3397] ? _compound_head+0x5d/0x150
[ 2812.984216][ T3397] __handle_mm_fault+0x17e7/0x3a40
[ 2812.989355][ T3397] ? vm_iomap_memory+0x190/0x190
[ 2812.994343][ T3397] handle_mm_fault+0x1cc/0x780
[ 2812.999132][ T3397] do_user_addr_fault+0x475/0x1210
[ 2813.004265][ T3397] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2813.009837][ T3397] exc_page_fault+0x98/0x170
[ 2813.014445][ T3397] asm_exc_page_fault+0x26/0x30
[ 2813.019314][ T3397] RIP: 0033:0x7f69a662be6a
[ 2813.023737][ T3397] Code: 30 48 8b 34 24 48 85 f6 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fe 01 0f 85 a1 01 00 00 48 8b 44 24 10 8b 74 24 18 <89> 30 e9 d2 fc ff ff 48 8b 44 24 10 8b 10 48 8b 04 24 48 85 c0 0f
[ 2813.043354][ T3397] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2813.049442][ T3397] RAX: 0000000020000200 RBX: 0000000000000000 RCX: 0000000000000000
[ 2813.057421][ T3397] RDX: 1b013dd590c50c23 RSI: 0000000000000014 RDI: 00005555574b22e8
[ 2813.065403][ T3397] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
10:16:17 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0xc01047d0, 0x0)
[ 2813.073381][ T3397] R10: 00007f69a62002a8 R11: 0000000000000246 R12: 00000000002aeb1c
[ 2813.081361][ T3397] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2813.089358][ T3397]
10:16:17 executing program 4:
syz_emit_ethernet(0x66, &(0x7f0000000180)={@random="8da525806ecf", @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0)
10:16:17 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40000140)
[ 2813.156112][ T3395] device macvtap2164 entered promiscuous mode
[ 2813.162810][ T3397] memory: usage 307200kB, limit 307200kB, failcnt 10834
[ 2813.215247][ T3397] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2813.231474][ T3397] Memory cgroup stats for /syz1:
[ 2813.231717][ T3397] anon 139264
[ 2813.231717][ T3397] file 393216
[ 2813.231717][ T3397] kernel 314040320
[ 2813.231717][ T3397] kernel_stack 65536
[ 2813.231717][ T3397] pagetables 81920
[ 2813.231717][ T3397] sec_pagetables 0
[ 2813.231717][ T3397] percpu 5356416
[ 2813.231717][ T3397] sock 0
[ 2813.231717][ T3397] vmalloc 0
[ 2813.231717][ T3397] shmem 385024
[ 2813.231717][ T3397] zswap 0
[ 2813.231717][ T3397] zswapped 0
[ 2813.231717][ T3397] file_mapped 385024
[ 2813.231717][ T3397] file_dirty 0
[ 2813.231717][ T3397] file_writeback 0
[ 2813.231717][ T3397] swapcached 0
[ 2813.231717][ T3397] anon_thp 0
[ 2813.231717][ T3397] file_thp 0
[ 2813.231717][ T3397] shmem_thp 0
[ 2813.231717][ T3397] inactive_anon 184320
[ 2813.231717][ T3397] active_anon 339968
[ 2813.231717][ T3397] inactive_file 4096
[ 2813.231717][ T3397] active_file 4096
10:16:17 executing program 0:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000000c0)={0xd04, 0x14, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x5, 0x1, "8c"}, @INET_DIAG_REQ_BYTECODE={0xce5, 0x1, "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"}]}, 0xd04}}, 0x0)
10:16:17 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8927, &(0x7f0000000040)={'sit0\x00', 0x0})
[ 2813.231717][ T3397] unevictable 0
[ 2813.231717][ T3397] slab_reclaimable 16512
[ 2813.231717][ T3397] slab_unreclaimable 308475640
[ 2813.339979][ T3397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3397,uid=0
10:16:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={0x0}}, 0x0)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc)
10:16:17 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x7a00}, 0x0)
[ 2813.398725][ T3397] Memory cgroup out of memory: Killed process 3397 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2813.419880][ T3404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2813.533278][ T3423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2813.547108][ T3404] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2813.563372][ T3404] CPU: 0 PID: 3404 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2813.573747][ T3404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2813.583846][ T3404] Call Trace:
[ 2813.587145][ T3404]
[ 2813.590101][ T3404] dump_stack_lvl+0xd1/0x138
[ 2813.594742][ T3404] dump_header+0x10b/0x85f
[ 2813.599194][ T3404] oom_kill_process.cold+0x10/0x15
[ 2813.604344][ T3404] out_of_memory+0x35c/0x14a0
[ 2813.609071][ T3404] ? find_held_lock+0x2d/0x110
[ 2813.613883][ T3404] ? oom_killer_disable+0x280/0x280
[ 2813.619127][ T3404] ? find_held_lock+0x2d/0x110
[ 2813.623954][ T3404] mem_cgroup_out_of_memory+0x206/0x270
[ 2813.629538][ T3404] ? mem_cgroup_margin+0x130/0x130
[ 2813.634671][ T3404] ? lock_downgrade+0x6e0/0x6e0
[ 2813.639593][ T3404] try_charge_memcg+0xef8/0x12f0
[ 2813.644582][ T3404] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2813.646905][ T3423] device bridge1774 entered promiscuous mode
[ 2813.650584][ T3404] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2813.650621][ T3404] ? lock_downgrade+0x6e0/0x6e0
[ 2813.667193][ T3404] ? lock_downgrade+0x6e0/0x6e0
[ 2813.672108][ T3404] obj_cgroup_charge+0x2af/0x5e0
[ 2813.677098][ T3404] kmem_cache_alloc_lru+0x141/0x740
[ 2813.682336][ T3404] ? sock_alloc_inode+0x27/0x1d0
[ 2813.687330][ T3404] sock_alloc_inode+0x27/0x1d0
[ 2813.692140][ T3404] ? sock_free_inode+0x30/0x30
[ 2813.696951][ T3404] alloc_inode+0x61/0x230
[ 2813.701308][ T3404] new_inode_pseudo+0x17/0x80
[ 2813.706012][ T3404] sock_alloc+0x40/0x260
[ 2813.710281][ T3404] __sock_create+0xbd/0x790
[ 2813.714834][ T3404] __sys_socket+0x133/0x250
[ 2813.719384][ T3404] ? __sys_socket_file+0x1f0/0x1f0
[ 2813.724553][ T3404] __x64_sys_socket+0x73/0xb0
[ 2813.729271][ T3404] do_syscall_64+0x39/0xb0
[ 2813.733725][ T3404] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2813.739661][ T3404] RIP: 0033:0x7f8325a8c0d9
[ 2813.744107][ T3404] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2813.763740][ T3404] RSP: 002b:00007f83267a9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 2813.773214][ T3404] RAX: ffffffffffffffda RBX: 00007f8325babf80 RCX: 00007f8325a8c0d9
10:16:17 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
recvmmsg$unix(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x103, 0x0)
10:16:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0xe2, @local}]}, 0x48}}, 0x0)
[ 2813.781215][ T3404] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[ 2813.789299][ T3404] RBP: 00007f8325ae7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2813.797297][ T3404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2813.805296][ T3404] R13: 00007fff9cb6b25f R14: 00007f83267a9300 R15: 0000000000022000
[ 2813.813315][ T3404]
[ 2813.848445][ T3425] device macvtap2164 entered promiscuous mode
[ 2813.898335][ T3404] memory: usage 307200kB, limit 307200kB, failcnt 64751
[ 2813.905499][ T3404] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2813.913028][ T3404] Memory cgroup stats for /syz2:
[ 2813.913189][ T3404] anon 143360
[ 2813.913189][ T3404] file 417792
[ 2813.913189][ T3404] kernel 314011648
[ 2813.913189][ T3404] kernel_stack 65536
[ 2813.913189][ T3404] pagetables 77824
[ 2813.913189][ T3404] sec_pagetables 0
[ 2813.913189][ T3404] percpu 5357600
[ 2813.913189][ T3404] sock 0
[ 2813.913189][ T3404] vmalloc 0
[ 2813.913189][ T3404] shmem 417792
[ 2813.913189][ T3404] zswap 0
[ 2813.913189][ T3404] zswapped 0
[ 2813.913189][ T3404] file_mapped 417792
[ 2813.913189][ T3404] file_dirty 0
[ 2813.913189][ T3404] file_writeback 0
[ 2813.913189][ T3404] swapcached 0
[ 2813.913189][ T3404] anon_thp 0
[ 2813.913189][ T3404] file_thp 0
[ 2813.913189][ T3404] shmem_thp 0
[ 2813.913189][ T3404] inactive_anon 147456
[ 2813.913189][ T3404] active_anon 413696
[ 2813.913189][ T3404] inactive_file 0
[ 2813.913189][ T3404] active_file 0
[ 2813.913189][ T3404] unevictable 0
[ 2813.913189][ T3404] slab_reclaimable 18136
[ 2813.913189][ T3404] slab_unreclaimable 308461632
[ 2814.010589][ T3404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3403,uid=0
[ 2814.026403][ T3404] Memory cgroup out of memory: Killed process 3403 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
10:16:18 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3502}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:18 executing program 0:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "df3682", 0x0, "e60900"}}}}}}, 0x0)
10:16:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0})
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x8d2d0a325177f521, 0x0, 0x0, {0x2}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
10:16:18 executing program 4:
socketpair(0x26, 0x5, 0x7, &(0x7f0000000000))
10:16:18 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x8100}, 0x0)
[ 2814.046195][ T3429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
10:16:18 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004980)={0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
10:16:18 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000440)='GPL\x00', 0x3, 0xe5, &(0x7f0000000480)=""/229, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
10:16:18 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x168}, 0x0)
10:16:18 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'raw\x00', 0x2, [{}, {}]}, 0x48)
[ 2814.183919][ T3426] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
10:16:18 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x2, &(0x7f0000001c40)=@raw=[@cb_func], &(0x7f0000001cc0)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
10:16:18 executing program 3:
select(0x40, &(0x7f0000000000)={0x4}, &(0x7f0000000040)={0x7}, 0x0, &(0x7f00000000c0)={0x0, 0x2710})
[ 2814.257629][ T3426] CPU: 1 PID: 3426 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2814.268000][ T3426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2814.278079][ T3426] Call Trace:
[ 2814.281377][ T3426]
[ 2814.284332][ T3426] dump_stack_lvl+0xd1/0x138
[ 2814.288962][ T3426] dump_header+0x10b/0x85f
[ 2814.293415][ T3426] oom_kill_process.cold+0x10/0x15
[ 2814.298563][ T3426] out_of_memory+0x35c/0x14a0
[ 2814.303281][ T3426] ? find_held_lock+0x2d/0x110
[ 2814.308090][ T3426] ? oom_killer_disable+0x280/0x280
[ 2814.313330][ T3426] ? find_held_lock+0x2d/0x110
[ 2814.318139][ T3426] mem_cgroup_out_of_memory+0x206/0x270
[ 2814.323722][ T3426] ? mem_cgroup_margin+0x130/0x130
[ 2814.328865][ T3426] ? lock_downgrade+0x6e0/0x6e0
[ 2814.333788][ T3426] try_charge_memcg+0xef8/0x12f0
[ 2814.338770][ T3426] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2814.344787][ T3426] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2814.350541][ T3426] ? lock_downgrade+0x6e0/0x6e0
[ 2814.355462][ T3426] obj_cgroup_charge+0x2af/0x5e0
[ 2814.360442][ T3426] ? vm_area_dup+0x85/0x380
[ 2814.364971][ T3426] kmem_cache_alloc+0xa3/0x3d0
[ 2814.369772][ T3426] vm_area_dup+0x85/0x380
[ 2814.374123][ T3426] ? mt_slot+0xa1/0x170
[ 2814.378306][ T3426] ? mas_next_nentry+0x610/0xab0
[ 2814.383273][ T3426] ? mas_next_node+0x547/0xa00
[ 2814.388085][ T3426] ? mas_find+0x211/0xd10
[ 2814.392450][ T3426] ? vm_area_alloc+0x100/0x100
[ 2814.397230][ T3426] ? validate_mm_mt+0x149/0x1b0
[ 2814.397625][ T3437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2814.402101][ T3426] ? remove_vma+0x130/0x130
[ 2814.402146][ T3426] ? can_vma_merge_before+0x390/0x390
[ 2814.402191][ T3426] __split_vma+0xae/0x5e0
[ 2814.402222][ T3426] ? vma_merge+0x2cf/0x870
[ 2814.402263][ T3426] split_vma+0xa3/0xe0
[ 2814.402304][ T3426] mprotect_fixup+0x6cb/0x960
[ 2814.402351][ T3426] ? mas_find+0x211/0xd10
[ 2814.402381][ T3426] ? change_protection+0x4290/0x4290
[ 2814.402436][ T3426] do_mprotect_pkey+0x6fd/0xa70
[ 2814.402485][ T3426] ? mprotect_fixup+0x960/0x960
[ 2814.402524][ T3426] ? up_write+0x1b0/0x520
[ 2814.462666][ T3426] __x64_sys_mprotect+0x78/0xb0
[ 2814.467551][ T3426] do_syscall_64+0x39/0xb0
[ 2814.471542][ T3437] device bridge1775 entered promiscuous mode
[ 2814.471988][ T3426] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2814.483875][ T3426] RIP: 0033:0x7f69a668c1e7
[ 2814.488313][ T3426] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2814.507934][ T3426] RSP: 002b:00007ffea4dd30a8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2814.516367][ T3426] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f69a668c1e7
[ 2814.524363][ T3426] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f69a744d000
[ 2814.532360][ T3426] RBP: 00007ffea4dd3180 R08: 00000000ffffffff R09: 00007f69a746c700
[ 2814.540355][ T3426] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffea4dd32a0
[ 2814.548348][ T3426] R13: 00007f69a746c700 R14: 0000000000000000 R15: 0000000000022000
[ 2814.556362][ T3426]
[ 2814.579721][ T3438] device macvtap2165 entered promiscuous mode
[ 2814.585198][ T3426] memory: usage 307200kB, limit 307200kB, failcnt 10979
[ 2814.599011][ T3426] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2814.606598][ T3426] Memory cgroup stats for /syz1:
[ 2814.606833][ T3426] anon 143360
[ 2814.606833][ T3426] file 393216
[ 2814.606833][ T3426] kernel 314036224
[ 2814.606833][ T3426] kernel_stack 65536
[ 2814.606833][ T3426] pagetables 81920
[ 2814.606833][ T3426] sec_pagetables 0
[ 2814.606833][ T3426] percpu 5356416
[ 2814.606833][ T3426] sock 0
[ 2814.606833][ T3426] vmalloc 0
[ 2814.606833][ T3426] shmem 385024
[ 2814.606833][ T3426] zswap 0
[ 2814.606833][ T3426] zswapped 0
[ 2814.606833][ T3426] file_mapped 385024
[ 2814.606833][ T3426] file_dirty 0
[ 2814.606833][ T3426] file_writeback 0
[ 2814.606833][ T3426] swapcached 0
[ 2814.606833][ T3426] anon_thp 0
[ 2814.606833][ T3426] file_thp 0
[ 2814.606833][ T3426] shmem_thp 0
[ 2814.606833][ T3426] inactive_anon 188416
[ 2814.606833][ T3426] active_anon 339968
[ 2814.606833][ T3426] inactive_file 0
[ 2814.606833][ T3426] active_file 8192
[ 2814.606833][ T3426] unevictable 0
[ 2814.606833][ T3426] slab_reclaimable 16512
[ 2814.606833][ T3426] slab_unreclaimable 308475640
[ 2814.715700][ T3426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3426,uid=0
10:16:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x118, @local}]}, 0x48}}, 0x0)
[ 2814.732101][ T3426] Memory cgroup out of memory: Killed process 3426 (syz-executor.1) total-vm:54672kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2814.753088][ T3447] device macvtap2166 entered promiscuous mode
[ 2814.820349][ T3440] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000
[ 2814.835306][ T3440] CPU: 1 PID: 3440 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2814.845677][ T3440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2814.855756][ T3440] Call Trace:
[ 2814.859051][ T3440]
[ 2814.861999][ T3440] dump_stack_lvl+0xd1/0x138
[ 2814.866628][ T3440] dump_header+0x10b/0x85f
[ 2814.871084][ T3440] oom_kill_process.cold+0x10/0x15
[ 2814.876231][ T3440] out_of_memory+0x35c/0x14a0
[ 2814.880953][ T3440] ? find_held_lock+0x2d/0x110
[ 2814.885755][ T3440] ? oom_killer_disable+0x280/0x280
[ 2814.890988][ T3440] ? find_held_lock+0x2d/0x110
[ 2814.895795][ T3440] mem_cgroup_out_of_memory+0x206/0x270
[ 2814.901370][ T3440] ? mem_cgroup_margin+0x130/0x130
[ 2814.906515][ T3440] ? lock_downgrade+0x6e0/0x6e0
[ 2814.911427][ T3440] try_charge_memcg+0xef8/0x12f0
[ 2814.916405][ T3440] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2814.922424][ T3440] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2814.928187][ T3440] ? lock_downgrade+0x6e0/0x6e0
[ 2814.933091][ T3440] ? lock_downgrade+0x6e0/0x6e0
[ 2814.937981][ T3440] ? rcu_read_unlock+0x9/0x60
[ 2814.942682][ T3440] obj_cgroup_charge+0x2af/0x5e0
[ 2814.947649][ T3440] kmem_cache_alloc_node+0xa9/0x410
[ 2814.952864][ T3440] ? copy_process+0x5c2/0x7190
[ 2814.957647][ T3440] copy_process+0x5c2/0x7190
[ 2814.962257][ T3440] ? find_held_lock+0x2d/0x110
[ 2814.967049][ T3440] ? find_held_lock+0x2d/0x110
[ 2814.971842][ T3440] ? __cleanup_sighand+0xb0/0xb0
[ 2814.976791][ T3440] ? __handle_mm_fault+0x2d0f/0x3a40
[ 2814.982089][ T3440] ? lock_downgrade+0x6e0/0x6e0
[ 2814.986963][ T3440] ? folio_flags.constprop.0+0x53/0x150
[ 2814.992541][ T3440] ? folio_add_lru+0x37b/0x680
[ 2814.997334][ T3440] kernel_clone+0xeb/0x980
[ 2815.001773][ T3440] ? create_io_thread+0xf0/0xf0
[ 2815.006646][ T3440] ? find_held_lock+0x2d/0x110
[ 2815.011440][ T3440] __do_sys_clone+0xba/0x100
[ 2815.016048][ T3440] ? kernel_clone+0x980/0x980
[ 2815.020755][ T3440] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2815.026670][ T3440] do_syscall_64+0x39/0xb0
[ 2815.031117][ T3440] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2815.037029][ T3440] RIP: 0033:0x7f8325a8d501
[ 2815.041452][ T3440] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2815.061067][ T3440] RSP: 002b:00007fff9cb6b1a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2815.069491][ T3440] RAX: ffffffffffffffda RBX: 00007f8326788700 RCX: 00007f8325a8d501
[ 2815.077468][ T3440] RDX: 00007f83267889d0 RSI: 00007f83267882f0 RDI: 00000000003d0f00
[ 2815.085448][ T3440] RBP: 00007fff9cb6b3f0 R08: 00007f8326788700 R09: 00007f8326788700
[ 2815.093423][ T3440] R10: 00007f83267889d0 R11: 0000000000000206 R12: 00007fff9cb6b25e
[ 2815.101400][ T3440] R13: 00007fff9cb6b25f R14: 00007f8326788300 R15: 0000000000022000
[ 2815.109401][ T3440]
[ 2815.142018][ T3446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2815.151501][ T3440] memory: usage 307196kB, limit 307200kB, failcnt 64877
[ 2815.167977][ T3440] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2815.175001][ T3440] Memory cgroup stats for /syz2:
[ 2815.175204][ T3440] anon 147456
[ 2815.175204][ T3440] file 417792
[ 2815.175204][ T3440] kernel 314003456
[ 2815.175204][ T3440] kernel_stack 65536
[ 2815.175204][ T3440] pagetables 77824
[ 2815.175204][ T3440] sec_pagetables 0
[ 2815.175204][ T3440] percpu 5357600
[ 2815.175204][ T3440] sock 0
[ 2815.175204][ T3440] vmalloc 0
[ 2815.175204][ T3440] shmem 417792
[ 2815.175204][ T3440] zswap 0
[ 2815.175204][ T3440] zswapped 0
[ 2815.175204][ T3440] file_mapped 417792
[ 2815.175204][ T3440] file_dirty 0
[ 2815.175204][ T3440] file_writeback 0
[ 2815.175204][ T3440] swapcached 0
[ 2815.175204][ T3440] anon_thp 0
[ 2815.175204][ T3440] file_thp 0
[ 2815.175204][ T3440] shmem_thp 0
[ 2815.175204][ T3440] inactive_anon 151552
[ 2815.175204][ T3440] active_anon 413696
[ 2815.175204][ T3440] inactive_file 0
[ 2815.175204][ T3440] active_file 0
[ 2815.175204][ T3440] unevictable 0
[ 2815.175204][ T3440] slab_reclaimable 14280
[ 2815.175204][ T3440] slab_unreclaimable 308459128
[ 2815.272552][ T3440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3440,uid=0
[ 2815.288316][ T3440] Memory cgroup out of memory: Killed process 3440 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
10:16:19 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3503}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:19 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8913, &(0x7f0000000040)={'sit0\x00', 0x0})
10:16:19 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
10:16:19 executing program 3:
syz_emit_ethernet(0x36, &(0x7f0000000140)={@random="8da525806ecf", @dev, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "df3682", 0x0, "e60900"}}}}}}, 0x0)
10:16:19 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x890c}, 0x0)
[ 2815.346998][ T3454] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2815.357276][ T3454] CPU: 1 PID: 3454 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2815.367626][ T3454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2815.377702][ T3454] Call Trace:
[ 2815.380999][ T3454]
[ 2815.383948][ T3454] dump_stack_lvl+0xd1/0x138
[ 2815.388576][ T3454] dump_header+0x10b/0x85f
[ 2815.393026][ T3454] oom_kill_process.cold+0x10/0x15
[ 2815.398175][ T3454] out_of_memory+0x35c/0x14a0
[ 2815.402894][ T3454] ? find_held_lock+0x2d/0x110
[ 2815.407701][ T3454] ? oom_killer_disable+0x280/0x280
[ 2815.412945][ T3454] ? find_held_lock+0x2d/0x110
[ 2815.417754][ T3454] mem_cgroup_out_of_memory+0x206/0x270
[ 2815.423335][ T3454] ? mem_cgroup_margin+0x130/0x130
[ 2815.428484][ T3454] ? lock_downgrade+0x6e0/0x6e0
[ 2815.433401][ T3454] try_charge_memcg+0xef8/0x12f0
[ 2815.438388][ T3454] ? mem_cgroup_handle_over_high+0x520/0x520
10:16:19 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003240)={0x6, 0x1, &(0x7f0000003040)=@raw=[@generic={0x5}], &(0x7f0000003080)='syzkaller\x00', 0x6, 0x82, &(0x7f00000030c0)=""/130, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
[ 2815.444409][ T3454] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2815.450165][ T3454] ? lock_downgrade+0x6e0/0x6e0
[ 2815.455070][ T3454] ? lock_downgrade+0x6e0/0x6e0
[ 2815.459985][ T3454] __memcg_kmem_charge_page+0x16e/0x3b0
[ 2815.465590][ T3454] memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2815.471785][ T3454] copy_process+0x73e/0x7190
[ 2815.476414][ T3454] ? __lock_acquire+0xbc3/0x56d0
[ 2815.481408][ T3454] ? __cleanup_sighand+0xb0/0xb0
[ 2815.486378][ T3454] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2815.492411][ T3454] ? psi_memstall_leave+0x174/0x250
[ 2815.497654][ T3454] kernel_clone+0xeb/0x980
[ 2815.502103][ T3454] ? create_io_thread+0xf0/0xf0
[ 2815.506990][ T3454] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0
[ 2815.513266][ T3454] ? lock_downgrade+0x6e0/0x6e0
[ 2815.518180][ T3454] __do_sys_clone+0xba/0x100
[ 2815.522804][ T3454] ? kernel_clone+0x980/0x980
[ 2815.527536][ T3454] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2815.533468][ T3454] do_syscall_64+0x39/0xb0
[ 2815.537928][ T3454] entry_SYSCALL_64_after_hwframe+0x63/0xcd
10:16:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip_vti0\x00', 0x0})
[ 2815.543861][ T3454] RIP: 0033:0x7f69a668d501
[ 2815.548299][ T3454] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2815.567935][ T3454] RSP: 002b:00007ffea4dd3058 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2815.576382][ T3454] RAX: ffffffffffffffda RBX: 00007f69a746c700 RCX: 00007f69a668d501
[ 2815.584381][ T3454] RDX: 00007f69a746c9d0 RSI: 00007f69a746c2f0 RDI: 00000000003d0f00
10:16:19 executing program 0:
select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x6900}, &(0x7f0000000140)={0x77359400})
[ 2815.592374][ T3454] RBP: 00007ffea4dd32a0 R08: 00007f69a746c700 R09: 00007f69a746c700
[ 2815.600372][ T3454] R10: 00007f69a746c9d0 R11: 0000000000000206 R12: 00007ffea4dd310e
[ 2815.608371][ T3454] R13: 00007ffea4dd310f R14: 00007f69a746c300 R15: 0000000000022000
[ 2815.616391][ T3454]
10:16:19 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000140)=0x6, 0x4)
[ 2815.648863][ T3468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2815.680897][ T3468] device bridge1776 entered promiscuous mode
10:16:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000000))
10:16:19 executing program 0:
bpf$MAP_CREATE(0x5, &(0x7f0000001040), 0x48)
[ 2815.772399][ T3473] device macvtap2166 entered promiscuous mode
[ 2815.824654][ T3454] memory: usage 307184kB, limit 307200kB, failcnt 11098
[ 2815.842765][ T3468] device macvtap2167 entered promiscuous mode
[ 2815.849163][ T3454] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2815.856073][ T3454] Memory cgroup stats for /syz1:
[ 2815.856312][ T3454] anon 102400
[ 2815.856312][ T3454] file 393216
[ 2815.856312][ T3454] kernel 314060800
[ 2815.856312][ T3454] kernel_stack 65536
[ 2815.856312][ T3454] pagetables 73728
[ 2815.856312][ T3454] sec_pagetables 0
[ 2815.856312][ T3454] percpu 5356416
[ 2815.856312][ T3454] sock 0
[ 2815.856312][ T3454] vmalloc 0
[ 2815.856312][ T3454] shmem 385024
[ 2815.856312][ T3454] zswap 0
[ 2815.856312][ T3454] zswapped 0
[ 2815.856312][ T3454] file_mapped 385024
[ 2815.856312][ T3454] file_dirty 0
[ 2815.856312][ T3454] file_writeback 0
[ 2815.856312][ T3454] swapcached 0
[ 2815.856312][ T3454] anon_thp 0
[ 2815.856312][ T3454] file_thp 0
[ 2815.856312][ T3454] shmem_thp 0
[ 2815.856312][ T3454] inactive_anon 147456
[ 2815.856312][ T3454] active_anon 339968
[ 2815.856312][ T3454] inactive_file 0
[ 2815.856312][ T3454] active_file 8192
[ 2815.856312][ T3454] unevictable 0
[ 2815.856312][ T3454] slab_reclaimable 14584
[ 2815.856312][ T3454] slab_unreclaimable 308482936
10:16:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x2, &(0x7f0000000000))
[ 2815.974883][ T3454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3454,uid=0
[ 2815.997641][ T3454] Memory cgroup out of memory: Killed process 3454 (syz-executor.1) total-vm:54672kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2816.069475][ T3480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2816.136620][ T3462] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000
[ 2816.155986][ T3462] CPU: 0 PID: 3462 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2816.166358][ T3462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2816.176420][ T3462] Call Trace:
[ 2816.179693][ T3462]
[ 2816.182616][ T3462] dump_stack_lvl+0xd1/0x138
[ 2816.187203][ T3462] dump_header+0x10b/0x85f
[ 2816.191612][ T3462] oom_kill_process.cold+0x10/0x15
[ 2816.196730][ T3462] out_of_memory+0x35c/0x14a0
[ 2816.201445][ T3462] ? find_held_lock+0x2d/0x110
[ 2816.206249][ T3462] ? oom_killer_disable+0x280/0x280
[ 2816.211484][ T3462] ? find_held_lock+0x2d/0x110
[ 2816.216289][ T3462] mem_cgroup_out_of_memory+0x206/0x270
[ 2816.221866][ T3462] ? mem_cgroup_margin+0x130/0x130
[ 2816.226992][ T3462] ? lock_downgrade+0x6e0/0x6e0
[ 2816.231853][ T3462] try_charge_memcg+0xef8/0x12f0
[ 2816.236803][ T3462] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2816.242783][ T3462] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2816.248523][ T3462] ? lock_downgrade+0x6e0/0x6e0
[ 2816.253423][ T3462] ? lock_downgrade+0x6e0/0x6e0
[ 2816.258312][ T3462] ? rcu_read_unlock+0x9/0x60
[ 2816.263025][ T3462] obj_cgroup_charge+0x2af/0x5e0
[ 2816.268007][ T3462] kmem_cache_alloc_node+0xa9/0x410
[ 2816.273225][ T3462] ? copy_process+0x5c2/0x7190
[ 2816.277991][ T3462] copy_process+0x5c2/0x7190
[ 2816.282576][ T3462] ? __lock_acquire+0xbc3/0x56d0
[ 2816.287520][ T3462] ? __cleanup_sighand+0xb0/0xb0
[ 2816.292449][ T3462] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2816.298449][ T3462] ? psi_memstall_leave+0x174/0x250
[ 2816.303695][ T3462] kernel_clone+0xeb/0x980
[ 2816.308146][ T3462] ? create_io_thread+0xf0/0xf0
[ 2816.313030][ T3462] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0
[ 2816.319301][ T3462] ? lock_downgrade+0x6e0/0x6e0
[ 2816.324188][ T3462] __do_sys_clone+0xba/0x100
[ 2816.328786][ T3462] ? kernel_clone+0x980/0x980
[ 2816.333467][ T3462] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2816.339354][ T3462] do_syscall_64+0x39/0xb0
[ 2816.343764][ T3462] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2816.349674][ T3462] RIP: 0033:0x7f8325a8d501
[ 2816.354109][ T3462] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2816.373741][ T3462] RSP: 002b:00007fff9cb6b1a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2816.382183][ T3462] RAX: ffffffffffffffda RBX: 00007f8326788700 RCX: 00007f8325a8d501
[ 2816.390164][ T3462] RDX: 00007f83267889d0 RSI: 00007f83267882f0 RDI: 00000000003d0f00
[ 2816.398136][ T3462] RBP: 00007fff9cb6b3f0 R08: 00007f8326788700 R09: 00007f8326788700
[ 2816.406125][ T3462] R10: 00007f83267889d0 R11: 0000000000000206 R12: 00007fff9cb6b25e
[ 2816.414116][ T3462] R13: 00007fff9cb6b25f R14: 00007f8326788300 R15: 0000000000022000
[ 2816.422127][ T3462]
[ 2816.427307][ T3462] memory: usage 307200kB, limit 307200kB, failcnt 65112
[ 2816.434857][ T3462] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2816.443980][ T3462] Memory cgroup stats for /syz2:
[ 2816.444207][ T3462] anon 147456
[ 2816.444207][ T3462] file 417792
[ 2816.444207][ T3462] kernel 314007552
[ 2816.444207][ T3462] kernel_stack 65536
[ 2816.444207][ T3462] pagetables 77824
[ 2816.444207][ T3462] sec_pagetables 0
[ 2816.444207][ T3462] percpu 5357600
[ 2816.444207][ T3462] sock 0
[ 2816.444207][ T3462] vmalloc 8192
[ 2816.444207][ T3462] shmem 417792
[ 2816.444207][ T3462] zswap 0
[ 2816.444207][ T3462] zswapped 0
[ 2816.444207][ T3462] file_mapped 417792
[ 2816.444207][ T3462] file_dirty 0
[ 2816.444207][ T3462] file_writeback 0
[ 2816.444207][ T3462] swapcached 0
[ 2816.444207][ T3462] anon_thp 0
[ 2816.444207][ T3462] file_thp 0
[ 2816.444207][ T3462] shmem_thp 0
[ 2816.444207][ T3462] inactive_anon 126976
[ 2816.444207][ T3462] active_anon 413696
[ 2816.444207][ T3462] inactive_file 0
[ 2816.444207][ T3462] active_file 0
[ 2816.444207][ T3462] unevictable 0
[ 2816.444207][ T3462] slab_reclaimable 14280
[ 2816.444207][ T3462] slab_unreclaimable 308454264
[ 2816.539375][ T3462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3462,uid=0
[ 2816.556306][ T3462] Memory cgroup out of memory: Killed process 3462 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
10:16:20 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3600}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:20 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x324, @local}]}, 0x48}}, 0x0)
10:16:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x8940, &(0x7f0000000000))
10:16:20 executing program 3:
bpf$MAP_CREATE(0x11, &(0x7f0000001040), 0x48)
10:16:20 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x8a0c}, 0x0)
10:16:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68000010}, 0xc, &(0x7f0000000240)={&(0x7f0000000f40)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_MODES={0xe80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "cc4e61dca331c2fa9078d0f688c953a3c6fbeec2761f6d36db552724402be53e363d3120284706d289eb4602aa2eed1afa4c0040c26d3e90fa5b4492dd8a66d151b07d9351742c6a98c9baed8486febb78aed27096"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "d28ba99c45f0c94a872d5070973feefc34dbf30aeb4a89daf53781340c4f09c90b3b71ea520941c82c12ff7cd65c9e39d6ff776f5cf949771985cb2f0365f3591794541445faef88d71593a6bc880b5cae453f33515913160b2c206cfaaf98beeb1896046aa1862f7ea6ea6f2b6db4464de4348c46203fe53dbede1c9073b60d0c0ff296150d374b330255cbe327010bc3c3fc1373c5d3713092e945151d6bbacd6acacfe45b5ab51d2cd033324c2f4a5cbc1d65ea"}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/proc/self/net/pfkey\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':#(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\x94$-,!\xc5}].\xbf&[.&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x1a4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/proc/self/net/pfkey\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/proc/self/net/pfkey\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/-&\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/proc/self/net/pfkey\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ']@$/R.}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/proc/self/net/pfkey\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-%\'\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/proc/self/net/pfkey\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/proc/self/net/pfkey\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, '/proc/self/net/pfkey\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xaf1, 0x4, "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"}]}]}, 0xec4}}, 0x0)
10:16:20 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
10:16:20 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
[ 2816.698650][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
10:16:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)={0x14}, 0x14}, 0x7}, 0x0)
10:16:21 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@kfunc], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
10:16:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)=ANY=[]})
10:16:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f0000000300))
[ 2816.842554][ T3486] device bridge1777 entered promiscuous mode
[ 2816.862804][ T3492] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2816.900061][ T3492] CPU: 0 PID: 3492 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2816.910437][ T3492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2816.920519][ T3492] Call Trace:
[ 2816.923814][ T3492]
[ 2816.926764][ T3492] dump_stack_lvl+0xd1/0x138
[ 2816.931393][ T3492] dump_header+0x10b/0x85f
[ 2816.935851][ T3492] oom_kill_process.cold+0x10/0x15
[ 2816.940997][ T3492] out_of_memory+0x35c/0x14a0
[ 2816.945715][ T3492] ? find_held_lock+0x2d/0x110
[ 2816.950524][ T3492] ? oom_killer_disable+0x280/0x280
[ 2816.955760][ T3492] ? find_held_lock+0x2d/0x110
[ 2816.960573][ T3492] mem_cgroup_out_of_memory+0x206/0x270
[ 2816.966147][ T3492] ? mem_cgroup_margin+0x130/0x130
[ 2816.971280][ T3492] ? lock_downgrade+0x6e0/0x6e0
[ 2816.976204][ T3492] try_charge_memcg+0xef8/0x12f0
[ 2816.981194][ T3492] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2816.987211][ T3492] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2816.992965][ T3492] ? lock_downgrade+0x6e0/0x6e0
[ 2816.997882][ T3492] obj_cgroup_charge+0x2af/0x5e0
[ 2817.002862][ T3492] ? vm_area_dup+0x85/0x380
[ 2817.007394][ T3492] kmem_cache_alloc+0xa3/0x3d0
[ 2817.012188][ T3492] vm_area_dup+0x85/0x380
[ 2817.016532][ T3492] ? mt_slot+0xa1/0x170
[ 2817.020702][ T3492] ? mas_next_nentry+0x610/0xab0
[ 2817.025652][ T3492] ? mas_next_node+0x547/0xa00
[ 2817.030445][ T3492] ? mas_find+0x211/0xd10
[ 2817.034801][ T3492] ? vm_area_alloc+0x100/0x100
[ 2817.039578][ T3492] ? validate_mm_mt+0x149/0x1b0
[ 2817.044451][ T3492] ? remove_vma+0x130/0x130
[ 2817.048980][ T3492] ? can_vma_merge_before+0x390/0x390
[ 2817.054380][ T3492] __split_vma+0xae/0x5e0
[ 2817.058729][ T3492] ? vma_merge+0x2cf/0x870
[ 2817.063173][ T3492] split_vma+0xa3/0xe0
[ 2817.067275][ T3492] mprotect_fixup+0x6cb/0x960
[ 2817.071985][ T3492] ? mas_find+0x211/0xd10
[ 2817.076333][ T3492] ? change_protection+0x4290/0x4290
[ 2817.081659][ T3492] do_mprotect_pkey+0x6fd/0xa70
[ 2817.086544][ T3492] ? mprotect_fixup+0x960/0x960
[ 2817.091420][ T3492] ? up_write+0x1b0/0x520
[ 2817.095806][ T3492] __x64_sys_mprotect+0x78/0xb0
[ 2817.100681][ T3492] do_syscall_64+0x39/0xb0
[ 2817.105118][ T3492] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2817.111033][ T3492] RIP: 0033:0x7f8325a8c1e7
[ 2817.115457][ T3492] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2817.135074][ T3492] RSP: 002b:00007fff9cb6b1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2817.143502][ T3492] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f8325a8c1e7
[ 2817.151480][ T3492] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f8326769000
[ 2817.159458][ T3492] RBP: 00007fff9cb6b2d0 R08: 00000000ffffffff R09: 00007f8326788700
[ 2817.167438][ T3492] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff9cb6b3f0
[ 2817.175416][ T3492] R13: 00007f8326788700 R14: 0000000000000000 R15: 0000000000022000
[ 2817.183416][ T3492]
[ 2817.199287][ T3492] memory: usage 307200kB, limit 307200kB, failcnt 65220
[ 2817.215359][ T3492] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2817.236991][ T3492] Memory cgroup stats for /syz2:
[ 2817.237270][ T3492] anon 143360
[ 2817.237270][ T3492] file 417792
[ 2817.237270][ T3492] kernel 314011648
[ 2817.237270][ T3492] kernel_stack 65536
[ 2817.237270][ T3492] pagetables 77824
[ 2817.237270][ T3492] sec_pagetables 0
[ 2817.237270][ T3492] percpu 5357600
[ 2817.237270][ T3492] sock 0
[ 2817.237270][ T3492] vmalloc 0
[ 2817.237270][ T3492] shmem 417792
[ 2817.237270][ T3492] zswap 0
[ 2817.237270][ T3492] zswapped 0
[ 2817.237270][ T3492] file_mapped 417792
[ 2817.237270][ T3492] file_dirty 0
[ 2817.237270][ T3492] file_writeback 0
[ 2817.237270][ T3492] swapcached 0
[ 2817.237270][ T3492] anon_thp 0
[ 2817.237270][ T3492] file_thp 0
[ 2817.237270][ T3492] shmem_thp 0
[ 2817.237270][ T3492] inactive_anon 147456
[ 2817.237270][ T3492] active_anon 413696
[ 2817.237270][ T3492] inactive_file 0
[ 2817.237270][ T3492] active_file 0
[ 2817.237270][ T3492] unevictable 0
[ 2817.237270][ T3492] slab_reclaimable 14280
[ 2817.237270][ T3492] slab_unreclaimable 308463520
[ 2817.357197][ T3495] device macvtap2167 entered promiscuous mode
[ 2817.361626][ T3492] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3492,uid=0
[ 2817.390111][ T3492] Memory cgroup out of memory: Killed process 3492 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2817.396294][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2817.428701][ T3484] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000
10:16:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3601}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2817.456303][ T3484] CPU: 1 PID: 3484 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2817.460869][ T3500] device macvtap2168 entered promiscuous mode
[ 2817.466643][ T3484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2817.466661][ T3484] Call Trace:
[ 2817.466671][ T3484]
[ 2817.466682][ T3484] dump_stack_lvl+0xd1/0x138
[ 2817.493629][ T3484] dump_header+0x10b/0x85f
[ 2817.498078][ T3484] oom_kill_process.cold+0x10/0x15
[ 2817.503211][ T3484] out_of_memory+0x35c/0x14a0
[ 2817.507916][ T3484] ? oom_killer_disable+0x280/0x280
[ 2817.513135][ T3484] ? find_held_lock+0x2d/0x110
[ 2817.517924][ T3484] mem_cgroup_out_of_memory+0x206/0x270
[ 2817.523486][ T3484] ? mem_cgroup_margin+0x130/0x130
[ 2817.528611][ T3484] ? lock_downgrade+0x6e0/0x6e0
[ 2817.533502][ T3484] try_charge_memcg+0xef8/0x12f0
[ 2817.538467][ T3484] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2817.544469][ T3484] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2817.550207][ T3484] ? lock_downgrade+0x6e0/0x6e0
[ 2817.555087][ T3484] ? lock_downgrade+0x6e0/0x6e0
[ 2817.559969][ T3484] ? rcu_read_unlock+0x9/0x60
[ 2817.564669][ T3484] obj_cgroup_charge+0x2af/0x5e0
[ 2817.569642][ T3484] kmem_cache_alloc_node+0xa9/0x410
[ 2817.574861][ T3484] ? copy_process+0x5c2/0x7190
[ 2817.579651][ T3484] copy_process+0x5c2/0x7190
[ 2817.584265][ T3484] ? find_held_lock+0x2d/0x110
[ 2817.589062][ T3484] ? find_held_lock+0x2d/0x110
[ 2817.593855][ T3484] ? __cleanup_sighand+0xb0/0xb0
[ 2817.598808][ T3484] ? __handle_mm_fault+0x2d0f/0x3a40
[ 2817.604109][ T3484] ? lock_downgrade+0x6e0/0x6e0
[ 2817.608982][ T3484] ? folio_flags.constprop.0+0x53/0x150
[ 2817.614564][ T3484] ? folio_add_lru+0x37b/0x680
[ 2817.619358][ T3484] kernel_clone+0xeb/0x980
[ 2817.623794][ T3484] ? create_io_thread+0xf0/0xf0
[ 2817.628667][ T3484] ? find_held_lock+0x2d/0x110
[ 2817.633474][ T3484] __do_sys_clone+0xba/0x100
[ 2817.638081][ T3484] ? kernel_clone+0x980/0x980
[ 2817.642786][ T3484] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2817.648717][ T3484] do_syscall_64+0x39/0xb0
[ 2817.653163][ T3484] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2817.659086][ T3484] RIP: 0033:0x7f69a668d501
[ 2817.663517][ T3484] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2817.683138][ T3484] RSP: 002b:00007ffea4dd3058 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2817.691568][ T3484] RAX: ffffffffffffffda RBX: 00007f69a746c700 RCX: 00007f69a668d501
[ 2817.699553][ T3484] RDX: 00007f69a746c9d0 RSI: 00007f69a746c2f0 RDI: 00000000003d0f00
[ 2817.707534][ T3484] RBP: 00007ffea4dd32a0 R08: 00007f69a746c700 R09: 00007f69a746c700
[ 2817.715514][ T3484] R10: 00007f69a746c9d0 R11: 0000000000000206 R12: 00007ffea4dd310e
[ 2817.723493][ T3484] R13: 00007ffea4dd310f R14: 00007f69a746c300 R15: 0000000000022000
[ 2817.731491][ T3484]
[ 2817.738927][ T3484] memory: usage 307196kB, limit 307200kB, failcnt 11163
[ 2817.751533][ T3484] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2817.758961][ T3484] Memory cgroup stats for /syz1:
[ 2817.759198][ T3484] anon 147456
[ 2817.759198][ T3484] file 393216
[ 2817.759198][ T3484] kernel 314028032
[ 2817.759198][ T3484] kernel_stack 65536
[ 2817.759198][ T3484] pagetables 81920
[ 2817.759198][ T3484] sec_pagetables 0
[ 2817.759198][ T3484] percpu 5356416
[ 2817.759198][ T3484] sock 0
[ 2817.759198][ T3484] vmalloc 0
[ 2817.759198][ T3484] shmem 385024
[ 2817.759198][ T3484] zswap 0
[ 2817.759198][ T3484] zswapped 0
[ 2817.759198][ T3484] file_mapped 385024
[ 2817.759198][ T3484] file_dirty 0
[ 2817.759198][ T3484] file_writeback 0
[ 2817.759198][ T3484] swapcached 0
[ 2817.759198][ T3484] anon_thp 0
[ 2817.759198][ T3484] file_thp 0
[ 2817.759198][ T3484] shmem_thp 0
[ 2817.759198][ T3484] inactive_anon 192512
[ 2817.759198][ T3484] active_anon 339968
[ 2817.759198][ T3484] inactive_file 4096
[ 2817.759198][ T3484] active_file 4096
[ 2817.759198][ T3484] unevictable 0
[ 2817.759198][ T3484] slab_reclaimable 16512
[ 2817.759198][ T3484] slab_unreclaimable 308470328
[ 2817.862293][ T3484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3484,uid=0
[ 2817.878099][ T3484] Memory cgroup out of memory: Killed process 3484 (syz-executor.1) total-vm:54672kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2817.910328][ T3510] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2817.920788][ T3494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2817.931847][ T3510] CPU: 1 PID: 3510 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2817.942211][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2817.952372][ T3510] Call Trace:
[ 2817.955667][ T3510]
[ 2817.958619][ T3510] dump_stack_lvl+0xd1/0x138
[ 2817.963243][ T3510] dump_header+0x10b/0x85f
[ 2817.967682][ T3510] oom_kill_process.cold+0x10/0x15
[ 2817.972818][ T3510] out_of_memory+0x35c/0x14a0
[ 2817.977541][ T3510] ? find_held_lock+0x2d/0x110
[ 2817.982345][ T3510] ? oom_killer_disable+0x280/0x280
[ 2817.987569][ T3510] ? find_held_lock+0x2d/0x110
[ 2817.992380][ T3510] mem_cgroup_out_of_memory+0x206/0x270
[ 2817.997963][ T3510] ? mem_cgroup_margin+0x130/0x130
[ 2818.003102][ T3510] ? lock_downgrade+0x6e0/0x6e0
[ 2818.008023][ T3510] try_charge_memcg+0xef8/0x12f0
[ 2818.013005][ T3510] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2818.019032][ T3510] ? rcu_read_unlock+0x9/0x60
[ 2818.023733][ T3510] ? lock_downgrade+0x6e0/0x6e0
[ 2818.028644][ T3510] charge_memcg+0x99/0x3b0
[ 2818.033101][ T3510] __mem_cgroup_charge+0x2b/0x90
[ 2818.038076][ T3510] ? _compound_head+0x5d/0x150
[ 2818.042883][ T3510] __handle_mm_fault+0x17e7/0x3a40
[ 2818.048034][ T3510] ? vm_iomap_memory+0x190/0x190
[ 2818.053030][ T3510] handle_mm_fault+0x1cc/0x780
[ 2818.057829][ T3510] do_user_addr_fault+0x475/0x1210
[ 2818.062979][ T3510] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2818.068576][ T3510] exc_page_fault+0x98/0x170
[ 2818.073200][ T3510] asm_exc_page_fault+0x26/0x30
[ 2818.078086][ T3510] RIP: 0033:0x7f8325a2be6a
[ 2818.082520][ T3510] Code: 30 48 8b 34 24 48 85 f6 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fe 01 0f 85 a1 01 00 00 48 8b 44 24 10 8b 74 24 18 <89> 30 e9 d2 fc ff ff 48 8b 44 24 10 8b 10 48 8b 04 24 48 85 c0 0f
[ 2818.102154][ T3510] RSP: 002b:00007fff9cb6b2a0 EFLAGS: 00010246
[ 2818.108253][ T3510] RAX: 0000000020000200 RBX: 0000000000000000 RCX: 0000000000000000
[ 2818.116245][ T3510] RDX: c81f92c6f62d1f66 RSI: 0000000000000014 RDI: 0000555555b4e2e8
[ 2818.124239][ T3510] RBP: 00007fff9cb6b398 R08: 0000000000000000 R09: 0000000000000000
[ 2818.132228][ T3510] R10: 00007f83256002a8 R11: 0000000000000246 R12: 00000000002aff4b
[ 2818.140220][ T3510] R13: 00007fff9cb6b3c0 R14: 00007f8325babf80 R15: 0000000000000032
[ 2818.148240][ T3510]
[ 2818.158814][ T3510] memory: usage 307200kB, limit 307200kB, failcnt 65341
[ 2818.165916][ T3510] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2818.173433][ T3510] Memory cgroup stats for /syz2:
[ 2818.173645][ T3510] anon 139264
[ 2818.173645][ T3510] file 417792
[ 2818.173645][ T3510] kernel 314015744
[ 2818.173645][ T3510] kernel_stack 65536
[ 2818.173645][ T3510] pagetables 77824
[ 2818.173645][ T3510] sec_pagetables 0
[ 2818.173645][ T3510] percpu 5357600
[ 2818.173645][ T3510] sock 0
[ 2818.173645][ T3510] vmalloc 0
[ 2818.173645][ T3510] shmem 417792
10:16:22 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x336, @local}]}, 0x48}}, 0x0)
10:16:22 executing program 4:
bpf$MAP_CREATE(0x1c, &(0x7f0000001040), 0x48)
10:16:22 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@delnexthop={0x18}, 0x18}}, 0x0)
10:16:22 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000980)={&(0x7f0000000a00), 0x5, &(0x7f0000000480)={&(0x7f0000000440)={0x1b}, 0x14}}, 0x0)
10:16:22 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xa503}, 0x0)
[ 2818.173645][ T3510] zswap 0
[ 2818.173645][ T3510] zswapped 0
[ 2818.173645][ T3510] file_mapped 417792
[ 2818.173645][ T3510] file_dirty 0
[ 2818.173645][ T3510] file_writeback 0
[ 2818.173645][ T3510] swapcached 0
[ 2818.173645][ T3510] anon_thp 0
[ 2818.173645][ T3510] file_thp 0
[ 2818.173645][ T3510] shmem_thp 0
[ 2818.173645][ T3510] inactive_anon 143360
[ 2818.173645][ T3510] active_anon 413696
[ 2818.173645][ T3510] inactive_file 0
[ 2818.173645][ T3510] active_file 0
[ 2818.173645][ T3510] unevictable 0
[ 2818.173645][ T3510] slab_reclaimable 14280
10:16:22 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0)
[ 2818.173645][ T3510] slab_unreclaimable 308463520
10:16:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername$packet(r0, 0x0, 0x0)
10:16:22 executing program 3:
bpf$MAP_CREATE(0x1d, &(0x7f0000001040), 0x48)
[ 2818.295098][ T3518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
10:16:22 executing program 4:
bpf$MAP_CREATE(0x8, &(0x7f0000001040), 0x48)
10:16:22 executing program 3:
bpf$MAP_CREATE(0x13, &(0x7f0000001040), 0x48)
10:16:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000200)=ANY=[]})
[ 2818.416734][ T3518] device bridge1778 entered promiscuous mode
[ 2818.483526][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
10:16:22 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3602}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2818.529755][ T3510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3510,uid=0
[ 2818.545702][ T3510] Memory cgroup out of memory: Killed process 3510 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2818.631180][ T3525] device macvtap2168 entered promiscuous mode
[ 2818.645098][ T3524] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000
[ 2818.672778][ T3524] CPU: 0 PID: 3524 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2818.683159][ T3524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2818.693236][ T3524] Call Trace:
[ 2818.696527][ T3524]
[ 2818.699473][ T3524] dump_stack_lvl+0xd1/0x138
[ 2818.704107][ T3524] dump_header+0x10b/0x85f
[ 2818.708558][ T3524] oom_kill_process.cold+0x10/0x15
[ 2818.713707][ T3524] out_of_memory+0x35c/0x14a0
[ 2818.718422][ T3524] ? find_held_lock+0x2d/0x110
[ 2818.723231][ T3524] ? oom_killer_disable+0x280/0x280
[ 2818.728476][ T3524] ? find_held_lock+0x2d/0x110
[ 2818.733285][ T3524] mem_cgroup_out_of_memory+0x206/0x270
[ 2818.738864][ T3524] ? mem_cgroup_margin+0x130/0x130
[ 2818.744010][ T3524] ? lock_downgrade+0x6e0/0x6e0
[ 2818.748927][ T3524] try_charge_memcg+0xef8/0x12f0
[ 2818.753909][ T3524] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2818.759915][ T3524] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2818.765676][ T3524] ? lock_downgrade+0x6e0/0x6e0
[ 2818.770573][ T3524] ? lock_downgrade+0x6e0/0x6e0
[ 2818.775466][ T3524] ? rcu_read_unlock+0x9/0x60
[ 2818.780214][ T3524] obj_cgroup_charge+0x2af/0x5e0
[ 2818.785199][ T3524] kmem_cache_alloc_node+0xa9/0x410
[ 2818.787960][ T3532] device macvtap2169 entered promiscuous mode
[ 2818.790409][ T3524] ? copy_process+0x5c2/0x7190
[ 2818.790450][ T3524] copy_process+0x5c2/0x7190
[ 2818.805896][ T3524] ? find_held_lock+0x2d/0x110
[ 2818.810694][ T3524] ? find_held_lock+0x2d/0x110
[ 2818.815473][ T3524] ? __cleanup_sighand+0xb0/0xb0
[ 2818.820427][ T3524] ? __handle_mm_fault+0x2d0f/0x3a40
[ 2818.825704][ T3524] ? lock_downgrade+0x6e0/0x6e0
[ 2818.830566][ T3524] ? folio_flags.constprop.0+0x53/0x150
[ 2818.836167][ T3524] ? folio_add_lru+0x37b/0x680
[ 2818.840986][ T3524] kernel_clone+0xeb/0x980
[ 2818.845435][ T3524] ? create_io_thread+0xf0/0xf0
[ 2818.850310][ T3524] ? find_held_lock+0x2d/0x110
[ 2818.855078][ T3524] __do_sys_clone+0xba/0x100
[ 2818.859678][ T3524] ? kernel_clone+0x980/0x980
[ 2818.864380][ T3524] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2818.870272][ T3524] do_syscall_64+0x39/0xb0
[ 2818.874685][ T3524] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2818.880588][ T3524] RIP: 0033:0x7f69a668d501
[ 2818.885029][ T3524] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2818.904662][ T3524] RSP: 002b:00007ffea4dd3058 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2818.913098][ T3524] RAX: ffffffffffffffda RBX: 00007f69a746c700 RCX: 00007f69a668d501
[ 2818.921063][ T3524] RDX: 00007f69a746c9d0 RSI: 00007f69a746c2f0 RDI: 00000000003d0f00
[ 2818.929039][ T3524] RBP: 00007ffea4dd32a0 R08: 00007f69a746c700 R09: 00007f69a746c700
[ 2818.937039][ T3524] R10: 00007f69a746c9d0 R11: 0000000000000206 R12: 00007ffea4dd310e
[ 2818.945031][ T3524] R13: 00007ffea4dd310f R14: 00007f69a746c300 R15: 0000000000022000
[ 2818.953024][ T3524]
[ 2818.978240][ T3524] memory: usage 307196kB, limit 307200kB, failcnt 11377
[ 2818.988823][ T3524] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2818.998266][ T3524] Memory cgroup stats for /syz1:
[ 2818.998493][ T3524] anon 147456
[ 2818.998493][ T3524] file 393216
[ 2818.998493][ T3524] kernel 314028032
[ 2818.998493][ T3524] kernel_stack 65536
[ 2818.998493][ T3524] pagetables 81920
[ 2818.998493][ T3524] sec_pagetables 0
[ 2818.998493][ T3524] percpu 5356416
[ 2818.998493][ T3524] sock 0
[ 2818.998493][ T3524] vmalloc 0
[ 2818.998493][ T3524] shmem 385024
[ 2818.998493][ T3524] zswap 0
[ 2818.998493][ T3524] zswapped 0
[ 2818.998493][ T3524] file_mapped 385024
[ 2818.998493][ T3524] file_dirty 0
[ 2818.998493][ T3524] file_writeback 0
[ 2818.998493][ T3524] swapcached 0
[ 2818.998493][ T3524] anon_thp 0
[ 2818.998493][ T3524] file_thp 0
[ 2818.998493][ T3524] shmem_thp 0
[ 2818.998493][ T3524] inactive_anon 192512
[ 2818.998493][ T3524] active_anon 339968
[ 2818.998493][ T3524] inactive_file 4096
[ 2818.998493][ T3524] active_file 4096
[ 2818.998493][ T3524] unevictable 0
[ 2818.998493][ T3524] slab_reclaimable 16512
[ 2818.998493][ T3524] slab_unreclaimable 308470328
[ 2819.097885][ T3524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3524,uid=0
[ 2819.114279][ T3524] Memory cgroup out of memory: Killed process 3524 (syz-executor.1) total-vm:54672kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2819.134015][ T3537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2819.136290][ T3536] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2819.173604][ T3536] CPU: 0 PID: 3536 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2819.183967][ T3536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2819.194044][ T3536] Call Trace:
[ 2819.197343][ T3536]
[ 2819.200295][ T3536] dump_stack_lvl+0xd1/0x138
[ 2819.204932][ T3536] dump_header+0x10b/0x85f
[ 2819.209820][ T3536] oom_kill_process.cold+0x10/0x15
[ 2819.214969][ T3536] out_of_memory+0x35c/0x14a0
[ 2819.219692][ T3536] ? oom_killer_disable+0x280/0x280
[ 2819.224942][ T3536] ? find_held_lock+0x2d/0x110
[ 2819.229756][ T3536] mem_cgroup_out_of_memory+0x206/0x270
[ 2819.235339][ T3536] ? mem_cgroup_margin+0x130/0x130
[ 2819.240489][ T3536] ? lock_downgrade+0x6e0/0x6e0
[ 2819.245408][ T3536] try_charge_memcg+0xef8/0x12f0
[ 2819.250393][ T3536] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2819.256410][ T3536] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2819.262166][ T3536] ? lock_downgrade+0x6e0/0x6e0
[ 2819.267095][ T3536] obj_cgroup_charge+0x2af/0x5e0
[ 2819.272079][ T3536] ? vm_area_dup+0x85/0x380
[ 2819.276620][ T3536] kmem_cache_alloc+0xa3/0x3d0
[ 2819.281422][ T3536] vm_area_dup+0x85/0x380
[ 2819.285767][ T3536] ? mt_slot+0xa1/0x170
[ 2819.289936][ T3536] ? mas_next_nentry+0x610/0xab0
[ 2819.294887][ T3536] ? mas_next_node+0x547/0xa00
[ 2819.299680][ T3536] ? mas_find+0x211/0xd10
[ 2819.304039][ T3536] ? vm_area_alloc+0x100/0x100
[ 2819.308819][ T3536] ? validate_mm_mt+0x149/0x1b0
[ 2819.313699][ T3536] ? remove_vma+0x130/0x130
[ 2819.318232][ T3536] ? can_vma_merge_before+0x390/0x390
[ 2819.323634][ T3536] __split_vma+0xae/0x5e0
[ 2819.327983][ T3536] ? vma_merge+0x2cf/0x870
[ 2819.332430][ T3536] split_vma+0xa3/0xe0
[ 2819.336523][ T3536] mprotect_fixup+0x6cb/0x960
[ 2819.341231][ T3536] ? mas_find+0x211/0xd10
[ 2819.345576][ T3536] ? change_protection+0x4290/0x4290
[ 2819.350898][ T3536] do_mprotect_pkey+0x6fd/0xa70
[ 2819.355785][ T3536] ? mprotect_fixup+0x960/0x960
[ 2819.360661][ T3536] ? up_write+0x1b0/0x520
[ 2819.365048][ T3536] __x64_sys_mprotect+0x78/0xb0
[ 2819.369929][ T3536] do_syscall_64+0x39/0xb0
[ 2819.374405][ T3536] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2819.380319][ T3536] RIP: 0033:0x7f8325a8c1e7
[ 2819.384747][ T3536] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2819.404369][ T3536] RSP: 002b:00007fff9cb6b1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2819.412795][ T3536] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f8325a8c1e7
10:16:23 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x339, @local}]}, 0x48}}, 0x0)
10:16:23 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x4)
10:16:23 executing program 3:
bpf$MAP_CREATE(0x9, &(0x7f0000001040), 0x48)
10:16:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
10:16:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xb40b}, 0x0)
[ 2819.420774][ T3536] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f8326769000
[ 2819.428754][ T3536] RBP: 00007fff9cb6b2d0 R08: 00000000ffffffff R09: 00007f8326788700
[ 2819.436734][ T3536] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff9cb6b3f0
[ 2819.444714][ T3536] R13: 00007f8326788700 R14: 0000000000000000 R15: 0000000000022000
[ 2819.452717][ T3536]
10:16:23 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4)
10:16:23 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
10:16:23 executing program 0:
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local, @empty, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "dd88517d5f67e55a"}}}}, 0x0)
[ 2819.504233][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
10:16:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0xfffffffffffffffe}}, 0x0)
10:16:23 executing program 4:
r0 = socket(0x11, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={0x0, 0x7c}}, 0x0)
10:16:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000001880)={'batadv_slave_1\x00'})
[ 2819.688319][ T3545] device bridge1779 entered promiscuous mode
[ 2819.721925][ T3536] memory: usage 307188kB, limit 307200kB, failcnt 65497
[ 2819.729933][ T3536] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2819.736981][ T3536] Memory cgroup stats for /syz2:
[ 2819.737229][ T3536] anon 143360
[ 2819.737229][ T3536] file 417792
[ 2819.737229][ T3536] kernel 313999360
[ 2819.737229][ T3536] kernel_stack 65536
[ 2819.737229][ T3536] pagetables 77824
[ 2819.737229][ T3536] sec_pagetables 0
[ 2819.737229][ T3536] percpu 5357600
[ 2819.737229][ T3536] sock 0
[ 2819.737229][ T3536] vmalloc 0
[ 2819.737229][ T3536] shmem 417792
[ 2819.737229][ T3536] zswap 0
[ 2819.737229][ T3536] zswapped 0
[ 2819.737229][ T3536] file_mapped 417792
[ 2819.737229][ T3536] file_dirty 0
[ 2819.737229][ T3536] file_writeback 0
[ 2819.737229][ T3536] swapcached 0
[ 2819.737229][ T3536] anon_thp 0
[ 2819.737229][ T3536] file_thp 0
[ 2819.737229][ T3536] shmem_thp 0
[ 2819.737229][ T3536] inactive_anon 147456
[ 2819.737229][ T3536] active_anon 413696
[ 2819.737229][ T3536] inactive_file 0
[ 2819.737229][ T3536] active_file 0
[ 2819.737229][ T3536] unevictable 0
[ 2819.737229][ T3536] slab_reclaimable 14280
[ 2819.737229][ T3536] slab_unreclaimable 308452120
[ 2819.779557][ T3548] device macvtap2169 entered promiscuous mode
[ 2819.841004][ T3536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3536,uid=0
[ 2819.856820][ T3536] Memory cgroup out of memory: Killed process 3536 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2819.874364][ T3546] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2819.897777][ T3546] CPU: 0 PID: 3546 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2819.908143][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2819.917699][ T3555] device macvtap2170 entered promiscuous mode
[ 2819.918200][ T3546] Call Trace:
[ 2819.918211][ T3546]
[ 2819.918222][ T3546] dump_stack_lvl+0xd1/0x138
[ 2819.935129][ T3546] dump_header+0x10b/0x85f
[ 2819.939591][ T3546] oom_kill_process.cold+0x10/0x15
10:16:24 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3603}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2819.944743][ T3546] out_of_memory+0x35c/0x14a0
[ 2819.949467][ T3546] ? oom_killer_disable+0x280/0x280
[ 2819.954705][ T3546] ? find_held_lock+0x2d/0x110
[ 2819.959518][ T3546] mem_cgroup_out_of_memory+0x206/0x270
[ 2819.965105][ T3546] ? mem_cgroup_margin+0x130/0x130
[ 2819.970249][ T3546] ? lock_downgrade+0x6e0/0x6e0
[ 2819.975161][ T3546] try_charge_memcg+0xef8/0x12f0
[ 2819.980143][ T3546] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2819.986166][ T3546] ? rcu_read_unlock+0x9/0x60
[ 2819.990867][ T3546] ? lock_downgrade+0x6e0/0x6e0
[ 2819.995744][ T3546] charge_memcg+0x99/0x3b0
[ 2820.000161][ T3546] __mem_cgroup_charge+0x2b/0x90
[ 2820.005096][ T3546] ? _compound_head+0x5d/0x150
[ 2820.009884][ T3546] __handle_mm_fault+0x17e7/0x3a40
[ 2820.015039][ T3546] ? vm_iomap_memory+0x190/0x190
[ 2820.020035][ T3546] handle_mm_fault+0x1cc/0x780
[ 2820.024836][ T3546] do_user_addr_fault+0x475/0x1210
[ 2820.029987][ T3546] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2820.035571][ T3546] exc_page_fault+0x98/0x170
[ 2820.040177][ T3546] asm_exc_page_fault+0x26/0x30
[ 2820.045059][ T3546] RIP: 0033:0x7f69a662bd79
[ 2820.049464][ T3546] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2820.069163][ T3546] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2820.075256][ T3546] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2820.083239][ T3546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2820.091203][ T3546] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2820.099163][ T3546] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b061b
[ 2820.107125][ T3546] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2820.115112][ T3546]
[ 2820.133052][ T3546] memory: usage 307184kB, limit 307200kB, failcnt 11487
[ 2820.140772][ T3546] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2820.147861][ T3546] Memory cgroup stats for /syz1:
[ 2820.148074][ T3546] anon 135168
[ 2820.148074][ T3546] file 393216
[ 2820.148074][ T3546] kernel 314028032
[ 2820.148074][ T3546] kernel_stack 65536
[ 2820.148074][ T3546] pagetables 81920
[ 2820.148074][ T3546] sec_pagetables 0
[ 2820.148074][ T3546] percpu 5356416
[ 2820.148074][ T3546] sock 0
[ 2820.148074][ T3546] vmalloc 0
[ 2820.148074][ T3546] shmem 385024
[ 2820.148074][ T3546] zswap 0
[ 2820.148074][ T3546] zswapped 0
[ 2820.148074][ T3546] file_mapped 385024
[ 2820.148074][ T3546] file_dirty 0
[ 2820.148074][ T3546] file_writeback 0
[ 2820.148074][ T3546] swapcached 0
[ 2820.148074][ T3546] anon_thp 0
[ 2820.148074][ T3546] file_thp 0
[ 2820.148074][ T3546] shmem_thp 0
[ 2820.148074][ T3546] inactive_anon 180224
[ 2820.148074][ T3546] active_anon 339968
[ 2820.148074][ T3546] inactive_file 0
[ 2820.148074][ T3546] active_file 8192
[ 2820.148074][ T3546] unevictable 0
[ 2820.148074][ T3546] slab_reclaimable 16512
[ 2820.148074][ T3546] slab_unreclaimable 308469784
10:16:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x700, @local}]}, 0x48}}, 0x0)
10:16:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, &(0x7f0000001880)={'batadv_slave_1\x00'})
10:16:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, 0x0)
10:16:24 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x8940, 0x0)
[ 2820.244909][ T3546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3546,uid=0
[ 2820.263835][ T3546] Memory cgroup out of memory: Killed process 3546 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2820.281311][ T3561] batadv_slave_1: mtu less than device minimum
[ 2820.341832][ T3562] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2820.378095][ T3562] CPU: 0 PID: 3562 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2820.388468][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2820.398535][ T3562] Call Trace:
[ 2820.401817][ T3562]
[ 2820.404755][ T3562] dump_stack_lvl+0xd1/0x138
[ 2820.409368][ T3562] dump_header+0x10b/0x85f
[ 2820.413803][ T3562] oom_kill_process.cold+0x10/0x15
[ 2820.418933][ T3562] out_of_memory+0x35c/0x14a0
[ 2820.423636][ T3562] ? find_held_lock+0x2d/0x110
[ 2820.428424][ T3562] ? oom_killer_disable+0x280/0x280
[ 2820.433644][ T3562] ? find_held_lock+0x2d/0x110
[ 2820.438437][ T3562] mem_cgroup_out_of_memory+0x206/0x270
[ 2820.444003][ T3562] ? mem_cgroup_margin+0x130/0x130
[ 2820.449128][ T3562] ? lock_downgrade+0x6e0/0x6e0
[ 2820.454024][ T3562] try_charge_memcg+0xef8/0x12f0
[ 2820.458990][ T3562] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2820.465009][ T3562] ? rcu_read_unlock+0x9/0x60
[ 2820.469709][ T3562] ? lock_downgrade+0x6e0/0x6e0
[ 2820.474608][ T3562] charge_memcg+0x99/0x3b0
[ 2820.479049][ T3562] __mem_cgroup_charge+0x2b/0x90
[ 2820.484013][ T3562] ? _compound_head+0x5d/0x150
[ 2820.488806][ T3562] __handle_mm_fault+0x17e7/0x3a40
[ 2820.493940][ T3562] ? vm_iomap_memory+0x190/0x190
[ 2820.498918][ T3562] handle_mm_fault+0x1cc/0x780
[ 2820.503704][ T3562] do_user_addr_fault+0x475/0x1210
[ 2820.508837][ T3562] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2820.514415][ T3562] exc_page_fault+0x98/0x170
[ 2820.519024][ T3562] asm_exc_page_fault+0x26/0x30
[ 2820.523901][ T3562] RIP: 0033:0x7f8325a2be6a
[ 2820.528328][ T3562] Code: 30 48 8b 34 24 48 85 f6 74 17 8b 44 24 18 0f c8 89 c0 48 89 44 24 18 48 83 fe 01 0f 85 a1 01 00 00 48 8b 44 24 10 8b 74 24 18 <89> 30 e9 d2 fc ff ff 48 8b 44 24 10 8b 10 48 8b 04 24 48 85 c0 0f
[ 2820.547951][ T3562] RSP: 002b:00007fff9cb6b2a0 EFLAGS: 00010246
[ 2820.554033][ T3562] RAX: 0000000020000200 RBX: 0000000000000000 RCX: 0000000000000000
[ 2820.562014][ T3562] RDX: c81f92c6f62d1f66 RSI: 0000000000000014 RDI: 0000555555b4e2e8
[ 2820.569997][ T3562] RBP: 00007fff9cb6b398 R08: 0000000000000000 R09: 0000000000000000
[ 2820.577978][ T3562] R10: 00007f83256002a8 R11: 0000000000000246 R12: 00000000002b08a7
10:16:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xd103}, 0x0)
10:16:24 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={0x0, 0x1c4}}, 0x0)
10:16:24 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000180)="85")
[ 2820.585959][ T3562] R13: 00007fff9cb6b3c0 R14: 00007f8325babf80 R15: 0000000000000032
[ 2820.593964][ T3562]
10:16:24 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0})
pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x2]}, 0x8})
10:16:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x300, 0x0, 0x3118}, 0x0)
10:16:24 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x0, [{0xa, 0x0, 0xffffffff}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x30]}}, &(0x7f0000000200)=""/197, 0x36, 0xc5, 0x1}, 0x20)
10:16:24 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'N'}]}}, &(0x7f0000000500)=""/4096, 0x2a, 0x1000, 0x1}, 0x20)
[ 2820.666861][ T3562] memory: usage 307184kB, limit 307200kB, failcnt 65604
[ 2820.684043][ T3562] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2820.721902][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2820.728742][ T3562] Memory cgroup stats for /syz2:
[ 2820.743875][ T3562] anon 139264
[ 2820.743875][ T3562] file 417792
[ 2820.743875][ T3562] kernel 313999360
[ 2820.743875][ T3562] kernel_stack 65536
[ 2820.743875][ T3562] pagetables 77824
[ 2820.743875][ T3562] sec_pagetables 0
[ 2820.743875][ T3562] percpu 5357600
[ 2820.743875][ T3562] sock 0
[ 2820.743875][ T3562] vmalloc 0
[ 2820.743875][ T3562] shmem 417792
[ 2820.743875][ T3562] zswap 0
[ 2820.743875][ T3562] zswapped 0
[ 2820.743875][ T3562] file_mapped 417792
[ 2820.743875][ T3562] file_dirty 0
[ 2820.743875][ T3562] file_writeback 0
[ 2820.743875][ T3562] swapcached 0
[ 2820.743875][ T3562] anon_thp 0
[ 2820.743875][ T3562] file_thp 0
[ 2820.743875][ T3562] shmem_thp 0
[ 2820.743875][ T3562] inactive_anon 143360
[ 2820.743875][ T3562] active_anon 413696
[ 2820.743875][ T3562] inactive_file 0
[ 2820.743875][ T3562] active_file 0
[ 2820.743875][ T3562] unevictable 0
[ 2820.743875][ T3562] slab_reclaimable 14280
[ 2820.743875][ T3562] slab_unreclaimable 308452120
[ 2820.841516][ T3578] device bridge1780 entered promiscuous mode
[ 2820.945807][ T3585] device macvtap2170 entered promiscuous mode
[ 2820.977662][ T3562] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3562,uid=0
10:16:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3700}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2821.004839][ T3578] device macvtap2171 entered promiscuous mode
[ 2821.015377][ T3562] Memory cgroup out of memory: Killed process 3562 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2821.037911][ T3571] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2821.067005][ T3571] CPU: 1 PID: 3571 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2821.077378][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2821.087452][ T3571] Call Trace:
[ 2821.090739][ T3571]
[ 2821.093674][ T3571] dump_stack_lvl+0xd1/0x138
[ 2821.098284][ T3571] dump_header+0x10b/0x85f
[ 2821.102716][ T3571] oom_kill_process.cold+0x10/0x15
[ 2821.108191][ T3571] out_of_memory+0x35c/0x14a0
[ 2821.112895][ T3571] ? oom_killer_disable+0x280/0x280
[ 2821.118112][ T3571] ? find_held_lock+0x2d/0x110
[ 2821.122903][ T3571] mem_cgroup_out_of_memory+0x206/0x270
[ 2821.128467][ T3571] ? mem_cgroup_margin+0x130/0x130
[ 2821.133589][ T3571] ? lock_downgrade+0x6e0/0x6e0
[ 2821.138481][ T3571] try_charge_memcg+0xef8/0x12f0
[ 2821.143445][ T3571] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2821.149451][ T3571] ? rcu_read_unlock+0x9/0x60
[ 2821.154137][ T3571] ? lock_downgrade+0x6e0/0x6e0
[ 2821.159027][ T3571] charge_memcg+0x99/0x3b0
[ 2821.163466][ T3571] __mem_cgroup_charge+0x2b/0x90
[ 2821.168423][ T3571] ? _compound_head+0x5d/0x150
[ 2821.173211][ T3571] __handle_mm_fault+0x17e7/0x3a40
[ 2821.178342][ T3571] ? vm_iomap_memory+0x190/0x190
[ 2821.183315][ T3571] handle_mm_fault+0x1cc/0x780
[ 2821.188095][ T3571] do_user_addr_fault+0x475/0x1210
[ 2821.193227][ T3571] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2821.198797][ T3571] exc_page_fault+0x98/0x170
[ 2821.203399][ T3571] asm_exc_page_fault+0x26/0x30
[ 2821.208267][ T3571] RIP: 0033:0x7f69a662bd79
[ 2821.212689][ T3571] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2821.232305][ T3571] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2821.238383][ T3571] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2821.246360][ T3571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2821.254335][ T3571] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2821.262311][ T3571] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b0a90
[ 2821.270286][ T3571] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2821.278281][ T3571]
[ 2821.296425][ T3571] memory: usage 307200kB, limit 307200kB, failcnt 11575
[ 2821.307519][ T3571] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2821.314464][ T3571] Memory cgroup stats for /syz1:
[ 2821.314664][ T3571] anon 135168
[ 2821.314664][ T3571] file 393216
[ 2821.314664][ T3571] kernel 314028032
[ 2821.314664][ T3571] kernel_stack 65536
[ 2821.314664][ T3571] pagetables 81920
[ 2821.314664][ T3571] sec_pagetables 0
[ 2821.314664][ T3571] percpu 5356416
[ 2821.314664][ T3571] sock 0
[ 2821.314664][ T3571] vmalloc 0
[ 2821.314664][ T3571] shmem 385024
[ 2821.314664][ T3571] zswap 0
[ 2821.314664][ T3571] zswapped 0
[ 2821.314664][ T3571] file_mapped 385024
[ 2821.314664][ T3571] file_dirty 0
[ 2821.314664][ T3571] file_writeback 0
[ 2821.314664][ T3571] swapcached 0
[ 2821.314664][ T3571] anon_thp 0
[ 2821.314664][ T3571] file_thp 0
[ 2821.314664][ T3571] shmem_thp 0
[ 2821.314664][ T3571] inactive_anon 180224
[ 2821.314664][ T3571] active_anon 339968
[ 2821.314664][ T3571] inactive_file 0
[ 2821.314664][ T3571] active_file 8192
[ 2821.314664][ T3571] unevictable 0
[ 2821.314664][ T3571] slab_reclaimable 16512
[ 2821.314664][ T3571] slab_unreclaimable 308469784
[ 2821.422797][ T3571] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3571,uid=0
[ 2821.438474][ T3571] Memory cgroup out of memory: Killed process 3571 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2821.455890][ T3589] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
10:16:25 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7900, @local}]}, 0x48}}, 0x0)
10:16:25 executing program 0:
socket(0x2, 0x1, 0x21)
10:16:25 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x40000}, 0x0)
10:16:25 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x2, 0x6882, 0x80000000}, 0x48)
10:16:25 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xd200}, 0x0)
[ 2821.466764][ T3589] CPU: 0 PID: 3589 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2821.477131][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2821.487210][ T3589] Call Trace:
[ 2821.490506][ T3589]
[ 2821.493467][ T3589] dump_stack_lvl+0xd1/0x138
[ 2821.498106][ T3589] dump_header+0x10b/0x85f
[ 2821.502564][ T3589] oom_kill_process.cold+0x10/0x15
[ 2821.507723][ T3589] out_of_memory+0x35c/0x14a0
[ 2821.512457][ T3589] ? oom_killer_disable+0x280/0x280
[ 2821.516210][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2821.517687][ T3589] ? find_held_lock+0x2d/0x110
[ 2821.517741][ T3589] mem_cgroup_out_of_memory+0x206/0x270
[ 2821.517774][ T3589] ? mem_cgroup_margin+0x130/0x130
[ 2821.517803][ T3589] ? lock_downgrade+0x6e0/0x6e0
[ 2821.517866][ T3589] try_charge_memcg+0xef8/0x12f0
[ 2821.517914][ T3589] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2821.517953][ T3589] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2821.517987][ T3589] ? lock_downgrade+0x6e0/0x6e0
[ 2821.518032][ T3589] ? lock_downgrade+0x6e0/0x6e0
[ 2821.518092][ T3589] obj_cgroup_charge+0x2af/0x5e0
[ 2821.518136][ T3589] kmem_cache_alloc_lru+0x141/0x740
[ 2821.518170][ T3589] ? sock_alloc_inode+0x27/0x1d0
[ 2821.518221][ T3589] sock_alloc_inode+0x27/0x1d0
[ 2821.518259][ T3589] ? sock_free_inode+0x30/0x30
[ 2821.518296][ T3589] alloc_inode+0x61/0x230
[ 2821.518327][ T3589] new_inode_pseudo+0x17/0x80
[ 2821.518357][ T3589] sock_alloc+0x40/0x260
[ 2821.518395][ T3589] __sock_create+0xbd/0x790
[ 2821.518441][ T3589] __sys_socket+0x133/0x250
[ 2821.518490][ T3589] ? __sys_socket_file+0x1f0/0x1f0
[ 2821.518543][ T3589] __x64_sys_socket+0x73/0xb0
[ 2821.518585][ T3589] do_syscall_64+0x39/0xb0
[ 2821.635292][ T3589] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2821.641219][ T3589] RIP: 0033:0x7f8325a8c0d9
[ 2821.645645][ T3589] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2821.665273][ T3589] RSP: 002b:00007f83267a9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 2821.673705][ T3589] RAX: ffffffffffffffda RBX: 00007f8325babf80 RCX: 00007f8325a8c0d9
[ 2821.681699][ T3589] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[ 2821.689693][ T3589] RBP: 00007f8325ae7ae9 R08: 0000000000000000 R09: 0000000000000000
[ 2821.697680][ T3589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2821.705660][ T3589] R13: 00007fff9cb6b25f R14: 00007f83267a9300 R15: 0000000000022000
[ 2821.713664][ T3589]
10:16:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$inet6(r0, &(0x7f0000005c80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=[@dontfrag={{0x10}}, @hoplimit_2292={{0x10}}], 0x20}}], 0x1, 0x0)
10:16:25 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
10:16:26 executing program 4:
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @mcast2, @mcast2, 0x0, 0x200})
10:16:26 executing program 3:
r0 = socket(0x2, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={0x0}}, 0x0)
[ 2821.839072][ T3589] memory: usage 307200kB, limit 307200kB, failcnt 65735
[ 2821.874104][ T3589] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2821.927507][ T3589] Memory cgroup stats for /syz2:
[ 2821.927755][ T3589] anon 110592
[ 2821.927755][ T3589] file 417792
[ 2821.927755][ T3589] kernel 314028032
[ 2821.927755][ T3589] kernel_stack 98304
[ 2821.927755][ T3589] pagetables 69632
[ 2821.927755][ T3589] sec_pagetables 0
[ 2821.927755][ T3589] percpu 5357600
[ 2821.927755][ T3589] sock 0
[ 2821.927755][ T3589] vmalloc 0
[ 2821.927755][ T3589] shmem 417792
[ 2821.927755][ T3589] zswap 0
[ 2821.927755][ T3589] zswapped 0
[ 2821.927755][ T3589] file_mapped 417792
10:16:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000840)={0x20, r1, 0x1, 0x0, 0x0, {0xb}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0)
[ 2821.927755][ T3589] file_dirty 0
[ 2821.927755][ T3589] file_writeback 0
[ 2821.927755][ T3589] swapcached 0
[ 2821.927755][ T3589] anon_thp 0
[ 2821.927755][ T3589] file_thp 0
[ 2821.927755][ T3589] shmem_thp 0
[ 2821.927755][ T3589] inactive_anon 114688
[ 2821.927755][ T3589] active_anon 413696
[ 2821.927755][ T3589] inactive_file 0
[ 2821.927755][ T3589] active_file 0
[ 2821.927755][ T3589] unevictable 0
[ 2821.927755][ T3589] slab_reclaimable 12352
[ 2821.927755][ T3589] slab_unreclaimable 308460048
[ 2822.052952][ T3595] device bridge1781 entered promiscuous mode
10:16:26 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000003080000e7ffffff000000000000000000000000002000"}, 0xd8)
sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
[ 2822.130399][ T3589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3588,uid=0
[ 2822.153693][ T3589] Memory cgroup out of memory: Killed process 3588 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000
10:16:26 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3701}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2822.193310][ T3609] device macvtap2171 entered promiscuous mode
[ 2822.200254][ T3600] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2822.221266][ T3600] CPU: 0 PID: 3600 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2822.231633][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2822.241708][ T3600] Call Trace:
[ 2822.245010][ T3600]
[ 2822.247964][ T3600] dump_stack_lvl+0xd1/0x138
[ 2822.252596][ T3600] dump_header+0x10b/0x85f
[ 2822.257055][ T3600] oom_kill_process.cold+0x10/0x15
[ 2822.262206][ T3600] out_of_memory+0x35c/0x14a0
[ 2822.266931][ T3600] ? oom_killer_disable+0x280/0x280
[ 2822.272172][ T3600] ? find_held_lock+0x2d/0x110
[ 2822.276986][ T3600] mem_cgroup_out_of_memory+0x206/0x270
[ 2822.282568][ T3600] ? mem_cgroup_margin+0x130/0x130
[ 2822.287707][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 2822.292604][ T3600] try_charge_memcg+0xef8/0x12f0
[ 2822.297570][ T3600] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2822.303572][ T3600] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2822.309310][ T3600] ? lock_downgrade+0x6e0/0x6e0
[ 2822.314209][ T3600] obj_cgroup_charge+0x2af/0x5e0
[ 2822.319176][ T3600] ? __anon_vma_prepare+0x64/0x580
[ 2822.324301][ T3600] kmem_cache_alloc+0xa3/0x3d0
[ 2822.329092][ T3600] __anon_vma_prepare+0x64/0x580
[ 2822.334044][ T3600] ? __pmd_alloc+0x30c/0x5d0
[ 2822.338652][ T3600] __handle_mm_fault+0x35bc/0x3a40
[ 2822.343785][ T3600] ? vm_iomap_memory+0x190/0x190
[ 2822.348765][ T3600] handle_mm_fault+0x1cc/0x780
[ 2822.353551][ T3600] do_user_addr_fault+0x475/0x1210
[ 2822.358684][ T3600] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2822.364258][ T3600] exc_page_fault+0x98/0x170
[ 2822.368864][ T3600] asm_exc_page_fault+0x26/0x30
[ 2822.373736][ T3600] RIP: 0033:0x7f69a662bd79
[ 2822.378162][ T3600] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2822.397782][ T3600] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2822.403859][ T3600] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2822.411837][ T3600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2822.419816][ T3600] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2822.427793][ T3600] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b0e9a
[ 2822.435773][ T3600] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2822.443772][ T3600]
[ 2822.477690][ T3600] memory: usage 307184kB, limit 307200kB, failcnt 11664
[ 2822.486062][ T3600] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2822.507034][ T3600] Memory cgroup stats for /syz1:
[ 2822.507283][ T3600] anon 135168
[ 2822.507283][ T3600] file 393216
[ 2822.507283][ T3600] kernel 314028032
[ 2822.507283][ T3600] kernel_stack 65536
[ 2822.507283][ T3600] pagetables 81920
[ 2822.507283][ T3600] sec_pagetables 0
[ 2822.507283][ T3600] percpu 5356416
[ 2822.507283][ T3600] sock 0
[ 2822.507283][ T3600] vmalloc 0
[ 2822.507283][ T3600] shmem 385024
[ 2822.507283][ T3600] zswap 0
[ 2822.507283][ T3600] zswapped 0
[ 2822.507283][ T3600] file_mapped 385024
[ 2822.507283][ T3600] file_dirty 0
[ 2822.507283][ T3600] file_writeback 0
[ 2822.507283][ T3600] swapcached 0
[ 2822.507283][ T3600] anon_thp 0
[ 2822.507283][ T3600] file_thp 0
[ 2822.507283][ T3600] shmem_thp 0
[ 2822.507283][ T3600] inactive_anon 180224
[ 2822.507283][ T3600] active_anon 339968
[ 2822.507283][ T3600] inactive_file 0
[ 2822.507283][ T3600] active_file 8192
[ 2822.507283][ T3600] unevictable 0
[ 2822.507283][ T3600] slab_reclaimable 16512
[ 2822.507283][ T3600] slab_unreclaimable 308469080
[ 2822.538564][ T3613] device macvtap2172 entered promiscuous mode
[ 2822.610453][ T3600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3600,uid=0
[ 2822.631420][ T3600] Memory cgroup out of memory: Killed process 3600 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2822.706395][ T3618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2822.737010][ T3617] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2822.773140][ T3617] CPU: 1 PID: 3617 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2822.783520][ T3617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2822.793595][ T3617] Call Trace:
[ 2822.796888][ T3617]
[ 2822.799835][ T3617] dump_stack_lvl+0xd1/0x138
[ 2822.804465][ T3617] dump_header+0x10b/0x85f
[ 2822.808915][ T3617] oom_kill_process.cold+0x10/0x15
[ 2822.814075][ T3617] out_of_memory+0x35c/0x14a0
[ 2822.818790][ T3617] ? find_held_lock+0x2d/0x110
[ 2822.823590][ T3617] ? oom_killer_disable+0x280/0x280
[ 2822.828827][ T3617] ? find_held_lock+0x2d/0x110
[ 2822.833636][ T3617] mem_cgroup_out_of_memory+0x206/0x270
[ 2822.839223][ T3617] ? mem_cgroup_margin+0x130/0x130
[ 2822.844369][ T3617] ? lock_downgrade+0x6e0/0x6e0
[ 2822.849295][ T3617] try_charge_memcg+0xef8/0x12f0
[ 2822.854280][ T3617] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2822.860302][ T3617] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2822.866056][ T3617] ? lock_downgrade+0x6e0/0x6e0
[ 2822.870981][ T3617] obj_cgroup_charge+0x2af/0x5e0
[ 2822.875959][ T3617] ? vm_area_dup+0x85/0x380
[ 2822.880490][ T3617] kmem_cache_alloc+0xa3/0x3d0
[ 2822.885299][ T3617] vm_area_dup+0x85/0x380
[ 2822.889655][ T3617] ? mt_slot+0xa1/0x170
[ 2822.893837][ T3617] ? mas_next_nentry+0x610/0xab0
[ 2822.898803][ T3617] ? mas_next_node+0x547/0xa00
[ 2822.903620][ T3617] ? mas_find+0x211/0xd10
[ 2822.907997][ T3617] ? vm_area_alloc+0x100/0x100
[ 2822.912793][ T3617] ? validate_mm_mt+0x149/0x1b0
[ 2822.917688][ T3617] ? remove_vma+0x130/0x130
10:16:27 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7a00, @local}]}, 0x48}}, 0x0)
10:16:27 executing program 4:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0})
select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f0000000100)={0x0, r0/1000+60000})
10:16:27 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0)
shutdown(r0, 0x0)
10:16:27 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000300)=0x8)
10:16:27 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xd503}, 0x0)
10:16:27 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000000300)="74bdf21a6ada5a9bcad98234d3b3b7520d9838ac94e403a6639d97538ac807fa5e966b0cec66912f2ec89f49016ca462d562a5e04199f8f5a1e603d09a8047474344d48344352ba034c96d43c9858757b062b3bba2a7ac890c9476a0fdebaf05508034f8d7d7b324d90d10ad1d5af311944d80b4a453387163e1a33e22cd9850f9f108303aa4b50db407eb82cfdac8e00a", 0x91}], 0x1}, 0x0)
[ 2822.922236][ T3617] ? can_vma_merge_before+0x390/0x390
[ 2822.927658][ T3617] __split_vma+0xae/0x5e0
[ 2822.932027][ T3617] ? vma_merge+0x2cf/0x870
[ 2822.936490][ T3617] split_vma+0xa3/0xe0
[ 2822.940599][ T3617] mprotect_fixup+0x6cb/0x960
[ 2822.945323][ T3617] ? mas_find+0x211/0xd10
[ 2822.949690][ T3617] ? change_protection+0x4290/0x4290
[ 2822.955035][ T3617] do_mprotect_pkey+0x6fd/0xa70
[ 2822.959938][ T3617] ? mprotect_fixup+0x960/0x960
[ 2822.964829][ T3617] ? up_write+0x1b0/0x520
[ 2822.969210][ T3617] ? xfd_validate_state+0x5d/0x180
[ 2822.974407][ T3617] __x64_sys_mprotect+0x78/0xb0
[ 2822.979304][ T3617] do_syscall_64+0x39/0xb0
[ 2822.983771][ T3617] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2822.989704][ T3617] RIP: 0033:0x7f8325a8c1e7
[ 2822.994147][ T3617] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2823.013781][ T3617] RSP: 002b:00007fff9cb6b1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
10:16:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000c000180080001000634"], 0x20}}, 0x0)
[ 2823.022226][ T3617] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f8325a8c1e7
[ 2823.030222][ T3617] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f8326769000
[ 2823.038219][ T3617] RBP: 00007fff9cb6b2d0 R08: 00000000ffffffff R09: 00007f8326788700
[ 2823.046218][ T3617] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff9cb6b3f0
[ 2823.054216][ T3617] R13: 00007f8326788700 R14: 0000000000000000 R15: 0000000000022000
[ 2823.062234][ T3617]
10:16:27 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3503}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2823.103297][ T3617] memory: usage 307200kB, limit 307200kB, failcnt 65855
[ 2823.112979][ T3617] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2823.122813][ T3617] Memory cgroup stats for /syz2:
[ 2823.122987][ T3617] anon 143360
[ 2823.122987][ T3617] file 417792
[ 2823.122987][ T3617] kernel 314007552
[ 2823.122987][ T3617] kernel_stack 65536
[ 2823.122987][ T3617] pagetables 77824
[ 2823.122987][ T3617] sec_pagetables 0
[ 2823.122987][ T3617] percpu 5357600
[ 2823.122987][ T3617] sock 0
[ 2823.122987][ T3617] vmalloc 8192
[ 2823.122987][ T3617] shmem 417792
[ 2823.122987][ T3617] zswap 0
[ 2823.122987][ T3617] zswapped 0
[ 2823.122987][ T3617] file_mapped 417792
[ 2823.122987][ T3617] file_dirty 0
[ 2823.122987][ T3617] file_writeback 0
[ 2823.122987][ T3617] swapcached 0
[ 2823.122987][ T3617] anon_thp 0
[ 2823.122987][ T3617] file_thp 0
[ 2823.122987][ T3617] shmem_thp 0
[ 2823.122987][ T3617] inactive_anon 147456
[ 2823.122987][ T3617] active_anon 413696
[ 2823.122987][ T3617] inactive_file 0
10:16:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3502}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2823.122987][ T3617] active_file 0
[ 2823.122987][ T3617] unevictable 0
[ 2823.122987][ T3617] slab_reclaimable 14280
[ 2823.122987][ T3617] slab_unreclaimable 308453720
10:16:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3501}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2823.295941][ T3617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3617,uid=0
[ 2823.312161][ T3617] Memory cgroup out of memory: Killed process 3617 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2823.358209][ T3623] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2823.368779][ T3623] CPU: 0 PID: 3623 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2823.379141][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2823.389209][ T3623] Call Trace:
[ 2823.392479][ T3623]
[ 2823.395411][ T3623] dump_stack_lvl+0xd1/0x138
[ 2823.400038][ T3623] dump_header+0x10b/0x85f
[ 2823.404467][ T3623] oom_kill_process.cold+0x10/0x15
[ 2823.409581][ T3623] out_of_memory+0x35c/0x14a0
[ 2823.414265][ T3623] ? find_held_lock+0x2d/0x110
[ 2823.419031][ T3623] ? oom_killer_disable+0x280/0x280
[ 2823.424226][ T3623] ? find_held_lock+0x2d/0x110
[ 2823.429009][ T3623] mem_cgroup_out_of_memory+0x206/0x270
[ 2823.434593][ T3623] ? mem_cgroup_margin+0x130/0x130
[ 2823.439733][ T3623] ? lock_downgrade+0x6e0/0x6e0
[ 2823.444647][ T3623] try_charge_memcg+0xef8/0x12f0
[ 2823.449629][ T3623] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2823.455646][ T3623] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2823.461376][ T3623] ? lock_downgrade+0x6e0/0x6e0
[ 2823.466265][ T3623] obj_cgroup_charge+0x2af/0x5e0
[ 2823.471203][ T3623] ? __anon_vma_prepare+0x64/0x580
[ 2823.476307][ T3623] kmem_cache_alloc+0xa3/0x3d0
[ 2823.481091][ T3623] __anon_vma_prepare+0x64/0x580
[ 2823.486055][ T3623] ? __pmd_alloc+0x30c/0x5d0
[ 2823.490676][ T3623] __handle_mm_fault+0x35bc/0x3a40
[ 2823.495828][ T3623] ? vm_iomap_memory+0x190/0x190
[ 2823.500829][ T3623] handle_mm_fault+0x1cc/0x780
[ 2823.505636][ T3623] do_user_addr_fault+0x475/0x1210
[ 2823.510771][ T3623] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2823.516323][ T3623] exc_page_fault+0x98/0x170
[ 2823.520911][ T3623] asm_exc_page_fault+0x26/0x30
[ 2823.525763][ T3623] RIP: 0033:0x7f69a662bd79
[ 2823.530200][ T3623] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2823.549835][ T3623] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2823.555931][ T3623] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2823.563912][ T3623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2823.571878][ T3623] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2823.579859][ T3623] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b148a
[ 2823.587857][ T3623] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2823.595883][ T3623]
[ 2823.611217][ T3623] memory: usage 307192kB, limit 307200kB, failcnt 11775
[ 2823.625889][ T3638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2823.627277][ T3623] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2823.642904][ T3623] Memory cgroup stats for /syz1:
[ 2823.643134][ T3623] anon 135168
[ 2823.643134][ T3623] file 393216
[ 2823.643134][ T3623] kernel 314028032
[ 2823.643134][ T3623] kernel_stack 65536
[ 2823.643134][ T3623] pagetables 81920
[ 2823.643134][ T3623] sec_pagetables 0
[ 2823.643134][ T3623] percpu 5356416
[ 2823.643134][ T3623] sock 0
[ 2823.643134][ T3623] vmalloc 0
[ 2823.643134][ T3623] shmem 385024
[ 2823.643134][ T3623] zswap 0
[ 2823.643134][ T3623] zswapped 0
[ 2823.643134][ T3623] file_mapped 385024
[ 2823.643134][ T3623] file_dirty 0
[ 2823.643134][ T3623] file_writeback 0
[ 2823.643134][ T3623] swapcached 0
[ 2823.643134][ T3623] anon_thp 0
[ 2823.643134][ T3623] file_thp 0
[ 2823.643134][ T3623] shmem_thp 0
[ 2823.643134][ T3623] inactive_anon 180224
[ 2823.643134][ T3623] active_anon 339968
[ 2823.643134][ T3623] inactive_file 4096
[ 2823.643134][ T3623] active_file 4096
[ 2823.643134][ T3623] unevictable 0
[ 2823.643134][ T3623] slab_reclaimable 16512
[ 2823.643134][ T3623] slab_unreclaimable 308471248
[ 2823.693733][ T3638] device bridge1782 entered promiscuous mode
[ 2823.744651][ T3623] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3623,uid=0
10:16:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3702}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:27 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7b00, @local}]}, 0x48}}, 0x0)
[ 2823.764244][ T3623] Memory cgroup out of memory: Killed process 3623 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2823.859475][ T3642] device macvtap2172 entered promiscuous mode
[ 2823.919502][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2823.967023][ T3663] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2823.990460][ T3643] device bridge1323 entered promiscuous mode
[ 2823.996459][ T3663] CPU: 1 PID: 3663 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2823.996494][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2823.996511][ T3663] Call Trace:
[ 2823.996520][ T3663]
[ 2823.996531][ T3663] dump_stack_lvl+0xd1/0x138
[ 2824.027683][ T3663] dump_header+0x10b/0x85f
[ 2824.032123][ T3663] oom_kill_process.cold+0x10/0x15
[ 2824.037254][ T3663] out_of_memory+0x35c/0x14a0
[ 2824.041959][ T3663] ? find_held_lock+0x2d/0x110
[ 2824.046752][ T3663] ? oom_killer_disable+0x280/0x280
[ 2824.051972][ T3663] ? find_held_lock+0x2d/0x110
[ 2824.056766][ T3663] mem_cgroup_out_of_memory+0x206/0x270
[ 2824.062331][ T3663] ? mem_cgroup_margin+0x130/0x130
[ 2824.067470][ T3663] ? lock_downgrade+0x6e0/0x6e0
[ 2824.072367][ T3663] try_charge_memcg+0xef8/0x12f0
[ 2824.077334][ T3663] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2824.083340][ T3663] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2824.089078][ T3663] ? lock_downgrade+0x6e0/0x6e0
[ 2824.093977][ T3663] obj_cgroup_charge+0x2af/0x5e0
[ 2824.098942][ T3663] ? vm_area_dup+0x85/0x380
[ 2824.103457][ T3663] kmem_cache_alloc+0xa3/0x3d0
[ 2824.108246][ T3663] vm_area_dup+0x85/0x380
[ 2824.112597][ T3663] ? mt_slot+0xa1/0x170
[ 2824.116768][ T3663] ? mas_next_nentry+0x610/0xab0
[ 2824.121719][ T3663] ? mas_next_node+0x547/0xa00
[ 2824.126515][ T3663] ? mas_find+0x211/0xd10
[ 2824.130874][ T3663] ? vm_area_alloc+0x100/0x100
[ 2824.135655][ T3663] ? validate_mm_mt+0x149/0x1b0
[ 2824.140530][ T3663] ? remove_vma+0x130/0x130
[ 2824.145064][ T3663] ? can_vma_merge_before+0x390/0x390
[ 2824.150468][ T3663] __split_vma+0xae/0x5e0
[ 2824.154817][ T3663] ? vma_merge+0x2cf/0x870
[ 2824.159260][ T3663] split_vma+0xa3/0xe0
[ 2824.163357][ T3663] mprotect_fixup+0x6cb/0x960
[ 2824.168065][ T3663] ? mas_find+0x211/0xd10
[ 2824.172410][ T3663] ? change_protection+0x4290/0x4290
[ 2824.177729][ T3663] do_mprotect_pkey+0x6fd/0xa70
[ 2824.182612][ T3663] ? mprotect_fixup+0x960/0x960
[ 2824.187488][ T3663] ? up_write+0x1b0/0x520
[ 2824.191873][ T3663] __x64_sys_mprotect+0x78/0xb0
[ 2824.196750][ T3663] do_syscall_64+0x39/0xb0
[ 2824.201195][ T3663] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2824.207458][ T3663] RIP: 0033:0x7f8325a8c1e7
[ 2824.211884][ T3663] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2824.231502][ T3663] RSP: 002b:00007fff9cb6b1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2824.239926][ T3663] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f8325a8c1e7
[ 2824.247908][ T3663] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f8326769000
[ 2824.255887][ T3663] RBP: 00007fff9cb6b2d0 R08: 00000000ffffffff R09: 00007f8326788700
[ 2824.263866][ T3663] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff9cb6b3f0
[ 2824.271844][ T3663] R13: 00007f8326788700 R14: 0000000000000000 R15: 0000000000022000
[ 2824.279842][ T3663]
[ 2824.307888][ T3663] memory: usage 307192kB, limit 307200kB, failcnt 65980
[ 2824.318359][ T3663] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2824.336738][ T3663] Memory cgroup stats for /syz2:
[ 2824.336979][ T3663] anon 143360
[ 2824.336979][ T3663] file 417792
[ 2824.336979][ T3663] kernel 313999360
[ 2824.336979][ T3663] kernel_stack 65536
[ 2824.336979][ T3663] pagetables 77824
[ 2824.336979][ T3663] sec_pagetables 0
[ 2824.336979][ T3663] percpu 5357600
[ 2824.336979][ T3663] sock 0
[ 2824.336979][ T3663] vmalloc 0
[ 2824.336979][ T3663] shmem 417792
[ 2824.336979][ T3663] zswap 0
[ 2824.336979][ T3663] zswapped 0
[ 2824.336979][ T3663] file_mapped 417792
[ 2824.336979][ T3663] file_dirty 0
[ 2824.336979][ T3663] file_writeback 0
[ 2824.336979][ T3663] swapcached 0
[ 2824.336979][ T3663] anon_thp 0
[ 2824.336979][ T3663] file_thp 0
[ 2824.336979][ T3663] shmem_thp 0
[ 2824.336979][ T3663] inactive_anon 118784
[ 2824.336979][ T3663] active_anon 413696
[ 2824.336979][ T3663] inactive_file 0
[ 2824.336979][ T3663] active_file 0
[ 2824.336979][ T3663] unevictable 0
[ 2824.336979][ T3663] slab_reclaimable 14280
[ 2824.336979][ T3663] slab_unreclaimable 308452424
[ 2824.353482][ T3646] device macvtap2173 entered promiscuous mode
[ 2824.435008][ T3663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3663,uid=0
[ 2824.454200][ T3663] Memory cgroup out of memory: Killed process 3663 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2824.472248][ T3665] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2824.482940][ T3665] CPU: 0 PID: 3665 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2824.493340][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2824.503422][ T3665] Call Trace:
[ 2824.506722][ T3665]
[ 2824.509676][ T3665] dump_stack_lvl+0xd1/0x138
[ 2824.514314][ T3665] dump_header+0x10b/0x85f
[ 2824.518786][ T3665] oom_kill_process.cold+0x10/0x15
[ 2824.523926][ T3665] out_of_memory+0x35c/0x14a0
[ 2824.528620][ T3665] ? oom_killer_disable+0x280/0x280
[ 2824.533844][ T3665] ? find_held_lock+0x2d/0x110
[ 2824.538639][ T3665] mem_cgroup_out_of_memory+0x206/0x270
[ 2824.544206][ T3665] ? mem_cgroup_margin+0x130/0x130
[ 2824.549331][ T3665] ? lock_downgrade+0x6e0/0x6e0
[ 2824.554316][ T3665] try_charge_memcg+0xef8/0x12f0
[ 2824.559290][ T3665] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2824.565295][ T3665] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2824.571034][ T3665] ? lock_downgrade+0x6e0/0x6e0
[ 2824.575937][ T3665] obj_cgroup_charge+0x2af/0x5e0
[ 2824.580904][ T3665] ? __anon_vma_prepare+0x64/0x580
[ 2824.586031][ T3665] kmem_cache_alloc+0xa3/0x3d0
[ 2824.590826][ T3665] __anon_vma_prepare+0x64/0x580
[ 2824.595784][ T3665] ? __pmd_alloc+0x30c/0x5d0
[ 2824.600396][ T3665] __handle_mm_fault+0x35bc/0x3a40
[ 2824.605534][ T3665] ? vm_iomap_memory+0x190/0x190
[ 2824.610517][ T3665] handle_mm_fault+0x1cc/0x780
[ 2824.615304][ T3665] do_user_addr_fault+0x475/0x1210
[ 2824.620444][ T3665] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2824.626038][ T3665] exc_page_fault+0x98/0x170
[ 2824.630653][ T3665] asm_exc_page_fault+0x26/0x30
[ 2824.635537][ T3665] RIP: 0033:0x7f69a662bd79
[ 2824.639969][ T3665] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2824.659588][ T3665] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2824.665666][ T3665] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2824.673647][ T3665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2824.681629][ T3665] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2824.689610][ T3665] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b16c9
[ 2824.697591][ T3665] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2824.705595][ T3665]
10:16:28 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xd901}, 0x0)
[ 2824.740465][ T3665] memory: usage 307192kB, limit 307200kB, failcnt 11817
[ 2824.760371][ T3647] device macvtap1312 entered promiscuous mode
[ 2824.773637][ T3665] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2824.794069][ T3665] Memory cgroup stats for /syz1:
[ 2824.794324][ T3665] anon 135168
[ 2824.794324][ T3665] file 393216
[ 2824.794324][ T3665] kernel 314028032
[ 2824.794324][ T3665] kernel_stack 65536
[ 2824.794324][ T3665] pagetables 81920
[ 2824.794324][ T3665] sec_pagetables 0
[ 2824.794324][ T3665] percpu 5356416
[ 2824.794324][ T3665] sock 0
[ 2824.794324][ T3665] vmalloc 0
[ 2824.794324][ T3665] shmem 385024
[ 2824.794324][ T3665] zswap 0
[ 2824.794324][ T3665] zswapped 0
[ 2824.794324][ T3665] file_mapped 385024
[ 2824.794324][ T3665] file_dirty 0
[ 2824.794324][ T3665] file_writeback 0
[ 2824.794324][ T3665] swapcached 0
[ 2824.794324][ T3665] anon_thp 0
[ 2824.794324][ T3665] file_thp 0
[ 2824.794324][ T3665] shmem_thp 0
[ 2824.794324][ T3665] inactive_anon 180224
[ 2824.794324][ T3665] active_anon 339968
[ 2824.794324][ T3665] inactive_file 4096
[ 2824.794324][ T3665] active_file 4096
[ 2824.794324][ T3665] unevictable 0
[ 2824.794324][ T3665] slab_reclaimable 16512
[ 2824.794324][ T3665] slab_unreclaimable 308469080
10:16:29 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7c00, @local}]}, 0x48}}, 0x0)
[ 2824.895781][ T3665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3665,uid=0
[ 2824.905865][ T3648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2824.911912][ T3665] Memory cgroup out of memory: Killed process 3665 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2824.964659][ T3648] device bridge531 entered promiscuous mode
[ 2824.979604][ T3650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2825.009294][ T3650] device bridge443 entered promiscuous mode
[ 2825.022967][ T3651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2825.073296][ T3651] device macvtap1313 entered promiscuous mode
[ 2825.134194][ T3675] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2825.144719][ T3675] CPU: 0 PID: 3675 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2825.155092][ T3675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2825.165168][ T3675] Call Trace:
[ 2825.168461][ T3675]
[ 2825.171415][ T3675] dump_stack_lvl+0xd1/0x138
[ 2825.176026][ T3675] dump_header+0x10b/0x85f
[ 2825.180449][ T3675] oom_kill_process.cold+0x10/0x15
[ 2825.185559][ T3675] out_of_memory+0x35c/0x14a0
[ 2825.190248][ T3675] ? find_held_lock+0x2d/0x110
[ 2825.195027][ T3675] ? oom_killer_disable+0x280/0x280
[ 2825.200259][ T3675] ? find_held_lock+0x2d/0x110
[ 2825.205506][ T3675] mem_cgroup_out_of_memory+0x206/0x270
[ 2825.211070][ T3675] ? mem_cgroup_margin+0x130/0x130
[ 2825.216193][ T3675] ? lock_downgrade+0x6e0/0x6e0
[ 2825.221095][ T3675] try_charge_memcg+0xef8/0x12f0
[ 2825.226064][ T3675] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2825.232066][ T3675] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2825.237802][ T3675] ? lock_downgrade+0x6e0/0x6e0
[ 2825.242702][ T3675] obj_cgroup_charge+0x2af/0x5e0
[ 2825.247673][ T3675] ? __anon_vma_prepare+0x64/0x580
[ 2825.252799][ T3675] kmem_cache_alloc+0xa3/0x3d0
[ 2825.257599][ T3675] __anon_vma_prepare+0x64/0x580
[ 2825.262550][ T3675] ? __pmd_alloc+0x30c/0x5d0
[ 2825.267158][ T3675] __handle_mm_fault+0x35bc/0x3a40
[ 2825.272299][ T3675] ? vm_iomap_memory+0x190/0x190
[ 2825.277275][ T3675] handle_mm_fault+0x1cc/0x780
[ 2825.282059][ T3675] do_user_addr_fault+0x475/0x1210
[ 2825.287193][ T3675] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2825.292773][ T3675] exc_page_fault+0x98/0x170
[ 2825.297383][ T3675] asm_exc_page_fault+0x26/0x30
[ 2825.302257][ T3675] RIP: 0033:0x7f69a662bd79
[ 2825.306682][ T3675] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2825.326302][ T3675] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2825.332382][ T3675] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2825.340362][ T3675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2825.348340][ T3675] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2825.356324][ T3675] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b1b59
[ 2825.364304][ T3675] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2825.372304][ T3675]
[ 2825.379543][ T3675] memory: usage 307200kB, limit 307200kB, failcnt 11905
[ 2825.386516][ T3675] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2825.397196][ T3675] Memory cgroup stats for /syz1:
[ 2825.397656][ T3675] anon 135168
[ 2825.397656][ T3675] file 393216
[ 2825.397656][ T3675] kernel 314044416
[ 2825.397656][ T3675] kernel_stack 65536
[ 2825.397656][ T3675] pagetables 81920
[ 2825.397656][ T3675] sec_pagetables 0
[ 2825.397656][ T3675] percpu 5356416
[ 2825.397656][ T3675] sock 0
[ 2825.397656][ T3675] vmalloc 0
[ 2825.397656][ T3675] shmem 385024
[ 2825.397656][ T3675] zswap 0
[ 2825.397656][ T3675] zswapped 0
[ 2825.397656][ T3675] file_mapped 385024
[ 2825.397656][ T3675] file_dirty 0
[ 2825.397656][ T3675] file_writeback 0
[ 2825.397656][ T3675] swapcached 0
[ 2825.397656][ T3675] anon_thp 0
[ 2825.397656][ T3675] file_thp 0
[ 2825.397656][ T3675] shmem_thp 0
[ 2825.397656][ T3675] inactive_anon 180224
[ 2825.397656][ T3675] active_anon 339968
[ 2825.397656][ T3675] inactive_file 4096
[ 2825.397656][ T3675] active_file 4096
[ 2825.397656][ T3675] unevictable 0
10:16:29 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7b00, @local}]}, 0x48}}, 0x0)
[ 2825.397656][ T3675] slab_reclaimable 16512
[ 2825.397656][ T3675] slab_unreclaimable 308480480
[ 2825.480644][ T3652] device macvtap558 entered promiscuous mode
[ 2825.494290][ T3675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3675,uid=0
[ 2825.527322][ T3675] Memory cgroup out of memory: Killed process 3675 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
10:16:29 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7d00, @local}]}, 0x48}}, 0x0)
[ 2825.583379][ T3653] device macvtap458 entered promiscuous mode
[ 2825.599521][ T3657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2825.636495][ T3657] device macvtap559 entered promiscuous mode
10:16:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7a00, @local}]}, 0x48}}, 0x0)
[ 2825.697254][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2825.754065][ T3661] device macvtap459 entered promiscuous mode
[ 2825.765831][ T3684] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2825.802752][ T3684] CPU: 0 PID: 3684 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2825.813145][ T3684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2825.823238][ T3684] Call Trace:
[ 2825.826540][ T3684]
[ 2825.829491][ T3684] dump_stack_lvl+0xd1/0x138
[ 2825.834129][ T3684] dump_header+0x10b/0x85f
[ 2825.838593][ T3684] oom_kill_process.cold+0x10/0x15
[ 2825.843733][ T3684] out_of_memory+0x35c/0x14a0
[ 2825.848432][ T3684] ? find_held_lock+0x2d/0x110
[ 2825.853241][ T3684] ? oom_killer_disable+0x280/0x280
[ 2825.858496][ T3684] ? find_held_lock+0x2d/0x110
[ 2825.863308][ T3684] mem_cgroup_out_of_memory+0x206/0x270
[ 2825.868893][ T3684] ? mem_cgroup_margin+0x130/0x130
[ 2825.874039][ T3684] ? lock_downgrade+0x6e0/0x6e0
[ 2825.878963][ T3684] try_charge_memcg+0xef8/0x12f0
[ 2825.883955][ T3684] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2825.889987][ T3684] ? rcu_read_unlock+0x9/0x60
[ 2825.894697][ T3684] ? lock_downgrade+0x6e0/0x6e0
[ 2825.899619][ T3684] charge_memcg+0x99/0x3b0
[ 2825.904078][ T3684] __mem_cgroup_charge+0x2b/0x90
[ 2825.909062][ T3684] wp_page_copy+0x2bf/0x1ca0
[ 2825.913697][ T3684] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2825.920295][ T3684] ? lock_downgrade+0x6e0/0x6e0
[ 2825.925155][ T3684] ? vm_normal_page+0x14a/0x2a0
[ 2825.930012][ T3684] do_wp_page+0x1d1/0x1930
[ 2825.934430][ T3684] __handle_mm_fault+0x181b/0x3a40
[ 2825.939544][ T3684] ? vm_iomap_memory+0x190/0x190
[ 2825.944505][ T3684] handle_mm_fault+0x1cc/0x780
[ 2825.949290][ T3684] do_user_addr_fault+0x475/0x1210
[ 2825.954442][ T3684] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2825.960036][ T3684] exc_page_fault+0x98/0x170
[ 2825.964663][ T3684] asm_exc_page_fault+0x26/0x30
[ 2825.969543][ T3684] RIP: 0033:0x7f69a6639580
[ 2825.973969][ T3684] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2825.993593][ T3684] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
[ 2825.999670][ T3684] RAX: 0000000080c770a3 RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2826.007670][ T3684] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22ceb9
[ 2826.015662][ T3684] RBP: 0000000080c770a3 R08: 00000000000010a3 R09: 0000000080c770a7
[ 2826.023639][ T3684] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2826.031607][ T3684] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83cc9a08
[ 2826.039597][ T3684] ? apparmor_socket_create+0x228/0x660
[ 2826.045213][ T3684]
[ 2826.052941][ T3684] memory: usage 307184kB, limit 307200kB, failcnt 11969
[ 2826.060090][ T3684] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2826.067096][ T3684] Memory cgroup stats for /syz1:
[ 2826.067328][ T3684] anon 131072
[ 2826.067328][ T3684] file 393216
[ 2826.067328][ T3684] kernel 314032128
[ 2826.067328][ T3684] kernel_stack 65536
[ 2826.067328][ T3684] pagetables 73728
[ 2826.067328][ T3684] sec_pagetables 0
[ 2826.067328][ T3684] percpu 5356416
[ 2826.067328][ T3684] sock 0
[ 2826.067328][ T3684] vmalloc 0
[ 2826.067328][ T3684] shmem 385024
[ 2826.067328][ T3684] zswap 0
[ 2826.067328][ T3684] zswapped 0
[ 2826.067328][ T3684] file_mapped 385024
[ 2826.067328][ T3684] file_dirty 0
[ 2826.067328][ T3684] file_writeback 0
[ 2826.067328][ T3684] swapcached 0
[ 2826.067328][ T3684] anon_thp 0
[ 2826.067328][ T3684] file_thp 0
[ 2826.067328][ T3684] shmem_thp 0
[ 2826.067328][ T3684] inactive_anon 176128
[ 2826.067328][ T3684] active_anon 339968
[ 2826.067328][ T3684] inactive_file 4096
[ 2826.067328][ T3684] active_file 4096
[ 2826.067328][ T3684] unevictable 0
[ 2826.067328][ T3684] slab_reclaimable 14584
[ 2826.067328][ T3684] slab_unreclaimable 308480136
[ 2826.074881][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
10:16:30 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3701}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:30 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7e00, @local}]}, 0x48}}, 0x0)
[ 2826.217800][ T3684] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3684,uid=0
[ 2826.233946][ T3684] Memory cgroup out of memory: Killed process 3684 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
10:16:30 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3703}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2826.300548][ T3668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2826.357078][ T3668] device bridge1783 entered promiscuous mode
[ 2826.486197][ T3672] device macvtap2173 entered promiscuous mode
[ 2826.526988][ T3705] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2826.549816][ T3705] CPU: 1 PID: 3705 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2826.560193][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2826.570276][ T3705] Call Trace:
[ 2826.573569][ T3705]
[ 2826.576521][ T3705] dump_stack_lvl+0xd1/0x138
[ 2826.581156][ T3705] dump_header+0x10b/0x85f
[ 2826.585611][ T3705] oom_kill_process.cold+0x10/0x15
[ 2826.590763][ T3705] out_of_memory+0x35c/0x14a0
[ 2826.595485][ T3705] ? find_held_lock+0x2d/0x110
[ 2826.600294][ T3705] ? oom_killer_disable+0x280/0x280
[ 2826.605534][ T3705] ? find_held_lock+0x2d/0x110
[ 2826.610349][ T3705] mem_cgroup_out_of_memory+0x206/0x270
[ 2826.615932][ T3705] ? mem_cgroup_margin+0x130/0x130
[ 2826.621071][ T3705] ? lock_downgrade+0x6e0/0x6e0
[ 2826.625975][ T3705] try_charge_memcg+0xef8/0x12f0
[ 2826.630947][ T3705] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2826.636951][ T3705] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2826.642689][ T3705] ? lock_downgrade+0x6e0/0x6e0
[ 2826.647574][ T3705] ? lock_downgrade+0x6e0/0x6e0
[ 2826.652469][ T3705] __memcg_kmem_charge_page+0x16e/0x3b0
[ 2826.658042][ T3705] memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2826.664219][ T3705] copy_process+0x15ed/0x7190
[ 2826.668941][ T3705] ? find_held_lock+0x2d/0x110
[ 2826.673760][ T3705] ? __cleanup_sighand+0xb0/0xb0
[ 2826.678720][ T3705] ? __handle_mm_fault+0x2d0f/0x3a40
[ 2826.684025][ T3705] ? lock_downgrade+0x6e0/0x6e0
[ 2826.688909][ T3705] ? folio_flags.constprop.0+0x53/0x150
[ 2826.694495][ T3705] ? folio_add_lru+0x37b/0x680
[ 2826.699294][ T3705] kernel_clone+0xeb/0x980
[ 2826.703731][ T3705] ? create_io_thread+0xf0/0xf0
[ 2826.708609][ T3705] ? find_held_lock+0x2d/0x110
[ 2826.713409][ T3705] __do_sys_clone+0xba/0x100
[ 2826.718017][ T3705] ? kernel_clone+0x980/0x980
[ 2826.722727][ T3705] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2826.728643][ T3705] do_syscall_64+0x39/0xb0
[ 2826.733085][ T3705] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2826.739006][ T3705] RIP: 0033:0x7f8325a8d501
[ 2826.743432][ T3705] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2826.763054][ T3705] RSP: 002b:00007fff9cb6b1a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2826.771484][ T3705] RAX: ffffffffffffffda RBX: 00007f8326788700 RCX: 00007f8325a8d501
[ 2826.779468][ T3705] RDX: 00007f83267889d0 RSI: 00007f83267882f0 RDI: 00000000003d0f00
[ 2826.787450][ T3705] RBP: 00007fff9cb6b3f0 R08: 00007f8326788700 R09: 00007f8326788700
[ 2826.795433][ T3705] R10: 00007f83267889d0 R11: 0000000000000206 R12: 00007fff9cb6b25e
[ 2826.803414][ T3705] R13: 00007fff9cb6b25f R14: 00007f8326788300 R15: 0000000000022000
[ 2826.811414][ T3705]
[ 2826.845032][ T3673] device macvtap2174 entered promiscuous mode
[ 2826.856619][ T3705] memory: usage 307184kB, limit 307200kB, failcnt 66086
[ 2826.864139][ T3705] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2826.907589][ T3705] Memory cgroup stats for /syz2
[ 2826.907611][ T3681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2826.923065][ T3705] :
[ 2826.923533][ T3705] anon 147456
[ 2826.923533][ T3705] file 417792
[ 2826.923533][ T3705] kernel 313991168
[ 2826.923533][ T3705] kernel_stack 65536
[ 2826.923533][ T3705] pagetables 77824
[ 2826.923533][ T3705] sec_pagetables 0
[ 2826.923533][ T3705] percpu 5357600
[ 2826.923533][ T3705] sock 0
[ 2826.923533][ T3705] vmalloc 0
[ 2826.923533][ T3705] shmem 417792
[ 2826.923533][ T3705] zswap 0
[ 2826.923533][ T3705] zswapped 0
[ 2826.923533][ T3705] file_mapped 417792
[ 2826.923533][ T3705] file_dirty 0
[ 2826.923533][ T3705] file_writeback 0
[ 2826.923533][ T3705] swapcached 0
[ 2826.923533][ T3705] anon_thp 0
[ 2826.923533][ T3705] file_thp 0
[ 2826.923533][ T3705] shmem_thp 0
[ 2826.923533][ T3705] inactive_anon 151552
[ 2826.923533][ T3705] active_anon 413696
[ 2826.923533][ T3705] inactive_file 0
[ 2826.923533][ T3705] active_file 0
[ 2826.923533][ T3705] unevictable 0
10:16:31 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xde00}, 0x0)
[ 2826.923533][ T3705] slab_reclaimable 14280
[ 2826.923533][ T3705] slab_unreclaimable 308449064
[ 2826.943660][ T3681] device bridge1324 entered promiscuous mode
[ 2827.067838][ T3705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3705,uid=0
[ 2827.068634][ T3682] device macvtap1313 entered promiscuous mode
[ 2827.083920][ T3705] Memory cgroup out of memory: Killed process 3705 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2827.143294][ T3703] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2827.153885][ T3703] CPU: 1 PID: 3703 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2827.164250][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2827.174330][ T3703] Call Trace:
[ 2827.177632][ T3703]
[ 2827.180585][ T3703] dump_stack_lvl+0xd1/0x138
[ 2827.185217][ T3703] dump_header+0x10b/0x85f
[ 2827.189673][ T3703] oom_kill_process.cold+0x10/0x15
[ 2827.194823][ T3703] out_of_memory+0x35c/0x14a0
[ 2827.199541][ T3703] ? find_held_lock+0x2d/0x110
[ 2827.204353][ T3703] ? oom_killer_disable+0x280/0x280
[ 2827.209592][ T3703] ? find_held_lock+0x2d/0x110
[ 2827.214404][ T3703] mem_cgroup_out_of_memory+0x206/0x270
[ 2827.220078][ T3703] ? mem_cgroup_margin+0x130/0x130
[ 2827.225228][ T3703] ? lock_downgrade+0x6e0/0x6e0
[ 2827.230148][ T3703] try_charge_memcg+0xef8/0x12f0
[ 2827.235138][ T3703] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2827.241154][ T3703] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2827.246898][ T3703] ? lock_downgrade+0x6e0/0x6e0
[ 2827.251802][ T3703] obj_cgroup_charge+0x2af/0x5e0
[ 2827.256775][ T3703] ? __anon_vma_prepare+0x64/0x580
[ 2827.261901][ T3703] kmem_cache_alloc+0xa3/0x3d0
[ 2827.266692][ T3703] __anon_vma_prepare+0x64/0x580
[ 2827.271645][ T3703] ? __pmd_alloc+0x30c/0x5d0
[ 2827.276253][ T3703] __handle_mm_fault+0x35bc/0x3a40
[ 2827.281391][ T3703] ? vm_iomap_memory+0x190/0x190
[ 2827.286372][ T3703] handle_mm_fault+0x1cc/0x780
[ 2827.291160][ T3703] do_user_addr_fault+0x475/0x1210
[ 2827.296296][ T3703] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2827.301874][ T3703] exc_page_fault+0x98/0x170
[ 2827.306485][ T3703] asm_exc_page_fault+0x26/0x30
[ 2827.311360][ T3703] RIP: 0033:0x7f69a662bd79
[ 2827.315787][ T3703] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2827.335410][ T3703] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2827.341494][ T3703] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2827.349475][ T3703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2827.357455][ T3703] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2827.365436][ T3703] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b234b
[ 2827.373417][ T3703] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2827.381419][ T3703]
[ 2827.398109][ T3703] memory: usage 307200kB, limit 307200kB, failcnt 12078
[ 2827.410952][ T3703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2827.423463][ T3703] Memory cgroup stats for /syz1:
[ 2827.423717][ T3703] anon 135168
[ 2827.423717][ T3703] file 393216
[ 2827.423717][ T3703] kernel 314044416
[ 2827.423717][ T3703] kernel_stack 65536
[ 2827.423717][ T3703] pagetables 81920
[ 2827.423717][ T3703] sec_pagetables 0
[ 2827.423717][ T3703] percpu 5356416
[ 2827.423717][ T3703] sock 0
[ 2827.423717][ T3703] vmalloc 0
[ 2827.423717][ T3703] shmem 385024
[ 2827.423717][ T3703] zswap 0
[ 2827.423717][ T3703] zswapped 0
[ 2827.423717][ T3703] file_mapped 385024
[ 2827.423717][ T3703] file_dirty 0
[ 2827.423717][ T3703] file_writeback 0
[ 2827.423717][ T3703] swapcached 0
[ 2827.423717][ T3703] anon_thp 0
[ 2827.423717][ T3703] file_thp 0
[ 2827.423717][ T3703] shmem_thp 0
[ 2827.423717][ T3703] inactive_anon 180224
[ 2827.423717][ T3703] active_anon 339968
[ 2827.423717][ T3703] inactive_file 4096
[ 2827.423717][ T3703] active_file 4096
[ 2827.423717][ T3703] unevictable 0
[ 2827.423717][ T3703] slab_reclaimable 16512
[ 2827.423717][ T3703] slab_unreclaimable 308480480
10:16:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3501}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2827.539109][ T3688] device macvtap1314 entered promiscuous mode
[ 2827.545992][ T3703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3703,uid=0
[ 2827.556730][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
10:16:31 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x7f00, @local}]}, 0x48}}, 0x0)
[ 2827.596967][ T3690] device bridge532 entered promiscuous mode
[ 2827.610732][ T3703] Memory cgroup out of memory: Killed process 3703 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2827.636885][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2827.670931][ T3722] device bridge1325 entered promiscuous mode
[ 2827.759494][ T3692] device macvtap559 entered promiscuous mode
[ 2827.791361][ T3723] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2827.801896][ T3723] CPU: 0 PID: 3723 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2827.812263][ T3723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2827.822344][ T3723] Call Trace:
[ 2827.825624][ T3693] device macvtap560 entered promiscuous mode
[ 2827.831621][ T3723]
[ 2827.834575][ T3723] dump_stack_lvl+0xd1/0x138
[ 2827.839211][ T3723] dump_header+0x10b/0x85f
[ 2827.841728][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2827.843651][ T3723] oom_kill_process.cold+0x10/0x15
[ 2827.843692][ T3723] out_of_memory+0x35c/0x14a0
[ 2827.843732][ T3723] ? find_held_lock+0x2d/0x110
[ 2827.867468][ T3723] ? oom_killer_disable+0x280/0x280
[ 2827.872709][ T3723] ? find_held_lock+0x2d/0x110
[ 2827.877526][ T3723] mem_cgroup_out_of_memory+0x206/0x270
[ 2827.883116][ T3723] ? mem_cgroup_margin+0x130/0x130
[ 2827.888262][ T3723] ? lock_downgrade+0x6e0/0x6e0
[ 2827.893186][ T3723] try_charge_memcg+0xef8/0x12f0
[ 2827.898171][ T3723] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2827.900950][ T3695] device bridge444 entered promiscuous mode
[ 2827.904178][ T3723] ? rcu_read_unlock+0x9/0x60
[ 2827.904210][ T3723] ? lock_downgrade+0x6e0/0x6e0
[ 2827.904268][ T3723] charge_memcg+0x99/0x3b0
[ 2827.924076][ T3723] __mem_cgroup_charge+0x2b/0x90
[ 2827.929042][ T3723] ? _compound_head+0x5d/0x150
[ 2827.933839][ T3723] __handle_mm_fault+0x17e7/0x3a40
[ 2827.938975][ T3723] ? vm_iomap_memory+0x190/0x190
[ 2827.943961][ T3723] handle_mm_fault+0x1cc/0x780
[ 2827.948756][ T3723] do_user_addr_fault+0x475/0x1210
[ 2827.953896][ T3723] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2827.959473][ T3723] exc_page_fault+0x98/0x170
[ 2827.964142][ T3723] asm_exc_page_fault+0x26/0x30
[ 2827.969027][ T3723] RIP: 0033:0x7f69a662bd79
[ 2827.973455][ T3723] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2827.993079][ T3723] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2827.999163][ T3723] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2828.007146][ T3723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2828.015144][ T3723] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2828.023130][ T3723] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b25b0
[ 2828.031115][ T3723] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2828.039120][ T3723]
[ 2828.045883][ T3723] memory: usage 307200kB, limit 307200kB, failcnt 12175
[ 2828.053181][ T3723] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
10:16:32 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x4a, @local}]}, 0x48}}, 0x0)
[ 2828.060353][ T3723] Memory cgroup stats for /syz1:
[ 2828.060571][ T3723] anon 135168
[ 2828.060571][ T3723] file 393216
[ 2828.060571][ T3723] kernel 314044416
[ 2828.060571][ T3723] kernel_stack 65536
[ 2828.060571][ T3723] pagetables 81920
[ 2828.060571][ T3723] sec_pagetables 0
[ 2828.060571][ T3723] percpu 5356416
[ 2828.060571][ T3723] sock 0
[ 2828.060571][ T3723] vmalloc 0
[ 2828.060571][ T3723] shmem 385024
[ 2828.060571][ T3723] zswap 0
[ 2828.060571][ T3723] zswapped 0
[ 2828.060571][ T3723] file_mapped 385024
[ 2828.060571][ T3723] file_dirty 0
[ 2828.060571][ T3723] file_writeback 0
[ 2828.060571][ T3723] swapcached 0
[ 2828.060571][ T3723] anon_thp 0
[ 2828.060571][ T3723] file_thp 0
[ 2828.060571][ T3723] shmem_thp 0
[ 2828.060571][ T3723] inactive_anon 180224
[ 2828.060571][ T3723] active_anon 339968
[ 2828.060571][ T3723] inactive_file 4096
[ 2828.060571][ T3723] active_file 4096
[ 2828.060571][ T3723] unevictable 0
[ 2828.060571][ T3723] slab_reclaimable 16512
[ 2828.060571][ T3723] slab_unreclaimable 308480880
[ 2828.174149][ T3704] device macvtap459 entered promiscuous mode
[ 2828.190593][ T3723] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3723,uid=0
[ 2828.206226][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
10:16:32 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8100, @local}]}, 0x48}}, 0x0)
[ 2828.221452][ T3723] Memory cgroup out of memory: Killed process 3723 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2828.258830][ T3706] device macvtap460 entered promiscuous mode
10:16:32 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x6c00}, 0x0)
[ 2828.371811][ T3711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2828.448862][ T3731] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2828.474694][ T3731] CPU: 0 PID: 3731 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2828.485071][ T3731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2828.495242][ T3731] Call Trace:
[ 2828.498516][ T3731]
[ 2828.501454][ T3731] dump_stack_lvl+0xd1/0x138
[ 2828.506098][ T3731] dump_header+0x10b/0x85f
[ 2828.510556][ T3731] oom_kill_process.cold+0x10/0x15
[ 2828.515710][ T3731] out_of_memory+0x35c/0x14a0
[ 2828.520411][ T3731] ? find_held_lock+0x2d/0x110
[ 2828.525212][ T3731] ? oom_killer_disable+0x280/0x280
[ 2828.530425][ T3731] ? find_held_lock+0x2d/0x110
[ 2828.535230][ T3731] mem_cgroup_out_of_memory+0x206/0x270
[ 2828.540806][ T3731] ? mem_cgroup_margin+0x130/0x130
[ 2828.545938][ T3731] ? lock_downgrade+0x6e0/0x6e0
[ 2828.550926][ T3731] try_charge_memcg+0xef8/0x12f0
[ 2828.555902][ T3731] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2828.561917][ T3731] ? rcu_read_unlock+0x9/0x60
[ 2828.566609][ T3731] ? lock_downgrade+0x6e0/0x6e0
[ 2828.571511][ T3731] charge_memcg+0x99/0x3b0
[ 2828.575958][ T3731] __mem_cgroup_charge+0x2b/0x90
[ 2828.580923][ T3731] ? _compound_head+0x5d/0x150
[ 2828.585721][ T3731] __handle_mm_fault+0x17e7/0x3a40
[ 2828.590860][ T3731] ? vm_iomap_memory+0x190/0x190
[ 2828.595843][ T3731] handle_mm_fault+0x1cc/0x780
[ 2828.600633][ T3731] do_user_addr_fault+0x475/0x1210
[ 2828.605770][ T3731] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2828.611351][ T3731] exc_page_fault+0x98/0x170
[ 2828.615962][ T3731] asm_exc_page_fault+0x26/0x30
[ 2828.620840][ T3731] RIP: 0033:0x7f69a662bd79
[ 2828.625266][ T3731] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2828.644891][ T3731] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2828.650973][ T3731] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2828.658962][ T3731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2828.666956][ T3731] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2828.674943][ T3731] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b2855
[ 2828.683102][ T3731] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2828.691107][ T3731]
[ 2828.701671][ T3731] memory: usage 307200kB, limit 307200kB, failcnt 12267
[ 2828.720194][ T3731] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2828.727245][ T3731] Memory cgroup stats for /syz1:
[ 2828.727990][ T3731] anon 135168
[ 2828.727990][ T3731] file 393216
[ 2828.727990][ T3731] kernel 314044416
[ 2828.727990][ T3731] kernel_stack 65536
[ 2828.727990][ T3731] pagetables 81920
[ 2828.727990][ T3731] sec_pagetables 0
[ 2828.727990][ T3731] percpu 5356416
[ 2828.727990][ T3731] sock 0
[ 2828.727990][ T3731] vmalloc 0
[ 2828.727990][ T3731] shmem 385024
[ 2828.727990][ T3731] zswap 0
[ 2828.727990][ T3731] zswapped 0
[ 2828.727990][ T3731] file_mapped 385024
[ 2828.727990][ T3731] file_dirty 0
[ 2828.727990][ T3731] file_writeback 0
[ 2828.727990][ T3731] swapcached 0
[ 2828.727990][ T3731] anon_thp 0
[ 2828.727990][ T3731] file_thp 0
[ 2828.727990][ T3731] shmem_thp 0
[ 2828.727990][ T3731] inactive_anon 180224
[ 2828.727990][ T3731] active_anon 339968
[ 2828.727990][ T3731] inactive_file 4096
[ 2828.727990][ T3731] active_file 4096
[ 2828.727990][ T3731] unevictable 0
[ 2828.727990][ T3731] slab_reclaimable 16512
[ 2828.727990][ T3731] slab_unreclaimable 308480880
[ 2828.830294][ T3731] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=
[ 2828.830444][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
10:16:33 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8200, @local}]}, 0x48}}, 0x0)
10:16:33 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3800}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2828.851379][ T3731] syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3731,uid=0
[ 2828.862099][ T3731] Memory cgroup out of memory: Killed process 3731 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2828.893662][ T3717] device bridge1784 entered promiscuous mode
[ 2829.051121][ T3718] device macvtap2174 entered promiscuous mode
[ 2829.061781][ T3738] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000
[ 2829.074171][ T3738] CPU: 0 PID: 3738 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2829.084532][ T3738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2829.094602][ T3738] Call Trace:
[ 2829.097893][ T3738]
[ 2829.100848][ T3738] dump_stack_lvl+0xd1/0x138
[ 2829.105483][ T3738] dump_header+0x10b/0x85f
[ 2829.109934][ T3738] oom_kill_process.cold+0x10/0x15
[ 2829.115089][ T3738] out_of_memory+0x35c/0x14a0
[ 2829.119800][ T3738] ? find_held_lock+0x2d/0x110
[ 2829.124594][ T3738] ? oom_killer_disable+0x280/0x280
[ 2829.125794][ T3724] device macvtap1315 entered promiscuous mode
[ 2829.129807][ T3738] ? find_held_lock+0x2d/0x110
[ 2829.129852][ T3738] mem_cgroup_out_of_memory+0x206/0x270
[ 2829.129885][ T3738] ? mem_cgroup_margin+0x130/0x130
[ 2829.129913][ T3738] ? lock_downgrade+0x6e0/0x6e0
[ 2829.129982][ T3738] try_charge_memcg+0xef8/0x12f0
[ 2829.130028][ T3738] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2829.130068][ T3738] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2829.130101][ T3738] ? lock_downgrade+0x6e0/0x6e0
[ 2829.130147][ T3738] ? lock_downgrade+0x6e0/0x6e0
[ 2829.130190][ T3738] ? rcu_read_unlock+0x9/0x60
[ 2829.130232][ T3738] obj_cgroup_charge+0x2af/0x5e0
[ 2829.130277][ T3738] kmem_cache_alloc_node+0xa9/0x410
[ 2829.130309][ T3738] ? copy_process+0x5c2/0x7190
[ 2829.130345][ T3738] copy_process+0x5c2/0x7190
[ 2829.130380][ T3738] ? find_held_lock+0x2d/0x110
[ 2829.130421][ T3738] ? find_held_lock+0x2d/0x110
[ 2829.130462][ T3738] ? __cleanup_sighand+0xb0/0xb0
[ 2829.221586][ T3738] ? __handle_mm_fault+0x2d0f/0x3a40
[ 2829.226893][ T3738] ? lock_downgrade+0x6e0/0x6e0
[ 2829.231780][ T3738] ? folio_flags.constprop.0+0x53/0x150
[ 2829.237366][ T3738] ? folio_add_lru+0x37b/0x680
[ 2829.242165][ T3738] kernel_clone+0xeb/0x980
[ 2829.246604][ T3738] ? create_io_thread+0xf0/0xf0
[ 2829.251482][ T3738] ? find_held_lock+0x2d/0x110
[ 2829.256286][ T3738] __do_sys_clone+0xba/0x100
[ 2829.260897][ T3738] ? kernel_clone+0x980/0x980
[ 2829.265699][ T3738] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2829.271620][ T3738] do_syscall_64+0x39/0xb0
[ 2829.276064][ T3738] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2829.281981][ T3738] RIP: 0033:0x7f8325a8d501
[ 2829.286411][ T3738] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2829.306041][ T3738] RSP: 002b:00007fff9cb6b1a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2829.314470][ T3738] RAX: ffffffffffffffda RBX: 00007f8326788700 RCX: 00007f8325a8d501
[ 2829.322453][ T3738] RDX: 00007f83267889d0 RSI: 00007f83267882f0 RDI: 00000000003d0f00
[ 2829.330435][ T3738] RBP: 00007fff9cb6b3f0 R08: 00007f8326788700 R09: 00007f8326788700
[ 2829.338416][ T3738] R10: 00007f83267889d0 R11: 0000000000000206 R12: 00007fff9cb6b25e
10:16:33 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xe003}, 0x0)
[ 2829.346398][ T3738] R13: 00007fff9cb6b25f R14: 00007f8326788300 R15: 0000000000022000
[ 2829.354400][ T3738]
[ 2829.361209][ T3738] memory: usage 307200kB, limit 307200kB, failcnt 66269
[ 2829.382356][ T3738] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2829.392554][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2829.405691][ T3738] Memory cgroup stats for /syz2:
[ 2829.405941][ T3738] anon 147456
[ 2829.405941][ T3738] file 417792
[ 2829.405941][ T3738] kernel 313991168
[ 2829.405941][ T3738] kernel_stack 65536
[ 2829.405941][ T3738] pagetables 77824
[ 2829.405941][ T3738] sec_pagetables 0
[ 2829.405941][ T3738] percpu 5357600
[ 2829.405941][ T3738] sock 0
[ 2829.405941][ T3738] vmalloc 0
[ 2829.405941][ T3738] shmem 417792
[ 2829.405941][ T3738] zswap 0
[ 2829.405941][ T3738] zswapped 0
[ 2829.405941][ T3738] file_mapped 417792
[ 2829.405941][ T3738] file_dirty 0
[ 2829.405941][ T3738] file_writeback 0
[ 2829.405941][ T3738] swapcached 0
[ 2829.405941][ T3738] anon_thp 0
[ 2829.405941][ T3738] file_thp 0
[ 2829.405941][ T3738] shmem_thp 0
[ 2829.405941][ T3738] inactive_anon 151552
[ 2829.405941][ T3738] active_anon 413696
[ 2829.405941][ T3738] inactive_file 0
[ 2829.405941][ T3738] active_file 0
[ 2829.405941][ T3738] unevictable 0
[ 2829.405941][ T3738] slab_reclaimable 14280
[ 2829.405941][ T3738] slab_unreclaimable 308449784
[ 2829.505600][ T3738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3738,uid=0
[ 2829.519896][ T3722] device macvtap1316 entered promiscuous mode
[ 2829.522279][ T3738] Memory cgroup out of memory: Killed process 3738 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2829.547712][ T3740] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2829.564868][ T3740] CPU: 1 PID: 3740 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2829.575235][ T3740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2829.585314][ T3740] Call Trace:
[ 2829.588612][ T3740]
[ 2829.591565][ T3740] dump_stack_lvl+0xd1/0x138
[ 2829.596200][ T3740] dump_header+0x10b/0x85f
[ 2829.600661][ T3740] oom_kill_process.cold+0x10/0x15
[ 2829.605817][ T3740] out_of_memory+0x35c/0x14a0
[ 2829.610547][ T3740] ? oom_killer_disable+0x280/0x280
[ 2829.615789][ T3740] ? find_held_lock+0x2d/0x110
[ 2829.620602][ T3740] mem_cgroup_out_of_memory+0x206/0x270
[ 2829.626185][ T3740] ? mem_cgroup_margin+0x130/0x130
[ 2829.631327][ T3740] ? lock_downgrade+0x6e0/0x6e0
[ 2829.636251][ T3740] try_charge_memcg+0xef8/0x12f0
[ 2829.641237][ T3740] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2829.647267][ T3740] ? rcu_read_unlock+0x9/0x60
[ 2829.651975][ T3740] ? lock_downgrade+0x6e0/0x6e0
[ 2829.656890][ T3740] charge_memcg+0x99/0x3b0
[ 2829.661354][ T3740] __mem_cgroup_charge+0x2b/0x90
[ 2829.666341][ T3740] wp_page_copy+0x2bf/0x1ca0
[ 2829.670997][ T3740] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2829.677654][ T3740] ? lock_downgrade+0x6e0/0x6e0
[ 2829.682551][ T3740] ? vm_normal_page+0x14a/0x2a0
[ 2829.687451][ T3740] do_wp_page+0x1d1/0x1930
[ 2829.691907][ T3740] __handle_mm_fault+0x181b/0x3a40
[ 2829.697062][ T3740] ? vm_iomap_memory+0x190/0x190
[ 2829.702067][ T3740] handle_mm_fault+0x1cc/0x780
[ 2829.706872][ T3740] do_user_addr_fault+0x475/0x1210
[ 2829.712028][ T3740] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2829.717623][ T3740] exc_page_fault+0x98/0x170
[ 2829.722249][ T3740] asm_exc_page_fault+0x26/0x30
[ 2829.727138][ T3740] RIP: 0033:0x7f69a6639580
[ 2829.731581][ T3740] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2829.751218][ T3740] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
[ 2829.757316][ T3740] RAX: 0000000080c770a3 RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2829.765314][ T3740] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22ceb9
[ 2829.773310][ T3740] RBP: 0000000080c770a3 R08: 00000000000010a3 R09: 0000000080c770a7
[ 2829.781306][ T3740] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2829.789305][ T3740] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83cc9a08
[ 2829.797300][ T3740] ? apparmor_socket_create+0x228/0x660
[ 2829.802917][ T3740]
[ 2829.813952][ T3740] memory: usage 307184kB, limit 307200kB, failcnt 12319
[ 2829.821175][ T3740] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2829.840922][ T3740] Memory cgroup stats for /syz1:
[ 2829.841167][ T3740] anon 131072
[ 2829.841167][ T3740] file 393216
[ 2829.841167][ T3740] kernel 314032128
[ 2829.841167][ T3740] kernel_stack 65536
[ 2829.841167][ T3740] pagetables 73728
[ 2829.841167][ T3740] sec_pagetables 0
[ 2829.841167][ T3740] percpu 5356416
[ 2829.841167][ T3740] sock 0
[ 2829.841167][ T3740] vmalloc 0
[ 2829.841167][ T3740] shmem 385024
[ 2829.841167][ T3740] zswap 0
[ 2829.841167][ T3740] zswapped 0
[ 2829.841167][ T3740] file_mapped 385024
[ 2829.841167][ T3740] file_dirty 0
[ 2829.841167][ T3740] file_writeback 0
[ 2829.841167][ T3740] swapcached 0
[ 2829.841167][ T3740] anon_thp 0
[ 2829.841167][ T3740] file_thp 0
[ 2829.841167][ T3740] shmem_thp 0
[ 2829.841167][ T3740] inactive_anon 176128
[ 2829.841167][ T3740] active_anon 339968
[ 2829.841167][ T3740] inactive_file 4096
[ 2829.841167][ T3740] active_file 4096
[ 2829.841167][ T3740] unevictable 0
[ 2829.841167][ T3740] slab_reclaimable 14584
[ 2829.841167][ T3740] slab_unreclaimable 308480136
[ 2829.871231][ T3727] device bridge533 entered promiscuous mode
[ 2829.937780][ T3740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3740,uid=0
10:16:34 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8100, @local}]}, 0x48}}, 0x0)
10:16:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8300, @local}]}, 0x48}}, 0x0)
[ 2829.957779][ T3740] Memory cgroup out of memory: Killed process 3740 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2830.044338][ T3729] device macvtap561 entered promiscuous mode
10:16:34 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3202}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2830.096372][ T3730] device macvtap562 entered promiscuous mode
[ 2830.132304][ T3735] device bridge445 entered promiscuous mode
[ 2830.200478][ T3748] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2830.216017][ T3736] device macvtap460 entered promiscuous mode
[ 2830.224017][ T3748] CPU: 1 PID: 3748 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2830.234392][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2830.244474][ T3748] Call Trace:
[ 2830.247770][ T3748]
[ 2830.250727][ T3748] dump_stack_lvl+0xd1/0x138
[ 2830.255369][ T3748] dump_header+0x10b/0x85f
[ 2830.259824][ T3748] oom_kill_process.cold+0x10/0x15
[ 2830.264975][ T3748] out_of_memory+0x35c/0x14a0
[ 2830.269700][ T3748] ? find_held_lock+0x2d/0x110
[ 2830.274509][ T3748] ? oom_killer_disable+0x280/0x280
[ 2830.279842][ T3748] ? find_held_lock+0x2d/0x110
[ 2830.284665][ T3748] mem_cgroup_out_of_memory+0x206/0x270
[ 2830.290251][ T3748] ? mem_cgroup_margin+0x130/0x130
[ 2830.295396][ T3748] ? lock_downgrade+0x6e0/0x6e0
[ 2830.300316][ T3748] try_charge_memcg+0xef8/0x12f0
[ 2830.305311][ T3748] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2830.311348][ T3748] ? rcu_read_unlock+0x9/0x60
[ 2830.316150][ T3748] ? lock_downgrade+0x6e0/0x6e0
[ 2830.321067][ T3748] charge_memcg+0x99/0x3b0
[ 2830.325527][ T3748] __mem_cgroup_charge+0x2b/0x90
[ 2830.330510][ T3748] wp_page_copy+0x2bf/0x1ca0
[ 2830.335160][ T3748] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2830.341796][ T3748] ? lock_downgrade+0x6e0/0x6e0
[ 2830.346703][ T3748] ? vm_normal_page+0x14a/0x2a0
[ 2830.351605][ T3748] do_wp_page+0x1d1/0x1930
[ 2830.356058][ T3748] __handle_mm_fault+0x181b/0x3a40
[ 2830.361214][ T3748] ? vm_iomap_memory+0x190/0x190
[ 2830.366220][ T3748] handle_mm_fault+0x1cc/0x780
[ 2830.371026][ T3748] do_user_addr_fault+0x475/0x1210
[ 2830.376182][ T3748] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2830.381782][ T3748] exc_page_fault+0x98/0x170
[ 2830.386406][ T3748] asm_exc_page_fault+0x26/0x30
[ 2830.391300][ T3748] RIP: 0033:0x7f69a6639580
[ 2830.395746][ T3748] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2830.415391][ T3748] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
[ 2830.421488][ T3748] RAX: 0000000080c770a3 RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2830.429489][ T3748] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22ceb9
[ 2830.437488][ T3748] RBP: 0000000080c770a3 R08: 00000000000010a3 R09: 0000000080c770a7
[ 2830.445481][ T3748] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2830.453471][ T3748] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83cc9a08
[ 2830.461466][ T3748] ? apparmor_socket_create+0x228/0x660
[ 2830.463504][ T3737] device macvtap461 entered promiscuous mode
[ 2830.467052][ T3748]
[ 2830.481053][ T3748] memory: usage 307184kB, limit 307200kB, failcnt 12411
[ 2830.488500][ T3748] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2830.495757][ T3748] Memory cgroup stats for /syz1:
[ 2830.495957][ T3748] anon 131072
[ 2830.495957][ T3748] file 393216
[ 2830.495957][ T3748] kernel 314032128
[ 2830.495957][ T3748] kernel_stack 65536
[ 2830.495957][ T3748] pagetables 73728
[ 2830.495957][ T3748] sec_pagetables 0
[ 2830.495957][ T3748] percpu 5356416
[ 2830.495957][ T3748] sock 0
[ 2830.495957][ T3748] vmalloc 0
[ 2830.495957][ T3748] shmem 385024
[ 2830.495957][ T3748] zswap 0
[ 2830.495957][ T3748] zswapped 0
[ 2830.495957][ T3748] file_mapped 385024
[ 2830.495957][ T3748] file_dirty 0
[ 2830.495957][ T3748] file_writeback 0
[ 2830.495957][ T3748] swapcached 0
[ 2830.495957][ T3748] anon_thp 0
[ 2830.495957][ T3748] file_thp 0
[ 2830.495957][ T3748] shmem_thp 0
[ 2830.495957][ T3748] inactive_anon 176128
[ 2830.495957][ T3748] active_anon 339968
[ 2830.495957][ T3748] inactive_file 4096
[ 2830.495957][ T3748] active_file 4096
[ 2830.495957][ T3748] unevictable 0
[ 2830.495957][ T3748] slab_reclaimable 14584
[ 2830.495957][ T3748] slab_unreclaimable 308480136
10:16:34 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8400, @local}]}, 0x48}}, 0x0)
[ 2830.595824][ T3748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3748,uid=0
[ 2830.611872][ T3748] Memory cgroup out of memory: Killed process 3748 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
10:16:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0xf, @local}]}, 0x48}}, 0x0)
[ 2830.750842][ T3756] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2830.761221][ T3756] CPU: 0 PID: 3756 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2830.771761][ T3756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2830.781848][ T3756] Call Trace:
[ 2830.785147][ T3756]
[ 2830.788094][ T3756] dump_stack_lvl+0xd1/0x138
[ 2830.792730][ T3756] dump_header+0x10b/0x85f
[ 2830.797155][ T3756] oom_kill_process.cold+0x10/0x15
[ 2830.802270][ T3756] out_of_memory+0x35c/0x14a0
[ 2830.806970][ T3756] ? find_held_lock+0x2d/0x110
[ 2830.811789][ T3756] ? oom_killer_disable+0x280/0x280
[ 2830.817046][ T3756] ? find_held_lock+0x2d/0x110
[ 2830.821871][ T3756] mem_cgroup_out_of_memory+0x206/0x270
[ 2830.827464][ T3756] ? mem_cgroup_margin+0x130/0x130
[ 2830.832617][ T3756] ? lock_downgrade+0x6e0/0x6e0
[ 2830.837545][ T3756] try_charge_memcg+0xef8/0x12f0
[ 2830.842527][ T3756] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2830.848547][ T3756] ? rcu_read_unlock+0x9/0x60
[ 2830.853248][ T3756] ? lock_downgrade+0x6e0/0x6e0
[ 2830.858145][ T3756] charge_memcg+0x99/0x3b0
[ 2830.862633][ T3756] __mem_cgroup_charge+0x2b/0x90
[ 2830.867613][ T3756] wp_page_copy+0x2bf/0x1ca0
[ 2830.872270][ T3756] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2830.878902][ T3756] ? lock_downgrade+0x6e0/0x6e0
[ 2830.883832][ T3756] ? vm_normal_page+0x14a/0x2a0
[ 2830.888722][ T3756] do_wp_page+0x1d1/0x1930
[ 2830.893166][ T3756] __handle_mm_fault+0x181b/0x3a40
[ 2830.898309][ T3756] ? vm_iomap_memory+0x190/0x190
[ 2830.903303][ T3756] handle_mm_fault+0x1cc/0x780
[ 2830.908100][ T3756] do_user_addr_fault+0x475/0x1210
[ 2830.913236][ T3756] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2830.918817][ T3756] exc_page_fault+0x98/0x170
[ 2830.923424][ T3756] asm_exc_page_fault+0x26/0x30
[ 2830.928296][ T3756] RIP: 0033:0x7f69a6639580
[ 2830.932724][ T3756] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2830.952350][ T3756] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
[ 2830.958432][ T3756] RAX: 0000000080c770a3 RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2830.966482][ T3756] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22ceb9
[ 2830.974477][ T3756] RBP: 0000000080c770a3 R08: 00000000000010a3 R09: 0000000080c770a7
[ 2830.982576][ T3756] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2830.990569][ T3756] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83cc9a08
[ 2830.998561][ T3756] ? apparmor_socket_create+0x228/0x660
[ 2831.004160][ T3756]
[ 2831.021679][ T3756] memory: usage 307192kB, limit 307200kB, failcnt 12493
[ 2831.029405][ T3756] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2831.047703][ T3756] Memory cgroup stats for /syz1:
[ 2831.047940][ T3756] anon 131072
[ 2831.047940][ T3756] file 393216
[ 2831.047940][ T3756] kernel 314032128
[ 2831.047940][ T3756] kernel_stack 65536
[ 2831.047940][ T3756] pagetables 73728
[ 2831.047940][ T3756] sec_pagetables 0
[ 2831.047940][ T3756] percpu 5356416
[ 2831.047940][ T3756] sock 0
[ 2831.047940][ T3756] vmalloc 0
[ 2831.047940][ T3756] shmem 385024
[ 2831.047940][ T3756] zswap 0
[ 2831.047940][ T3756] zswapped 0
[ 2831.047940][ T3756] file_mapped 385024
[ 2831.047940][ T3756] file_dirty 0
[ 2831.047940][ T3756] file_writeback 0
[ 2831.047940][ T3756] swapcached 0
[ 2831.047940][ T3756] anon_thp 0
[ 2831.047940][ T3756] file_thp 0
[ 2831.047940][ T3756] shmem_thp 0
[ 2831.047940][ T3756] inactive_anon 176128
[ 2831.047940][ T3756] active_anon 339968
[ 2831.047940][ T3756] inactive_file 4096
[ 2831.047940][ T3756] active_file 4096
[ 2831.047940][ T3756] unevictable 0
[ 2831.047940][ T3756] slab_reclaimable 14584
[ 2831.047940][ T3756] slab_unreclaimable 308480136
10:16:35 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3801}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2831.154614][ T3743] __nla_validate_parse: 3 callbacks suppressed
[ 2831.154633][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2831.202939][ T3743] device bridge1785 entered promiscuous mode
[ 2831.270653][ T3756] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3756,uid=0
[ 2831.300341][ T3744] device macvtap2175 entered promiscuous mode
[ 2831.341114][ T3756] Memory cgroup out of memory: Killed process 3756 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2831.371101][ T3762] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2831.391195][ T3745] device macvtap2176 entered promiscuous mode
[ 2831.397605][ T3762] CPU: 0 PID: 3762 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2831.407974][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2831.418053][ T3762] Call Trace:
[ 2831.421353][ T3762]
[ 2831.424311][ T3762] dump_stack_lvl+0xd1/0x138
[ 2831.428940][ T3762] dump_header+0x10b/0x85f
[ 2831.433392][ T3762] oom_kill_process.cold+0x10/0x15
10:16:35 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8500, @local}]}, 0x48}}, 0x0)
[ 2831.438540][ T3762] out_of_memory+0x35c/0x14a0
[ 2831.443264][ T3762] ? oom_killer_disable+0x280/0x280
[ 2831.448509][ T3762] ? find_held_lock+0x2d/0x110
[ 2831.453325][ T3762] mem_cgroup_out_of_memory+0x206/0x270
[ 2831.458909][ T3762] ? mem_cgroup_margin+0x130/0x130
[ 2831.464049][ T3762] ? lock_downgrade+0x6e0/0x6e0
[ 2831.468985][ T3762] try_charge_memcg+0xef8/0x12f0
[ 2831.473985][ T3762] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2831.480010][ T3762] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2831.485768][ T3762] ? lock_downgrade+0x6e0/0x6e0
[ 2831.490690][ T3762] obj_cgroup_charge+0x2af/0x5e0
[ 2831.495673][ T3762] ? vm_area_dup+0x85/0x380
[ 2831.500207][ T3762] kmem_cache_alloc+0xa3/0x3d0
[ 2831.505000][ T3762] vm_area_dup+0x85/0x380
[ 2831.509339][ T3762] ? mt_slot+0xa1/0x170
[ 2831.513522][ T3762] ? mas_next_nentry+0x610/0xab0
[ 2831.518486][ T3762] ? mas_next_node+0x547/0xa00
[ 2831.523306][ T3762] ? mas_find+0x211/0xd10
[ 2831.527662][ T3762] ? vm_area_alloc+0x100/0x100
[ 2831.532432][ T3762] ? validate_mm_mt+0x149/0x1b0
[ 2831.537285][ T3762] ? remove_vma+0x130/0x130
[ 2831.541793][ T3762] ? can_vma_merge_before+0x390/0x390
[ 2831.547168][ T3762] __split_vma+0xae/0x5e0
[ 2831.551497][ T3762] ? vma_merge+0x2cf/0x870
[ 2831.555915][ T3762] split_vma+0xa3/0xe0
[ 2831.560001][ T3762] mprotect_fixup+0x6cb/0x960
[ 2831.564731][ T3762] ? mas_find+0x211/0xd10
[ 2831.569090][ T3762] ? change_protection+0x4290/0x4290
[ 2831.574431][ T3762] do_mprotect_pkey+0x6fd/0xa70
[ 2831.579319][ T3762] ? mprotect_fixup+0x960/0x960
[ 2831.584171][ T3762] ? up_write+0x1b0/0x520
[ 2831.588537][ T3762] __x64_sys_mprotect+0x78/0xb0
[ 2831.593389][ T3762] do_syscall_64+0x39/0xb0
[ 2831.597806][ T3762] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2831.603697][ T3762] RIP: 0033:0x7f8325a8c1e7
[ 2831.608115][ T3762] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 2831.627735][ T3762] RSP: 002b:00007fff9cb6b1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[ 2831.636141][ T3762] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007f8325a8c1e7
[ 2831.644106][ T3762] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f8326769000
[ 2831.652074][ T3762] RBP: 00007fff9cb6b2d0 R08: 00000000ffffffff R09: 00007f8326788700
[ 2831.660053][ T3762] R10: 0000000000020022 R11: 0000000000000206 R12: 00007fff9cb6b3f0
[ 2831.668055][ T3762] R13: 00007f8326788700 R14: 0000000000000000 R15: 0000000000022000
[ 2831.676073][ T3762]
[ 2831.694553][ T3762] memory: usage 307176kB, limit 307200kB, failcnt 66437
[ 2831.701872][ T3762] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2831.710148][ T3762] Memory cgroup stats for /syz2:
[ 2831.710394][ T3762] anon 143360
[ 2831.710394][ T3762] file 417792
[ 2831.710394][ T3762] kernel 313987072
[ 2831.710394][ T3762] kernel_stack 65536
[ 2831.710394][ T3762] pagetables 77824
[ 2831.710394][ T3762] sec_pagetables 0
[ 2831.710394][ T3762] percpu 5357600
[ 2831.710394][ T3762] sock 0
[ 2831.710394][ T3762] vmalloc 0
[ 2831.710394][ T3762] shmem 417792
[ 2831.710394][ T3762] zswap 0
[ 2831.710394][ T3762] zswapped 0
[ 2831.710394][ T3762] file_mapped 417792
[ 2831.710394][ T3762] file_dirty 0
[ 2831.710394][ T3762] file_writeback 0
[ 2831.710394][ T3762] swapcached 0
[ 2831.710394][ T3762] anon_thp 0
[ 2831.710394][ T3762] file_thp 0
[ 2831.710394][ T3762] shmem_thp 0
[ 2831.710394][ T3762] inactive_anon 139264
[ 2831.710394][ T3762] active_anon 413696
[ 2831.710394][ T3762] inactive_file 0
[ 2831.710394][ T3762] active_file 0
[ 2831.710394][ T3762] unevictable 0
[ 2831.710394][ T3762] slab_reclaimable 14280
[ 2831.710394][ T3762] slab_unreclaimable 308447184
[ 2831.811464][ T3762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3762,uid=0
[ 2831.827164][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
10:16:36 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xf000}, 0x0)
[ 2831.827880][ T3762] Memory cgroup out of memory: Killed process 3762 (syz-executor.2) total-vm:54672kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2831.873770][ T3747] device bridge1326 entered promiscuous mode
[ 2831.904662][ T3764] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2831.927731][ T3764] CPU: 1 PID: 3764 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2831.938107][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2831.941516][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2831.948161][ T3764] Call Trace:
[ 2831.948173][ T3764]
[ 2831.948184][ T3764] dump_stack_lvl+0xd1/0x138
[ 2831.948224][ T3764] dump_header+0x10b/0x85f
[ 2831.948259][ T3764] oom_kill_process.cold+0x10/0x15
[ 2831.948293][ T3764] out_of_memory+0x35c/0x14a0
[ 2831.948333][ T3764] ? find_held_lock+0x2d/0x110
[ 2831.987268][ T3764] ? oom_killer_disable+0x280/0x280
[ 2831.992496][ T3764] ? find_held_lock+0x2d/0x110
[ 2831.997294][ T3764] mem_cgroup_out_of_memory+0x206/0x270
[ 2832.002857][ T3764] ? mem_cgroup_margin+0x130/0x130
[ 2832.007980][ T3764] ? lock_downgrade+0x6e0/0x6e0
[ 2832.012874][ T3764] try_charge_memcg+0xef8/0x12f0
[ 2832.017839][ T3764] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2832.023846][ T3764] ? rcu_read_unlock+0x9/0x60
[ 2832.028538][ T3764] ? lock_downgrade+0x6e0/0x6e0
[ 2832.033428][ T3764] charge_memcg+0x99/0x3b0
[ 2832.037866][ T3764] __mem_cgroup_charge+0x2b/0x90
[ 2832.042830][ T3764] wp_page_copy+0x2bf/0x1ca0
[ 2832.047461][ T3764] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2832.054080][ T3764] ? lock_downgrade+0x6e0/0x6e0
[ 2832.058957][ T3764] ? vm_normal_page+0x14a/0x2a0
[ 2832.063835][ T3764] do_wp_page+0x1d1/0x1930
[ 2832.068270][ T3764] __handle_mm_fault+0x181b/0x3a40
[ 2832.073403][ T3764] ? vm_iomap_memory+0x190/0x190
[ 2832.078379][ T3764] handle_mm_fault+0x1cc/0x780
[ 2832.083163][ T3764] do_user_addr_fault+0x475/0x1210
[ 2832.088295][ T3764] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2832.093873][ T3764] exc_page_fault+0x98/0x170
[ 2832.098479][ T3764] asm_exc_page_fault+0x26/0x30
[ 2832.103348][ T3764] RIP: 0033:0x7f69a6639580
[ 2832.107782][ T3764] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2832.127408][ T3764] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
[ 2832.133486][ T3764] RAX: 0000000080c770a3 RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2832.141465][ T3764] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22ceb9
[ 2832.149442][ T3764] RBP: 0000000080c770a3 R08: 00000000000010a3 R09: 0000000080c770a7
[ 2832.157421][ T3764] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2832.165398][ T3764] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83cc9a08
[ 2832.173377][ T3764] ? apparmor_socket_create+0x228/0x660
[ 2832.178967][ T3764]
[ 2832.196799][ T3767] device bridge1786 entered promiscuous mode
[ 2832.219395][ T3764] memory: usage 307184kB, limit 307200kB, failcnt 12592
[ 2832.226607][ T3764] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2832.234103][ T3764] Memory cgroup stats for /syz1:
[ 2832.234339][ T3764] anon 131072
[ 2832.234339][ T3764] file 393216
[ 2832.234339][ T3764] kernel 314032128
[ 2832.234339][ T3764] kernel_stack 65536
[ 2832.234339][ T3764] pagetables 73728
[ 2832.234339][ T3764] sec_pagetables 0
[ 2832.234339][ T3764] percpu 5356416
[ 2832.234339][ T3764] sock 0
[ 2832.234339][ T3764] vmalloc 0
[ 2832.234339][ T3764] shmem 385024
[ 2832.234339][ T3764] zswap 0
[ 2832.234339][ T3764] zswapped 0
[ 2832.234339][ T3764] file_mapped 385024
[ 2832.234339][ T3764] file_dirty 0
[ 2832.234339][ T3764] file_writeback 0
[ 2832.234339][ T3764] swapcached 0
[ 2832.234339][ T3764] anon_thp 0
[ 2832.234339][ T3764] file_thp 0
[ 2832.234339][ T3764] shmem_thp 0
[ 2832.234339][ T3764] inactive_anon 176128
[ 2832.234339][ T3764] active_anon 339968
[ 2832.234339][ T3764] inactive_file 4096
[ 2832.234339][ T3764] active_file 4096
[ 2832.234339][ T3764] unevictable 0
[ 2832.234339][ T3764] slab_reclaimable 14584
[ 2832.234339][ T3764] slab_unreclaimable 308479832
[ 2832.285862][ T3749] device macvtap1316 entered promiscuous mode
[ 2832.341186][ T3764] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3764,uid=0
10:16:36 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8600, @local}]}, 0x48}}, 0x0)
[ 2832.356851][ T3764] Memory cgroup out of memory: Killed process 3764 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2832.479394][ T3751] device macvtap1317 entered promiscuous mode
[ 2832.510811][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2832.520483][ T3769] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2832.535043][ T3769] CPU: 1 PID: 3769 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2832.545414][ T3769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2832.555494][ T3769] Call Trace:
[ 2832.558794][ T3769]
[ 2832.561742][ T3769] dump_stack_lvl+0xd1/0x138
[ 2832.566361][ T3769] dump_header+0x10b/0x85f
[ 2832.570800][ T3769] oom_kill_process.cold+0x10/0x15
[ 2832.575935][ T3769] out_of_memory+0x35c/0x14a0
[ 2832.580639][ T3769] ? find_held_lock+0x2d/0x110
[ 2832.585430][ T3769] ? oom_killer_disable+0x280/0x280
[ 2832.590652][ T3769] ? find_held_lock+0x2d/0x110
[ 2832.595447][ T3769] mem_cgroup_out_of_memory+0x206/0x270
[ 2832.601011][ T3769] ? mem_cgroup_margin+0x130/0x130
[ 2832.606137][ T3769] ? lock_downgrade+0x6e0/0x6e0
[ 2832.611038][ T3769] try_charge_memcg+0xef8/0x12f0
[ 2832.616005][ T3769] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2832.622016][ T3769] ? rcu_read_unlock+0x9/0x60
[ 2832.626707][ T3769] ? lock_downgrade+0x6e0/0x6e0
[ 2832.631602][ T3769] charge_memcg+0x99/0x3b0
[ 2832.636045][ T3769] __mem_cgroup_charge+0x2b/0x90
[ 2832.641008][ T3769] wp_page_copy+0x2bf/0x1ca0
[ 2832.645641][ T3769] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2832.652263][ T3769] ? lock_downgrade+0x6e0/0x6e0
[ 2832.657141][ T3769] ? vm_normal_page+0x14a/0x2a0
[ 2832.662018][ T3769] do_wp_page+0x1d1/0x1930
[ 2832.666454][ T3769] __handle_mm_fault+0x181b/0x3a40
[ 2832.671589][ T3769] ? vm_iomap_memory+0x190/0x190
[ 2832.676567][ T3769] handle_mm_fault+0x1cc/0x780
[ 2832.681355][ T3769] do_user_addr_fault+0x475/0x1210
[ 2832.686490][ T3769] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2832.692065][ T3769] exc_page_fault+0x98/0x170
[ 2832.696674][ T3769] asm_exc_page_fault+0x26/0x30
[ 2832.701551][ T3769] RIP: 0033:0x7f69a6639580
[ 2832.705980][ T3769] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2832.725599][ T3769] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
[ 2832.731677][ T3769] RAX: 0000000080c770a3 RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2832.739660][ T3769] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22ceb9
[ 2832.747648][ T3769] RBP: 0000000080c770a3 R08: 00000000000010a3 R09: 0000000080c770a7
[ 2832.755646][ T3769] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2832.763641][ T3769] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83cc9a08
[ 2832.771629][ T3769] ? apparmor_socket_create+0x228/0x660
[ 2832.777232][ T3769]
10:16:36 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0xa, @local}]}, 0x48}}, 0x0)
[ 2832.798328][ T3769] memory: usage 307192kB, limit 307200kB, failcnt 12660
[ 2832.805058][ T3753] device bridge534 entered promiscuous mode
[ 2832.805470][ T3769] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2832.823196][ T3769] Memory cgroup stats for /syz1:
[ 2832.823435][ T3769] anon 131072
[ 2832.823435][ T3769] file 393216
[ 2832.823435][ T3769] kernel 314032128
[ 2832.823435][ T3769] kernel_stack 65536
[ 2832.823435][ T3769] pagetables 73728
[ 2832.823435][ T3769] sec_pagetables 0
[ 2832.823435][ T3769] percpu 5356416
[ 2832.823435][ T3769] sock 0
[ 2832.823435][ T3769] vmalloc 0
[ 2832.823435][ T3769] shmem 385024
[ 2832.823435][ T3769] zswap 0
[ 2832.823435][ T3769] zswapped 0
[ 2832.823435][ T3769] file_mapped 385024
[ 2832.823435][ T3769] file_dirty 0
[ 2832.823435][ T3769] file_writeback 0
[ 2832.823435][ T3769] swapcached 0
[ 2832.823435][ T3769] anon_thp 0
[ 2832.823435][ T3769] file_thp 0
[ 2832.823435][ T3769] shmem_thp 0
[ 2832.823435][ T3769] inactive_anon 176128
[ 2832.823435][ T3769] active_anon 339968
[ 2832.823435][ T3769] inactive_file 4096
[ 2832.823435][ T3769] active_file 4096
[ 2832.823435][ T3769] unevictable 0
[ 2832.823435][ T3769] slab_reclaimable 14584
[ 2832.823435][ T3769] slab_unreclaimable 308480136
[ 2832.904047][ T3754] device macvtap563 entered promiscuous mode
[ 2832.928475][ T3769] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3769,uid=0
10:16:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8700, @local}]}, 0x48}}, 0x0)
[ 2832.944850][ T3769] Memory cgroup out of memory: Killed process 3769 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2832.962621][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2833.021577][ T3755] device macvtap564 entered promiscuous mode
10:16:37 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x3f00}, 0x0)
[ 2833.110114][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2833.167909][ T3759] device bridge446 entered promiscuous mode
[ 2833.179895][ T3776] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2833.204990][ T3776] CPU: 0 PID: 3776 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2833.215362][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2833.225440][ T3776] Call Trace:
[ 2833.228735][ T3776]
[ 2833.231682][ T3776] dump_stack_lvl+0xd1/0x138
[ 2833.236315][ T3776] dump_header+0x10b/0x85f
[ 2833.240764][ T3776] oom_kill_process.cold+0x10/0x15
[ 2833.245902][ T3776] out_of_memory+0x35c/0x14a0
[ 2833.250599][ T3776] ? find_held_lock+0x2d/0x110
[ 2833.255402][ T3776] ? oom_killer_disable+0x280/0x280
[ 2833.260628][ T3776] ? find_held_lock+0x2d/0x110
[ 2833.265426][ T3776] mem_cgroup_out_of_memory+0x206/0x270
[ 2833.270989][ T3776] ? mem_cgroup_margin+0x130/0x130
[ 2833.276116][ T3776] ? lock_downgrade+0x6e0/0x6e0
[ 2833.281017][ T3776] try_charge_memcg+0xef8/0x12f0
[ 2833.285984][ T3776] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2833.291994][ T3776] ? rcu_read_unlock+0x9/0x60
[ 2833.296682][ T3776] ? lock_downgrade+0x6e0/0x6e0
[ 2833.301576][ T3776] charge_memcg+0x99/0x3b0
[ 2833.306017][ T3776] __mem_cgroup_charge+0x2b/0x90
[ 2833.310980][ T3776] wp_page_copy+0x2bf/0x1ca0
[ 2833.315606][ T3776] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2833.322225][ T3776] ? lock_downgrade+0x6e0/0x6e0
[ 2833.327102][ T3776] ? vm_normal_page+0x14a/0x2a0
[ 2833.331983][ T3776] do_wp_page+0x1d1/0x1930
[ 2833.336417][ T3776] __handle_mm_fault+0x181b/0x3a40
[ 2833.341553][ T3776] ? vm_iomap_memory+0x190/0x190
[ 2833.346532][ T3776] handle_mm_fault+0x1cc/0x780
[ 2833.351321][ T3776] do_user_addr_fault+0x475/0x1210
[ 2833.356459][ T3776] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2833.362032][ T3776] exc_page_fault+0x98/0x170
[ 2833.366642][ T3776] asm_exc_page_fault+0x26/0x30
[ 2833.371518][ T3776] RIP: 0033:0x7f69a6639580
[ 2833.375945][ T3776] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2833.395563][ T3776] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
[ 2833.401640][ T3776] RAX: 00000000abd0756a RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2833.409620][ T3776] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22cf67
[ 2833.417600][ T3776] RBP: 00000000abd0756a R08: 000000000000156a R09: 00000000abd0756e
[ 2833.425582][ T3776] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2833.433560][ T3776] R13: 0000000000000001 R14: 000000000000000c R15: ffffffff83cc98bf
[ 2833.441541][ T3776] ? apparmor_socket_create+0xdf/0x660
[ 2833.447045][ T3776]
[ 2833.459434][ T3776] memory: usage 307200kB, limit 307200kB, failcnt 12744
[ 2833.471931][ T3776] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2833.479489][ T3776] Memory cgroup stats for /syz1:
[ 2833.479694][ T3776] anon 126976
[ 2833.479694][ T3776] file 393216
[ 2833.479694][ T3776] kernel 314032128
[ 2833.479694][ T3776] kernel_stack 65536
[ 2833.479694][ T3776] pagetables 73728
[ 2833.479694][ T3776] sec_pagetables 0
[ 2833.479694][ T3776] percpu 5356416
[ 2833.479694][ T3776] sock 0
[ 2833.479694][ T3776] vmalloc 0
[ 2833.479694][ T3776] shmem 385024
[ 2833.479694][ T3776] zswap 0
[ 2833.479694][ T3776] zswapped 0
[ 2833.479694][ T3776] file_mapped 385024
[ 2833.479694][ T3776] file_dirty 0
[ 2833.479694][ T3776] file_writeback 0
[ 2833.479694][ T3776] swapcached 0
[ 2833.479694][ T3776] anon_thp 0
[ 2833.479694][ T3776] file_thp 0
[ 2833.479694][ T3776] shmem_thp 0
[ 2833.479694][ T3776] inactive_anon 172032
[ 2833.479694][ T3776] active_anon 339968
[ 2833.479694][ T3776] inactive_file 0
[ 2833.479694][ T3776] active_file 8192
[ 2833.479694][ T3776] unevictable 0
[ 2833.479694][ T3776] slab_reclaimable 14584
10:16:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8800, @local}]}, 0x48}}, 0x0)
[ 2833.479694][ T3776] slab_unreclaimable 308480136
[ 2833.482306][ T3760] device macvtap461 entered promiscuous mode
[ 2833.484941][ T3776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3776,uid=0
[ 2833.604296][ T3776] Memory cgroup out of memory: Killed process 3776 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2833.737622][ T3761] netlink: 'syz-executor.4': attribute type 15 has an invalid length.
[ 2833.750494][ T3782] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2833.772592][ T3782] CPU: 1 PID: 3782 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2833.782967][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2833.793047][ T3782] Call Trace:
[ 2833.796340][ T3782]
[ 2833.799293][ T3782] dump_stack_lvl+0xd1/0x138
[ 2833.803923][ T3782] dump_header+0x10b/0x85f
[ 2833.808369][ T3782] oom_kill_process.cold+0x10/0x15
[ 2833.813503][ T3782] out_of_memory+0x35c/0x14a0
[ 2833.818216][ T3782] ? find_held_lock+0x2d/0x110
[ 2833.823025][ T3782] ? oom_killer_disable+0x280/0x280
[ 2833.828267][ T3782] ? find_held_lock+0x2d/0x110
[ 2833.833075][ T3782] mem_cgroup_out_of_memory+0x206/0x270
[ 2833.838657][ T3782] ? mem_cgroup_margin+0x130/0x130
[ 2833.839504][ T3761] device macvtap462 entered promiscuous mode
[ 2833.843777][ T3782] ? lock_downgrade+0x6e0/0x6e0
[ 2833.843844][ T3782] try_charge_memcg+0xef8/0x12f0
[ 2833.859627][ T3782] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2833.865652][ T3782] ? rcu_read_unlock+0x9/0x60
[ 2833.870359][ T3782] ? lock_downgrade+0x6e0/0x6e0
[ 2833.875263][ T3782] charge_memcg+0x99/0x3b0
[ 2833.879705][ T3782] __mem_cgroup_charge+0x2b/0x90
[ 2833.884678][ T3782] wp_page_copy+0x2bf/0x1ca0
[ 2833.889329][ T3782] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2833.895970][ T3782] ? lock_downgrade+0x6e0/0x6e0
[ 2833.900868][ T3782] ? vm_normal_page+0x14a/0x2a0
[ 2833.905767][ T3782] do_wp_page+0x1d1/0x1930
[ 2833.910227][ T3782] __handle_mm_fault+0x181b/0x3a40
[ 2833.915383][ T3782] ? vm_iomap_memory+0x190/0x190
[ 2833.920382][ T3782] handle_mm_fault+0x1cc/0x780
[ 2833.925182][ T3782] do_user_addr_fault+0x475/0x1210
[ 2833.930336][ T3782] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2833.935930][ T3782] exc_page_fault+0x98/0x170
[ 2833.940551][ T3782] asm_exc_page_fault+0x26/0x30
[ 2833.945440][ T3782] RIP: 0033:0x7f69a6639580
[ 2833.949878][ T3782] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2833.959653][ T29] oom_reaper: reaped process 3762 (syz-executor.2), now anon-rss:0kB, file-rss:8192kB, shmem-rss:8kB
[ 2833.969495][ T3782] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
10:16:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0x7bf, 0x1, @local}]}, 0x48}}, 0x0)
[ 2833.969522][ T3782] RAX: 0000000080c770a3 RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2833.969541][ T3782] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22ceb9
[ 2833.969559][ T3782] RBP: 0000000080c770a3 R08: 00000000000010a3 R09: 0000000080c770a7
[ 2833.969578][ T3782] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2833.969598][ T3782] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83cc9a08
[ 2833.969617][ T3782] ? apparmor_socket_create+0x228/0x660
[ 2833.969684][ T3782]
[ 2834.024219][ T3763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 2834.049532][ T3782] memory: usage 307200kB, limit 307200kB, failcnt 12830
[ 2834.056751][ T3782] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2834.065063][ T3782] Memory cgroup stats for /syz1:
[ 2834.065315][ T3782] anon 131072
[ 2834.065315][ T3782] file 393216
[ 2834.065315][ T3782] kernel 314048512
[ 2834.065315][ T3782] kernel_stack 65536
[ 2834.065315][ T3782] pagetables 73728
[ 2834.065315][ T3782] sec_pagetables 0
[ 2834.065315][ T3782] percpu 5356416
[ 2834.065315][ T3782] sock 0
[ 2834.065315][ T3782] vmalloc 0
[ 2834.065315][ T3782] shmem 385024
[ 2834.065315][ T3782] zswap 0
[ 2834.065315][ T3782] zswapped 0
[ 2834.065315][ T3782] file_mapped 385024
[ 2834.065315][ T3782] file_dirty 0
[ 2834.065315][ T3782] file_writeback 0
[ 2834.065315][ T3782] swapcached 0
[ 2834.065315][ T3782] anon_thp 0
[ 2834.065315][ T3782] file_thp 0
[ 2834.065315][ T3782] shmem_thp 0
[ 2834.065315][ T3782] inactive_anon 176128
[ 2834.065315][ T3782] active_anon 339968
[ 2834.065315][ T3782] inactive_file 4096
[ 2834.065315][ T3782] active_file 4096
[ 2834.065315][ T3782] unevictable 0
[ 2834.065315][ T3782] slab_reclaimable 14584
[ 2834.065315][ T3782] slab_unreclaimable 308491232
[ 2834.097605][ T3763] device bridge2111 entered promiscuous mode
10:16:38 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8900, @local}]}, 0x48}}, 0x0)
[ 2834.175015][ T3782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3782,uid=0
[ 2834.190751][ T3782] Memory cgroup out of memory: Killed process 3782 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
10:16:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3802}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2834.336605][ T3768] device macvtap2176 entered promiscuous mode
[ 2834.428095][ T3788] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2834.446800][ T3767] device macvtap2177 entered promiscuous mode
[ 2834.451682][ T3788] CPU: 0 PID: 3788 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2834.463233][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2834.473310][ T3788] Call Trace:
[ 2834.476639][ T3788]
[ 2834.479601][ T3788] dump_stack_lvl+0xd1/0x138
[ 2834.484231][ T3788] dump_header+0x10b/0x85f
[ 2834.488698][ T3788] oom_kill_process.cold+0x10/0x15
[ 2834.493852][ T3788] out_of_memory+0x35c/0x14a0
[ 2834.498571][ T3788] ? find_held_lock+0x2d/0x110
[ 2834.503379][ T3788] ? oom_killer_disable+0x280/0x280
[ 2834.508635][ T3788] ? find_held_lock+0x2d/0x110
[ 2834.513454][ T3788] mem_cgroup_out_of_memory+0x206/0x270
[ 2834.519038][ T3788] ? mem_cgroup_margin+0x130/0x130
[ 2834.524182][ T3788] ? lock_downgrade+0x6e0/0x6e0
[ 2834.529103][ T3788] try_charge_memcg+0xef8/0x12f0
[ 2834.534082][ T3788] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2834.540068][ T3788] ? rcu_read_unlock+0x9/0x60
[ 2834.544753][ T3788] ? lock_downgrade+0x6e0/0x6e0
[ 2834.549644][ T3788] charge_memcg+0x99/0x3b0
[ 2834.554100][ T3788] __mem_cgroup_charge+0x2b/0x90
[ 2834.559080][ T3788] wp_page_copy+0x2bf/0x1ca0
[ 2834.563733][ T3788] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2834.570455][ T3788] ? lock_downgrade+0x6e0/0x6e0
[ 2834.575350][ T3788] ? vm_normal_page+0x14a/0x2a0
[ 2834.580228][ T3788] do_wp_page+0x1d1/0x1930
[ 2834.584644][ T3788] __handle_mm_fault+0x181b/0x3a40
[ 2834.589753][ T3788] ? vm_iomap_memory+0x190/0x190
[ 2834.594701][ T3788] handle_mm_fault+0x1cc/0x780
[ 2834.599482][ T3788] do_user_addr_fault+0x475/0x1210
[ 2834.604632][ T3788] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2834.610223][ T3788] exc_page_fault+0x98/0x170
[ 2834.614848][ T3788] asm_exc_page_fault+0x26/0x30
[ 2834.619734][ T3788] RIP: 0033:0x7f8325a39580
[ 2834.624177][ T3788] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2834.643811][ T3788] RSP: 002b:00007fff9cb6b200 EFLAGS: 00010246
[ 2834.649905][ T3788] RAX: 0000000017a21b3b RBX: 00007f8325bac018 RCX: 0000001b2d620000
[ 2834.657899][ T3788] RDX: 0000000000000000 RSI: 0000001b2d620018 RDI: 000000000c50288f
[ 2834.665892][ T3788] RBP: 0000000017a21b3b R08: 0000000000001b3b R09: 0000000017a21b3f
[ 2834.673889][ T3788] R10: 00007fff9cb6b3c0 R11: 0000000000000246 R12: 00007f8325ba0000
[ 2834.681886][ T3788] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87aa736c
[ 2834.689879][ T3788] ? __sys_socket+0x7c/0x250
[ 2834.694530][ T3788]
[ 2834.702783][ T3788] memory: usage 307192kB, limit 307200kB, failcnt 66542
[ 2834.709942][ T3788] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2834.716926][ T3788] Memory cgroup stats for /syz2:
[ 2834.717159][ T3788] anon 106496
[ 2834.717159][ T3788] file 417792
[ 2834.717159][ T3788] kernel 314040320
[ 2834.717159][ T3788] kernel_stack 65536
[ 2834.717159][ T3788] pagetables 69632
[ 2834.717159][ T3788] sec_pagetables 0
[ 2834.717159][ T3788] percpu 5358784
[ 2834.717159][ T3788] sock 0
[ 2834.717159][ T3788] vmalloc 0
[ 2834.717159][ T3788] shmem 417792
[ 2834.717159][ T3788] zswap 0
[ 2834.717159][ T3788] zswapped 0
[ 2834.717159][ T3788] file_mapped 417792
[ 2834.717159][ T3788] file_dirty 0
[ 2834.717159][ T3788] file_writeback 0
[ 2834.717159][ T3788] swapcached 0
[ 2834.717159][ T3788] anon_thp 0
[ 2834.717159][ T3788] file_thp 0
[ 2834.717159][ T3788] shmem_thp 0
[ 2834.717159][ T3788] inactive_anon 110592
[ 2834.717159][ T3788] active_anon 413696
[ 2834.717159][ T3788] inactive_file 0
[ 2834.717159][ T3788] active_file 0
[ 2834.717159][ T3788] unevictable 0
[ 2834.717159][ T3788] slab_reclaimable 12352
[ 2834.717159][ T3788] slab_unreclaimable 308507888
10:16:39 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xf803}, 0x0)
[ 2834.849486][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2834.884765][ T3773] device bridge1327 entered promiscuous mode
[ 2834.944731][ T3788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3788,uid=0
[ 2834.962237][ T3788] Memory cgroup out of memory: Killed process 3788 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000
[ 2834.992895][ T3789] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2834.998707][ T3774] device macvtap1318 entered promiscuous mode
[ 2835.004245][ T3789] CPU: 0 PID: 3789 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2835.019510][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2835.029586][ T3789] Call Trace:
[ 2835.032881][ T3789]
[ 2835.035825][ T3789] dump_stack_lvl+0xd1/0x138
[ 2835.037116][ T3775] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[ 2835.040428][ T3789] dump_header+0x10b/0x85f
[ 2835.040467][ T3789] oom_kill_process.cold+0x10/0x15
[ 2835.040503][ T3789] out_of_memory+0x35c/0x14a0
[ 2835.062862][ T3789] ? find_held_lock+0x2d/0x110
[ 2835.067657][ T3789] ? oom_killer_disable+0x280/0x280
[ 2835.072882][ T3789] ? find_held_lock+0x2d/0x110
[ 2835.077680][ T3789] mem_cgroup_out_of_memory+0x206/0x270
[ 2835.083422][ T3789] ? mem_cgroup_margin+0x130/0x130
[ 2835.088636][ T3789] ? lock_downgrade+0x6e0/0x6e0
[ 2835.093531][ T3789] try_charge_memcg+0xef8/0x12f0
[ 2835.098500][ T3789] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2835.104509][ T3789] ? rcu_read_unlock+0x9/0x60
[ 2835.109201][ T3789] ? lock_downgrade+0x6e0/0x6e0
[ 2835.114096][ T3789] charge_memcg+0x99/0x3b0
[ 2835.118537][ T3789] __mem_cgroup_charge+0x2b/0x90
[ 2835.123502][ T3789] wp_page_copy+0x2bf/0x1ca0
[ 2835.128132][ T3789] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2835.134926][ T3789] ? lock_downgrade+0x6e0/0x6e0
[ 2835.139805][ T3789] ? vm_normal_page+0x14a/0x2a0
[ 2835.144685][ T3789] do_wp_page+0x1d1/0x1930
[ 2835.149126][ T3789] __handle_mm_fault+0x181b/0x3a40
[ 2835.154272][ T3789] ? vm_iomap_memory+0x190/0x190
[ 2835.159272][ T3789] handle_mm_fault+0x1cc/0x780
[ 2835.164245][ T3789] do_user_addr_fault+0x475/0x1210
[ 2835.169400][ T3789] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2835.174983][ T3789] exc_page_fault+0x98/0x170
[ 2835.179594][ T3789] asm_exc_page_fault+0x26/0x30
[ 2835.184467][ T3789] RIP: 0033:0x7f69a6639580
[ 2835.188902][ T3789] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48
[ 2835.208530][ T3789] RSP: 002b:00007ffea4dd30b0 EFLAGS: 00010246
[ 2835.214628][ T3789] RAX: 0000000080c770a3 RBX: 00007f69a67ac018 RCX: 0000001b31f20000
[ 2835.222614][ T3789] RDX: 0000000000000000 RSI: 0000001b31f20018 RDI: 000000000a22ceb9
[ 2835.230595][ T3789] RBP: 0000000080c770a3 R08: 00000000000010a3 R09: 0000000080c770a7
10:16:39 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3803}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2835.238576][ T3789] R10: 00007ffea4dd3270 R11: 0000000000000246 R12: 00007f69a67a0000
[ 2835.246563][ T3789] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83cc9a08
[ 2835.254549][ T3789] ? apparmor_socket_create+0x228/0x660
[ 2835.260148][ T3789]
[ 2835.276323][ T3789] memory: usage 307184kB, limit 307200kB, failcnt 12966
[ 2835.295316][ T3789] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2835.311637][ T3789] Memory cgroup stats for /syz1:
[ 2835.311834][ T3789] anon 131072
[ 2835.311834][ T3789] file 393216
[ 2835.311834][ T3789] kernel 314032128
[ 2835.311834][ T3789] kernel_stack 65536
[ 2835.311834][ T3789] pagetables 73728
[ 2835.311834][ T3789] sec_pagetables 0
[ 2835.311834][ T3789] percpu 5356416
[ 2835.311834][ T3789] sock 0
[ 2835.311834][ T3789] vmalloc 0
[ 2835.311834][ T3789] shmem 385024
[ 2835.311834][ T3789] zswap 0
[ 2835.311834][ T3789] zswapped 0
[ 2835.311834][ T3789] file_mapped 385024
[ 2835.311834][ T3789] file_dirty 0
[ 2835.311834][ T3789] file_writeback 0
[ 2835.311834][ T3789] swapcached 0
[ 2835.311834][ T3789] anon_thp 0
[ 2835.311834][ T3789] file_thp 0
[ 2835.311834][ T3789] shmem_thp 0
[ 2835.311834][ T3789] inactive_anon 176128
[ 2835.311834][ T3789] active_anon 339968
[ 2835.311834][ T3789] inactive_file 0
[ 2835.311834][ T3789] active_file 8192
[ 2835.311834][ T3789] unevictable 0
[ 2835.311834][ T3789] slab_reclaimable 14584
[ 2835.311834][ T3789] slab_unreclaimable 308479832
[ 2835.317029][ T3775] device macvtap1319 entered promiscuous mode
[ 2835.462142][ T3789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3789,uid=0
[ 2835.478247][ T3789] Memory cgroup out of memory: Killed process 3789 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 2835.505880][ T3796] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2835.525305][ T3796] CPU: 0 PID: 3796 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2835.535668][ T3796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2835.545746][ T3796] Call Trace:
[ 2835.549041][ T3796]
[ 2835.551989][ T3796] dump_stack_lvl+0xd1/0x138
[ 2835.556623][ T3796] dump_header+0x10b/0x85f
10:16:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8a00, @local}]}, 0x48}}, 0x0)
[ 2835.561077][ T3796] oom_kill_process.cold+0x10/0x15
[ 2835.566228][ T3796] out_of_memory+0x35c/0x14a0
[ 2835.570954][ T3796] ? find_held_lock+0x2d/0x110
[ 2835.575763][ T3796] ? oom_killer_disable+0x280/0x280
[ 2835.581003][ T3796] ? find_held_lock+0x2d/0x110
[ 2835.585812][ T3796] mem_cgroup_out_of_memory+0x206/0x270
[ 2835.591393][ T3796] ? mem_cgroup_margin+0x130/0x130
[ 2835.596561][ T3796] ? lock_downgrade+0x6e0/0x6e0
[ 2835.601483][ T3796] try_charge_memcg+0xef8/0x12f0
[ 2835.606473][ T3796] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2835.612507][ T3796] ? rcu_read_unlock+0x9/0x60
[ 2835.617215][ T3796] ? lock_downgrade+0x6e0/0x6e0
[ 2835.622130][ T3796] charge_memcg+0x99/0x3b0
[ 2835.626593][ T3796] __mem_cgroup_charge+0x2b/0x90
[ 2835.631588][ T3796] wp_page_copy+0x2bf/0x1ca0
[ 2835.636252][ T3796] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10
[ 2835.642890][ T3796] ? lock_downgrade+0x6e0/0x6e0
[ 2835.647791][ T3796] ? vm_normal_page+0x14a/0x2a0
[ 2835.652693][ T3796] do_wp_page+0x538/0x1930
[ 2835.657149][ T3796] __handle_mm_fault+0x181b/0x3a40
[ 2835.662307][ T3796] ? vm_iomap_memory+0x190/0x190
[ 2835.667307][ T3796] handle_mm_fault+0x1cc/0x780
[ 2835.672111][ T3796] do_user_addr_fault+0x475/0x1210
[ 2835.677266][ T3796] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2835.682868][ T3796] exc_page_fault+0x98/0x170
[ 2835.687492][ T3796] asm_exc_page_fault+0x26/0x30
[ 2835.692394][ T3796] RIP: 0033:0x7f8325a36655
[ 2835.696832][ T3796] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d 6e 1a 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 1d 73 17 00 48 8b 53 10 4c 8d 81 00
[ 2835.716470][ T3796] RSP: 002b:00007fff9cb6b2b0 EFLAGS: 00010206
[ 2835.722572][ T3796] RAX: 0000000000000003 RBX: 00007f8325babf80 RCX: 00007f8325ba80c0
[ 2835.730581][ T3796] RDX: 00007f8325ba80c0 RSI: 0000000000000080 RDI: 00007f8325babf80
[ 2835.738578][ T3796] RBP: 00007f8325babf80 R08: 00007fff9cb80080 R09: 0000000000000000
[ 2835.746573][ T3796] R10: 00007fff9cb6b3c0 R11: 0000000000000246 R12: 00000000002b4409
[ 2835.754566][ T3796] R13: 00007fff9cb6b3c0 R14: 00007f8325babf80 R15: 0000000000000032
[ 2835.762566][ T3796]
[ 2835.775195][ T3796] memory: usage 307200kB, limit 307200kB, failcnt 66637
[ 2835.782460][ T3779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2835.782504][ T3796] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2835.782533][ T3796] Memory cgroup stats for /syz2:
[ 2835.799717][ T3796] anon 98304
[ 2835.799717][ T3796] file 417792
[ 2835.799717][ T3796] kernel 314056704
[ 2835.799717][ T3796] kernel_stack 65536
[ 2835.799717][ T3796] pagetables 69632
[ 2835.799717][ T3796] sec_pagetables 0
[ 2835.799717][ T3796] percpu 5358784
[ 2835.799717][ T3796] sock 0
[ 2835.799717][ T3796] vmalloc 0
[ 2835.799717][ T3796] shmem 417792
[ 2835.799717][ T3796] zswap 0
[ 2835.799717][ T3796] zswapped 0
[ 2835.799717][ T3796] file_mapped 417792
[ 2835.799717][ T3796] file_dirty 0
[ 2835.799717][ T3796] file_writeback 0
[ 2835.799717][ T3796] swapcached 0
[ 2835.799717][ T3796] anon_thp 0
[ 2835.799717][ T3796] file_thp 0
[ 2835.799717][ T3796] shmem_thp 0
[ 2835.799717][ T3796] inactive_anon 102400
[ 2835.799717][ T3796] active_anon 413696
[ 2835.799717][ T3796] inactive_file 0
[ 2835.799717][ T3796] active_file 0
[ 2835.799717][ T3796] unevictable 0
[ 2835.799717][ T3796] slab_reclaimable 12352
[ 2835.799717][ T3796] slab_unreclaimable 308519288
[ 2835.840721][ T3779] device bridge535 entered promiscuous mode
[ 2835.897633][ T3796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3796,uid=0
10:16:40 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x2e02}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:40 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3900}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2835.940788][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[ 2835.947174][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[ 2835.969591][ T3796] Memory cgroup out of memory: Killed process 3796 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000
[ 2836.039201][ T3780] device macvtap564 entered promiscuous mode
[ 2836.088604][ T3781] device macvtap565 entered promiscuous mode
[ 2836.089833][ T3798] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2836.123261][ T3798] CPU: 1 PID: 3798 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2836.133628][ T3798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2836.143711][ T3798] Call Trace:
[ 2836.147012][ T3798]
[ 2836.149964][ T3798] dump_stack_lvl+0xd1/0x138
[ 2836.154598][ T3798] dump_header+0x10b/0x85f
[ 2836.159061][ T3798] oom_kill_process.cold+0x10/0x15
[ 2836.164194][ T3798] out_of_memory+0x35c/0x14a0
[ 2836.168899][ T3798] ? find_held_lock+0x2d/0x110
[ 2836.173706][ T3798] ? oom_killer_disable+0x280/0x280
[ 2836.178943][ T3798] ? find_held_lock+0x2d/0x110
[ 2836.183746][ T3798] mem_cgroup_out_of_memory+0x206/0x270
[ 2836.189307][ T3798] ? mem_cgroup_margin+0x130/0x130
[ 2836.194434][ T3798] ? lock_downgrade+0x6e0/0x6e0
[ 2836.199331][ T3798] try_charge_memcg+0xef8/0x12f0
[ 2836.204300][ T3798] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2836.210304][ T3798] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2836.216041][ T3798] ? lock_downgrade+0x6e0/0x6e0
[ 2836.220942][ T3798] obj_cgroup_charge+0x2af/0x5e0
[ 2836.225913][ T3798] ? __anon_vma_prepare+0x64/0x580
[ 2836.231039][ T3798] kmem_cache_alloc+0xa3/0x3d0
[ 2836.235827][ T3798] __anon_vma_prepare+0x64/0x580
[ 2836.240778][ T3798] ? __pmd_alloc+0x30c/0x5d0
[ 2836.245386][ T3798] __handle_mm_fault+0x35bc/0x3a40
[ 2836.250521][ T3798] ? vm_iomap_memory+0x190/0x190
[ 2836.255500][ T3798] handle_mm_fault+0x1cc/0x780
[ 2836.260285][ T3798] do_user_addr_fault+0x475/0x1210
[ 2836.265419][ T3798] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2836.271002][ T3798] exc_page_fault+0x98/0x170
[ 2836.275611][ T3798] asm_exc_page_fault+0x26/0x30
[ 2836.280486][ T3798] RIP: 0033:0x7f69a662bd79
[ 2836.284912][ T3798] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2836.304534][ T3798] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2836.310614][ T3798] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2836.318593][ T3798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2836.326573][ T3798] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2836.334552][ T3798] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b4625
[ 2836.342531][ T3798] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2836.350529][ T3798]
[ 2836.362017][ T3798] memory: usage 307184kB, limit 307200kB, failcnt 13094
[ 2836.383048][ T3798] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2836.391194][ T3798] Memory cgroup stats for /syz1:
[ 2836.391271][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2836.391591][ T3798] anon 135168
[ 2836.391591][ T3798] file 393216
[ 2836.391591][ T3798] kernel 314028032
[ 2836.391591][ T3798] kernel_stack 65536
[ 2836.391591][ T3798] pagetables 81920
[ 2836.391591][ T3798] sec_pagetables 0
[ 2836.391591][ T3798] percpu 5356416
[ 2836.391591][ T3798] sock 0
[ 2836.391591][ T3798] vmalloc 0
[ 2836.391591][ T3798] shmem 385024
[ 2836.391591][ T3798] zswap 0
[ 2836.391591][ T3798] zswapped 0
[ 2836.391591][ T3798] file_mapped 385024
[ 2836.391591][ T3798] file_dirty 0
[ 2836.391591][ T3798] file_writeback 0
[ 2836.391591][ T3798] swapcached 0
[ 2836.391591][ T3798] anon_thp 0
[ 2836.391591][ T3798] file_thp 0
[ 2836.391591][ T3798] shmem_thp 0
[ 2836.391591][ T3798] inactive_anon 180224
[ 2836.391591][ T3798] active_anon 339968
[ 2836.391591][ T3798] inactive_file 4096
[ 2836.391591][ T3798] active_file 4096
[ 2836.391591][ T3798] unevictable 0
[ 2836.391591][ T3798] slab_reclaimable 16512
10:16:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x3f00}, 0x0)
[ 2836.391591][ T3798] slab_unreclaimable 308469384
[ 2836.456301][ T3785] device bridge447 entered promiscuous mode
[ 2836.515279][ T3798] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3798,uid=0
10:16:40 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8b00, @local}]}, 0x48}}, 0x0)
[ 2836.531839][ T3798] Memory cgroup out of memory: Killed process 3798 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2836.552760][ T3802] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2836.573287][ T3802] CPU: 1 PID: 3802 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2836.583657][ T3802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2836.593732][ T3802] Call Trace:
[ 2836.597028][ T3802]
[ 2836.599985][ T3802] dump_stack_lvl+0xd1/0x138
[ 2836.604605][ T3802] dump_header+0x10b/0x85f
[ 2836.609061][ T3802] oom_kill_process.cold+0x10/0x15
[ 2836.614206][ T3802] out_of_memory+0x35c/0x14a0
[ 2836.618916][ T3802] ? oom_killer_disable+0x280/0x280
[ 2836.624136][ T3802] ? find_held_lock+0x2d/0x110
[ 2836.628939][ T3802] mem_cgroup_out_of_memory+0x206/0x270
[ 2836.634505][ T3802] ? mem_cgroup_margin+0x130/0x130
[ 2836.639632][ T3802] ? lock_downgrade+0x6e0/0x6e0
[ 2836.644529][ T3802] try_charge_memcg+0xef8/0x12f0
[ 2836.649498][ T3802] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2836.655541][ T3802] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2836.661286][ T3802] ? lock_downgrade+0x6e0/0x6e0
[ 2836.666178][ T3802] ? lock_downgrade+0x6e0/0x6e0
[ 2836.671764][ T3802] __memcg_kmem_charge_page+0x16e/0x3b0
[ 2836.677337][ T3802] memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2836.683525][ T3802] copy_process+0x73e/0x7190
[ 2836.688137][ T3802] ? __lock_acquire+0xbc3/0x56d0
[ 2836.693115][ T3802] ? __cleanup_sighand+0xb0/0xb0
[ 2836.698068][ T3802] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2836.704079][ T3802] ? psi_memstall_leave+0x174/0x250
[ 2836.709307][ T3802] kernel_clone+0xeb/0x980
[ 2836.713742][ T3802] ? create_io_thread+0xf0/0xf0
[ 2836.718615][ T3802] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0
[ 2836.724884][ T3802] ? lock_downgrade+0x6e0/0x6e0
[ 2836.729778][ T3802] __do_sys_clone+0xba/0x100
[ 2836.734387][ T3802] ? kernel_clone+0x980/0x980
[ 2836.739097][ T3802] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2836.745016][ T3802] do_syscall_64+0x39/0xb0
[ 2836.749457][ T3802] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2836.755371][ T3802] RIP: 0033:0x7f8325a8d501
[ 2836.759798][ T3802] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2836.779419][ T3802] RSP: 002b:00007fff9cb6b1a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2836.787847][ T3802] RAX: ffffffffffffffda RBX: 00007f83267a9700 RCX: 00007f8325a8d501
[ 2836.795828][ T3802] RDX: 00007f83267a99d0 RSI: 00007f83267a92f0 RDI: 00000000003d0f00
[ 2836.803820][ T3802] RBP: 00007fff9cb6b3f0 R08: 00007f83267a9700 R09: 00007f83267a9700
[ 2836.811802][ T3802] R10: 00007f83267a99d0 R11: 0000000000000206 R12: 00007fff9cb6b25e
[ 2836.819782][ T3802] R13: 00007fff9cb6b25f R14: 00007f83267a9300 R15: 0000000000022000
[ 2836.827781][ T3802]
[ 2836.848613][ T3802] memory: usage 307200kB, limit 307200kB, failcnt 66734
[ 2836.855688][ T3802] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2836.863574][ T3802] Memory cgroup stats for /syz2:
[ 2836.863746][ T3802] anon 90112
[ 2836.863746][ T3802] file 417792
[ 2836.863746][ T3802] kernel 314064896
[ 2836.863746][ T3802] kernel_stack 32768
[ 2836.863746][ T3802] pagetables 69632
[ 2836.863746][ T3802] sec_pagetables 0
[ 2836.863746][ T3802] percpu 5358784
[ 2836.863746][ T3802] sock 0
[ 2836.863746][ T3802] vmalloc 0
[ 2836.863746][ T3802] shmem 417792
[ 2836.863746][ T3802] zswap 0
[ 2836.863746][ T3802] zswapped 0
[ 2836.863746][ T3802] file_mapped 417792
[ 2836.863746][ T3802] file_dirty 0
[ 2836.863746][ T3802] file_writeback 0
[ 2836.863746][ T3802] swapcached 0
[ 2836.863746][ T3802] anon_thp 0
[ 2836.863746][ T3802] file_thp 0
[ 2836.863746][ T3802] shmem_thp 0
[ 2836.863746][ T3802] inactive_anon 94208
[ 2836.863746][ T3802] active_anon 413696
[ 2836.863746][ T3802] inactive_file 0
[ 2836.863746][ T3802] active_file 0
[ 2836.863746][ T3802] unevictable 0
[ 2836.863746][ T3802] slab_reclaimable 10424
[ 2836.863746][ T3802] slab_unreclaimable 308529576
[ 2836.906817][ T3786] device macvtap463 entered promiscuous mode
[ 2836.967006][ T3802] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3802,uid=0
[ 2836.983023][ T3802] Memory cgroup out of memory: Killed process 3802 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000
10:16:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3901}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2837.023741][ T3807] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[ 2837.051415][ T3807] CPU: 1 PID: 3807 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2837.061775][ T3807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2837.071853][ T3807] Call Trace:
[ 2837.075155][ T3807]
[ 2837.078107][ T3807] dump_stack_lvl+0xd1/0x138
[ 2837.082738][ T3807] dump_header+0x10b/0x85f
[ 2837.087193][ T3807] oom_kill_process.cold+0x10/0x15
[ 2837.089159][ T3787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2837.092322][ T3807] out_of_memory+0x35c/0x14a0
[ 2837.092367][ T3807] ? find_held_lock+0x2d/0x110
[ 2837.111109][ T3807] ? oom_killer_disable+0x280/0x280
[ 2837.116329][ T3807] ? find_held_lock+0x2d/0x110
[ 2837.121215][ T3807] mem_cgroup_out_of_memory+0x206/0x270
[ 2837.124618][ T3787] device macvtap464 entered promiscuous mode
[ 2837.126769][ T3807] ? mem_cgroup_margin+0x130/0x130
[ 2837.126803][ T3807] ? lock_downgrade+0x6e0/0x6e0
[ 2837.142814][ T3807] try_charge_memcg+0xef8/0x12f0
[ 2837.147800][ T3807] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2837.153822][ T3807] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2837.159578][ T3807] ? lock_downgrade+0x6e0/0x6e0
[ 2837.164474][ T3807] ? lock_downgrade+0x6e0/0x6e0
10:16:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x2e02}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2837.169390][ T3807] __memcg_kmem_charge_page+0x16e/0x3b0
[ 2837.174982][ T3807] __alloc_pages+0x1f3/0x5b0
[ 2837.179616][ T3807] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0
[ 2837.186435][ T3807] ? find_held_lock+0x2d/0x110
[ 2837.191250][ T3807] alloc_pages+0x1aa/0x270
[ 2837.195711][ T3807] pte_alloc_one+0x1a/0x230
[ 2837.200255][ T3807] __pte_alloc+0x6d/0x260
[ 2837.204631][ T3807] ? pmd_install+0x160/0x160
[ 2837.209267][ T3807] ? hugepage_vma_check+0x24e/0x830
[ 2837.214502][ T3807] ? _raw_spin_unlock+0x28/0x40
[ 2837.219385][ T3807] ? __pmd_alloc+0x30c/0x5d0
[ 2837.224007][ T3807] __handle_mm_fault+0x3527/0x3a40
[ 2837.229157][ T3807] ? vm_iomap_memory+0x190/0x190
[ 2837.234158][ T3807] handle_mm_fault+0x1cc/0x780
[ 2837.238961][ T3807] do_user_addr_fault+0x475/0x1210
[ 2837.244111][ T3807] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2837.249714][ T3807] exc_page_fault+0x98/0x170
[ 2837.254341][ T3807] asm_exc_page_fault+0x26/0x30
[ 2837.255266][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2837.259210][ T3807] RIP: 0033:0x7f69a662bd79
[ 2837.259237][ T3807] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2837.259264][ T3807] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2837.259288][ T3807] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2837.259308][ T3807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2837.259326][ T3807] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2837.259345][ T3807] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b49d6
[ 2837.259364][ T3807] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2837.259406][ T3807]
[ 2837.268113][ T3807] memory: usage 307200kB, limit 307200kB, failcnt 13152
[ 2837.350060][ T3807] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2837.352315][ T3814] device bridge448 entered promiscuous mode
[ 2837.358725][ T3807] Memory cgroup stats for /syz1:
[ 2837.363367][ T3807] anon 135168
[ 2837.363367][ T3807] file 393216
[ 2837.363367][ T3807] kernel 314044416
[ 2837.363367][ T3807] kernel_stack 65536
[ 2837.363367][ T3807] pagetables 77824
[ 2837.363367][ T3807] sec_pagetables 0
[ 2837.363367][ T3807] percpu 5356416
[ 2837.363367][ T3807] sock 0
[ 2837.363367][ T3807] vmalloc 0
[ 2837.363367][ T3807] shmem 385024
[ 2837.363367][ T3807] zswap 0
[ 2837.363367][ T3807] zswapped 0
[ 2837.363367][ T3807] file_mapped 385024
[ 2837.363367][ T3807] file_dirty 0
[ 2837.363367][ T3807] file_writeback 0
[ 2837.363367][ T3807] swapcached 0
[ 2837.363367][ T3807] anon_thp 0
[ 2837.363367][ T3807] file_thp 0
[ 2837.363367][ T3807] shmem_thp 0
[ 2837.363367][ T3807] inactive_anon 180224
[ 2837.363367][ T3807] active_anon 339968
[ 2837.363367][ T3807] inactive_file 0
[ 2837.363367][ T3807] active_file 8192
[ 2837.363367][ T3807] unevictable 0
[ 2837.363367][ T3807] slab_reclaimable 16512
[ 2837.363367][ T3807] slab_unreclaimable 308480480
[ 2837.408337][ T3793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2837.478424][ T3807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3807,uid=0
[ 2837.495328][ T3807] Memory cgroup out of memory: Killed process 3807 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000
[ 2837.515213][ T3793] device bridge1787 entered promiscuous mode
[ 2837.565993][ T3811] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2837.584834][ T3811] CPU: 0 PID: 3811 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2837.595200][ T3811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2837.605277][ T3811] Call Trace:
[ 2837.608574][ T3811]
[ 2837.611527][ T3811] dump_stack_lvl+0xd1/0x138
[ 2837.616162][ T3811] dump_header+0x10b/0x85f
[ 2837.620617][ T3811] oom_kill_process.cold+0x10/0x15
[ 2837.625769][ T3811] out_of_memory+0x35c/0x14a0
[ 2837.630490][ T3811] ? find_held_lock+0x2d/0x110
[ 2837.635297][ T3811] ? oom_killer_disable+0x280/0x280
[ 2837.640537][ T3811] ? find_held_lock+0x2d/0x110
[ 2837.645351][ T3811] mem_cgroup_out_of_memory+0x206/0x270
[ 2837.650935][ T3811] ? mem_cgroup_margin+0x130/0x130
[ 2837.656077][ T3811] ? lock_downgrade+0x6e0/0x6e0
[ 2837.660993][ T3811] try_charge_memcg+0xef8/0x12f0
[ 2837.665979][ T3811] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2837.672087][ T3811] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2837.677840][ T3811] ? lock_downgrade+0x6e0/0x6e0
[ 2837.682722][ T3811] ? lock_downgrade+0x6e0/0x6e0
[ 2837.685708][ T3794] device macvtap2177 entered promiscuous mode
[ 2837.687604][ T3811] __memcg_kmem_charge_page+0x16e/0x3b0
[ 2837.687650][ T3811] memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2837.687686][ T3811] copy_process+0x73e/0x7190
[ 2837.687721][ T3811] ? __lock_acquire+0xbc3/0x56d0
[ 2837.687777][ T3811] ? __cleanup_sighand+0xb0/0xb0
[ 2837.687809][ T3811] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2837.687859][ T3811] ? psi_memstall_leave+0x174/0x250
[ 2837.687906][ T3811] kernel_clone+0xeb/0x980
[ 2837.687941][ T3811] ? create_io_thread+0xf0/0xf0
[ 2837.687976][ T3811] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0
[ 2837.688010][ T3811] ? lock_downgrade+0x6e0/0x6e0
[ 2837.688069][ T3811] __do_sys_clone+0xba/0x100
[ 2837.688100][ T3811] ? kernel_clone+0x980/0x980
[ 2837.688149][ T3811] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2837.688190][ T3811] do_syscall_64+0x39/0xb0
[ 2837.688227][ T3811] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2837.688264][ T3811] RIP: 0033:0x7f8325a8d501
[ 2837.688286][ T3811] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2837.688312][ T3811] RSP: 002b:00007fff9cb6b1a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
10:16:41 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8c00, @local}]}, 0x48}}, 0x0)
[ 2837.688338][ T3811] RAX: ffffffffffffffda RBX: 00007f83267a9700 RCX: 00007f8325a8d501
[ 2837.688356][ T3811] RDX: 00007f83267a99d0 RSI: 00007f83267a92f0 RDI: 00000000003d0f00
[ 2837.688373][ T3811] RBP: 00007fff9cb6b3f0 R08: 00007f83267a9700 R09: 00007f83267a9700
[ 2837.688398][ T3811] R10: 00007f83267a99d0 R11: 0000000000000206 R12: 00007fff9cb6b25e
[ 2837.688415][ T3811] R13: 00007fff9cb6b25f R14: 00007f83267a9300 R15: 0000000000022000
[ 2837.688456][ T3811]
[ 2837.898891][ T3795] device macvtap2178 entered promiscuous mode
[ 2837.905967][ T3811] memory: usage 307200kB, limit 307200kB, failcnt 66853
[ 2837.917538][ T3811] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2837.924420][ T3811] Memory cgroup stats for /syz2:
[ 2837.924652][ T3811] anon 90112
[ 2837.924652][ T3811] file 417792
[ 2837.924652][ T3811] kernel 314064896
[ 2837.924652][ T3811] kernel_stack 32768
[ 2837.924652][ T3811] pagetables 69632
[ 2837.924652][ T3811] sec_pagetables 0
[ 2837.924652][ T3811] percpu 5358784
[ 2837.924652][ T3811] sock 0
[ 2837.924652][ T3811] vmalloc 0
[ 2837.924652][ T3811] shmem 417792
[ 2837.924652][ T3811] zswap 0
[ 2837.924652][ T3811] zswapped 0
[ 2837.924652][ T3811] file_mapped 417792
[ 2837.924652][ T3811] file_dirty 0
[ 2837.924652][ T3811] file_writeback 0
[ 2837.924652][ T3811] swapcached 0
[ 2837.924652][ T3811] anon_thp 0
[ 2837.924652][ T3811] file_thp 0
[ 2837.924652][ T3811] shmem_thp 0
[ 2837.924652][ T3811] inactive_anon 94208
[ 2837.924652][ T3811] active_anon 413696
[ 2837.924652][ T3811] inactive_file 0
[ 2837.924652][ T3811] active_file 0
[ 2837.924652][ T3811] unevictable 0
[ 2837.924652][ T3811] slab_reclaimable 10424
[ 2837.924652][ T3811] slab_unreclaimable 308529576
[ 2838.041103][ T3811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3811,uid=0
[ 2838.057344][ T3811] Memory cgroup out of memory: Killed process 3811 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000
10:16:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3902}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
10:16:42 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0xfd01}, 0x0)
[ 2838.090382][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2838.186512][ T3801] device bridge1328 entered promiscuous mode
[ 2838.194032][ T3819] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2838.204761][ T3819] CPU: 0 PID: 3819 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2838.215118][ T3819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2838.225196][ T3819] Call Trace:
[ 2838.228495][ T3819]
[ 2838.231442][ T3819] dump_stack_lvl+0xd1/0x138
[ 2838.236069][ T3819] dump_header+0x10b/0x85f
[ 2838.240524][ T3819] oom_kill_process.cold+0x10/0x15
[ 2838.245666][ T3819] out_of_memory+0x35c/0x14a0
[ 2838.250376][ T3819] ? find_held_lock+0x2d/0x110
[ 2838.255174][ T3819] ? oom_killer_disable+0x280/0x280
[ 2838.260405][ T3819] ? find_held_lock+0x2d/0x110
[ 2838.265234][ T3819] mem_cgroup_out_of_memory+0x206/0x270
[ 2838.270813][ T3819] ? mem_cgroup_margin+0x130/0x130
[ 2838.275950][ T3819] ? lock_downgrade+0x6e0/0x6e0
[ 2838.280853][ T3819] try_charge_memcg+0xef8/0x12f0
[ 2838.282217][ T3803] device macvtap1319 entered promiscuous mode
[ 2838.285820][ T3819] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2838.285863][ T3819] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2838.303633][ T3819] ? lock_downgrade+0x6e0/0x6e0
[ 2838.308524][ T3819] ? lock_downgrade+0x6e0/0x6e0
[ 2838.313424][ T3819] __memcg_kmem_charge_page+0x16e/0x3b0
[ 2838.318997][ T3819] memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2838.325177][ T3819] copy_process+0x73e/0x7190
[ 2838.329782][ T3819] ? wp_page_copy+0x311/0x1ca0
[ 2838.334593][ T3819] ? __cleanup_sighand+0xb0/0xb0
[ 2838.339555][ T3819] ? do_wp_page+0x1d9/0x1930
[ 2838.344162][ T3819] kernel_clone+0xeb/0x980
[ 2838.348598][ T3819] ? create_io_thread+0xf0/0xf0
[ 2838.353471][ T3819] ? find_held_lock+0x2d/0x110
[ 2838.358269][ T3819] __do_sys_clone+0xba/0x100
[ 2838.362875][ T3819] ? kernel_clone+0x980/0x980
[ 2838.367581][ T3819] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2838.373497][ T3819] do_syscall_64+0x39/0xb0
[ 2838.377937][ T3819] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2838.383852][ T3819] RIP: 0033:0x7f8325a8d501
[ 2838.388277][ T3819] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2838.407901][ T3819] RSP: 002b:00007fff9cb6b1a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2838.416325][ T3819] RAX: ffffffffffffffda RBX: 00007f83267a9700 RCX: 00007f8325a8d501
[ 2838.424313][ T3819] RDX: 00007f83267a99d0 RSI: 00007f83267a92f0 RDI: 00000000003d0f00
[ 2838.432294][ T3819] RBP: 00007fff9cb6b3f0 R08: 00007f83267a9700 R09: 00007f83267a9700
[ 2838.440276][ T3819] R10: 00007f83267a99d0 R11: 0000000000000206 R12: 00007fff9cb6b25e
[ 2838.448254][ T3819] R13: 00007fff9cb6b25f R14: 00007f83267a9300 R15: 0000000000022000
[ 2838.456250][ T3819]
[ 2838.463473][ T3819] memory: usage 307188kB, limit 307200kB, failcnt 66930
[ 2838.472674][ T3819] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2838.480678][ T3819] Memory cgroup stats for /syz2:
[ 2838.480927][ T3819] anon 90112
[ 2838.480927][ T3819] file 417792
[ 2838.480927][ T3819] kernel 314052608
[ 2838.480927][ T3819] kernel_stack 32768
[ 2838.480927][ T3819] pagetables 69632
[ 2838.480927][ T3819] sec_pagetables 0
[ 2838.480927][ T3819] percpu 5358784
[ 2838.480927][ T3819] sock 0
[ 2838.480927][ T3819] vmalloc 0
[ 2838.480927][ T3819] shmem 417792
[ 2838.480927][ T3819] zswap 0
[ 2838.480927][ T3819] zswapped 0
[ 2838.480927][ T3819] file_mapped 417792
[ 2838.480927][ T3819] file_dirty 0
[ 2838.480927][ T3819] file_writeback 0
[ 2838.480927][ T3819] swapcached 0
[ 2838.480927][ T3819] anon_thp 0
[ 2838.480927][ T3819] file_thp 0
[ 2838.480927][ T3819] shmem_thp 0
[ 2838.480927][ T3819] inactive_anon 94208
[ 2838.480927][ T3819] active_anon 413696
[ 2838.480927][ T3819] inactive_file 0
[ 2838.480927][ T3819] active_file 0
[ 2838.480927][ T3819] unevictable 0
[ 2838.480927][ T3819] slab_reclaimable 10424
[ 2838.480927][ T3819] slab_unreclaimable 308529576
[ 2838.485025][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2838.577238][ T3819] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3819,uid=0
[ 2838.602181][ T3819] Memory cgroup out of memory: Killed process 3819 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000
[ 2838.620622][ T3816] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2838.635769][ T3816] CPU: 1 PID: 3816 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2838.646237][ T3816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2838.656320][ T3816] Call Trace:
[ 2838.659622][ T3816]
[ 2838.662573][ T3816] dump_stack_lvl+0xd1/0x138
[ 2838.667208][ T3816] dump_header+0x10b/0x85f
[ 2838.671667][ T3816] oom_kill_process.cold+0x10/0x15
[ 2838.676822][ T3816] out_of_memory+0x35c/0x14a0
[ 2838.681548][ T3816] ? oom_killer_disable+0x280/0x280
[ 2838.686785][ T3816] ? find_held_lock+0x2d/0x110
[ 2838.691598][ T3816] mem_cgroup_out_of_memory+0x206/0x270
[ 2838.697181][ T3816] ? mem_cgroup_margin+0x130/0x130
[ 2838.702327][ T3816] ? lock_downgrade+0x6e0/0x6e0
[ 2838.707248][ T3816] try_charge_memcg+0xef8/0x12f0
[ 2838.712244][ T3816] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2838.718270][ T3816] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2838.724024][ T3816] ? lock_downgrade+0x6e0/0x6e0
[ 2838.728956][ T3816] obj_cgroup_charge+0x2af/0x5e0
[ 2838.733940][ T3816] ? __anon_vma_prepare+0x64/0x580
[ 2838.739082][ T3816] kmem_cache_alloc+0xa3/0x3d0
[ 2838.743889][ T3816] __anon_vma_prepare+0x64/0x580
[ 2838.748853][ T3816] ? __pmd_alloc+0x30c/0x5d0
[ 2838.753651][ T3816] __handle_mm_fault+0x35bc/0x3a40
[ 2838.758801][ T3816] ? vm_iomap_memory+0x190/0x190
[ 2838.763812][ T3816] handle_mm_fault+0x1cc/0x780
[ 2838.768613][ T3816] do_user_addr_fault+0x475/0x1210
[ 2838.773759][ T3816] ? rcu_read_lock_sched_held+0x3e/0x70
[ 2838.779341][ T3816] exc_page_fault+0x98/0x170
[ 2838.783950][ T3816] asm_exc_page_fault+0x26/0x30
[ 2838.788821][ T3816] RIP: 0033:0x7f69a662bd79
[ 2838.793246][ T3816] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85
[ 2838.812865][ T3816] RSP: 002b:00007ffea4dd3150 EFLAGS: 00010246
[ 2838.818945][ T3816] RAX: 0000000020001c40 RBX: 0000000000000000 RCX: 0000000000000000
[ 2838.826927][ T3816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555574b22e8
[ 2838.834909][ T3816] RBP: 00007ffea4dd3248 R08: 0000000000000000 R09: 0000000000000000
[ 2838.842888][ T3816] R10: 00007f69a62000c8 R11: 0000000000000246 R12: 00000000002b4e47
[ 2838.850867][ T3816] R13: 00007ffea4dd3270 R14: 00007f69a67abf80 R15: 0000000000000032
[ 2838.858866][ T3816]
10:16:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3903}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2838.879913][ T3804] device macvtap1320 entered promiscuous mode
[ 2838.886538][ T3816] memory: usage 307200kB, limit 307200kB, failcnt 13264
[ 2838.898286][ T3816] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
10:16:43 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x2e02}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2838.946275][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2839.004290][ T3806] device bridge536 entered promiscuous mode
[ 2839.048824][ T3816] Memory cgroup stats for /syz1:
[ 2839.049029][ T3816] anon 135168
[ 2839.049029][ T3816] file 393216
[ 2839.049029][ T3816] kernel 314028032
[ 2839.049029][ T3816] kernel_stack 65536
[ 2839.049029][ T3816] pagetables 81920
[ 2839.049029][ T3816] sec_pagetables 0
[ 2839.049029][ T3816] percpu 5356416
[ 2839.049029][ T3816] sock 0
[ 2839.049029][ T3816] vmalloc 0
[ 2839.049029][ T3816] shmem 385024
[ 2839.049029][ T3816] zswap 0
[ 2839.049029][ T3816] zswapped 0
[ 2839.049029][ T3816] file_mapped 385024
[ 2839.049029][ T3816] file_dirty 4096
[ 2839.049029][ T3816] file_writeback 0
[ 2839.049029][ T3816] swapcached 0
[ 2839.049029][ T3816] anon_thp 0
[ 2839.049029][ T3816] file_thp 0
[ 2839.049029][ T3816] shmem_thp 0
[ 2839.049029][ T3816] inactive_anon 180224
[ 2839.049029][ T3816] active_anon 339968
[ 2839.049029][ T3816] inactive_file 4096
[ 2839.049029][ T3816] active_file 4096
[ 2839.049029][ T3816] unevictable 0
[ 2839.049029][ T3816] slab_reclaimable 16512
[ 2839.049029][ T3816] slab_unreclaimable 308469080
[ 2839.074190][ T3808] device macvtap565 entered promiscuous mode
[ 2839.192497][ T3809] device macvtap566 entered promiscuous mode
10:16:43 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x8d00, @local}]}, 0x48}}, 0x0)
10:16:43 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0xf1, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x3f00}, 0x0)
[ 2839.231830][ T3816] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3816,uid=0
[ 2839.248298][ T3816] Memory cgroup out of memory: Killed process 3816 (syz-executor.1) total-vm:54540kB, anon-rss:464kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
[ 2839.267667][ T3824] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2839.287096][ T3815] device macvtap465 entered promiscuous mode
[ 2839.296813][ T3824] CPU: 0 PID: 3824 Comm: syz-executor.2 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2839.307190][ T3824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2839.317267][ T3824] Call Trace:
[ 2839.320566][ T3824]
[ 2839.323515][ T3824] dump_stack_lvl+0xd1/0x138
[ 2839.328152][ T3824] dump_header+0x10b/0x85f
[ 2839.332610][ T3824] oom_kill_process.cold+0x10/0x15
[ 2839.337762][ T3824] out_of_memory+0x35c/0x14a0
[ 2839.342492][ T3824] ? oom_killer_disable+0x280/0x280
[ 2839.347733][ T3824] ? find_held_lock+0x2d/0x110
[ 2839.352546][ T3824] mem_cgroup_out_of_memory+0x206/0x270
[ 2839.358124][ T3824] ? mem_cgroup_margin+0x130/0x130
[ 2839.363264][ T3824] ? lock_downgrade+0x6e0/0x6e0
[ 2839.368176][ T3824] try_charge_memcg+0xef8/0x12f0
[ 2839.373143][ T3824] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2839.379150][ T3824] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2839.384905][ T3824] ? lock_downgrade+0x6e0/0x6e0
[ 2839.389809][ T3824] ? lock_downgrade+0x6e0/0x6e0
[ 2839.394727][ T3824] __memcg_kmem_charge_page+0x16e/0x3b0
[ 2839.400324][ T3824] memcg_charge_kernel_stack.part.0+0x6c/0x150
[ 2839.406522][ T3824] copy_process+0x15ed/0x7190
[ 2839.411239][ T3824] ? __lock_acquire+0xbc3/0x56d0
[ 2839.416237][ T3824] ? __cleanup_sighand+0xb0/0xb0
[ 2839.421204][ T3824] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2839.427236][ T3824] ? psi_memstall_leave+0x174/0x250
[ 2839.432482][ T3824] kernel_clone+0xeb/0x980
[ 2839.436935][ T3824] ? create_io_thread+0xf0/0xf0
[ 2839.441824][ T3824] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0
[ 2839.448135][ T3824] ? lock_downgrade+0x6e0/0x6e0
[ 2839.453042][ T3824] __do_sys_clone+0xba/0x100
[ 2839.457663][ T3824] ? kernel_clone+0x980/0x980
[ 2839.462390][ T3824] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2839.468325][ T3824] do_syscall_64+0x39/0xb0
[ 2839.472789][ T3824] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2839.478716][ T3824] RIP: 0033:0x7f8325a8d501
[ 2839.483158][ T3824] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2839.494248][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2839.502776][ T3824] RSP: 002b:00007fff9cb6b1a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2839.502808][ T3824] RAX: ffffffffffffffda RBX: 00007f83267a9700 RCX: 00007f8325a8d501
[ 2839.502829][ T3824] RDX: 00007f83267a99d0 RSI: 00007f83267a92f0 RDI: 00000000003d0f00
[ 2839.502850][ T3824] RBP: 00007fff9cb6b3f0 R08: 00007f83267a9700 R09: 00007f83267a9700
[ 2839.502867][ T3824] R10: 00007f83267a99d0 R11: 0000000000000206 R12: 00007fff9cb6b25e
[ 2839.502886][ T3824] R13: 00007fff9cb6b25f R14: 00007f83267a9300 R15: 0000000000022000
[ 2839.502925][ T3824]
[ 2839.592364][ T3814] device macvtap466 entered promiscuous mode
[ 2839.627171][ T3821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2839.636508][ T3824] memory: usage 307200kB, limit 307200kB, failcnt 67062
[ 2839.636529][ T3824] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2839.636546][ T3824] Memory cgroup stats for /syz2:
[ 2839.636806][ T3824] anon 90112
[ 2839.636806][ T3824] file 417792
[ 2839.636806][ T3824] kernel 314064896
[ 2839.636806][ T3824] kernel_stack 32768
[ 2839.636806][ T3824] pagetables 69632
[ 2839.636806][ T3824] sec_pagetables 0
[ 2839.636806][ T3824] percpu 5358784
[ 2839.636806][ T3824] sock 0
[ 2839.636806][ T3824] vmalloc 0
[ 2839.636806][ T3824] shmem 417792
[ 2839.636806][ T3824] zswap 0
[ 2839.636806][ T3824] zswapped 0
[ 2839.636806][ T3824] file_mapped 417792
[ 2839.636806][ T3824] file_dirty 0
[ 2839.636806][ T3824] file_writeback 0
[ 2839.636806][ T3824] swapcached 0
[ 2839.636806][ T3824] anon_thp 0
[ 2839.636806][ T3824] file_thp 0
[ 2839.636806][ T3824] shmem_thp 0
[ 2839.636806][ T3824] inactive_anon 94208
[ 2839.636806][ T3824] active_anon 413696
[ 2839.636806][ T3824] inactive_file 0
[ 2839.636806][ T3824] active_file 0
[ 2839.636806][ T3824] unevictable 0
[ 2839.636806][ T3824] slab_reclaimable 10424
[ 2839.636806][ T3824] slab_unreclaimable 308529576
10:16:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0x601, 0x1, @local}]}, 0x48}}, 0x0)
[ 2839.770151][ T3821] device bridge1788 entered promiscuous mode
[ 2839.819728][ T3824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3824,uid=0
[ 2839.836288][ T3824] Memory cgroup out of memory: Killed process 3824 (syz-executor.2) total-vm:54540kB, anon-rss:468kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000
10:16:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x899ea, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc743}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x3a00}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0)
[ 2839.875113][ T3822] device macvtap2178 entered promiscuous mode
[ 2839.956084][ T3823] device macvtap2179 entered promiscuous mode
[ 2839.966701][ T3832] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000
[ 2839.986487][ T3832] CPU: 0 PID: 3832 Comm: syz-executor.1 Not tainted 6.1.0-rc8-syzkaller-00165-ge095493091e8 #0
[ 2839.996853][ T3832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 2840.006927][ T3832] Call Trace:
[ 2840.010221][ T3832]
[ 2840.013172][ T3832] dump_stack_lvl+0xd1/0x138
[ 2840.017805][ T3832] dump_header+0x10b/0x85f
[ 2840.022258][ T3832] oom_kill_process.cold+0x10/0x15
[ 2840.027406][ T3832] out_of_memory+0x35c/0x14a0
[ 2840.032126][ T3832] ? find_held_lock+0x2d/0x110
[ 2840.036920][ T3832] ? oom_killer_disable+0x280/0x280
[ 2840.042136][ T3832] ? find_held_lock+0x2d/0x110
[ 2840.046933][ T3832] mem_cgroup_out_of_memory+0x206/0x270
[ 2840.052496][ T3832] ? mem_cgroup_margin+0x130/0x130
[ 2840.057622][ T3832] ? lock_downgrade+0x6e0/0x6e0
[ 2840.062516][ T3832] try_charge_memcg+0xef8/0x12f0
[ 2840.067483][ T3832] ? mem_cgroup_handle_over_high+0x520/0x520
[ 2840.073485][ T3832] ? get_mem_cgroup_from_objcg+0xa1/0x260
[ 2840.079220][ T3832] ? lock_downgrade+0x6e0/0x6e0
[ 2840.084105][ T3832] ? lock_downgrade+0x6e0/0x6e0
[ 2840.088984][ T3832] ? rcu_read_unlock+0x9/0x60
[ 2840.093685][ T3832] obj_cgroup_charge+0x2af/0x5e0
[ 2840.098655][ T3832] kmem_cache_alloc_node+0xa9/0x410
[ 2840.103872][ T3832] ? copy_process+0x5c2/0x7190
[ 2840.108658][ T3832] copy_process+0x5c2/0x7190
[ 2840.113270][ T3832] ? find_held_lock+0x2d/0x110
[ 2840.118065][ T3832] ? find_held_lock+0x2d/0x110
[ 2840.122855][ T3832] ? __cleanup_sighand+0xb0/0xb0
[ 2840.127806][ T3832] ? __handle_mm_fault+0x2d0f/0x3a40
[ 2840.133106][ T3832] ? lock_downgrade+0x6e0/0x6e0
[ 2840.137982][ T3832] ? folio_flags.constprop.0+0x53/0x150
[ 2840.143561][ T3832] ? folio_add_lru+0x37b/0x680
[ 2840.148357][ T3832] kernel_clone+0xeb/0x980
[ 2840.152792][ T3832] ? create_io_thread+0xf0/0xf0
[ 2840.157664][ T3832] ? find_held_lock+0x2d/0x110
[ 2840.162465][ T3832] __do_sys_clone+0xba/0x100
[ 2840.167073][ T3832] ? kernel_clone+0x980/0x980
[ 2840.171781][ T3832] ? syscall_enter_from_user_mode+0x26/0xb0
[ 2840.177697][ T3832] do_syscall_64+0x39/0xb0
[ 2840.182144][ T3832] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2840.188058][ T3832] RIP: 0033:0x7f69a668d501
[ 2840.192483][ T3832] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00
[ 2840.212100][ T3832] RSP: 002b:00007ffea4dd3058 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 2840.220525][ T3832] RAX: ffffffffffffffda RBX: 00007f69a746c700 RCX: 00007f69a668d501
[ 2840.228504][ T3832] RDX: 00007f69a746c9d0 RSI: 00007f69a746c2f0 RDI: 00000000003d0f00
[ 2840.236484][ T3832] RBP: 00007ffea4dd32a0 R08: 00007f69a746c700 R09: 00007f69a746c700
[ 2840.244465][ T3832] R10: 00007f69a746c9d0 R11: 0000000000000206 R12: 00007ffea4dd310e
[ 2840.252443][ T3832] R13: 00007ffea4dd310f R14: 00007f69a746c300 R15: 0000000000022000
[ 2840.260441][ T3832]
[ 2840.271500][ T3832] memory: usage 307196kB, limit 307200kB, failcnt 13393
[ 2840.286761][ T3832] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 2840.294642][ T3826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2840.294779][ T3832] Memory cgroup stats for /syz1:
[ 2840.304800][ T3832] anon 147456
[ 2840.304800][ T3832] file 393216
[ 2840.304800][ T3832] kernel 314028032
[ 2840.304800][ T3832] kernel_stack 65536
[ 2840.304800][ T3832] pagetables 81920
[ 2840.304800][ T3832] sec_pagetables 0
[ 2840.304800][ T3832] percpu 5356416
[ 2840.304800][ T3832] sock 0
[ 2840.304800][ T3832] vmalloc 0
[ 2840.304800][ T3832] shmem 385024
[ 2840.304800][ T3832] zswap 0
[ 2840.304800][ T3832] zswapped 0
[ 2840.304800][ T3832] file_mapped 385024
[ 2840.304800][ T3832] file_dirty 0
[ 2840.304800][ T3832] file_writeback 0
[ 2840.304800][ T3832] swapcached 0
[ 2840.304800][ T3832] anon_thp 0
[ 2840.304800][ T3832] file_thp 0
[ 2840.304800][ T3832] shmem_thp 0
[ 2840.304800][ T3832] inactive_anon 192512
[ 2840.304800][ T3832] active_anon 339968
[ 2840.304800][ T3832] inactive_file 4096
[ 2840.304800][ T3832] active_file 4096
[ 2840.304800][ T3832] unevictable 0
[ 2840.304800][ T3832] slab_reclaimable 16512
[ 2840.304800][ T3832] slab_unreclaimable 308470328
[ 2840.373716][ T3826] device bridge1329 entered promiscuous mode
10:16:44 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="43e1010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaaaa"], 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0,