ory: Killed process 2036 (syz-executor.5) total-vm:72712kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 03:07:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\xd0'}, 0x2c) 03:07:49 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x57, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x231e, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x100, 0x129000) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x440a72b0ad282891}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x180) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r5, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) tkill(r1, 0x201000000000016) [ 1216.532552][ T2230] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1216.587138][ T2243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1216.617187][ T2230] CPU: 0 PID: 2230 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1216.625041][ T2230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:07:49 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5960b", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1216.635115][ T2230] Call Trace: [ 1216.638433][ T2230] dump_stack+0x172/0x1f0 [ 1216.643233][ T2230] dump_header+0x10f/0xb6c [ 1216.647656][ T2230] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1216.653469][ T2230] ? ___ratelimit+0x60/0x595 [ 1216.658069][ T2230] ? do_raw_spin_unlock+0x57/0x270 [ 1216.663192][ T2230] oom_kill_process.cold+0x10/0x15 [ 1216.668312][ T2230] out_of_memory+0x79a/0x1280 [ 1216.673014][ T2230] ? lock_downgrade+0x880/0x880 [ 1216.677885][ T2230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1216.684298][ T2230] ? oom_killer_disable+0x280/0x280 [ 1216.689532][ T2230] ? find_held_lock+0x35/0x130 [ 1216.694322][ T2230] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1216.694338][ T2230] ? memcg_event_wake+0x230/0x230 [ 1216.694359][ T2230] ? do_raw_spin_unlock+0x57/0x270 [ 1216.694379][ T2230] ? _raw_spin_unlock+0x2d/0x50 [ 1216.714898][ T2230] try_charge+0x102c/0x15c0 [ 1216.719408][ T2230] ? find_held_lock+0x35/0x130 [ 1216.724203][ T2230] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1216.729777][ T2230] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1216.729793][ T2230] ? find_held_lock+0x35/0x130 [ 1216.729807][ T2230] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1216.729832][ T2230] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1216.729846][ T2230] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1216.729861][ T2230] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1216.729878][ T2230] __memcg_kmem_charge+0x136/0x300 [ 1216.729896][ T2230] __alloc_pages_nodemask+0x437/0x7e0 [ 1216.729909][ T2230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1216.729926][ T2230] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1216.729942][ T2230] ? copy_process.part.0+0x1d08/0x7980 [ 1216.729957][ T2230] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1216.729983][ T2230] ? trace_hardirqs_on+0x67/0x230 [ 1216.730002][ T2230] copy_process.part.0+0x3e0/0x7980 [ 1216.730022][ T2230] ? psi_memstall_leave+0x11c/0x180 [ 1216.730043][ T2230] ? sched_clock+0x2e/0x50 [ 1216.816389][ T2230] ? psi_memstall_leave+0x12e/0x180 [ 1216.821617][ T2230] ? find_held_lock+0x35/0x130 [ 1216.826679][ T2230] ? psi_memstall_leave+0x12e/0x180 [ 1216.831907][ T2230] ? __cleanup_sighand+0x60/0x60 03:07:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:49 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x2, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1216.836869][ T2230] ? __lock_acquire+0x548/0x3fb0 [ 1216.841829][ T2230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1216.848100][ T2230] _do_fork+0x257/0xfd0 [ 1216.852275][ T2230] ? fork_idle+0x1d0/0x1d0 [ 1216.856704][ T2230] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1216.862799][ T2230] ? lock_downgrade+0x880/0x880 [ 1216.867667][ T2230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1216.874020][ T2230] ? blkcg_exit_queue+0x30/0x30 [ 1216.878916][ T2230] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1216.884516][ T2230] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1216.890012][ T2230] ? do_syscall_64+0x26/0x610 [ 1216.894713][ T2230] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1216.894728][ T2230] ? do_syscall_64+0x26/0x610 [ 1216.894750][ T2230] __x64_sys_clone+0xbf/0x150 [ 1216.894771][ T2230] do_syscall_64+0x103/0x610 [ 1216.914848][ T2230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1216.914861][ T2230] RIP: 0033:0x45b5f9 [ 1216.914876][ T2230] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1216.914884][ T2230] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1216.914897][ T2230] RAX: ffffffffffffffda RBX: 00007fba1da18700 RCX: 000000000045b5f9 [ 1216.914906][ T2230] RDX: 00007fba1da189d0 RSI: 00007fba1da17db0 RDI: 00000000003d0f00 [ 1216.914914][ T2230] RBP: 0000000000a4fcb0 R08: 00007fba1da18700 R09: 00007fba1da18700 [ 1216.914923][ T2230] R10: 00007fba1da189d0 R11: 0000000000000202 R12: 0000000000000000 03:07:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0xffc5bfe2056edbb5) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0xe000000]}, 0xd}, 0x80, &(0x7f0000000340), 0x2b, &(0x7f0000000180)}, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x180000000) ptrace$getenv(0x4201, 0x0, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001680)={0x0, 0x6}, 0x0) 03:07:49 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x7) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000000c0)={0x4, 0x0, [{0x4, 0x3, 0x0, 0x0, @adapter={0x100000000, 0x8, 0x4c8, 0x1, 0xffffffff}}, {0x9, 0x3, 0x0, 0x0, @adapter={0x3, 0x1, 0x2, 0xfffffffffffffff8, 0x3}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x0, 0x1, 0xee, 0x6, 0x89c}}, {0x2e, 0x4, 0x0, 0x0, @msi={0x800, 0xffff, 0x3}}]}) tkill(r1, 0x201000000000016) [ 1216.914938][ T2230] R13: 0000000000a4fb5f R14: 00007fba1da189c0 R15: 000000000073bf0c [ 1216.995777][ T2230] memory: usage 307188kB, limit 307200kB, failcnt 3722 [ 1217.014454][ T2230] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1217.043552][ T2230] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:07:50 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x3, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1217.088304][ T2230] Memory cgroup stats for /syz5: cache:56KB rss:194112KB rss_huge:137216KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:194288KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1217.149830][ T2230] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2225,uid=0 [ 1217.183066][ T2230] Memory cgroup out of memory: Killed process 2225 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 03:07:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:50 executing program 0: 03:07:50 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x4, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:50 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) r2 = add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="34ec3643ce55a9132f692f4dfc4fdc331e5e16619c23c3f0da03d3cb2b2ff6102ae8142988d8511c7386ef0118c91db3e2facb06fc", 0x35, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r2, 0x8, 0x7fffffff}, 0x0, &(0x7f0000000180)="db42619524992561448ee6058da670f1347300f63368e1126f279bbb51eb8499a9c1cb2820645c5eac0d0c637fa724c35d2b7195af1de1b2f77a90e68ec9e969337a80cc9bfd447038eaffe5729f3a864d3e766195862f0cd97c3b776b45a4ae3a0335725b00ec5f65ea3480b9a1faa9", &(0x7f0000000200)="c3519c13da48e51435a2a804c92cef3479d557965c0aeb176a381c496d85c12155ce73d837fdc0fbc3cdf26b7f02acdce0311ee2fdfa1706f6502e96fd51c73276ceb9e4cf202b3c008d5de98fcb6a105903f93bcfbd9d8ab78251cd0443e1445319ef77ff794188e1413f9aef3d8ca6b245f855b394dc8e76f9a6b57ec9df974c1178947a03c0e1bccbc162af247a0eb5e463cccaa2497253fdf742aa21f188b0d59ea8c9e7272830d4b9ceaeb5e5c8464c63bc244eb9977af60151cc45d750ccf1b7e107c6a57a8d73d9d5159fef298b1f70a46fa0df65d02b8e15ee954cde00f53cfb38fe19c7da96e75e2f0040986d8d9a02") 03:07:50 executing program 0: 03:07:50 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x5, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1217.457281][ T2297] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 03:07:50 executing program 0: 03:07:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4800, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1217.557341][ T2297] CPU: 0 PID: 2297 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1217.565190][ T2297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.565196][ T2297] Call Trace: [ 1217.565219][ T2297] dump_stack+0x172/0x1f0 [ 1217.565246][ T2297] dump_header+0x10f/0xb6c [ 1217.588557][ T2297] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1217.594376][ T2297] ? ___ratelimit+0x60/0x595 [ 1217.598990][ T2297] ? do_raw_spin_unlock+0x57/0x270 [ 1217.604120][ T2297] oom_kill_process.cold+0x10/0x15 [ 1217.609328][ T2297] out_of_memory+0x79a/0x1280 [ 1217.614015][ T2297] ? lock_downgrade+0x880/0x880 [ 1217.618865][ T2297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1217.625808][ T2297] ? oom_killer_disable+0x280/0x280 [ 1217.631376][ T2297] ? find_held_lock+0x35/0x130 [ 1217.636165][ T2297] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1217.643248][ T2297] ? memcg_event_wake+0x230/0x230 [ 1217.648283][ T2297] ? do_raw_spin_unlock+0x57/0x270 [ 1217.653410][ T2297] ? _raw_spin_unlock+0x2d/0x50 [ 1217.664359][ T2297] try_charge+0x102c/0x15c0 [ 1217.668868][ T2297] ? find_held_lock+0x35/0x130 [ 1217.673641][ T2297] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1217.679204][ T2297] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1217.685051][ T2297] ? find_held_lock+0x35/0x130 [ 1217.689923][ T2297] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1217.695498][ T2297] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1217.701074][ T2297] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1217.706277][ T2297] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1217.711934][ T2297] __memcg_kmem_charge+0x136/0x300 [ 1217.717059][ T2297] __alloc_pages_nodemask+0x437/0x7e0 [ 1217.722434][ T2297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1217.728701][ T2297] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1217.734447][ T2297] ? copy_process.part.0+0x1d08/0x7980 [ 1217.739949][ T2297] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1217.745262][ T2297] ? trace_hardirqs_on+0x67/0x230 [ 1217.750286][ T2297] ? kasan_check_read+0x11/0x20 [ 1217.755152][ T2297] copy_process.part.0+0x3e0/0x7980 [ 1217.760355][ T2297] ? psi_memstall_leave+0x11c/0x180 [ 1217.765665][ T2297] ? sched_clock+0x2e/0x50 [ 1217.770084][ T2297] ? psi_memstall_leave+0x12e/0x180 [ 1217.775312][ T2297] ? find_held_lock+0x35/0x130 [ 1217.780103][ T2297] ? psi_memstall_leave+0x12e/0x180 [ 1217.785386][ T2297] ? __cleanup_sighand+0x60/0x60 [ 1217.790349][ T2297] ? __lock_acquire+0x548/0x3fb0 [ 1217.795300][ T2297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1217.801578][ T2297] _do_fork+0x257/0xfd0 [ 1217.805740][ T2297] ? fork_idle+0x1d0/0x1d0 [ 1217.810185][ T2297] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1217.816348][ T2297] ? lock_downgrade+0x880/0x880 [ 1217.821226][ T2297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1217.827484][ T2297] ? blkcg_exit_queue+0x30/0x30 [ 1217.832357][ T2297] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1217.838023][ T2297] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1217.843502][ T2297] ? do_syscall_64+0x26/0x610 [ 1217.848183][ T2297] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1217.854252][ T2297] ? do_syscall_64+0x26/0x610 [ 1217.858934][ T2297] __x64_sys_clone+0xbf/0x150 [ 1217.863649][ T2297] do_syscall_64+0x103/0x610 [ 1217.868258][ T2297] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1217.874167][ T2297] RIP: 0033:0x45b5f9 [ 1217.878070][ T2297] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1217.897680][ T2297] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1217.906112][ T2297] RAX: ffffffffffffffda RBX: 00007fba1da18700 RCX: 000000000045b5f9 [ 1217.914126][ T2297] RDX: 00007fba1da189d0 RSI: 00007fba1da17db0 RDI: 00000000003d0f00 [ 1217.922118][ T2297] RBP: 0000000000a4fcb0 R08: 00007fba1da18700 R09: 00007fba1da18700 [ 1217.930191][ T2297] R10: 00007fba1da189d0 R11: 0000000000000202 R12: 0000000000000000 [ 1217.938182][ T2297] R13: 0000000000a4fb5f R14: 00007fba1da189c0 R15: 000000000073bf0c [ 1217.957149][ T2297] memory: usage 307192kB, limit 307200kB, failcnt 3761 03:07:50 executing program 0: 03:07:50 executing program 2: r0 = socket$inet6(0xa, 0x4, 0xb) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6d}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f0000000180)={0x2}, &(0x7f00000001c0), &(0x7f0000000240)={0x77359400}, 0x8) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0xe000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) [ 1217.997380][ T2297] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1218.080322][ T2297] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1218.132834][ T2297] Memory cgroup stats for /syz5: cache:56KB rss:194112KB rss_huge:137216KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:194288KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1218.246900][ T2297] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2283,uid=0 [ 1218.266225][ T2297] Memory cgroup out of memory: Killed process 2283 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 03:07:51 executing program 0: 03:07:51 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x6, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4c00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:51 executing program 0: 03:07:51 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$P9_RWALK(r2, &(0x7f0000000100)={0x64, 0x6f, 0x1, {0x7, [{0x20, 0x1, 0x2}, {0x40, 0x1, 0x5}, {0x46, 0x4, 0x8}, {0x8, 0x4, 0x5}, {0x20, 0x3, 0x4}, {0x0, 0x3, 0x4}, {0x80, 0x4, 0x2}]}}, 0x64) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xc76, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 03:07:51 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x7, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:51 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 03:07:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:51 executing program 0: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) 03:07:51 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xb, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:51 executing program 0: creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 1218.880668][ T2363] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1218.942734][ T2363] CPU: 1 PID: 2363 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1218.950596][ T2363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.960954][ T2363] Call Trace: [ 1218.965420][ T2363] dump_stack+0x172/0x1f0 [ 1218.970816][ T2363] dump_header+0x10f/0xb6c [ 1218.975253][ T2363] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1218.981779][ T2363] ? ___ratelimit+0x60/0x595 [ 1218.987200][ T2363] ? do_raw_spin_unlock+0x57/0x270 [ 1218.992439][ T2363] oom_kill_process.cold+0x10/0x15 [ 1218.997564][ T2363] out_of_memory+0x79a/0x1280 [ 1219.002272][ T2363] ? lock_downgrade+0x880/0x880 [ 1219.007134][ T2363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1219.013417][ T2363] ? oom_killer_disable+0x280/0x280 [ 1219.018647][ T2363] ? find_held_lock+0x35/0x130 [ 1219.023430][ T2363] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1219.029012][ T2363] ? memcg_event_wake+0x230/0x230 [ 1219.034096][ T2363] ? do_raw_spin_unlock+0x57/0x270 [ 1219.039273][ T2363] ? _raw_spin_unlock+0x2d/0x50 [ 1219.044171][ T2363] try_charge+0x102c/0x15c0 [ 1219.048692][ T2363] ? find_held_lock+0x35/0x130 [ 1219.053476][ T2363] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1219.059050][ T2363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1219.065314][ T2363] ? kasan_check_read+0x11/0x20 [ 1219.070184][ T2363] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1219.075752][ T2363] mem_cgroup_try_charge+0x24d/0x5e0 [ 1219.081066][ T2363] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1219.086739][ T2363] __handle_mm_fault+0x1e1f/0x3ec0 [ 1219.091900][ T2363] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1219.097470][ T2363] ? find_held_lock+0x35/0x130 [ 1219.102261][ T2363] ? handle_mm_fault+0x322/0xb30 [ 1219.107237][ T2363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1219.113504][ T2363] ? kasan_check_read+0x11/0x20 [ 1219.118394][ T2363] handle_mm_fault+0x43f/0xb30 [ 1219.125294][ T2363] __do_page_fault+0x5ef/0xda0 [ 1219.130089][ T2363] do_page_fault+0x71/0x581 [ 1219.134649][ T2363] ? page_fault+0x8/0x30 [ 1219.138920][ T2363] page_fault+0x1e/0x30 [ 1219.143098][ T2363] RIP: 0033:0x45b5dd [ 1219.147008][ T2363] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8e fb ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 1219.166621][ T2363] RSP: 002b:0000000000a4faa8 EFLAGS: 00010202 [ 1219.172709][ T2363] RAX: ffffffffffffffea RBX: 00007fba1da18700 RCX: 00007fba1da18700 [ 1219.180978][ T2363] RDX: 00000000003d0f00 RSI: 00007fba1da17db0 RDI: 000000000040fa30 [ 1219.188997][ T2363] RBP: 0000000000a4fcb0 R08: 00007fba1da189d0 R09: 00007fba1da18700 [ 1219.197002][ T2363] R10: 00007fba1da17dc0 R11: 0000000000000246 R12: 0000000000000000 [ 1219.204995][ T2363] R13: 0000000000a4fb5f R14: 00007fba1da189c0 R15: 000000000073bf0c 03:07:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:52 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r2, 0x201000000000016) 03:07:52 executing program 0: unshare(0x8020000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r0, 0x0) 03:07:52 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x33, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1219.406918][ T2363] memory: usage 307200kB, limit 307200kB, failcnt 3807 [ 1219.413889][ T2363] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1219.462624][ T2385] __nla_parse: 10 callbacks suppressed [ 1219.462634][ T2385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1219.492894][ T2363] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:07:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:52 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x24a, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1219.514906][ T2363] Memory cgroup stats for /syz5: cache:56KB rss:194304KB rss_huge:137216KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:194284KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1219.583188][ T2392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1219.589352][ T2363] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2353,uid=0 [ 1219.616080][ T2363] Memory cgroup out of memory: Killed process 2353 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB 03:07:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6c00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:52 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x300, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:52 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}, 0x3}, 0x1c) r1 = gettid() r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f00000002c0)) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x3c) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000240)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="8fb2fa69", @ANYRES16=r4, @ANYBLOB="04042dbd7000ffdbdf25140000000c000900080002007f0000000c00090008000100fffeffff4800070008000200040000000c00030080000000000000000c00040001000080000000000800010002000000080001000900000008000200010000000c00040000000000ffffffff380005002400020008000300020000000800010007000000080001001e00000008000400ffffffff080001007564700008000100756470005000070008000100050000000c000400040000000000000008000100070000000c0003000180000000000000080001000900000008000200090000000c00030009000000000000000800010007000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000040) accept4$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14, 0x80803) r6 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in6=@remote, 0x4e24, 0x0, 0x4e24, 0x58a, 0xa, 0x0, 0xa0, 0x7b, r5, r6}, {0x945, 0x4, 0x2, 0x0, 0x200, 0x2, 0x10001, 0x4}, {0x6, 0x2, 0x0, 0x9}, 0x0, 0x6e6bb6, 0x1, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d3, 0x7f}, 0xa, @in6=@rand_addr="99362ad5315f1bbb56adb766a8b7e9c3", 0x3501, 0x4, 0x2, 0xffffffff7fffffff, 0x1000, 0x100000001, 0x400}}, 0xe8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000080)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r7, 0x4) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) futex(&(0x7f0000000140), 0x0, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x2) tkill(r1, 0x201000000000016) 03:07:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:52 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x500, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1219.840577][ T2414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1219.857393][ T2420] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1219.863827][ T2416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1219.915511][ T2418] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1219.949569][ T2418] CPU: 0 PID: 2418 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1219.957428][ T2418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.967696][ T2418] Call Trace: [ 1219.971017][ T2418] dump_stack+0x172/0x1f0 [ 1219.975366][ T2418] dump_header+0x10f/0xb6c [ 1219.979841][ T2418] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1219.987547][ T2418] ? ___ratelimit+0x60/0x595 [ 1219.992165][ T2418] ? do_raw_spin_unlock+0x57/0x270 [ 1219.997331][ T2418] oom_kill_process.cold+0x10/0x15 [ 1220.002457][ T2418] out_of_memory+0x79a/0x1280 [ 1220.007147][ T2418] ? lock_downgrade+0x880/0x880 [ 1220.012023][ T2418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.018280][ T2418] ? oom_killer_disable+0x280/0x280 [ 1220.023488][ T2418] ? find_held_lock+0x35/0x130 [ 1220.023515][ T2418] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1220.023528][ T2418] ? memcg_event_wake+0x230/0x230 [ 1220.023548][ T2418] ? do_raw_spin_unlock+0x57/0x270 [ 1220.023566][ T2418] ? _raw_spin_unlock+0x2d/0x50 [ 1220.023585][ T2418] try_charge+0x102c/0x15c0 [ 1220.038992][ T2418] ? find_held_lock+0x35/0x130 [ 1220.039024][ T2418] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1220.039043][ T2418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.039066][ T2418] ? kasan_check_read+0x11/0x20 [ 1220.074923][ T2418] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1220.080507][ T2418] mem_cgroup_try_charge+0x24d/0x5e0 [ 1220.085826][ T2418] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1220.091490][ T2418] __handle_mm_fault+0x1e1f/0x3ec0 [ 1220.096631][ T2418] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1220.102184][ T2418] ? find_held_lock+0x35/0x130 [ 1220.106958][ T2418] ? handle_mm_fault+0x322/0xb30 03:07:52 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x600, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x700, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1220.111921][ T2418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.118185][ T2418] ? kasan_check_read+0x11/0x20 [ 1220.123061][ T2418] handle_mm_fault+0x43f/0xb30 [ 1220.127852][ T2418] __do_page_fault+0x5ef/0xda0 [ 1220.132657][ T2418] do_page_fault+0x71/0x581 [ 1220.137188][ T2418] ? page_fault+0x8/0x30 [ 1220.141454][ T2418] page_fault+0x1e/0x30 [ 1220.145628][ T2418] RIP: 0033:0x40bf5d [ 1220.145645][ T2418] Code: 48 18 8b 4c 24 4c 89 48 24 31 c0 48 8b 8c 04 10 01 00 00 48 89 8c 02 30 bf 73 00 48 83 c0 08 48 83 f8 48 75 e6 e8 83 72 ff ff <83> 05 a0 40 53 00 01 80 7c 24 35 00 74 0b f6 44 24 30 01 0f 84 68 [ 1220.145653][ T2418] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010217 [ 1220.145663][ T2418] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 0000000000458c29 [ 1220.145670][ T2418] RDX: 0000000000000000 RSI: 0000000000000081 RDI: 000000000073bf08 [ 1220.145678][ T2418] RBP: 000000000073bf00 R08: 00007fba1da18700 R09: 0000000000129d03 [ 1220.145685][ T2418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000919 [ 1220.145692][ T2418] R13: 0000000000000000 R14: 0000000000000003 R15: 000000000073bf0c 03:07:53 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000013) 03:07:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1220.188652][ T2418] memory: usage 307168kB, limit 307200kB, failcnt 3835 [ 1220.227309][ T2418] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1220.241263][ T2418] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1220.257251][ T2440] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:07:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7400, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xb00, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1220.286655][ T2418] Memory cgroup stats for /syz5: cache:56KB rss:194148KB rss_huge:137216KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:194288KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1220.380644][ T2418] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2402,uid=0 [ 1220.387594][ T2453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1220.439868][ T2418] Memory cgroup out of memory: Killed process 2402 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB [ 1220.461105][ T1043] oom_reaper: reaped process 2402 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 03:07:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x291d0000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x3300, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:53 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0xfffffffffffffffc, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) 03:07:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7a00, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1220.584468][ T2470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1220.610693][ T2468] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1220.611371][ T2472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:07:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x4000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xc00e, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x4a02, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1220.761758][ T2479] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1220.780079][ T2484] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1220.818796][ T2479] CPU: 0 PID: 2479 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1220.826662][ T2479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1220.836743][ T2479] Call Trace: [ 1220.840070][ T2479] dump_stack+0x172/0x1f0 [ 1220.844473][ T2479] dump_header+0x10f/0xb6c [ 1220.848921][ T2479] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1220.854759][ T2479] ? ___ratelimit+0x60/0x595 [ 1220.859366][ T2479] ? do_raw_spin_unlock+0x57/0x270 [ 1220.864509][ T2479] oom_kill_process.cold+0x10/0x15 [ 1220.869630][ T2479] out_of_memory+0x79a/0x1280 [ 1220.874324][ T2479] ? lock_downgrade+0x880/0x880 [ 1220.876598][ T2490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1220.879327][ T2479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.879345][ T2479] ? oom_killer_disable+0x280/0x280 [ 1220.879358][ T2479] ? find_held_lock+0x35/0x130 [ 1220.879382][ T2479] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1220.879404][ T2479] ? memcg_event_wake+0x230/0x230 03:07:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x1000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1220.915418][ T2479] ? do_raw_spin_unlock+0x57/0x270 [ 1220.920553][ T2479] ? _raw_spin_unlock+0x2d/0x50 [ 1220.925443][ T2479] try_charge+0x102c/0x15c0 [ 1220.929996][ T2479] ? find_held_lock+0x35/0x130 [ 1220.934806][ T2479] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1220.940381][ T2479] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1220.945951][ T2479] ? find_held_lock+0x35/0x130 [ 1220.950737][ T2479] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1220.956338][ T2479] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1220.961998][ T2479] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1220.967234][ T2479] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1220.972810][ T2479] __memcg_kmem_charge+0x136/0x300 [ 1220.978342][ T2479] __alloc_pages_nodemask+0x437/0x7e0 [ 1220.984547][ T2479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1220.991430][ T2479] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1220.997198][ T2479] ? copy_process.part.0+0x1d08/0x7980 [ 1221.002667][ T2479] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1221.007975][ T2479] ? trace_hardirqs_on+0x67/0x230 [ 1221.013035][ T2479] ? kasan_check_read+0x11/0x20 [ 1221.017912][ T2479] copy_process.part.0+0x3e0/0x7980 [ 1221.023130][ T2479] ? __lock_acquire+0x548/0x3fb0 [ 1221.028110][ T2479] ? sched_clock+0x2e/0x50 [ 1221.032568][ T2479] ? __might_fault+0x12b/0x1e0 [ 1221.037372][ T2479] ? __cleanup_sighand+0x60/0x60 [ 1221.042475][ T2479] ? lock_downgrade+0x880/0x880 [ 1221.047367][ T2479] _do_fork+0x257/0xfd0 [ 1221.051540][ T2479] ? fork_idle+0x1d0/0x1d0 [ 1221.055982][ T2479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1221.055997][ T2479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1221.056017][ T2479] ? do_syscall_64+0x26/0x610 [ 1221.056032][ T2479] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1221.056044][ T2479] ? do_syscall_64+0x26/0x610 [ 1221.056063][ T2479] __x64_sys_clone+0xbf/0x150 [ 1221.056081][ T2479] do_syscall_64+0x103/0x610 [ 1221.056099][ T2479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1221.056110][ T2479] RIP: 0033:0x458c29 [ 1221.056124][ T2479] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1221.056133][ T2479] RSP: 002b:00007fba1da17c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1221.056146][ T2479] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29 [ 1221.056163][ T2479] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000003102001ffe [ 1221.067116][ T2479] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 1221.067126][ T2479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fba1da186d4 [ 1221.067132][ T2479] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff [ 1221.102651][ T2479] memory: usage 307200kB, limit 307200kB, failcnt 3883 [ 1221.184059][ T2479] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1221.193302][ T2497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1221.209954][ T2479] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1221.240553][ T2479] Memory cgroup stats for /syz5: cache:56KB rss:194280KB rss_huge:137216KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:194344KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1221.262924][ T2479] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2456,uid=0 03:07:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:54 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x2000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1221.278604][ T2479] Memory cgroup out of memory: Killed process 2456 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1221.295138][ T1043] oom_reaper: reaped process 2456 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1221.364898][ T2518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1221.377266][ T2519] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:07:56 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x3000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:56 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x40000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x402000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000180)={0x2, r1}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r2, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000001c0)={0xffffffffffffff00, 0x1}) tkill(r3, 0x201000000000016) 03:07:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1223.618129][ T2543] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:07:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:56 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x4000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:56 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x5000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:56 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) timer_settime(r2, 0xfffffffffffffffe, &(0x7f0000000000)={{0x0, 0x8}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) r3 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000000c0)=0x100, 0x8) 03:07:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1223.956922][ T2583] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:07:56 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x6000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:57 executing program 0: writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:07:57 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x301140, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x1, 0x80000000}) 03:07:57 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x7000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:57 executing program 0: writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:57 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xb000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:57 executing program 0: writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:57 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x33000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:07:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:07:57 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x40000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:07:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:07:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1225.062085][ T2655] __nla_parse: 6 callbacks suppressed [ 1225.062096][ T2655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1225.182476][ T2659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0xa1f}, 0x1) 03:08:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:00 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x4a020000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1227.240668][ T2669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:00 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x8dffffff, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1227.425062][ T2691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1227.437882][ T2693] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:00 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xeaffffff, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x1, &(0x7f0000044000)={0x0, 0x13, 0x0, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x201000000000016) [ 1227.700159][ T2709] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1227.930282][ T2719] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:01 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xf5ffffff, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x2c) [ 1228.200554][ T2734] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:01 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xffffff8d, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1228.340503][ T2743] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1228.358911][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 03:08:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1228.404058][ T2745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1228.422536][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1228.430398][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1228.440498][ T7803] Call Trace: [ 1228.443813][ T7803] dump_stack+0x172/0x1f0 [ 1228.448159][ T7803] dump_header+0x10f/0xb6c [ 1228.452590][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1228.458424][ T7803] ? ___ratelimit+0x60/0x595 [ 1228.463038][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1228.468163][ T7803] oom_kill_process.cold+0x10/0x15 [ 1228.473300][ T7803] out_of_memory+0x79a/0x1280 [ 1228.478009][ T7803] ? lock_downgrade+0x880/0x880 [ 1228.482994][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1228.489275][ T7803] ? oom_killer_disable+0x280/0x280 [ 1228.494489][ T7803] ? find_held_lock+0x35/0x130 [ 1228.499277][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1228.504932][ T7803] ? memcg_event_wake+0x230/0x230 [ 1228.509987][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1228.515106][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1228.519974][ T7803] try_charge+0x102c/0x15c0 [ 1228.524483][ T7803] ? find_held_lock+0x35/0x130 [ 1228.529288][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1228.539227][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1228.544787][ T7803] ? find_held_lock+0x35/0x130 [ 1228.549555][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1228.555117][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1228.560682][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1228.565889][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1228.571465][ T7803] __memcg_kmem_charge+0x136/0x300 [ 1228.576681][ T7803] __alloc_pages_nodemask+0x437/0x7e0 [ 1228.582088][ T7803] ? __pud_alloc+0x1d3/0x250 [ 1228.587751][ T7803] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1228.593484][ T7803] ? __pud_alloc+0x1d3/0x250 [ 1228.598105][ T7803] ? lock_downgrade+0x880/0x880 [ 1228.603084][ T7803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1228.609359][ T7803] alloc_pages_current+0x107/0x210 [ 1228.614498][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1228.619625][ T7803] __pmd_alloc+0x41/0x460 [ 1228.623959][ T7803] ? pmd_val+0x100/0x100 [ 1228.628233][ T7803] pmd_alloc+0x10c/0x180 [ 1228.632596][ T7803] copy_page_range+0x62e/0x1f90 [ 1228.637486][ T7803] ? find_held_lock+0x35/0x130 [ 1228.642274][ T7803] ? percpu_ref_put_many+0x94/0x190 [ 1228.647517][ T7803] ? copy_process.part.0+0x3121/0x7980 [ 1228.652994][ T7803] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1228.658716][ T7803] ? vma_compute_subtree_gap+0x158/0x230 [ 1228.664457][ T7803] ? vma_gap_callbacks_rotate+0x62/0x80 [ 1228.670007][ T7803] ? pmd_alloc+0x180/0x180 [ 1228.674450][ T7803] ? __rb_insert_augmented+0x231/0xdf0 [ 1228.679919][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1228.684611][ T7803] ? __vma_link_rb+0x279/0x370 [ 1228.689415][ T7803] copy_process.part.0+0x568b/0x7980 [ 1228.694737][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1228.699701][ T7803] _do_fork+0x257/0xfd0 [ 1228.703863][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1228.708290][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.713774][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1228.719257][ T7803] ? do_syscall_64+0x26/0x610 [ 1228.723954][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1228.730045][ T7803] ? do_syscall_64+0x26/0x610 [ 1228.735356][ T7803] __x64_sys_clone+0xbf/0x150 [ 1228.740610][ T7803] do_syscall_64+0x103/0x610 [ 1228.745209][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1228.751121][ T7803] RIP: 0033:0x4571fa [ 1228.755016][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1228.775593][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1228.784309][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1228.792302][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1228.800284][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1228.808265][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1228.816265][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1228.887314][ T7803] memory: usage 307196kB, limit 307200kB, failcnt 3926 [ 1228.903655][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1228.920636][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1228.937391][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:193084KB rss_huge:135168KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:193092KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1228.986927][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17548,uid=0 [ 1229.062503][ T7803] Memory cgroup out of memory: Killed process 17548 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35796kB, shmem-rss:0kB 03:08:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:01 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xffffffea, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1229.189778][ T2759] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1229.215709][ T2755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1229.402486][ T2761] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1229.456073][ T2761] CPU: 0 PID: 2761 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1229.463927][ T2761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1229.473991][ T2761] Call Trace: [ 1229.477328][ T2761] dump_stack+0x172/0x1f0 [ 1229.481711][ T2761] dump_header+0x10f/0xb6c [ 1229.486150][ T2761] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1229.492000][ T2761] ? ___ratelimit+0x60/0x595 [ 1229.496602][ T2761] ? do_raw_spin_unlock+0x57/0x270 [ 1229.501720][ T2761] oom_kill_process.cold+0x10/0x15 [ 1229.506845][ T2761] out_of_memory+0x79a/0x1280 [ 1229.511528][ T2761] ? lock_downgrade+0x880/0x880 [ 1229.516386][ T2761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1229.516403][ T2761] ? oom_killer_disable+0x280/0x280 [ 1229.516415][ T2761] ? find_held_lock+0x35/0x130 [ 1229.516437][ T2761] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1229.516450][ T2761] ? memcg_event_wake+0x230/0x230 [ 1229.516470][ T2761] ? do_raw_spin_unlock+0x57/0x270 [ 1229.516486][ T2761] ? _raw_spin_unlock+0x2d/0x50 [ 1229.516502][ T2761] try_charge+0x102c/0x15c0 [ 1229.516513][ T2761] ? find_held_lock+0x35/0x130 [ 1229.516534][ T2761] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1229.516549][ T2761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1229.516568][ T2761] ? kasan_check_read+0x11/0x20 [ 1229.516586][ T2761] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1229.516606][ T2761] mem_cgroup_try_charge+0x24d/0x5e0 [ 1229.590523][ T2761] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1229.600371][ T2761] __handle_mm_fault+0x1e1f/0x3ec0 [ 1229.605518][ T2761] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1229.611099][ T2761] ? find_held_lock+0x35/0x130 [ 1229.615880][ T2761] ? handle_mm_fault+0x322/0xb30 [ 1229.620852][ T2761] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1229.627296][ T2761] ? kasan_check_read+0x11/0x20 [ 1229.632171][ T2761] handle_mm_fault+0x43f/0xb30 [ 1229.636959][ T2761] __do_page_fault+0x5ef/0xda0 [ 1229.643259][ T2761] do_page_fault+0x71/0x581 [ 1229.647769][ T2761] ? page_fault+0x8/0x30 [ 1229.652018][ T2761] page_fault+0x1e/0x30 [ 1229.656173][ T2761] RIP: 0033:0x41063f [ 1229.660081][ T2761] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1229.679726][ T2761] RSP: 002b:0000000000a4faf0 EFLAGS: 00010206 [ 1229.686005][ T2761] RAX: 00007fba1d9d7000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 1229.694005][ T2761] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1229.701996][ T2761] RBP: 0000000000a4fbd0 R08: ffffffffffffffff R09: 0000000000000000 [ 1229.709987][ T2761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 1229.717983][ T2761] R13: 00007fba1d9f7700 R14: 0000000000000005 R15: 000000000073bfac [ 1229.742031][ T2761] memory: usage 307164kB, limit 307200kB, failcnt 3934 [ 1229.749367][ T2761] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1229.757670][ T2761] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1229.764952][ T2761] Memory cgroup stats for /syz5: cache:56KB rss:193128KB rss_huge:135168KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:193084KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1229.788198][ T2761] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19688,uid=0 [ 1229.804077][ T2761] Memory cgroup out of memory: Killed process 19688 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35784kB, shmem-rss:0kB [ 1229.820463][ T1043] oom_reaper: reaped process 19688 (syz-executor.5), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 03:08:03 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r2 = gettid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="ce6c160e6ce9ebb4a0b6b3d33425bfe3b193dee1ee56a72ab713cd7e85f62ba7", 0x20, 0xffffffffffffffff) keyctl$get_persistent(0x16, r3, r4) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000100)={0xebcd, 0x8, 0x2}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000300)={0x3, 0x0, @pic={0x200, 0x3f, 0x3, 0x96, 0x7, 0x3, 0x1, 0x1ff, 0x7, 0x28, 0x0, 0x4, 0x5c, 0x4b, 0x9f00000000000, 0x2}}) tkill(r2, 0x201000000000016) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x31) sendfile(r0, r1, &(0x7f00000002c0), 0x3) 03:08:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, 0x0, 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:03 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xfffffff5, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x2c) 03:08:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, 0x2c) [ 1230.993265][ T2777] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1231.008186][ T2773] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1231.028696][ T2779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:04 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x100000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x2c) 03:08:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000), 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0xe0200, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000180)={r0}) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2, 0x1d, r3}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10001, 0x0) write$P9_RGETLOCK(r5, &(0x7f00000000c0)={0x1e, 0x37, 0x1, {0x2, 0xfffffffffffffffd, 0x7, r4}}, 0x1e) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r4, 0x201000000000016) [ 1231.180955][ T2800] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:04 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x3, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) 03:08:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000), 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x2c) 03:08:04 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x200000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1231.318595][ T2815] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000), 0x0) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:04 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x300000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1231.457441][ T2829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1231.492982][ T2830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x2c) 03:08:04 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x400000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{0x0}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1231.617579][ T2843] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1231.732079][ T2853] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:07 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getpeername(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x80) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x1000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0xb4, "e1c25054dfccd95c1b43c1baff06012ac7aa9c93c755f53f797305d198c7683d5b60233b31f5dd01448be3ff7373b2c6d79ebbb2d8be3a794a93c306d0c7ce2c7927f88cfc41981711d9ca1ae90059e8043bb283d94b5270e8dd96b06490648ed67537586278623c4f781eef26424c54f97b17e8958ebd163cd64321a65f7b5584f0472eb96b2681ca36b241d10088039e1e116b0dc60474ca4c6ce2f3923cfe39af533e27eb3cefbfd58c692f5fee863c37cd11"}, &(0x7f0000000280)=0xbc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x70, "86ed6e88967c83d17bffcc527951f9c6af97949777e25fb1e364422ea0ab006bfed3bb67d46ac5a6fde7de845ecba07abbde6d003405dd3d4df20b61cdf2937fdfcc60fb080370e0796e9a747eeaf82312f95b4f6f764411ea9a733142fc965a869e79e6e34ce204bf720ed865eec946"}, &(0x7f0000000340)=0x78) 03:08:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x2c) 03:08:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{0x0}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x500000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x20000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x10000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1234.414185][ T2871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1234.428357][ T2880] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1234.442906][ T2876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{0x0}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}, 0x2c) 03:08:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x600000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:07 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0xecddf4597465e128, 0x0, 0xfffffffffffffee7}, 0x0) tkill(r1, 0x201000000000016) 03:08:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x231e0000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1234.729476][ T2899] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x700000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x2c) [ 1234.881844][ T2910] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xb00000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x2c) [ 1235.154591][ T2917] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x40030000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:08 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x3300000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1235.327796][ T2932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1235.370729][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1235.391877][ T2933] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1235.414573][ T2933] CPU: 0 PID: 2933 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1235.422428][ T2933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1235.433801][ T2933] Call Trace: [ 1235.437113][ T2933] dump_stack+0x172/0x1f0 [ 1235.441467][ T2933] dump_header+0x10f/0xb6c [ 1235.445891][ T2933] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1235.445906][ T2933] ? ___ratelimit+0x60/0x595 [ 1235.445920][ T2933] ? do_raw_spin_unlock+0x57/0x270 [ 1235.445936][ T2933] oom_kill_process.cold+0x10/0x15 [ 1235.445951][ T2933] out_of_memory+0x79a/0x1280 [ 1235.445966][ T2933] ? lock_downgrade+0x880/0x880 [ 1235.445990][ T2933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.446005][ T2933] ? oom_killer_disable+0x280/0x280 [ 1235.446016][ T2933] ? find_held_lock+0x35/0x130 [ 1235.446045][ T2933] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1235.446059][ T2933] ? memcg_event_wake+0x230/0x230 [ 1235.446079][ T2933] ? do_raw_spin_unlock+0x57/0x270 [ 1235.446093][ T2933] ? _raw_spin_unlock+0x2d/0x50 [ 1235.446109][ T2933] try_charge+0x102c/0x15c0 [ 1235.446121][ T2933] ? find_held_lock+0x35/0x130 [ 1235.446141][ T2933] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1235.446161][ T2933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.456565][ T2933] ? kasan_check_read+0x11/0x20 [ 1235.456584][ T2933] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1235.456607][ T2933] mem_cgroup_try_charge+0x24d/0x5e0 [ 1235.456627][ T2933] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1235.456643][ T2933] wp_page_copy+0x408/0x1740 [ 1235.456657][ T2933] ? find_held_lock+0x35/0x130 [ 1235.456676][ T2933] ? pmd_pfn+0x1d0/0x1d0 [ 1235.456689][ T2933] ? lock_downgrade+0x880/0x880 [ 1235.456703][ T2933] ? __pte_alloc_kernel+0x220/0x220 [ 1235.456719][ T2933] ? kasan_check_read+0x11/0x20 [ 1235.456733][ T2933] ? do_raw_spin_unlock+0x57/0x270 [ 1235.456750][ T2933] do_wp_page+0x48e/0x1500 [ 1235.456764][ T2933] ? do_raw_spin_lock+0x12a/0x2e0 [ 1235.456780][ T2933] ? rwlock_bug.part.0+0x90/0x90 [ 1235.456804][ T2933] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1235.550304][ T2933] ? add_mm_counter_fast.part.0+0x40/0x40 03:08:08 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x4000000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:08 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @broadcast, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000002c0)={@local, 0x29, r1}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) wait4(r2, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r2, 0x201000000000016) 03:08:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x40000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1235.550329][ T2933] __handle_mm_fault+0x22e8/0x3ec0 [ 1235.550349][ T2933] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1235.550363][ T2933] ? find_held_lock+0x35/0x130 [ 1235.550380][ T2933] ? handle_mm_fault+0x322/0xb30 [ 1235.550402][ T2933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1235.550420][ T2933] ? kasan_check_read+0x11/0x20 [ 1235.550440][ T2933] handle_mm_fault+0x43f/0xb30 [ 1235.550463][ T2933] __do_page_fault+0x5ef/0xda0 [ 1235.580159][ T2933] do_page_fault+0x71/0x581 [ 1235.613033][ T2933] ? page_fault+0x8/0x30 [ 1235.613049][ T2933] page_fault+0x1e/0x30 [ 1235.613061][ T2933] RIP: 0033:0x40de98 [ 1235.613075][ T2933] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 2c e2 4b 00 31 c0 e8 83 3a ff ff 31 ff e8 cc 36 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ce 25 64 00 [ 1235.613082][ T2933] RSP: 002b:0000000000a4fb10 EFLAGS: 00010246 [ 1235.613094][ T2933] RAX: 00000000c17b67a9 RBX: 0000000072445b9d RCX: 0000001b34520000 [ 1235.613103][ T2933] RDX: 0000000000000000 RSI: 00000000000007a9 RDI: ffffffffc17b67a9 [ 1235.613111][ T2933] RBP: 0000000000000002 R08: 00000000c17b67a9 R09: 00000000c17b67ad [ 1235.613127][ T2933] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf88 [ 1235.639209][ T2933] R13: 0000000080000000 R14: 00007fba1fa19008 R15: 0000000000000002 [ 1235.700078][ T2952] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1235.781308][ T2954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1235.785791][ T2933] memory: usage 307200kB, limit 307200kB, failcnt 3972 [ 1235.848078][ T2933] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1235.865020][ T2933] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1235.874334][ T2933] Memory cgroup stats for /syz5: cache:56KB rss:191680KB rss_huge:133120KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:191768KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1235.903292][ T2933] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20516,uid=0 03:08:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:08 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x4a02000000000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:08 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) [ 1235.956062][ T2933] Memory cgroup out of memory: Killed process 20516 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35796kB, shmem-rss:0kB 03:08:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xf0ffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x2c) 03:08:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1236.067044][ T2965] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1236.109585][ T2973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1236.167186][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:09 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x8dffffff00000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x2c) 03:08:09 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xeaffffff00000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00'}, 0x2c) 03:08:09 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xf5ffffff00000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, 0x2c) 03:08:09 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xffffffff00000000, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1236.794096][ T2973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:11 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r1, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r2, 0x201000000000016) write$9p(r0, &(0x7f00000000c0)="fddc6fd03748608b7d9ee82ab5e3dbdff5", 0x11) 03:08:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x2c) 03:08:11 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xffffffffffffffff, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4c000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1239.051245][ T3033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1239.067304][ T3034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1239.072363][ T3029] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100", 0x18}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1239.213322][ T3042] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100", 0x18}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100", 0x18}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1239.339371][ T3050] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:12 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x2, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1239.489435][ T3053] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10'}, 0x2c) 03:08:12 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x3, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:12 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) getpgid(r1) 03:08:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff", 0x1c}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x200000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:12 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x4, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x5, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1240.016462][ T3090] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1240.027596][ T3080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1240.047573][ T3094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff", 0x1c}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x7, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xb, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1240.613906][ T3080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1240.624253][ T3094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:13 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x4, 0xd80c0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x1013, r1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r2, 0x201000000000016) 03:08:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x33, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff", 0x1c}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x300000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1240.876645][ T3141] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1240.903832][ T3144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1240.911937][ T3138] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1240.947154][ T3138] CPU: 0 PID: 3138 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1240.955019][ T3138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.965193][ T3138] Call Trace: [ 1240.968499][ T3138] dump_stack+0x172/0x1f0 [ 1240.972840][ T3138] dump_header+0x10f/0xb6c 03:08:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x24a, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe", 0x1e}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1240.977282][ T3138] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1240.983398][ T3138] ? ___ratelimit+0x60/0x595 [ 1240.988208][ T3138] ? do_raw_spin_unlock+0x57/0x270 [ 1240.993377][ T3138] oom_kill_process.cold+0x10/0x15 [ 1240.998501][ T3138] out_of_memory+0x79a/0x1280 [ 1241.003220][ T3138] ? lock_downgrade+0x880/0x880 [ 1241.008090][ T3138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1241.014353][ T3138] ? oom_killer_disable+0x280/0x280 [ 1241.019645][ T3138] ? find_held_lock+0x35/0x130 03:08:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe", 0x1e}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1241.023312][ T3156] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1241.024457][ T3138] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1241.024473][ T3138] ? memcg_event_wake+0x230/0x230 [ 1241.024494][ T3138] ? do_raw_spin_unlock+0x57/0x270 [ 1241.024510][ T3138] ? _raw_spin_unlock+0x2d/0x50 [ 1241.024538][ T3138] try_charge+0x102c/0x15c0 [ 1241.057729][ T3138] ? find_held_lock+0x35/0x130 [ 1241.062530][ T3138] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1241.068118][ T3138] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1241.073689][ T3138] ? find_held_lock+0x35/0x130 [ 1241.078473][ T3138] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1241.084060][ T3138] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1241.089755][ T3138] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1241.095000][ T3138] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1241.100564][ T3138] __memcg_kmem_charge+0x136/0x300 [ 1241.105693][ T3138] __alloc_pages_nodemask+0x437/0x7e0 [ 1241.111068][ T3138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1241.117321][ T3138] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1241.123046][ T3138] ? copy_process.part.0+0x1d08/0x7980 [ 1241.128513][ T3138] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1241.133815][ T3138] ? trace_hardirqs_on+0x67/0x230 [ 1241.138880][ T3138] ? kasan_check_read+0x11/0x20 [ 1241.143770][ T3138] copy_process.part.0+0x3e0/0x7980 [ 1241.148970][ T3138] ? psi_memstall_leave+0x11c/0x180 [ 1241.154175][ T3138] ? sched_clock+0x2e/0x50 [ 1241.158617][ T3138] ? psi_memstall_leave+0x12e/0x180 [ 1241.163826][ T3138] ? find_held_lock+0x35/0x130 [ 1241.168591][ T3138] ? psi_memstall_leave+0x12e/0x180 [ 1241.173805][ T3138] ? __cleanup_sighand+0x60/0x60 [ 1241.178789][ T3138] ? __lock_acquire+0x548/0x3fb0 [ 1241.183754][ T3138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1241.190126][ T3138] _do_fork+0x257/0xfd0 [ 1241.194299][ T3138] ? fork_idle+0x1d0/0x1d0 [ 1241.198717][ T3138] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1241.204787][ T3138] ? lock_downgrade+0x880/0x880 [ 1241.209639][ T3138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1241.215891][ T3138] ? blkcg_exit_queue+0x30/0x30 [ 1241.220757][ T3138] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1241.226231][ T3138] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1241.231737][ T3138] ? do_syscall_64+0x26/0x610 [ 1241.236436][ T3138] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1241.242608][ T3138] ? do_syscall_64+0x26/0x610 [ 1241.247293][ T3138] __x64_sys_clone+0xbf/0x150 [ 1241.251969][ T3138] do_syscall_64+0x103/0x610 [ 1241.256576][ T3138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1241.262478][ T3138] RIP: 0033:0x45b5f9 [ 1241.266381][ T3138] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1241.287071][ T3138] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1241.295490][ T3138] RAX: ffffffffffffffda RBX: 00007fba1d9f7700 RCX: 000000000045b5f9 [ 1241.303458][ T3138] RDX: 00007fba1d9f79d0 RSI: 00007fba1d9f6db0 RDI: 00000000003d0f00 [ 1241.311433][ T3138] RBP: 0000000000a4fcb0 R08: 00007fba1d9f7700 R09: 00007fba1d9f7700 [ 1241.319617][ T3138] R10: 00007fba1d9f79d0 R11: 0000000000000202 R12: 0000000000000000 [ 1241.327629][ T3138] R13: 0000000000a4fb5f R14: 00007fba1d9f79c0 R15: 000000000073bfac [ 1241.341047][ T3151] __nla_parse: 1 callbacks suppressed [ 1241.341059][ T3151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1241.356462][ T3138] memory: usage 307164kB, limit 307200kB, failcnt 4000 [ 1241.363473][ T3158] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1241.372218][ T3138] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1241.382731][ T3138] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1241.390136][ T3144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:14 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x300, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe", 0x1e}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1241.442883][ T3138] Memory cgroup stats for /syz5: cache:56KB rss:190340KB rss_huge:131072KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:190452KB inactive_file:0KB active_file:0KB unevictable:0KB 03:08:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x400000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1241.536384][ T3171] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1241.554287][ T3138] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23200,uid=0 [ 1241.605431][ T3178] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1241.645048][ T3138] Memory cgroup out of memory: Killed process 23200 (syz-executor.5) total-vm:72580kB, anon-rss:2200kB, file-rss:35788kB, shmem-rss:0kB 03:08:14 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) shmget(0x0, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) 03:08:14 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x500, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:14 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x600, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1242.041367][ T3190] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1242.067719][ T3211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x700000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1242.117700][ T3190] CPU: 0 PID: 3190 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1242.125566][ T3190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1242.125572][ T3190] Call Trace: [ 1242.125596][ T3190] dump_stack+0x172/0x1f0 [ 1242.125616][ T3190] dump_header+0x10f/0xb6c [ 1242.125632][ T3190] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1242.125652][ T3190] ? ___ratelimit+0x60/0x595 [ 1242.125668][ T3190] ? do_raw_spin_unlock+0x57/0x270 03:08:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1242.125683][ T3190] oom_kill_process.cold+0x10/0x15 [ 1242.125697][ T3190] out_of_memory+0x79a/0x1280 [ 1242.125713][ T3190] ? lock_downgrade+0x880/0x880 [ 1242.125736][ T3190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1242.184747][ T3190] ? oom_killer_disable+0x280/0x280 [ 1242.189971][ T3190] ? find_held_lock+0x35/0x130 [ 1242.194786][ T3190] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1242.200337][ T3190] ? memcg_event_wake+0x230/0x230 [ 1242.200360][ T3190] ? do_raw_spin_unlock+0x57/0x270 [ 1242.200376][ T3190] ? _raw_spin_unlock+0x2d/0x50 [ 1242.200393][ T3190] try_charge+0x102c/0x15c0 [ 1242.200406][ T3190] ? find_held_lock+0x35/0x130 [ 1242.200436][ T3190] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1242.224723][ T3190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1242.236840][ T3190] ? kasan_check_read+0x11/0x20 [ 1242.241722][ T3190] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1242.247295][ T3190] mem_cgroup_try_charge+0x24d/0x5e0 [ 1242.252606][ T3190] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1242.258255][ T3190] __handle_mm_fault+0x1e1f/0x3ec0 [ 1242.263416][ T3190] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1242.268983][ T3190] ? find_held_lock+0x35/0x130 [ 1242.273771][ T3190] ? handle_mm_fault+0x322/0xb30 [ 1242.278800][ T3190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1242.285774][ T3190] ? kasan_check_read+0x11/0x20 [ 1242.290655][ T3190] handle_mm_fault+0x43f/0xb30 [ 1242.295450][ T3190] __do_page_fault+0x5ef/0xda0 [ 1242.300227][ T3190] do_page_fault+0x71/0x581 [ 1242.304730][ T3190] ? page_fault+0x8/0x30 [ 1242.309011][ T3190] page_fault+0x1e/0x30 [ 1242.313286][ T3190] RIP: 0033:0x45b5dd [ 1242.317206][ T3190] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8e fb ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 1242.336912][ T3190] RSP: 002b:0000000000a4faa8 EFLAGS: 00010202 [ 1242.343009][ T3190] RAX: ffffffffffffffea RBX: 00007fba1d9f7700 RCX: 00007fba1d9f7700 [ 1242.351002][ T3190] RDX: 00000000003d0f00 RSI: 00007fba1d9f6db0 RDI: 000000000040fa30 [ 1242.359011][ T3190] RBP: 0000000000a4fcb0 R08: 00007fba1d9f79d0 R09: 00007fba1d9f7700 [ 1242.367021][ T3190] R10: 00007fba1d9f6dc0 R11: 0000000000000246 R12: 0000000000000000 [ 1242.375020][ T3190] R13: 0000000000a4fb5f R14: 00007fba1d9f79c0 R15: 000000000073bfac [ 1242.401897][ T3222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:15 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x700, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1242.448668][ T3190] memory: usage 307164kB, limit 307200kB, failcnt 4013 [ 1242.462925][ T3190] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1242.470878][ T3190] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:08:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=""/156, 0x9c}) timer_create(0x3, &(0x7f0000000240)={0x0, 0x33, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000001c0)={{}, {r3, r4+10000000}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) [ 1242.484113][ T3190] Memory cgroup stats for /syz5: cache:56KB rss:190416KB rss_huge:131072KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:190452KB inactive_file:0KB active_file:0KB unevictable:0KB 03:08:15 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xb00, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1242.546019][ T3190] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=28693,uid=0 [ 1242.578435][ T3190] Memory cgroup out of memory: Killed process 28693 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35784kB, shmem-rss:0kB 03:08:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xa00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1242.631339][ T1043] oom_reaper: reaped process 28693 (syz-executor.5), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 1242.742568][ T3251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:15 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x3300, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, 0x0, 0x0) 03:08:15 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'rose0\x00', 0x5}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r2 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000140)=""/122, 0x7a) tkill(r1, 0x201000000000016) 03:08:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:15 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x4000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, 0x0, 0x0) 03:08:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xe00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1242.929927][ T3276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1243.021228][ T3287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1, 0x800}, 0xfffffffffffffe43) r1 = gettid() r2 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='-&selfnodev\x00', 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=ANY=[@ANYBLOB='enc=pkcs1 hash=digest_null-generic\x00'/75], &(0x7f0000000200)="0fc25a6e6a509291df583e10b37257be86b39393de8d9c307884a4ef170aafbb98a2fe6b907a02a3b1d8f4e7a1fb996c10c08784e71b7338c7", &(0x7f0000000240)=""/234) timer_create(0x0, &(0x7f0000000340)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) lseek(r0, 0x60, 0x3) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) 03:08:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x4a02, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, 0x0, 0x0) 03:08:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x1000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000023c0)={&(0x7f0000002740)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/12}, {&(0x7f0000002800)=""/67}], 0x5, &(0x7f0000002340)=""/104, 0x2}, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002400)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000002500)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002580)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x4e21, 0xec, 0x4e24, 0x2, 0xa, 0xa0, 0x0, 0x8, r2, r3}, {0x4f, 0x100000001, 0xd33, 0x7f, 0x8, 0x0, 0xffff800000000000, 0x80000000}, {0x3987ec0f, 0x3f, 0x5}, 0x5, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d2, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3504, 0x3, 0x2, 0x9, 0x5, 0xfffffffffffffffd, 0x7}}, 0xe8) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000002680)) 03:08:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000), 0x0) 03:08:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x291d000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x2000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1243.327640][ T3330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000), 0x0) [ 1243.454915][ T3347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x3000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x8}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) move_pages(r1, 0x5, &(0x7f0000000080)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f00000000c0)=[0x0, 0x10001, 0x0, 0x9, 0x5, 0x8b3, 0x8b7, 0x3, 0x8001], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) tkill(r1, 0x201000000000016) 03:08:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000), 0x0) 03:08:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xff\xff'}, 0x2c) 03:08:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) socketpair(0xf, 0x0, 0x200, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xb) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) tkill(r1, 0x201000000000016) 03:08:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x4000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd0\x00'}, 0x2c) 03:08:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x3f00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{0x0}], 0x1) 03:08:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xc00e0000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x5000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:16 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() r2 = accept4(r0, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80, 0x800) sendto$rxrpc(r2, &(0x7f0000000180)="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", 0xfe, 0x8000, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000340)={0x5, 0x45bf0ac9e5327456, 0xf5d, 0x0, 0x0, 0x27998ddf, 0x8}) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000380)=@nullb='/dev/nullb0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='minix\x00', 0x48, 0x0) tkill(r1, 0x201000000000016) 03:08:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{0x0}], 0x1) 03:08:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:17 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x6000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{0x0}], 0x1) 03:08:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6000000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:17 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x7000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:17 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x8000000000000003, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r1}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x100000, 0x7}) tkill(r1, 0x201000000000016) 03:08:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xff\xff'}, 0x2c) 03:08:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) 03:08:17 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xb000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, 0x2c) 03:08:17 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x33000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) 03:08:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x9effffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1244.781890][ T3482] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1244.800878][ T3482] CPU: 1 PID: 3482 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1244.808754][ T3482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.818833][ T3482] Call Trace: [ 1244.822136][ T3482] dump_stack+0x172/0x1f0 [ 1244.826497][ T3482] dump_header+0x10f/0xb6c [ 1244.830974][ T3482] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1244.836821][ T3482] ? ___ratelimit+0x60/0x595 [ 1244.841431][ T3482] ? do_raw_spin_unlock+0x57/0x270 [ 1244.846575][ T3482] oom_kill_process.cold+0x10/0x15 [ 1244.851873][ T3482] out_of_memory+0x79a/0x1280 [ 1244.856572][ T3482] ? lock_downgrade+0x880/0x880 [ 1244.861435][ T3482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1244.867712][ T3482] ? oom_killer_disable+0x280/0x280 [ 1244.872949][ T3482] ? find_held_lock+0x35/0x130 [ 1244.877772][ T3482] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1244.883348][ T3482] ? memcg_event_wake+0x230/0x230 [ 1244.888429][ T3482] ? do_raw_spin_unlock+0x57/0x270 [ 1244.893572][ T3482] ? _raw_spin_unlock+0x2d/0x50 [ 1244.898445][ T3482] try_charge+0x102c/0x15c0 [ 1244.902962][ T3482] ? find_held_lock+0x35/0x130 [ 1244.907764][ T3482] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1244.913326][ T3482] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1244.918911][ T3482] ? find_held_lock+0x35/0x130 [ 1244.923691][ T3482] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1244.929276][ T3482] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1244.934868][ T3482] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1244.940101][ T3482] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1244.945686][ T3482] __memcg_kmem_charge+0x136/0x300 [ 1244.950811][ T3482] __alloc_pages_nodemask+0x437/0x7e0 [ 1244.956194][ T3482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1244.962463][ T3482] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1244.968207][ T3482] ? copy_process.part.0+0x1d08/0x7980 [ 1244.973679][ T3482] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1244.979001][ T3482] ? trace_hardirqs_on+0x67/0x230 [ 1244.984063][ T3482] ? kasan_check_read+0x11/0x20 [ 1244.988952][ T3482] copy_process.part.0+0x3e0/0x7980 [ 1244.994178][ T3482] ? psi_memstall_leave+0x11c/0x180 [ 1244.999384][ T3482] ? sched_clock+0x2e/0x50 [ 1245.003803][ T3482] ? psi_memstall_leave+0x12e/0x180 [ 1245.009021][ T3482] ? find_held_lock+0x35/0x130 [ 1245.013803][ T3482] ? psi_memstall_leave+0x12e/0x180 [ 1245.019038][ T3482] ? __cleanup_sighand+0x60/0x60 [ 1245.023991][ T3482] ? __lock_acquire+0x548/0x3fb0 [ 1245.028969][ T3482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1245.035261][ T3482] _do_fork+0x257/0xfd0 [ 1245.039481][ T3482] ? fork_idle+0x1d0/0x1d0 [ 1245.043926][ T3482] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1245.050006][ T3482] ? lock_downgrade+0x880/0x880 [ 1245.054864][ T3482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1245.061123][ T3482] ? blkcg_exit_queue+0x30/0x30 [ 1245.066001][ T3482] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1245.071569][ T3482] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1245.077078][ T3482] ? do_syscall_64+0x26/0x610 [ 1245.081780][ T3482] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1245.087875][ T3482] ? do_syscall_64+0x26/0x610 [ 1245.092586][ T3482] __x64_sys_clone+0xbf/0x150 [ 1245.097282][ T3482] do_syscall_64+0x103/0x610 [ 1245.101876][ T3482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1245.107771][ T3482] RIP: 0033:0x45b5f9 [ 1245.111728][ T3482] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1245.131356][ T3482] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1245.139785][ T3482] RAX: ffffffffffffffda RBX: 00007fba1da18700 RCX: 000000000045b5f9 [ 1245.147768][ T3482] RDX: 00007fba1da189d0 RSI: 00007fba1da17db0 RDI: 00000000003d0f00 [ 1245.155751][ T3482] RBP: 0000000000a4fcb0 R08: 00007fba1da18700 R09: 00007fba1da18700 [ 1245.163752][ T3482] R10: 00007fba1da189d0 R11: 0000000000000202 R12: 0000000000000000 [ 1245.171736][ T3482] R13: 0000000000a4fb5f R14: 00007fba1da189c0 R15: 000000000073bf0c 03:08:18 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x40000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1245.230841][ T3482] memory: usage 307200kB, limit 307200kB, failcnt 4070 [ 1245.291277][ T3482] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1245.326405][ T3482] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1245.358346][ T3482] Memory cgroup stats for /syz5: cache:56KB rss:189220KB rss_huge:129024KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:189136KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1245.419187][ T3482] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3199,uid=0 [ 1245.441773][ T3482] Memory cgroup out of memory: Killed process 3199 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB 03:08:20 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x7fffffff, 0x4, 0x2000}, 0x4) 03:08:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)}], 0x1) 03:08:20 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x4a020000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xc00e000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1247.422302][ T3508] __nla_parse: 8 callbacks suppressed [ 1247.422313][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1247.441742][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:20 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x8dffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) 03:08:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) 03:08:20 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xeaffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:20 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x20, @dev, 0x3}, 0x362) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x12, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) prctl$PR_SVE_SET_VL(0x32, 0x4c77) tkill(r1, 0x201000000000016) 03:08:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1247.988058][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000000070000000681", 0x10}], 0x1) 03:08:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) gettid() tkill(r1, 0x201000000000016) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6512, 0x0) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x4, 0x0, 0x3, 0x1}}, 0x26) 03:08:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xf5ffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xf0ffffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300", 0x18}], 0x1) 03:08:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300", 0x18}], 0x1) 03:08:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x10000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xffffff8d, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1248.434065][ T3576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1248.519745][ T3590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300", 0x18}], 0x1) 03:08:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xffffffea, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:21 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @broadcast}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bond\x00', r2}) tkill(r1, 0x201000000000016) 03:08:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff", 0x1c}], 0x1) 03:08:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffff7f00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xfffffff5, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff", 0x1c}], 0x1) [ 1248.893801][ T3590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1249.002551][ T3631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x40030000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:22 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0xfffffffffffffd99, 0x0}, 0x0) tkill(r1, 0x201000000000016) 03:08:22 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x100000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff", 0x1c}], 0x1) [ 1249.093922][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1249.133614][ T3643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1249.154572][ T7803] CPU: 0 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1249.162402][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.172467][ T7803] Call Trace: [ 1249.175789][ T7803] dump_stack+0x172/0x1f0 [ 1249.180148][ T7803] dump_header+0x10f/0xb6c [ 1249.184619][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1249.190443][ T7803] ? ___ratelimit+0x60/0x595 [ 1249.195059][ T7803] ? do_raw_spin_unlock+0x57/0x270 03:08:22 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x200000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe", 0x1e}], 0x1) 03:08:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1249.200185][ T7803] oom_kill_process.cold+0x10/0x15 [ 1249.205302][ T7803] out_of_memory+0x79a/0x1280 [ 1249.210000][ T7803] ? lock_downgrade+0x880/0x880 [ 1249.214860][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1249.221111][ T7803] ? oom_killer_disable+0x280/0x280 [ 1249.221125][ T7803] ? find_held_lock+0x35/0x130 [ 1249.221156][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1249.236731][ T7803] ? memcg_event_wake+0x230/0x230 [ 1249.241780][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1249.246905][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1249.246925][ T7803] try_charge+0x102c/0x15c0 [ 1249.246939][ T7803] ? find_held_lock+0x35/0x130 [ 1249.246959][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1249.261156][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1249.261173][ T7803] ? find_held_lock+0x35/0x130 [ 1249.261188][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1249.261214][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1249.277202][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1249.277221][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1249.277237][ T7803] __memcg_kmem_charge+0x136/0x300 03:08:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe", 0x1e}], 0x1) [ 1249.277257][ T7803] __alloc_pages_nodemask+0x437/0x7e0 [ 1249.277276][ T7803] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1249.277298][ T7803] ? save_stack+0xa9/0xd0 [ 1249.277311][ T7803] ? save_stack+0x45/0xd0 [ 1249.277326][ T7803] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1249.277337][ T7803] ? kasan_slab_alloc+0xf/0x20 [ 1249.277350][ T7803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1249.277367][ T7803] alloc_pages_current+0x107/0x210 [ 1249.277381][ T7803] ? __lock_acquire+0x548/0x3fb0 [ 1249.277401][ T7803] get_zeroed_page+0x14/0x50 [ 1249.293745][ T7803] __pud_alloc+0x3b/0x250 [ 1249.293764][ T7803] pud_alloc+0xde/0x150 [ 1249.293782][ T7803] copy_page_range+0x375/0x1f90 [ 1249.293796][ T7803] ? find_held_lock+0x35/0x130 [ 1249.293810][ T7803] ? percpu_ref_put_many+0x94/0x190 [ 1249.293834][ T7803] ? copy_process.part.0+0x3121/0x7980 [ 1249.293857][ T7803] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1249.315597][ T7803] ? vma_compute_subtree_gap+0x158/0x230 [ 1249.315615][ T7803] ? vma_gap_callbacks_rotate+0x62/0x80 03:08:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe", 0x1e}], 0x1) [ 1249.315631][ T7803] ? pmd_alloc+0x180/0x180 [ 1249.315647][ T7803] ? __rb_insert_augmented+0x231/0xdf0 [ 1249.315661][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1249.315677][ T7803] ? __vma_link_rb+0x279/0x370 [ 1249.315696][ T7803] copy_process.part.0+0x568b/0x7980 [ 1249.315735][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1249.315766][ T7803] _do_fork+0x257/0xfd0 [ 1249.315784][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1249.315808][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1249.315829][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1249.360446][ T7803] ? do_syscall_64+0x26/0x610 [ 1249.360463][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1249.360483][ T7803] ? do_syscall_64+0x26/0x610 [ 1249.369502][ T7803] __x64_sys_clone+0xbf/0x150 [ 1249.369521][ T7803] do_syscall_64+0x103/0x610 [ 1249.369538][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1249.369548][ T7803] RIP: 0033:0x4571fa [ 1249.369562][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 03:08:22 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x300000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1249.369569][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1249.369583][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1249.369591][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1249.369599][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1249.369614][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1249.445963][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 03:08:22 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x400000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1249.508099][ T3660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xf0ffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1249.615998][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 4113 [ 1249.624857][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1249.635246][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1249.669372][ T3671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1249.681545][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:187612KB rss_huge:126976KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:187820KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1249.707290][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=2763,uid=0 [ 1249.729077][ T7803] Memory cgroup out of memory: Killed process 2763 (syz-executor.5) total-vm:72580kB, anon-rss:2200kB, file-rss:35788kB, shmem-rss:0kB [ 1249.821392][ T3673] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1249.837413][ T3673] CPU: 1 PID: 3673 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1249.845296][ T3673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.855360][ T3673] Call Trace: [ 1249.858664][ T3673] dump_stack+0x172/0x1f0 [ 1249.863268][ T3673] dump_header+0x10f/0xb6c [ 1249.867703][ T3673] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1249.873522][ T3673] ? ___ratelimit+0x60/0x595 [ 1249.878166][ T3673] ? do_raw_spin_unlock+0x57/0x270 [ 1249.883332][ T3673] oom_kill_process.cold+0x10/0x15 [ 1249.888473][ T3673] out_of_memory+0x79a/0x1280 [ 1249.893477][ T3673] ? lock_downgrade+0x880/0x880 [ 1249.898345][ T3673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1249.904602][ T3673] ? oom_killer_disable+0x280/0x280 [ 1249.909833][ T3673] ? find_held_lock+0x35/0x130 [ 1249.914642][ T3673] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1249.920218][ T3673] ? memcg_event_wake+0x230/0x230 [ 1249.925265][ T3673] ? do_raw_spin_unlock+0x57/0x270 [ 1249.930398][ T3673] ? _raw_spin_unlock+0x2d/0x50 [ 1249.935281][ T3673] try_charge+0x102c/0x15c0 [ 1249.939806][ T3673] ? find_held_lock+0x35/0x130 [ 1249.944604][ T3673] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1249.950158][ T3673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1249.956411][ T3673] ? kasan_check_read+0x11/0x20 [ 1249.961275][ T3673] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1249.966839][ T3673] mem_cgroup_try_charge+0x24d/0x5e0 [ 1249.972145][ T3673] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1249.977805][ T3673] __handle_mm_fault+0x1e1f/0x3ec0 [ 1249.982991][ T3673] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1249.988569][ T3673] ? find_held_lock+0x35/0x130 [ 1249.993360][ T3673] ? handle_mm_fault+0x322/0xb30 [ 1249.998311][ T3673] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1250.004579][ T3673] ? kasan_check_read+0x11/0x20 [ 1250.009538][ T3673] handle_mm_fault+0x43f/0xb30 [ 1250.014321][ T3673] __do_page_fault+0x5ef/0xda0 [ 1250.019113][ T3673] do_page_fault+0x71/0x581 [ 1250.023615][ T3673] ? page_fault+0x8/0x30 [ 1250.027876][ T3673] page_fault+0x1e/0x30 [ 1250.032054][ T3673] RIP: 0033:0x41063f [ 1250.035965][ T3673] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1250.055585][ T3673] RSP: 002b:0000000000a4faf0 EFLAGS: 00010206 [ 1250.061662][ T3673] RAX: 00007fba1d9d7000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 1250.069643][ T3673] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1250.077632][ T3673] RBP: 0000000000a4fbd0 R08: ffffffffffffffff R09: 0000000000000000 [ 1250.085621][ T3673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 1250.093608][ T3673] R13: 00007fba1d9f7700 R14: 0000000000000005 R15: 000000000073bfac [ 1250.129716][ T3673] memory: usage 307168kB, limit 307200kB, failcnt 4122 [ 1250.161103][ T3673] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1250.192678][ T3673] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1250.205161][ T3673] Memory cgroup stats for /syz5: cache:56KB rss:187672KB rss_huge:126976KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:187808KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1250.228797][ T3673] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9659,uid=0 [ 1250.251745][ T3673] Memory cgroup out of memory: Killed process 9659 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:08:25 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) 03:08:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:25 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x500000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xfffffffffffff000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:25 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x600000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:25 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x700000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:25 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xb00000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:25 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x3300000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:25 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x4000000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setpriority(0x0, r1, 0x5) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'eql\x00', {0x2, 0x4e24, @remote}}) tkill(r1, 0x201000000000016) 03:08:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:25 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x4a02000000000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x200000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1253.041930][ T3745] __nla_parse: 4 callbacks suppressed [ 1253.041975][ T3745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1253.059044][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1253.080123][ T3758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:26 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x8dffffff00000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:26 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xeaffffff00000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x300000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1253.566137][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:26 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x18c, r2, 0x104, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x134, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96b6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x100000000, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2040000}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20004094}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r3, 0x201000000000016) socket$inet_sctp(0x2, 0x1, 0x84) 03:08:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x200000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:26 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xf5ffffff00000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, 0x2c) 03:08:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x400000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1253.997543][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='fuse.lk\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r2 = gettid() socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r1, &(0x7f0000002540)={0x0, 0xfffffffffffffe94, 0x0, 0xfffffffffffffea4, 0x0, 0x73a73521}, 0x0) accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) tkill(r2, 0x8201000000000016) [ 1254.044120][ T3818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:27 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xffffffff00000000, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}, 0x2c) [ 1254.107695][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00'}, 0x2c) 03:08:27 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:27 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x2, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:27 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x3, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x200000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:27 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6, @in=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000180)=0xe8) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) 03:08:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00'}, 0x2c) 03:08:27 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x4, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x500000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1254.920347][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1254.936659][ T3862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1254.951484][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1254.961261][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1254.982866][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1254.990744][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.000896][ T7803] Call Trace: [ 1255.004304][ T7803] dump_stack+0x172/0x1f0 [ 1255.008694][ T7803] dump_header+0x10f/0xb6c [ 1255.013150][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1255.018996][ T7803] ? ___ratelimit+0x60/0x595 [ 1255.023609][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1255.029035][ T7803] oom_kill_process.cold+0x10/0x15 [ 1255.034178][ T7803] out_of_memory+0x79a/0x1280 [ 1255.038897][ T7803] ? lock_downgrade+0x880/0x880 [ 1255.043771][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1255.050041][ T7803] ? oom_killer_disable+0x280/0x280 [ 1255.055254][ T7803] ? find_held_lock+0x35/0x130 [ 1255.060052][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1255.065614][ T7803] ? memcg_event_wake+0x230/0x230 [ 1255.070659][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1255.075797][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1255.080679][ T7803] try_charge+0x102c/0x15c0 [ 1255.085236][ T7803] ? find_held_lock+0x35/0x130 [ 1255.090038][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1255.095604][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1255.101183][ T7803] ? find_held_lock+0x35/0x130 [ 1255.105961][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1255.111549][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1255.117119][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1255.122345][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1255.127920][ T7803] __memcg_kmem_charge+0x136/0x300 [ 1255.133280][ T7803] __alloc_pages_nodemask+0x437/0x7e0 [ 1255.138801][ T7803] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1255.144551][ T7803] ? copy_page_range+0x125a/0x1f90 [ 1255.149671][ T7803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1255.155923][ T7803] alloc_pages_current+0x107/0x210 [ 1255.161057][ T7803] pte_alloc_one+0x1b/0x1a0 [ 1255.165592][ T7803] __pte_alloc+0x20/0x310 [ 1255.169944][ T7803] copy_page_range+0x1529/0x1f90 [ 1255.174904][ T7803] ? find_held_lock+0x35/0x130 [ 1255.179731][ T7803] ? pmd_alloc+0x180/0x180 [ 1255.184175][ T7803] ? vma_compute_subtree_gap+0x158/0x230 [ 1255.189861][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1255.194564][ T7803] ? __vma_link_rb+0x279/0x370 [ 1255.199341][ T7803] copy_process.part.0+0x568b/0x7980 [ 1255.204663][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1255.209634][ T7803] _do_fork+0x257/0xfd0 [ 1255.213838][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1255.218279][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1255.223753][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1255.229232][ T7803] ? do_syscall_64+0x26/0x610 [ 1255.234029][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1255.240119][ T7803] ? do_syscall_64+0x26/0x610 [ 1255.244816][ T7803] __x64_sys_clone+0xbf/0x150 [ 1255.249505][ T7803] do_syscall_64+0x103/0x610 [ 1255.254109][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1255.260038][ T7803] RIP: 0033:0x4571fa [ 1255.263963][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 03:08:28 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x5, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1255.283587][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1255.292035][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1255.300030][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1255.308019][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1255.316008][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1255.323998][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 03:08:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x600000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1255.397747][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 4165 [ 1255.404667][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1255.415589][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:08:28 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x6, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1255.428274][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:186316KB rss_huge:124928KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:186460KB inactive_file:0KB active_file:0KB unevictable:0KB 03:08:28 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) 03:08:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x2c) [ 1255.492876][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3678,uid=0 [ 1255.510528][ T7803] Memory cgroup out of memory: Killed process 3678 (syz-executor.5) total-vm:72580kB, anon-rss:2200kB, file-rss:35792kB, shmem-rss:0kB [ 1255.527153][ T1043] oom_reaper: reaped process 3678 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 03:08:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x200000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0x2c) 03:08:28 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x7, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0x2c) 03:08:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xb, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00'}, 0x2c) 03:08:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x33, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x700000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03'}, 0x2c) 03:08:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x24a, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:29 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vfio/vfio\x00', 0x6040, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001980)='/dev/autofs\x00', 0x100, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000001c00)={'rose0\x00', {0x2, 0x4e20, @empty}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000019c0)={r2, r3, 0x0, 0x1}, 0x10) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000001c40)={0x1ff, "fa7ca1733b4cd166f852b81659a2b01b890a86a7b507dc1caaa53b77321fae60", 0x2, 0x1}) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd55}, 0x0) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x3}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="ae4633a4b8649d89fb5da0b2578dab9bbcec382e9dd34c5869aa5b21ab86f6a7b3745ac9257a838a1718b739dd64b7cdb94f2a5a177568bdd7873502ae92849c37e934b149c468ae0704a713ba2983302d37c204bd1136bdfc55fc4084c26c899cdd2f6fcccf4d6fe96491958b4de6b405a6dca142eb8a6b606a3791ef051e3830c7f92671a7cadcdcd90ecba427dbcbab5ecdc5b9e2923ebf4f504b8c0b9f24462ab42cb1cde7ec44b055", 0xab}], 0x1, &(0x7f0000000200)=[{0x38, 0x109, 0x79, "9a4bddc910a3d34ae62df935bf18b768aa109dc63e5845415d94295f30d8dc9056c337"}, {0x110, 0x108, 0xfffffffffffffff7, "be93ed7c7d85d1f774af436da453ebc9a1dab63d8e570f562e9c33ac5743dc999183c706454e1a4e51beb5822b9e0e1f08a8018c8260a210baa993ad1e1f573fbfab1f33effc0b943b482da668e2095400a19e930c9c16d743fb6d00bcaacd3d62ad2dec9f20c9e6ad6260d7c5bd8f7ac303c087f9d15ab9bd600c620bcfaceaf320ab5aee3c81086ed85735119e7bf121dc4ebe3060298196bc117f14e303150c4146da6d899fb2bb7fa42dc528f4aa21197587ba23e522de4dc0debec1ec18df8de52953c6c1b41ac8bc4408d074247cd9ba0685b632acb6f480b3d5c49dbfb98420a89c519948c6d0b4262d0ee9dc6cd11dfa9c22db05dc"}, {0x50, 0x1, 0x100000000, "3f0758ab4dad652a3258f4be5cf1412b037dcbf5f68440b5d612d5482496dc087c63e6702517df880d1eb39a0eace2b7c77fe54ff651ba57b3b0a73659"}, {0xb8, 0x18d, 0x800, "c4b2f9d979c02d28ca7b8744df66e3ca7665d0dda7e58250ff6b02a82ed18cfed766ce783496979570ab915ca8947b7d212c03be616139515e06557a4c4490a8a3f9425dca077c99c277af214db1fe3719ff7b39f505f70ec5e14e4f0c3cda2b586cd2e3c87cdd1c1c234ef268d8df0fed5d59281d1d9b754c68530c8582e27bd322d6dce2e26ad7892d3eb7a6ecb4d5a0c193663e4b9c11041960bb9b5c5517b0282a19ee583a8c"}, {0x1010, 0x101, 0x7, "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"}], 0x1260}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001480)="e974497ded5805432fdec2d614407007415bbc37aeb68a61ce6f87b8c1bd99a779bfc7b3264da9bef951d1e8da4104d9b2039f", 0x33}, {&(0x7f00000014c0)="3d674d65bcaebb1c3fd6f31162af2f931b3d415ca7c1de9e7d228fbe652ee0d7df95f2cf2916954937f1e5288462d3663689810cc66fed49d095a2f880f05387afae62ec5d2391a63f8fcb06394860d941d4526203d31ec27af76e3b491495f2c5a9b626d7558965a72fe9834ba17af5d33d960224cf3eeb09812264a8a4d16c30884d639d70d9dc3fca0747fb7bd9116dd58a4de273f016f7bddb4c7c22", 0x9e}, {&(0x7f0000001580)="75e53733d8b62d948f25345bd7a3090f70b1d85d3b524b4258c130a31411eded393c1632e081539465b4f5bd7e831b5829984c6608ea710a44c7088c903d55ca303e697d4f87f0f4db2b47803f8197fa2d90c0", 0x53}, {&(0x7f0000001600)="a65cbcf5217ba848216f46b0bef612f8ba49a9", 0x13}, {&(0x7f0000001640)="fa52e5035410109d7ccc2166733c4bfd8dfdc96b50d63f2bbdf9960799a3e556f6f6685fa1b956885bc519612404ac2cebf907911136afe73a61cf67438bc5bc639b718492d67cf9d0715063fa74338bfc24960306f4cf2c19c299cbadfa640bba8a11b370044a4e54b415eb538f330afc0ec936ff4c14bca5c3fa56e842580c79b07cf5572a91ebb30bd0d85dde74a0c78949cf527c2b2c33ca60cb019e7b94cf614f9a302e51e1c08914dc1a4fdefe7b5c83eaa3239d893847487f0b7f1eedea49b41803669aaeee14730c22c3", 0xce}], 0x5, &(0x7f00000017c0)=[{0xc8, 0x115, 0x1, "049c5fbc4bb419f4341e404d4c9815381a18419df90c3bc41e592cb4f29f6144356fd05f01320e973cf6b5767363cdd0112ceec4ed53536fca28be10e75fbbba94554fe785c9eae6030c9a2f99153ffd6a9d48f55f1c05ac80c92d11400e4a185ec1dbe3cb5f5238a3c58b630898c17b65a91a462a064802d9d9d1f7932bb5edb126560bd7e3bb8f40d345629b910bb73fbb5a6c5f93eb926aa7a5402e60e49deb07d07b1495de624453b70b1383a9ef948ff8e0c3"}], 0xc8}, 0x2}], 0x2, 0x20000840) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a40)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001bc0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)={0xd0, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x264}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x56}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffffdd}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd983}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfcad}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x48810) tkill(r1, 0x201000000000016) 03:08:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05'}, 0x2c) 03:08:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x300, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x500, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x600, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x700, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06'}, 0x2c) [ 1257.231938][ T3981] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1257.315375][ T3981] CPU: 1 PID: 3981 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1257.323231][ T3981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.333297][ T3981] Call Trace: [ 1257.336625][ T3981] dump_stack+0x172/0x1f0 [ 1257.341003][ T3981] dump_header+0x10f/0xb6c [ 1257.345547][ T3981] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1257.351378][ T3981] ? ___ratelimit+0x60/0x595 [ 1257.355978][ T3981] ? do_raw_spin_unlock+0x57/0x270 [ 1257.361115][ T3981] oom_kill_process.cold+0x10/0x15 [ 1257.366330][ T3981] out_of_memory+0x79a/0x1280 [ 1257.371022][ T3981] ? lock_downgrade+0x880/0x880 [ 1257.375885][ T3981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1257.382168][ T3981] ? oom_killer_disable+0x280/0x280 [ 1257.387393][ T3981] ? find_held_lock+0x35/0x130 [ 1257.392187][ T3981] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1257.397742][ T3981] ? memcg_event_wake+0x230/0x230 [ 1257.402779][ T3981] ? do_raw_spin_unlock+0x57/0x270 [ 1257.407900][ T3981] ? _raw_spin_unlock+0x2d/0x50 [ 1257.412767][ T3981] try_charge+0x102c/0x15c0 [ 1257.417281][ T3981] ? find_held_lock+0x35/0x130 [ 1257.422069][ T3981] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1257.427641][ T3981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1257.433911][ T3981] ? kasan_check_read+0x11/0x20 [ 1257.438798][ T3981] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1257.444372][ T3981] mem_cgroup_try_charge+0x24d/0x5e0 [ 1257.449672][ T3981] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1257.455320][ T3981] wp_page_copy+0x408/0x1740 [ 1257.459923][ T3981] ? find_held_lock+0x35/0x130 [ 1257.464803][ T3981] ? pmd_pfn+0x1d0/0x1d0 [ 1257.469052][ T3981] ? lock_downgrade+0x880/0x880 [ 1257.473909][ T3981] ? swp_swapcount+0x540/0x540 [ 1257.478705][ T3981] ? kasan_check_read+0x11/0x20 [ 1257.483588][ T3981] ? do_raw_spin_unlock+0x57/0x270 [ 1257.488752][ T3981] do_wp_page+0x48e/0x1500 [ 1257.493218][ T3981] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1257.498611][ T3981] __handle_mm_fault+0x22e8/0x3ec0 [ 1257.503742][ T3981] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1257.509386][ T3981] ? find_held_lock+0x35/0x130 [ 1257.514257][ T3981] ? handle_mm_fault+0x322/0xb30 [ 1257.519221][ T3981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1257.525481][ T3981] ? kasan_check_read+0x11/0x20 [ 1257.530379][ T3981] handle_mm_fault+0x43f/0xb30 [ 1257.535175][ T3981] __do_page_fault+0x5ef/0xda0 [ 1257.539979][ T3981] do_page_fault+0x71/0x581 [ 1257.544515][ T3981] ? page_fault+0x8/0x30 [ 1257.548762][ T3981] page_fault+0x1e/0x30 [ 1257.552917][ T3981] RIP: 0033:0x40ee58 [ 1257.556818][ T3981] Code: 48 8b 05 63 40 30 00 48 89 08 48 8b 15 61 40 30 00 48 89 42 08 48 8b 05 46 40 30 00 48 89 05 4f 40 30 00 49 8d 81 c0 02 00 00 <48> 89 05 51 16 64 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 1257.576432][ T3981] RSP: 002b:0000000000a4fd28 EFLAGS: 00010246 [ 1257.582514][ T3981] RAX: 0000000001577c00 RBX: 0000000000a4fd30 RCX: 0000000000712ea0 [ 1257.590536][ T3981] RDX: 000000000040ec90 RSI: 0000000000712e90 RDI: 0000000001577c20 [ 1257.598523][ T3981] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1257.606538][ T3981] R10: 0000000001577c10 R11: 0000000000000202 R12: 0000000000000001 [ 1257.614526][ T3981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1257.650465][ T3981] memory: usage 307200kB, limit 307200kB, failcnt 4199 [ 1257.657532][ T3981] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1257.665091][ T3981] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1257.672084][ T3981] Memory cgroup stats for /syz5: cache:56KB rss:184948KB rss_huge:122880KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:185116KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1257.694548][ T3981] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16622,uid=0 [ 1257.711866][ T3981] Memory cgroup out of memory: Killed process 16622 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:08:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x2000000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:30 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xb00, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:30 executing program 0: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0xffffff8d, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:30 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) socket$rxrpc(0x21, 0x2, 0xa) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) ioprio_set$pid(0x1, r1, 0x200) tkill(r1, 0x201000000000016) 03:08:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'}, 0x2c) [ 1257.879652][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=0 [ 1257.908643][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1257.916507][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.926596][ T7803] Call Trace: [ 1257.929935][ T7803] dump_stack+0x172/0x1f0 [ 1257.934322][ T7803] dump_header+0x10f/0xb6c [ 1257.938771][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1257.944595][ T7803] ? ___ratelimit+0x60/0x595 [ 1257.949195][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1257.954333][ T7803] oom_kill_process.cold+0x10/0x15 [ 1257.959556][ T7803] out_of_memory+0x79a/0x1280 [ 1257.964291][ T7803] ? lock_downgrade+0x880/0x880 [ 1257.969160][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1257.975454][ T7803] ? oom_killer_disable+0x280/0x280 [ 1257.980687][ T7803] ? find_held_lock+0x35/0x130 [ 1257.985488][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1257.991071][ T7803] ? memcg_event_wake+0x230/0x230 [ 1257.996128][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1258.001262][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1258.006126][ T7803] try_charge+0x102c/0x15c0 [ 1258.010661][ T7803] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1258.016948][ T7803] ? should_fail+0x1de/0x852 [ 1258.021569][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1258.027158][ T7803] ? rcu_read_lock_sched_held+0x110/0x130 [ 1258.032930][ T7803] ? __alloc_pages_nodemask+0x599/0x7e0 [ 1258.038519][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1258.044100][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1258.049303][ T7803] ? cache_grow_begin+0x594/0x860 [ 1258.054352][ T7803] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1258.059654][ T7803] ? trace_hardirqs_on+0x67/0x230 [ 1258.064698][ T7803] cache_grow_begin+0x5c0/0x860 [ 1258.069568][ T7803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1258.075848][ T7803] ? __cpuset_node_allowed+0x136/0x540 [ 1258.081361][ T7803] fallback_alloc+0x1fd/0x2d0 [ 1258.086075][ T7803] ____cache_alloc_node+0x1be/0x1e0 [ 1258.091305][ T7803] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1258.097583][ T7803] kmem_cache_alloc+0x1e8/0x6f0 [ 1258.102438][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1258.107128][ T7803] vm_area_dup+0x21/0x170 [ 1258.111475][ T7803] copy_process.part.0+0x3431/0x7980 [ 1258.116808][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1258.121774][ T7803] _do_fork+0x257/0xfd0 [ 1258.125962][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1258.130442][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1258.135928][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1258.141412][ T7803] ? do_syscall_64+0x26/0x610 [ 1258.146108][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1258.152180][ T7803] ? do_syscall_64+0x26/0x610 [ 1258.156873][ T7803] __x64_sys_clone+0xbf/0x150 [ 1258.161573][ T7803] do_syscall_64+0x103/0x610 [ 1258.166184][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1258.172083][ T7803] RIP: 0033:0x4571fa [ 1258.176009][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1258.195625][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1258.204058][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1258.212042][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1258.220033][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1258.228028][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1258.236045][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1258.265180][ T4008] __nla_parse: 8 callbacks suppressed [ 1258.265190][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1258.298150][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 4245 [ 1258.305363][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1258.327460][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:08:31 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x3300, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1258.354072][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:185028KB rss_huge:122880KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:185108KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1258.424242][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=3993,uid=0 03:08:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1258.469227][ T7803] Memory cgroup out of memory: Killed process 3993 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB [ 1258.553531][ T4013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 03:08:31 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x4000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?'}, 0x2c) 03:08:31 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r0, 0x201000000000016) [ 1258.827936][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 03:08:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1258.930431][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1258.938298][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.948366][ T7803] Call Trace: [ 1258.951672][ T7803] dump_stack+0x172/0x1f0 [ 1258.956025][ T7803] dump_header+0x10f/0xb6c [ 1258.960457][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1258.966282][ T7803] ? ___ratelimit+0x60/0x595 [ 1258.970876][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1258.976018][ T7803] oom_kill_process.cold+0x10/0x15 [ 1258.981155][ T7803] out_of_memory+0x79a/0x1280 [ 1258.985855][ T7803] ? lock_downgrade+0x880/0x880 [ 1258.990735][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1258.997016][ T7803] ? oom_killer_disable+0x280/0x280 [ 1259.002243][ T7803] ? find_held_lock+0x35/0x130 [ 1259.007039][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1259.012602][ T7803] ? memcg_event_wake+0x230/0x230 [ 1259.017677][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1259.022804][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1259.027704][ T7803] try_charge+0x102c/0x15c0 [ 1259.032233][ T7803] ? find_held_lock+0x35/0x130 [ 1259.037045][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1259.042619][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1259.048172][ T7803] ? find_held_lock+0x35/0x130 [ 1259.052939][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1259.058513][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1259.064106][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1259.069321][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1259.074898][ T7803] __memcg_kmem_charge+0x136/0x300 [ 1259.080048][ T7803] __alloc_pages_nodemask+0x437/0x7e0 [ 1259.085566][ T7803] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1259.091320][ T7803] ? copy_page_range+0x125a/0x1f90 [ 1259.096455][ T7803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1259.102719][ T7803] alloc_pages_current+0x107/0x210 [ 1259.107855][ T7803] pte_alloc_one+0x1b/0x1a0 [ 1259.112380][ T7803] __pte_alloc+0x20/0x310 [ 1259.116741][ T7803] copy_page_range+0x1529/0x1f90 [ 1259.121712][ T7803] ? find_held_lock+0x35/0x130 [ 1259.126657][ T7803] ? pmd_alloc+0x180/0x180 [ 1259.131098][ T7803] ? __rb_insert_augmented+0x231/0xdf0 [ 1259.136593][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1259.141316][ T7803] ? __vma_link_rb+0x279/0x370 [ 1259.146108][ T7803] copy_process.part.0+0x568b/0x7980 [ 1259.151451][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1259.156418][ T7803] _do_fork+0x257/0xfd0 [ 1259.160599][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1259.165046][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1259.170516][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1259.176004][ T7803] ? do_syscall_64+0x26/0x610 [ 1259.180708][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1259.186797][ T7803] ? do_syscall_64+0x26/0x610 [ 1259.191513][ T7803] __x64_sys_clone+0xbf/0x150 [ 1259.196246][ T7803] do_syscall_64+0x103/0x610 [ 1259.200871][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1259.206772][ T7803] RIP: 0033:0x4571fa [ 1259.210680][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1259.230399][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1259.238834][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1259.246821][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1259.254801][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1259.262785][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1259.270787][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1259.364232][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1259.372581][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 4286 [ 1259.385753][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1259.393269][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1259.406193][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:185060KB rss_huge:122880KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:185116KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1259.501080][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4018,uid=0 [ 1259.533665][ T7803] Memory cgroup out of memory: Killed process 4018 (syz-executor.5) total-vm:72712kB, anon-rss:2212kB, file-rss:35796kB, shmem-rss:0kB [ 1259.661291][ T4046] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1259.700828][ T4046] CPU: 1 PID: 4046 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1259.708682][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.718749][ T4046] Call Trace: [ 1259.722058][ T4046] dump_stack+0x172/0x1f0 [ 1259.726445][ T4046] dump_header+0x10f/0xb6c [ 1259.730890][ T4046] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1259.736722][ T4046] ? ___ratelimit+0x60/0x595 [ 1259.741358][ T4046] ? do_raw_spin_unlock+0x57/0x270 [ 1259.746531][ T4046] oom_kill_process.cold+0x10/0x15 [ 1259.751666][ T4046] out_of_memory+0x79a/0x1280 [ 1259.756396][ T4046] ? lock_downgrade+0x880/0x880 [ 1259.761283][ T4046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1259.767565][ T4046] ? oom_killer_disable+0x280/0x280 [ 1259.772786][ T4046] ? find_held_lock+0x35/0x130 [ 1259.777587][ T4046] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1259.783182][ T4046] ? memcg_event_wake+0x230/0x230 [ 1259.788239][ T4046] ? do_raw_spin_unlock+0x57/0x270 [ 1259.793381][ T4046] ? _raw_spin_unlock+0x2d/0x50 [ 1259.798256][ T4046] try_charge+0x102c/0x15c0 [ 1259.802769][ T4046] ? find_held_lock+0x35/0x130 [ 1259.807585][ T4046] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1259.813150][ T4046] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1259.818709][ T4046] ? find_held_lock+0x35/0x130 [ 1259.823490][ T4046] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1259.829093][ T4046] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1259.835104][ T4046] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1259.840330][ T4046] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1259.845899][ T4046] __memcg_kmem_charge+0x136/0x300 [ 1259.851032][ T4046] __alloc_pages_nodemask+0x437/0x7e0 [ 1259.856421][ T4046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1259.862682][ T4046] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1259.868423][ T4046] ? copy_process.part.0+0x1d08/0x7980 [ 1259.873902][ T4046] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1259.879216][ T4046] ? trace_hardirqs_on+0x67/0x230 [ 1259.884297][ T4046] copy_process.part.0+0x3e0/0x7980 [ 1259.889524][ T4046] ? __lock_acquire+0x548/0x3fb0 [ 1259.894491][ T4046] ? find_held_lock+0x35/0x130 [ 1259.899272][ T4046] ? kcov_ioctl+0x53/0x200 [ 1259.903706][ T4046] ? __might_fault+0x12b/0x1e0 [ 1259.908494][ T4046] ? __cleanup_sighand+0x60/0x60 [ 1259.913454][ T4046] ? lock_downgrade+0x880/0x880 [ 1259.918336][ T4046] _do_fork+0x257/0xfd0 [ 1259.922513][ T4046] ? fork_idle+0x1d0/0x1d0 [ 1259.926980][ T4046] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1259.932476][ T4046] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1259.937961][ T4046] ? do_syscall_64+0x26/0x610 [ 1259.942666][ T4046] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1259.948739][ T4046] ? do_syscall_64+0x26/0x610 [ 1259.953425][ T4046] __x64_sys_clone+0xbf/0x150 [ 1259.958141][ T4046] do_syscall_64+0x103/0x610 [ 1259.962753][ T4046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1259.968656][ T4046] RIP: 0033:0x458c29 [ 1259.972562][ T4046] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1259.992180][ T4046] RSP: 002b:00007fba1d9f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1260.000605][ T4046] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29 [ 1260.008588][ T4046] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000003102001ffe [ 1260.016572][ T4046] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 1260.024580][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fba1d9f76d4 [ 1260.032572][ T4046] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff [ 1260.050826][ T4046] memory: usage 307136kB, limit 307200kB, failcnt 4298 03:08:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x231e000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x4a02, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:33 executing program 0 (fault-call:2 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:33 executing program 2: r0 = socket$inet6(0xa, 0xf, 0x80000002) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) socketpair(0x8, 0x4, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffffffffffff, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r3 = gettid() openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r3, 0x201000000000016) [ 1260.061240][ T4046] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1260.072762][ T4046] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1260.083641][ T4046] Memory cgroup stats for /syz5: cache:56KB rss:185060KB rss_huge:122880KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:185100KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1260.155932][ T4046] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4044,uid=0 [ 1260.168084][ T4055] FAULT_INJECTION: forcing a failure. [ 1260.168084][ T4055] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.180248][ T4046] Memory cgroup out of memory: Killed process 4044 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 03:08:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x1000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1260.199076][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1260.247956][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1260.262781][ T4055] CPU: 0 PID: 4055 Comm: syz-executor.0 Not tainted 5.1.0-rc6 #80 [ 1260.270625][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.280693][ T4055] Call Trace: [ 1260.284023][ T4055] dump_stack+0x172/0x1f0 [ 1260.288384][ T4055] should_fail.cold+0xa/0x15 03:08:33 executing program 2: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0xffffffffffffff80) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7f, @dev, 0x103}, 0xcc) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001680), 0x4) getpeername$unix(0xffffffffffffffff, &(0x7f00000016c0)=@abs, &(0x7f0000001740)=0x6e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'tunl0\x00', 0x0}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000140)={0x2c, 0x3, r2, 0x3}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="88e3a5ddc6172e912a3613976358501ad84f9e8ded4bf39ef16e6ce83d9edc21aded1550b6ac8bb654e476a4b316a4a81e3e30aa32759ede74665a08adbd9148f30adb32bc607e060038d76ff540a116c611c3d66e27f7f66bc441a792e5b098a62440f33e108c281f470e3e", 0x6c}, {&(0x7f0000001200)="35393d11571fe996c4c567fe100662a7e67d902116d29dfd8cd2ff7b590dc311696c1d84aaece3823f3728708d63fca3d44a6e82ea5fea7f7e025ae2abb80bb1be99d0625e4c4f1f01c33bdcade6544e83a5e6a82df3f3e3c722b0b20a942142dcf282a46155b8cab447fec347751edb38e6461dcc650fbe90c4bf45eb41207e76c2c6fcc909d9c6294e69f53e2c3275436c15dd5ac83a2a20540a7654401d198223f2168cb2c21e2bd1", 0xaa}, {&(0x7f00000012c0)="ddd67901aff5190611c850592a0fa046cb341df0f5ebd0f5105ace8b7443da74f53fb35267ef2af0cc64a100ff2b50e0da5adede59a904ea2b7dd71ce90e356c50b8dbc1e0f6d143f1fcb14bb8bd085e28b3a8f5be433f2946fa215da9fb34bfba10b8e049c3c7983a3face4b3688efb76827e9b5bb3b498d0da3d7cffb3a4a5e8bf0008941bf03f50ac967ce723ddc73cd779274addc60e89ebe0a379daa720367d2235dfd1a895cd9b9e22bc9bfb", 0xaf}, {&(0x7f0000001380)="b1dc0d47b0ab02fefe67887ddf67f41ad89d55158f2ff3dc10e884a51230ed512147cfa532942c22661fe7a7d25ef2b08b2a35ee4d7ccf42e1ee6953f25a06cca7bd62ddb9229de3d03ee03519492ed41e65812fd4194ca9401eb11cd8832f7e4a2b51d7fcad58ef97aae268b5085b6f66e184fe21db1300f896fc4b36e02287cab8e8bfd7493088844aab4c5b2b7687c767c2ff87ca01590e01", 0x9a}, {&(0x7f0000001440)="99c5a1d3b4107f83be8fe49ba2ba24a545fc04d455e2d493f6d6d1b17542209fe8d65eb9d71e796ef90dd81d214b0e703bb808ca72a637e570f84fe13eb5d72399e68ad6c61a57f25e6648a2014128cb6fadec6f1f4c8ad0051e1614ffeb87190ee6e0b35b72f129c77e63606389bbab02ea38802e6d2e5e8349ff8bd06703d6ed2a068344bbdac07c12761b4711f432752d90266bb55190927eaba0697ac9528b69a36f24", 0xa5}, {&(0x7f0000001500)="9acbee44a42a4600d9af54504da40a0aad1580aaf2ee9240ae6a71b111e8259029d2175e881d75644ea10bb731716fa461bc17805c6a2753f628dae628a880c72ab5d92a4600f28a631297ca", 0x4c}], 0x7, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000001640)={'bcsh0\x00', 0x5}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000001800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000017c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000001840)={0x4, 0x8, 0xfa00, {r4}}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000001780)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) [ 1260.293003][ T4055] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1260.298828][ T4055] ? ___might_sleep+0x163/0x280 [ 1260.303697][ T4055] __should_failslab+0x121/0x190 [ 1260.308651][ T4055] should_failslab+0x9/0x14 [ 1260.313175][ T4055] kmem_cache_alloc_node+0x264/0x710 [ 1260.318476][ T4055] ? up_write+0x1c/0x150 [ 1260.320086][ T1043] oom_reaper: reaped process 4044 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1260.322728][ T4055] __alloc_skb+0xd5/0x5e0 [ 1260.322744][ T4055] ? skb_trim+0x190/0x190 [ 1260.322760][ T4055] ? ___might_sleep+0x163/0x280 [ 1260.322779][ T4055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1260.322797][ T4055] ? security_socket_getpeersec_dgram+0x93/0xc0 [ 1260.322818][ T4055] netlink_sendmsg+0x97b/0xd70 [ 1260.364610][ T4055] ? netlink_unicast+0x720/0x720 [ 1260.369580][ T4055] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1260.375143][ T4055] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1260.380632][ T4055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1260.386908][ T4055] ? security_socket_sendmsg+0x93/0xc0 [ 1260.392417][ T4055] ? netlink_unicast+0x720/0x720 03:08:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x3f00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1260.397367][ T4055] sock_sendmsg+0xdd/0x130 [ 1260.401791][ T4055] sock_write_iter+0x27c/0x3e0 [ 1260.406570][ T4055] ? sock_sendmsg+0x130/0x130 [ 1260.411311][ T4055] do_iter_readv_writev+0x5e1/0x8e0 [ 1260.416535][ T4055] ? vfs_dedupe_file_range+0x780/0x780 [ 1260.422016][ T4055] ? apparmor_file_permission+0x25/0x30 [ 1260.427594][ T4055] ? rw_verify_area+0x118/0x360 [ 1260.432501][ T4055] do_iter_write+0x184/0x610 [ 1260.437147][ T4055] ? dup_iter+0x260/0x260 [ 1260.441509][ T4055] ? __fget+0x35a/0x550 [ 1260.445713][ T4055] vfs_writev+0x1b3/0x2f0 [ 1260.450070][ T4055] ? vfs_iter_write+0xb0/0xb0 [ 1260.454780][ T4055] ? ksys_dup3+0x3e0/0x3e0 [ 1260.459228][ T4055] ? wait_for_completion+0x440/0x440 [ 1260.464534][ T4055] ? __fget_light+0x1a9/0x230 [ 1260.469254][ T4055] do_writev+0x15e/0x370 [ 1260.473598][ T4055] ? vfs_writev+0x2f0/0x2f0 [ 1260.478128][ T4055] ? do_syscall_64+0x26/0x610 [ 1260.481329][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1260.482825][ T4055] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1260.482842][ T4055] ? do_syscall_64+0x26/0x610 [ 1260.482865][ T4055] __x64_sys_writev+0x75/0xb0 [ 1260.482883][ T4055] do_syscall_64+0x103/0x610 [ 1260.482901][ T4055] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1260.482922][ T4055] RIP: 0033:0x458c29 [ 1260.521881][ T4055] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:08:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'}, 0x2c) 03:08:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x2000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1260.542203][ T4055] RSP: 002b:00007f937c04dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1260.550624][ T4055] RAX: ffffffffffffffda RBX: 00007f937c04dc90 RCX: 0000000000458c29 [ 1260.558605][ T4055] RDX: 0000000000000001 RSI: 000000002037d000 RDI: 0000000000000003 [ 1260.566690][ T4055] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1260.574675][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f937c04e6d4 [ 1260.582691][ T4055] R13: 00000000004c5996 R14: 00000000004df0e0 R15: 0000000000000004 03:08:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:33 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) ptrace$setopts(0x4200, r1, 0x0, 0x100000) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r1, 0x201000000000016) gettid() [ 1260.644937][ T4076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x3000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:33 executing program 0 (fault-call:2 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4000000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x4000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1260.845645][ T4100] FAULT_INJECTION: forcing a failure. [ 1260.845645][ T4100] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.875546][ T4100] CPU: 1 PID: 4100 Comm: syz-executor.0 Not tainted 5.1.0-rc6 #80 [ 1260.883424][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.893528][ T4100] Call Trace: [ 1260.896847][ T4100] dump_stack+0x172/0x1f0 [ 1260.901195][ T4100] should_fail.cold+0xa/0x15 [ 1260.905804][ T4100] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1260.909084][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1260.911624][ T4100] ? ___might_sleep+0x163/0x280 [ 1260.911645][ T4100] __should_failslab+0x121/0x190 [ 1260.911661][ T4100] should_failslab+0x9/0x14 [ 1260.911678][ T4100] kmem_cache_alloc_node_trace+0x270/0x720 [ 1260.911702][ T4100] __kmalloc_node_track_caller+0x3d/0x70 [ 1260.946702][ T4100] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1260.952091][ T4100] __alloc_skb+0x10b/0x5e0 [ 1260.956527][ T4100] ? skb_trim+0x190/0x190 [ 1260.960875][ T4100] ? ___might_sleep+0x163/0x280 [ 1260.965740][ T4100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1260.972002][ T4100] ? security_socket_getpeersec_dgram+0x93/0xc0 [ 1260.978272][ T4100] netlink_sendmsg+0x97b/0xd70 [ 1260.983081][ T4100] ? netlink_unicast+0x720/0x720 [ 1260.988045][ T4100] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1260.993619][ T4100] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1260.999087][ T4100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1261.005343][ T4100] ? security_socket_sendmsg+0x93/0xc0 [ 1261.010840][ T4100] ? netlink_unicast+0x720/0x720 [ 1261.015797][ T4100] sock_sendmsg+0xdd/0x130 [ 1261.020229][ T4100] sock_write_iter+0x27c/0x3e0 [ 1261.025028][ T4100] ? sock_sendmsg+0x130/0x130 [ 1261.029769][ T4100] do_iter_readv_writev+0x5e1/0x8e0 [ 1261.035210][ T4100] ? vfs_dedupe_file_range+0x780/0x780 [ 1261.040697][ T4100] ? apparmor_file_permission+0x25/0x30 [ 1261.046272][ T4100] ? rw_verify_area+0x118/0x360 [ 1261.051153][ T4100] do_iter_write+0x184/0x610 [ 1261.055757][ T4100] ? dup_iter+0x260/0x260 [ 1261.060097][ T4100] ? __fget+0x35a/0x550 [ 1261.064285][ T4100] vfs_writev+0x1b3/0x2f0 [ 1261.068630][ T4100] ? vfs_iter_write+0xb0/0xb0 [ 1261.073344][ T4100] ? ksys_dup3+0x3e0/0x3e0 [ 1261.077825][ T4100] ? wait_for_completion+0x440/0x440 [ 1261.083142][ T4100] ? __fget_light+0x1a9/0x230 [ 1261.087856][ T4100] do_writev+0x15e/0x370 [ 1261.092128][ T4100] ? vfs_writev+0x2f0/0x2f0 [ 1261.096650][ T4100] ? do_syscall_64+0x26/0x610 [ 1261.101359][ T4100] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1261.107440][ T4100] ? do_syscall_64+0x26/0x610 [ 1261.112143][ T4100] __x64_sys_writev+0x75/0xb0 [ 1261.116841][ T4100] do_syscall_64+0x103/0x610 [ 1261.121451][ T4100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1261.127379][ T4100] RIP: 0033:0x458c29 [ 1261.131306][ T4100] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1261.150931][ T4100] RSP: 002b:00007f937c04dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1261.159446][ T4100] RAX: ffffffffffffffda RBX: 00007f937c04dc90 RCX: 0000000000458c29 [ 1261.167435][ T4100] RDX: 0000000000000001 RSI: 000000002037d000 RDI: 0000000000000003 [ 1261.175419][ T4100] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1261.183407][ T4100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f937c04e6d4 [ 1261.191419][ T4100] R13: 00000000004c5996 R14: 00000000004df0e0 R15: 0000000000000004 03:08:34 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x5000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:34 executing program 0 (fault-call:2 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4800000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:34 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x6000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1261.428849][ T4122] FAULT_INJECTION: forcing a failure. [ 1261.428849][ T4122] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.461425][ T4131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1261.481902][ T4122] CPU: 0 PID: 4122 Comm: syz-executor.0 Not tainted 5.1.0-rc6 #80 [ 1261.489778][ T4122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.499845][ T4122] Call Trace: [ 1261.503160][ T4122] dump_stack+0x172/0x1f0 [ 1261.507522][ T4122] should_fail.cold+0xa/0x15 [ 1261.512133][ T4122] ? __netlink_lookup+0x3c8/0x7a0 [ 1261.517175][ T4122] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1261.523023][ T4122] __should_failslab+0x121/0x190 [ 1261.528043][ T4122] should_failslab+0x9/0x14 [ 1261.532579][ T4122] kmem_cache_alloc+0x47/0x6f0 [ 1261.537372][ T4122] ? lock_acquire+0x16f/0x3f0 [ 1261.542078][ T4122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1261.548331][ T4122] skb_clone+0x150/0x3b0 [ 1261.552597][ T4122] netlink_deliver_tap+0x95c/0xc00 [ 1261.557731][ T4122] netlink_unicast+0x5a7/0x720 [ 1261.561021][ T4130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1261.562516][ T4122] ? netlink_attachskb+0x770/0x770 [ 1261.562545][ T4122] ? _copy_from_iter_full+0x25d/0x900 [ 1261.582281][ T4122] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1261.588052][ T4122] ? __check_object_size+0x3d/0x42f [ 1261.593286][ T4122] netlink_sendmsg+0x8ae/0xd70 [ 1261.598089][ T4122] ? netlink_unicast+0x720/0x720 [ 1261.603048][ T4122] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 1261.608615][ T4122] ? apparmor_socket_sendmsg+0x2a/0x30 [ 1261.614109][ T4122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1261.620365][ T4122] ? security_socket_sendmsg+0x93/0xc0 [ 1261.625848][ T4122] ? netlink_unicast+0x720/0x720 [ 1261.630847][ T4122] sock_sendmsg+0xdd/0x130 [ 1261.635377][ T4122] sock_write_iter+0x27c/0x3e0 [ 1261.640187][ T4122] ? sock_sendmsg+0x130/0x130 [ 1261.646403][ T4122] do_iter_readv_writev+0x5e1/0x8e0 [ 1261.651620][ T4122] ? vfs_dedupe_file_range+0x780/0x780 [ 1261.657092][ T4122] ? apparmor_file_permission+0x25/0x30 [ 1261.662656][ T4122] ? rw_verify_area+0x118/0x360 [ 1261.667528][ T4122] do_iter_write+0x184/0x610 [ 1261.672143][ T4122] ? dup_iter+0x260/0x260 [ 1261.676508][ T4122] ? __fget+0x35a/0x550 [ 1261.680878][ T4122] vfs_writev+0x1b3/0x2f0 [ 1261.685236][ T4122] ? vfs_iter_write+0xb0/0xb0 [ 1261.689952][ T4122] ? ksys_dup3+0x3e0/0x3e0 [ 1261.694402][ T4122] ? wait_for_completion+0x440/0x440 [ 1261.699698][ T4122] ? __fget_light+0x1a9/0x230 [ 1261.704398][ T4122] do_writev+0x15e/0x370 [ 1261.708677][ T4122] ? vfs_writev+0x2f0/0x2f0 [ 1261.713193][ T4122] ? do_syscall_64+0x26/0x610 [ 1261.717880][ T4122] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1261.717895][ T4122] ? do_syscall_64+0x26/0x610 [ 1261.717915][ T4122] __x64_sys_writev+0x75/0xb0 [ 1261.717933][ T4122] do_syscall_64+0x103/0x610 [ 1261.717949][ T4122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1261.717960][ T4122] RIP: 0033:0x458c29 [ 1261.717974][ T4122] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1261.717983][ T4122] RSP: 002b:00007f937c04dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1261.718007][ T4122] RAX: ffffffffffffffda RBX: 00007f937c04dc90 RCX: 0000000000458c29 [ 1261.718016][ T4122] RDX: 0000000000000001 RSI: 000000002037d000 RDI: 0000000000000003 [ 1261.718024][ T4122] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1261.718033][ T4122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f937c04e6d4 [ 1261.718047][ T4122] R13: 00000000004c5996 R14: 00000000004df0e0 R15: 0000000000000004 [ 1261.739909][ T4122] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:36 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioprio_get$pid(0x1, r1) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair(0x2, 0x5, 0x8, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ptrace$setregs(0xf, r1, 0x7fff, &(0x7f0000000280)="84f8f6aac402f6818be8b2b6b7de9a081d32d876df768d33983c244c93213c536f2a4edb7a14c792c07e3ec53163a7a48f4a83f1286f5309805acaaa342c365e695bbcc604fb18827e30925d3aa25e2fd169bce74b401f6bac7d96cd9bbcec28b8c9f38e9e8cf2d7ff0c38e44f3646bb243b4b88cae1e8f466fb222b10d760a5d3e2c62d09d76636817c248db03156") sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000004381e34ff382d47891b4f1dd6402079ddb0ab57c5ef41555cab623089e7b9ebdb63fe0793f5047bf447815d8ba1c709a4fa908c44b7cf8f3c4bfc530f4ee6290f60f93f16f76aba4fa709440ff5db485783afdc0244eededb237475f349b8a71f85bdd6310905bb6ca9", @ANYRES16=r4, @ANYBLOB="000326bd7000fedbdf2501000000000000000841000000140018000002007564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r2) tkill(r1, 0x201000000000016) 03:08:36 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x7000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x4c00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:36 executing program 0 (fault-call:2 fault-nth:3): r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1263.838972][ T4152] __nla_parse: 1 callbacks suppressed [ 1263.839015][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1263.862451][ T4149] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:36 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xb000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1263.880699][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:36 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0xc0000000, 0x102, "a71bf651953bae140a366498ee25687eb32981bf3dea2990af2f83bfa550585a", 0xffffffffffffffff, 0x3, 0xd49, 0x0, 0x200, 0x80, 0x4, 0x2, [0x0, 0x8000, 0x0, 0x1]}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) tkill(r2, 0x201000000000016) 03:08:36 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x33000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1264.047267][ T4173] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="0f00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:37 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x40000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6000000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:37 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x4a020000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1264.383699][ T4190] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1264.415357][ T4190] CPU: 0 PID: 4190 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1264.423197][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.433399][ T4190] Call Trace: [ 1264.436713][ T4190] dump_stack+0x172/0x1f0 [ 1264.441138][ T4190] dump_header+0x10f/0xb6c [ 1264.445653][ T4190] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1264.451472][ T4190] ? ___ratelimit+0x60/0x595 [ 1264.456073][ T4190] ? do_raw_spin_unlock+0x57/0x270 [ 1264.461193][ T4190] oom_kill_process.cold+0x10/0x15 [ 1264.466345][ T4190] out_of_memory+0x79a/0x1280 [ 1264.471046][ T4190] ? lock_downgrade+0x880/0x880 [ 1264.475914][ T4190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1264.482254][ T4190] ? oom_killer_disable+0x280/0x280 [ 1264.487632][ T4190] ? find_held_lock+0x35/0x130 [ 1264.492524][ T4190] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1264.498158][ T4190] ? memcg_event_wake+0x230/0x230 [ 1264.503199][ T4190] ? do_raw_spin_unlock+0x57/0x270 [ 1264.508312][ T4190] ? _raw_spin_unlock+0x2d/0x50 [ 1264.513192][ T4190] try_charge+0x102c/0x15c0 [ 1264.517740][ T4190] ? find_held_lock+0x35/0x130 [ 1264.522514][ T4190] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1264.528536][ T4190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1264.534789][ T4190] ? kasan_check_read+0x11/0x20 [ 1264.539665][ T4190] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1264.545220][ T4190] mem_cgroup_try_charge+0x24d/0x5e0 [ 1264.550547][ T4190] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1264.556199][ T4190] __handle_mm_fault+0x1e1f/0x3ec0 [ 1264.561330][ T4190] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1264.566891][ T4190] ? find_held_lock+0x35/0x130 [ 1264.571656][ T4190] ? handle_mm_fault+0x322/0xb30 [ 1264.577489][ T4190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1264.583838][ T4190] ? kasan_check_read+0x11/0x20 [ 1264.588709][ T4190] handle_mm_fault+0x43f/0xb30 [ 1264.593493][ T4190] __do_page_fault+0x5ef/0xda0 [ 1264.598285][ T4190] do_page_fault+0x71/0x581 [ 1264.602789][ T4190] ? page_fault+0x8/0x30 [ 1264.607050][ T4190] page_fault+0x1e/0x30 [ 1264.611199][ T4190] RIP: 0033:0x43ff21 [ 1264.615092][ T4190] Code: 8d 15 83 70 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1264.634708][ T4190] RSP: 002b:0000000000a4fbd8 EFLAGS: 00010202 [ 1264.641234][ T4190] RAX: 0000000020000000 RBX: 0000000000740060 RCX: 000000000000000a [ 1264.649223][ T4190] RDX: 000000000000000b RSI: 0000000000740080 RDI: 0000000020000000 [ 1264.657193][ T4190] RBP: 0000000000740068 R08: 00000000b334236b R09: 00000000b334236f [ 1264.665166][ T4190] R10: 0000000000a4fca0 R11: 0000000000000246 R12: fffffffffffffffe [ 1264.673241][ T4190] R13: 0000000000134a8d R14: 0000000000134aba R15: 000000000073bf0c [ 1264.681874][ T4197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1264.695042][ T4190] memory: usage 307200kB, limit 307200kB, failcnt 4329 [ 1264.721197][ T4190] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1264.732717][ T4190] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1264.799125][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1264.823425][ T4190] Memory cgroup stats for /syz5: cache:56KB rss:183604KB rss_huge:120832KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:183724KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1264.850099][ T4190] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17410,uid=0 [ 1264.876351][ T4190] Memory cgroup out of memory: Killed process 17410 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:08:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="5a00000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:37 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000030000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000010000ff7f000001800000000000002000000000000000090c0000000000000100000000000000000000000000000000000000000000000600000000000000f2910000000000000200000000000000018004000000000004000000dcbd0b500000000000000000000000000000000000000000000000000000000000000000001c000000000000f6755a4703bb96999a5a4100000000000000000000004960d02a4a23e97cdaddbb7c8a00"/404]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x208000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000269, 0x0) 03:08:37 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x8dffffff, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1265.137378][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="c000000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:38 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xeaffffff, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="c00e000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6800000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1265.787557][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:38 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xf5ffffff, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:38 executing program 2: rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x1, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0x8, 0xafc, 0x3, 0x1, [], [], [], 0x7, 0x9, 0x7fff, 0x5, "630fa6ed0e8efb5c01326f674161f533"}) msgget(0x2, 0x2a8) 03:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="effd000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xff'}, 0x2c) 03:08:38 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xffffff8d, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1265.957249][ T4273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:38 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000300)={0x6, 0xfff, [{0x7, 0x0, 0x2}, {0x2, 0x0, 0x1000}, {0x7f, 0x0, 0x5}, {0x5, 0x0, 0xfffffffffffffff7}, {0x2, 0x0, 0x4}, {0x956, 0x0, 0x6}]}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}, {0x0}, {&(0x7f0000001740)=""/155, 0x9b}, {0x0}, {&(0x7f0000001540)=""/102, 0x66}], 0x5, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x0, 0x0, [0x3]}) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5c}, {0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x398, &(0x7f0000000200)=[{&(0x7f0000001380)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000014c0)="eb3b87ac5c0a4f6873249dc00468fd92", 0x10) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', &(0x7f00000013c0)='TRUE', 0x4, 0x3) ioctl(r0, 0xc2604110, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e23, @local}}) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000001400)={0x7, 0x0, [{0x40000001, 0x2a, 0x4, 0xe21f, 0x1473}, {0x0, 0x7, 0xfffffffffffffffd, 0x3, 0x7f}, {0xc0000001, 0xfffffffffffffff9, 0x3, 0x100, 0x8}, {0xb, 0x2000000000000ef, 0x0, 0x7, 0x4f9}, {0xd, 0x7e, 0x0, 0xfffffffeffffffff, 0x8000000000000000}, {0x40000000, 0x5e6e, 0x4, 0x7, 0x3}, {0xc0000007, 0x2, 0x7, 0x8, 0x1}]}) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="e03f030002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x6c00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:39 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xffffffea, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd0\x00'}, 0x2c) 03:08:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x7fffd, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xa7f, 0x4263c0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x0, 0x4000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x401, 0x52, 0x0, 0x7}) r4 = socket(0x1e, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0x60, 0x200000) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000280)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x3}}, 0x20) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x5, 0x4, 0x81, 0x5, 0x0, 0x3, 0x1, 0xffff, 0x1, 0x8, 0x7fff, 0x2, 0x2, 0xd14b, 0x7ff]}, &(0x7f0000000500)=0x100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="510000007d020000004a00020006000000000300000000000000000000dfff001000fdffffffff00000000000000900000000700544950437632000f002f6465762f7365717502006365720001002c0000"], 0x51) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xf6) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000200)) getrandom(&(0x7f00000005c0)=""/198, 0xc6, 0x3) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000006c0)=""/108) [ 1266.388629][ T4299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="00a0192002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:39 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xfffffff5, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/mcfilter6\x00') ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x3, "f96013d95840d426e273d5d783d338a91d458a8e2685de3c05e8f74e558b3b7d", 0x1, 0x1}) socket$inet6(0xa, 0x3, 0x20000000021) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="00f0ff7f02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1266.836640][ T4332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7400000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:39 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x100000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1266.976206][ T4344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="effdffff02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:40 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xd8e}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0x80da15, 0x8001, 0x20001ffffffd, 0xfffffffffffffffc}) ioctl(r1, 0x2285, &(0x7f0000007000)='S') socket$inet6_dccp(0xa, 0x6, 0x0) 03:08:40 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x200000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x7a00000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1267.190205][ T4346] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 03:08:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000001031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12]) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000012c0)=ANY=[]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000100)=0x2001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffbd, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x183801, 0x0) ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000280)=""/194) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="420f0666b805010f00d0b9bb0b00000f3266ba6100b0e4ee3e440f01db66b8d9008ed0c744240046650000c744240202000000c7442406000000000f011424f20f01c9b99d000040b88d000000ba000000000f30f046808c1a0000000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1267.288604][ T4346] CPU: 0 PID: 4346 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1267.296448][ T4346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.306510][ T4346] Call Trace: [ 1267.309820][ T4346] dump_stack+0x172/0x1f0 [ 1267.314174][ T4346] dump_header+0x10f/0xb6c [ 1267.318624][ T4346] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1267.324444][ T4346] ? ___ratelimit+0x60/0x595 [ 1267.329063][ T4346] ? do_raw_spin_unlock+0x57/0x270 03:08:40 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x300000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1267.334209][ T4346] oom_kill_process.cold+0x10/0x15 [ 1267.339342][ T4346] out_of_memory+0x79a/0x1280 [ 1267.344044][ T4346] ? lock_downgrade+0x880/0x880 [ 1267.348904][ T4346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.355168][ T4346] ? oom_killer_disable+0x280/0x280 [ 1267.360643][ T4346] ? find_held_lock+0x35/0x130 [ 1267.365437][ T4346] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1267.371008][ T4346] ? memcg_event_wake+0x230/0x230 [ 1267.376078][ T4346] ? do_raw_spin_unlock+0x57/0x270 [ 1267.381218][ T4346] ? _raw_spin_unlock+0x2d/0x50 [ 1267.386090][ T4346] try_charge+0x102c/0x15c0 [ 1267.389274][ T4376] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1267.390597][ T4346] ? find_held_lock+0x35/0x130 [ 1267.390630][ T4346] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1267.409452][ T4346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.415717][ T4346] ? kasan_check_read+0x11/0x20 [ 1267.420589][ T4346] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1267.426167][ T4346] mem_cgroup_try_charge+0x24d/0x5e0 [ 1267.431500][ T4346] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1267.437159][ T4346] __handle_mm_fault+0x1e1f/0x3ec0 [ 1267.442293][ T4346] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1267.447848][ T4346] ? find_held_lock+0x35/0x130 [ 1267.452646][ T4346] ? handle_mm_fault+0x322/0xb30 [ 1267.452671][ T4346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.452689][ T4346] ? kasan_check_read+0x11/0x20 [ 1267.452708][ T4346] handle_mm_fault+0x43f/0xb30 [ 1267.452727][ T4346] __do_page_fault+0x5ef/0xda0 [ 1267.452747][ T4346] do_page_fault+0x71/0x581 [ 1267.482830][ T4346] ? page_fault+0x8/0x30 [ 1267.487080][ T4346] page_fault+0x1e/0x30 [ 1267.491238][ T4346] RIP: 0033:0x43ff21 [ 1267.495149][ T4346] Code: 8d 15 83 70 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1267.514772][ T4346] RSP: 002b:0000000000a4fbd8 EFLAGS: 00010202 [ 1267.514785][ T4346] RAX: 0000000020000000 RBX: 0000000000740060 RCX: 000000000000000a [ 1267.514792][ T4346] RDX: 000000000000000b RSI: 0000000000740080 RDI: 0000000020000000 [ 1267.514799][ T4346] RBP: 0000000000740068 R08: 00000000b334236b R09: 00000000b334236f [ 1267.514808][ T4346] R10: 0000000000a4fca0 R11: 0000000000000246 R12: fffffffffffffffe [ 1267.514816][ T4346] R13: 0000000000135563 R14: 0000000000135590 R15: 000000000073bf0c [ 1267.562853][ T4376] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1267.605422][ T4382] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1267.646485][ T4346] memory: usage 307200kB, limit 307200kB, failcnt 4374 [ 1267.671168][ T4346] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1267.710137][ T4346] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1267.725473][ T4346] Memory cgroup stats for /syz5: cache:56KB rss:182284KB rss_huge:118784KB shmem:0KB mapped_file:132KB [ 1267.741265][ T4346] dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:182364KB inactive_file:0KB active_file:0KB unevictable:0KB 03:08:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xff'}, 0x2c) 03:08:40 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x400000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x9effffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f02000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1267.756838][ T4346] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17461,uid=0 [ 1267.774987][ T4346] Memory cgroup out of memory: Killed process 17461 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:08:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}, 0x2c) 03:08:40 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x500000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f03000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f04000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:41 executing program 2: getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xc, 0x100082) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) 03:08:41 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x600000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f05000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1268.848550][ T4448] __nla_parse: 6 callbacks suppressed [ 1268.848592][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xc00e000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f06000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:41 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x700000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:42 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xb00000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f07000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1269.057469][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000002f40)='/dev/dri/card#\x00', 0xb87, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d259d4d047ea09d77ecd6eff986ef6cdd0771b93d2099398ad4b72081276aa77"}}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10001, 0x0) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000140)) 03:08:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xf0ffffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1269.252253][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0a000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:42 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x3300000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="84", 0x1, 0x200400d4, 0x0, 0x0) fdatasync(r0) 03:08:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0e000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:42 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x4000000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xdbef09b65a477772, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x80000002) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x7ff) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x9, 0x0, &(0x7f0000fedffe)}) 03:08:42 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x4a02000000000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1269.742937][ T4509] binder: BINDER_SET_CONTEXT_MGR already set [ 1269.775960][ T4509] binder: 4507:4509 ioctl 40046207 0 returned -16 [ 1269.843561][ T4509] binder: 4507:4509 got transaction with invalid data ptr [ 1269.853052][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1269.893547][ T4509] binder: 4507:4509 transaction failed 29201/-14, size 8194-0 line 3180 03:08:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1269.955967][ T1354] binder: undelivered TRANSACTION_ERROR: 29201 [ 1269.975569][ T4525] binder: BINDER_SET_CONTEXT_MGR already set [ 1270.032311][ T4525] binder: 4507:4525 ioctl 40046207 0 returned -16 03:08:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:43 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x8dffffff00000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1270.096274][ T4513] binder: 4507:4513 got transaction with invalid data ptr [ 1270.105937][ T4513] binder: 4507:4513 transaction failed 29201/-14, size 8194-0 line 3180 [ 1270.149084][ T2988] binder: undelivered TRANSACTION_ERROR: 29201 [ 1270.149604][ T4533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1270.173176][ T4528] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1270.208688][ T4528] CPU: 0 PID: 4528 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1270.216550][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.226631][ T4528] Call Trace: [ 1270.226665][ T4528] dump_stack+0x172/0x1f0 [ 1270.226683][ T4528] dump_header+0x10f/0xb6c [ 1270.226698][ T4528] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1270.226719][ T4528] ? ___ratelimit+0x60/0x595 [ 1270.238753][ T4528] ? do_raw_spin_unlock+0x57/0x270 [ 1270.238773][ T4528] oom_kill_process.cold+0x10/0x15 [ 1270.238790][ T4528] out_of_memory+0x79a/0x1280 [ 1270.238813][ T4528] ? lock_downgrade+0x880/0x880 [ 1270.254388][ T4528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.275784][ T4528] ? oom_killer_disable+0x280/0x280 [ 1270.275797][ T4528] ? find_held_lock+0x35/0x130 [ 1270.275818][ T4528] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1270.275831][ T4528] ? memcg_event_wake+0x230/0x230 [ 1270.275849][ T4528] ? do_raw_spin_unlock+0x57/0x270 [ 1270.275864][ T4528] ? _raw_spin_unlock+0x2d/0x50 [ 1270.275879][ T4528] try_charge+0x102c/0x15c0 [ 1270.275888][ T4528] ? find_held_lock+0x35/0x130 [ 1270.275907][ T4528] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1270.275923][ T4528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.275942][ T4528] ? kasan_check_read+0x11/0x20 [ 1270.275962][ T4528] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1270.338355][ T4528] mem_cgroup_try_charge+0x24d/0x5e0 [ 1270.338376][ T4528] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1270.349291][ T4528] wp_page_copy+0x408/0x1740 [ 1270.349305][ T4528] ? find_held_lock+0x35/0x130 [ 1270.349324][ T4528] ? pmd_pfn+0x1d0/0x1d0 [ 1270.349337][ T4528] ? lock_downgrade+0x880/0x880 [ 1270.349351][ T4528] ? swp_swapcount+0x540/0x540 [ 1270.349368][ T4528] ? kasan_check_read+0x11/0x20 [ 1270.349383][ T4528] ? do_raw_spin_unlock+0x57/0x270 [ 1270.349400][ T4528] do_wp_page+0x48e/0x1500 [ 1270.349420][ T4528] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1270.349443][ T4528] __handle_mm_fault+0x22e8/0x3ec0 [ 1270.349460][ T4528] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1270.349473][ T4528] ? find_held_lock+0x35/0x130 [ 1270.349489][ T4528] ? handle_mm_fault+0x322/0xb30 [ 1270.349513][ T4528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1270.420674][ T4528] ? kasan_check_read+0x11/0x20 [ 1270.425550][ T4528] handle_mm_fault+0x43f/0xb30 [ 1270.430339][ T4528] __do_page_fault+0x5ef/0xda0 [ 1270.435137][ T4528] do_page_fault+0x71/0x581 [ 1270.439665][ T4528] ? page_fault+0x8/0x30 [ 1270.443904][ T4528] page_fault+0x1e/0x30 [ 1270.448061][ T4528] RIP: 0033:0x40b8f8 [ 1270.451956][ T4528] Code: d9 48 8b 47 78 48 83 f8 ff 0f 84 0b 01 00 00 48 8b 73 18 48 83 fe ff 74 29 48 81 fe e7 03 00 00 0f 87 5e 01 00 00 48 c1 e6 04 86 60 80 73 00 01 48 89 86 68 80 73 00 66 2e 0f 1f 84 00 00 00 [ 1270.471700][ T4528] RSP: 002b:0000000000a4fbb0 EFLAGS: 00010246 [ 1270.477794][ T4528] RAX: 0000000000000003 RBX: 000000000073bf00 RCX: 0000000000000001 [ 1270.485821][ T4528] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000073bf00 [ 1270.493794][ T4528] RBP: 000000000073bf00 R08: 0000000000136129 R09: 0000000000136129 [ 1270.501776][ T4528] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000000002d 03:08:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffff7f00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0f000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:43 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xeaffffff00000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1270.509795][ T4528] R13: 0000000000136141 R14: 000000000013616e R15: 000000000073bf0c [ 1270.539758][ T4540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1270.551186][ T4528] memory: usage 307200kB, limit 307200kB, failcnt 4408 [ 1270.579701][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1270.595093][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1270.616612][ T4528] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:08:43 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xf5ffffff00000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f48000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1270.643023][ T4528] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:08:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f00000001c0)="cfcfe368aa567f119a6bae8459987f07ef47a4aecfdeaefb5873e701a29b78d94e1d4fd29dc1a93690ba03443cf5971b5d56ddff2d", 0x35) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) [ 1270.678134][ T4528] Memory cgroup stats for /syz5: cache:56KB rss:180984KB rss_huge:116736KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:181064KB inactive_file:0KB active_file:0KB unevictable:0KB 03:08:43 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') io_setup(0x3, &(0x7f0000000180)=0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000500)='/dev/vbi#\x00', 0x2, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001bc0)={0x0, r0, 0x0, 0xea6b, 0x4, 0x6}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x202, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000780)='/dev/dlm-control\x00', 0x200000, 0x0) pipe2(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = syz_open_dev$media(&(0x7f0000001a40)='/dev/media#\x00', 0x5, 0x80000) io_submit(r1, 0x9, &(0x7f0000001b40)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f00000001c0)="d1e97197f41034decee19a880d09d11fe5a7cd6e05cc791d57931cadeb440d0d013dce44fad5ae5c3970486aa84c4091384d1b95d266194b5913d2a0f9618d3609892f1b53f3a87f81586d71318a64e18d1dc956fefb06c3e3ca0bc1c104118bbd29fb1939de36d5ea41d72cc94a27dc9a1c1f93c67421a055bc5980eac9859c531f66a3422660332714e435150c16d6966e9c113f556a79714725ff88179a025d01be76f3ee800d9e7ec451fad3330d2a994856ae34009b0f468c3e46966dafefd643fd1520656611253f6c727849ec10", 0xd1, 0x34f8, 0x0, 0x2, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x401, r0, &(0x7f0000000340)="5c5ac43b1a93c88d23c952dd8ce4294fc846f7c8d6d1cedff9a34178934207adacc7afe36d7be6106ce0b9f62dcb20f303bd1a7b0addeb90141da655b1b78d157dc50f90f4fea7f719be1378b1da50b2b47cc5ca85494f2e2ea08d490ad330fd311a2b86b86d041f73747639c6ccea27bcf3f54a65d273303ec1e8ec60706f3afb632b43faea2564816096e0ef47807c37c280e414bfbf36722e9e33694dd2e11dc50ec67cb20fa579678e5b121a41e62fa7ceabbb76e0e148a805308975a0c60c34", 0xc2, 0x10001, 0x0, 0x1, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x4b, r0, &(0x7f0000000480)="f034497acf96eb8312b49b955cffed79df3e7ed5d52a251afcc009596f1659d48c7b477ac5d2eff0fd6ce733381a26937d8d9f5c8702825efd138f0408b1583f2ec5cc63f0f7cc476dd5f7", 0x4b, 0x333b, 0x0, 0x0, r3}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x9, 0x101000000, r0, &(0x7f0000000580)="77af21f277f1ee459de3d250fad75440fce01b21189f3782593fb1fedfcca3388f8a8ceac741e27c053fe942bbd8a0e08f72e0746d0c06e3c10ecca9aa43cdd3903b7b5db19df569470892da8f09627a46a2f5c9bfa149f12711cd53398a373f50e0949cc242be8c5718de24b13a6890b0cd019e0a43c23e0fc04a8b07e4612117f11d43c07b8606f1c7c4dfe65ad0c21dd9097b09fad25f8fe67e17492eafe5a2025aa82237a69b5458f35185a3d55d42bf1c5ac2c8cf6305d9e12bf90ccbbfa522fe27063089e64f272e8dd32b9bce", 0xd0, 0x0, 0x0, 0x0, r4}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000700)="f2a416fd4aa7de8b1655531bcab036978ef9770a41671c64403d45bbc9cf7b29c7329a96f1a02b12cabf14c45917cbc561ec5ec58eb011b3769af9ca80370f472532ed00d654abbd7a02f5921462b79a4f23496eb9d3c1d13832951bc415a64398bb4756", 0x64, 0xc71, 0x0, 0x3, r5}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x6, 0x10001, r0, &(0x7f0000000800)="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", 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x1, 0x8001, r0, &(0x7f0000001840)="0da890202222c7941531cb72f91f20b448216f9040448b3ef5eee6a26a65889f6d06f366d0dcea8b576962199d045cc23c2f7a31f2c778d49a810c59c070cbbc0c2d56eae4228f8403c6c7f909a4c8f2efa177f5125d3a9e22752f601f38380693f0da39336ae2aa8fabb5e804cad95600b190064b5e288830f8f78c75b518dbe8ba07def27c8526faf1779a29c85e9e5bd6d054cd623cdce6582d7a5551634e48abb9a904e3cda85123a0d047df99dc076e43f25a1eddbc2c18350b8dca149dc0569dce621e5be460e52d6095312ff143952c609e6c96115aeb73863133d69c7a1a0685a6", 0xe5, 0x80, 0x0, 0x2, r6}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f00000019c0)="0f7c49dc353ec8d5e69332069d94f6e2bce428e4415b772a214d2d1051b5ebf26014d1e90048512be207bfef0995b118ab2bda183820d0816d4fb476916c9cb063d2db34", 0x44, 0x2, 0x0, 0x3, r7}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000001ac0)="63fea8b3b3b8ea13124dcfaaa182aff5a4f8c780824d7dc5aa22e18e346e90112903b767c75d310fccfe76480f3fd0d8eb64e44551836ad40c920c", 0x3b, 0x66c261d3, 0x0, 0x1, r0}]) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x0, '~'}, 0x3, 0x2) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup2(r8, r8) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x61, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) [ 1270.905887][ T4528] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17534,uid=0 [ 1270.973494][ T4528] Memory cgroup out of memory: Killed process 17534 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:08:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:44 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xffffffff00000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1271.170217][ T4574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1271.271932][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1271.420179][ T4578] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1271.440687][ T4578] CPU: 1 PID: 4578 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1271.448552][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.458809][ T4578] Call Trace: [ 1271.462228][ T4578] dump_stack+0x172/0x1f0 [ 1271.466764][ T4578] dump_header+0x10f/0xb6c [ 1271.471448][ T4578] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1271.477298][ T4578] ? ___ratelimit+0x60/0x595 [ 1271.482034][ T4578] ? do_raw_spin_unlock+0x57/0x270 [ 1271.487365][ T4578] oom_kill_process.cold+0x10/0x15 [ 1271.492844][ T4578] out_of_memory+0x79a/0x1280 [ 1271.497550][ T4578] ? lock_downgrade+0x880/0x880 [ 1271.502707][ T4578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.509089][ T4578] ? oom_killer_disable+0x280/0x280 [ 1271.514496][ T4578] ? find_held_lock+0x35/0x130 [ 1271.519477][ T4578] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1271.525097][ T4578] ? memcg_event_wake+0x230/0x230 [ 1271.530333][ T4578] ? do_raw_spin_unlock+0x57/0x270 [ 1271.535480][ T4578] ? _raw_spin_unlock+0x2d/0x50 [ 1271.540536][ T4578] try_charge+0x102c/0x15c0 [ 1271.545089][ T4578] ? find_held_lock+0x35/0x130 [ 1271.550096][ T4578] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1271.555685][ T4578] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1271.561383][ T4578] ? find_held_lock+0x35/0x130 [ 1271.566203][ T4578] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1271.571802][ T4578] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1271.577473][ T4578] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1271.582804][ T4578] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1271.588722][ T4578] __memcg_kmem_charge+0x136/0x300 [ 1271.593867][ T4578] __alloc_pages_nodemask+0x437/0x7e0 [ 1271.599432][ T4578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.605889][ T4578] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1271.612303][ T4578] ? copy_process.part.0+0x1d08/0x7980 [ 1271.617902][ T4578] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1271.623569][ T4578] ? trace_hardirqs_on+0x67/0x230 [ 1271.629581][ T4578] ? kasan_check_read+0x11/0x20 [ 1271.634803][ T4578] copy_process.part.0+0x3e0/0x7980 [ 1271.640114][ T4578] ? psi_memstall_leave+0x11c/0x180 [ 1271.645856][ T4578] ? sched_clock+0x2e/0x50 [ 1271.650745][ T4578] ? psi_memstall_leave+0x12e/0x180 [ 1271.656648][ T4578] ? find_held_lock+0x35/0x130 [ 1271.661850][ T4578] ? psi_memstall_leave+0x12e/0x180 [ 1271.667107][ T4578] ? __cleanup_sighand+0x60/0x60 [ 1271.676109][ T4578] ? __lock_acquire+0x548/0x3fb0 [ 1271.683100][ T4578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.689894][ T4578] _do_fork+0x257/0xfd0 [ 1271.694286][ T4578] ? fork_idle+0x1d0/0x1d0 [ 1271.698735][ T4578] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1271.705106][ T4578] ? lock_downgrade+0x880/0x880 [ 1271.710541][ T4578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1271.717374][ T4578] ? blkcg_exit_queue+0x30/0x30 [ 1271.723077][ T4578] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1271.728720][ T4578] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1271.734689][ T4578] ? do_syscall_64+0x26/0x610 [ 1271.739395][ T4578] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1271.746166][ T4578] ? do_syscall_64+0x26/0x610 [ 1271.751281][ T4578] __x64_sys_clone+0xbf/0x150 [ 1271.756269][ T4578] do_syscall_64+0x103/0x610 [ 1271.761185][ T4578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1271.767754][ T4578] RIP: 0033:0x45b5f9 [ 1271.771677][ T4578] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1271.792077][ T4578] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1271.800609][ T4578] RAX: ffffffffffffffda RBX: 00007fba1da18700 RCX: 000000000045b5f9 [ 1271.808797][ T4578] RDX: 00007fba1da189d0 RSI: 00007fba1da17db0 RDI: 00000000003d0f00 [ 1271.817367][ T4578] RBP: 0000000000a4fcb0 R08: 00007fba1da18700 R09: 00007fba1da18700 [ 1271.825782][ T4578] R10: 00007fba1da189d0 R11: 0000000000000202 R12: 0000000000000000 [ 1271.833780][ T4578] R13: 0000000000a4fb5f R14: 00007fba1da189c0 R15: 000000000073bf0c [ 1271.853504][ T4578] memory: usage 307192kB, limit 307200kB, failcnt 4434 [ 1271.863413][ T4578] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1271.878769][ T4578] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1271.891132][ T4578] Memory cgroup stats for /syz5: cache:56KB rss:180948KB rss_huge:116736KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:181040KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1271.920882][ T4578] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4566,uid=0 [ 1271.943475][ T4578] Memory cgroup out of memory: Killed process 4566 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 03:08:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffffff00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f4c000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:44 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0xffffffffffffffff, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xffffff7f00000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:45 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f60000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1272.233047][ T4601] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1272.370586][ T4601] CPU: 1 PID: 4601 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1272.379058][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.389528][ T4601] Call Trace: [ 1272.392945][ T4601] dump_stack+0x172/0x1f0 [ 1272.397631][ T4601] dump_header+0x10f/0xb6c [ 1272.402590][ T4601] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1272.409174][ T4601] ? ___ratelimit+0x60/0x595 [ 1272.414067][ T4601] ? do_raw_spin_unlock+0x57/0x270 [ 1272.419487][ T4601] oom_kill_process.cold+0x10/0x15 [ 1272.425400][ T4601] out_of_memory+0x79a/0x1280 [ 1272.430557][ T4601] ? lock_downgrade+0x880/0x880 [ 1272.435701][ T4601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.442245][ T4601] ? oom_killer_disable+0x280/0x280 [ 1272.447816][ T4601] ? find_held_lock+0x35/0x130 [ 1272.452718][ T4601] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1272.458741][ T4601] ? memcg_event_wake+0x230/0x230 [ 1272.464174][ T4601] ? do_raw_spin_unlock+0x57/0x270 [ 1272.469501][ T4601] ? _raw_spin_unlock+0x2d/0x50 [ 1272.474903][ T4601] try_charge+0x102c/0x15c0 [ 1272.479623][ T4601] ? find_held_lock+0x35/0x130 [ 1272.484580][ T4601] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1272.490436][ T4601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.496966][ T4601] ? kasan_check_read+0x11/0x20 [ 1272.501991][ T4601] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1272.507925][ T4601] mem_cgroup_try_charge+0x24d/0x5e0 [ 1272.513423][ T4601] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1272.519851][ T4601] wp_page_copy+0x408/0x1740 [ 1272.524748][ T4601] ? find_held_lock+0x35/0x130 [ 1272.529840][ T4601] ? pmd_pfn+0x1d0/0x1d0 [ 1272.534512][ T4601] ? lock_downgrade+0x880/0x880 [ 1272.539405][ T4601] ? swp_swapcount+0x540/0x540 [ 1272.544204][ T4601] ? kasan_check_read+0x11/0x20 [ 1272.549440][ T4601] ? do_raw_spin_unlock+0x57/0x270 [ 1272.554678][ T4601] do_wp_page+0x48e/0x1500 [ 1272.559403][ T4601] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1272.565243][ T4601] __handle_mm_fault+0x22e8/0x3ec0 [ 1272.570952][ T4601] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1272.576776][ T4601] ? find_held_lock+0x35/0x130 [ 1272.581971][ T4601] ? handle_mm_fault+0x322/0xb30 [ 1272.587127][ T4601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1272.593821][ T4601] ? kasan_check_read+0x11/0x20 [ 1272.598855][ T4601] handle_mm_fault+0x43f/0xb30 [ 1272.603774][ T4601] __do_page_fault+0x5ef/0xda0 [ 1272.608751][ T4601] do_page_fault+0x71/0x581 [ 1272.613574][ T4601] ? page_fault+0x8/0x30 [ 1272.618477][ T4601] page_fault+0x1e/0x30 [ 1272.622895][ T4601] RIP: 0033:0x42fdb6 [ 1272.627559][ T4601] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 36 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 ac 51 62 00 85 c0 0f 84 [ 1272.647808][ T4601] RSP: 002b:0000000000a4f9d0 EFLAGS: 00010206 [ 1272.654736][ T4601] RAX: 00000000000205b1 RBX: 0000000000713640 RCX: 0000000000000121 03:08:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f68000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:45 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:45 executing program 2: r0 = getpgrp(0xffffffffffffffff) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) capget(&(0x7f0000000100)={0x19980330, r0}, &(0x7f0000000140)) [ 1272.665107][ T4601] RDX: 0000000001578930 RSI: 0000000001578a50 RDI: 0000000000000000 [ 1272.674086][ T4601] RBP: 0000000000000121 R08: ffffffffffffffff R09: 0000000000000000 [ 1272.683066][ T4601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000713698 [ 1272.691478][ T4601] R13: 0000000000713698 R14: 0000000000000003 R15: 0000000000002710 03:08:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0xfffffffffffff000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f6c000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:45 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:45 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt(r1, 0xfffffffffffffff9, 0x3, &(0x7f0000000140)=""/6, &(0x7f0000000180)=0x6) flock(r0, 0xfffffffffffffffe) r2 = epoll_create1(0x0) dup2(r1, r2) chdir(&(0x7f0000000040)='./file0\x00') write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1', "19bcee1b6f7fc973e3b89aa817697ff24505e62ba3"}, 0x19) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000080)={0x400, {{0x2, 0x4e23, @remote}}}, 0x88) [ 1272.967273][ T4601] memory: usage 307200kB, limit 307200kB, failcnt 4467 [ 1272.991271][ T4601] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:08:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f74000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1273.013192][ T4601] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1273.036372][ T4601] Memory cgroup stats for /syz5: cache:56KB rss:180928KB rss_huge:116736KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:181064KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1273.113988][ T4601] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4583,uid=0 [ 1273.154918][ T4601] Memory cgroup out of memory: Killed process 4583 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 03:08:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:46 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:46 executing program 2: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa02, &(0x7f0000007ffc)={&(0x7f0000000000/0x3000)=nil, 0x3000}) 03:08:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f7a000002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:46 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x10000, 0x0) getpeername(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@mpls_getroute={0x68, 0x1a, 0x600, 0x70bd29, 0x25dfdbfd, {0x1c, 0x20, 0x0, 0x3, 0xfd, 0x2, 0x0, 0xa, 0x200}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0x60bf}, @RTA_DST={0x14, 0x1, [{0xffffffff, 0x2, 0x4, 0x101}, {0x5, 0x0, 0x7ff, 0x101}, {0xfffffffffffffadd, 0x3, 0x7fffffff}, {0x7fff, 0x3ff, 0x9, 0x400}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x100000000}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x8, 0x1, [{0x5, 0x0, 0x5, 0x6cb853ae}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x8}, @RTA_OIF={0x8, 0x4, r3}, @RTA_OIF={0x8, 0x4, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r5 = socket(0x3, 0x800, 0x7) getsockopt$sock_buf(r5, 0x1, 0x26, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) 03:08:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00030002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:46 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x101, 0x80000) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000001c0)={0x8}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) write$UHID_DESTROY(r3, &(0x7f0000000340), 0xb3b0339ef5c3166f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) eventfd(0x1) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = shmget$private(0x0, 0x2000, 0x78000030, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r5, 0xb) connect$l2tp(r4, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x200000, 0x0) ioctl$KVM_GET_API_VERSION(r6, 0xae00, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000300)={'ip6gre0\x00', @ifru_names='veth0_to_bond\x00'}}) dup(r2) 03:08:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00050002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00060002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1273.715683][ T4677] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1273.749700][ T4663] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1273.788734][ T4677] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1273.825565][ T4663] CPU: 1 PID: 4663 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1273.833462][ T4663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.837651][ T4677] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1273.843881][ T4663] Call Trace: [ 1273.843908][ T4663] dump_stack+0x172/0x1f0 [ 1273.843937][ T4663] dump_header+0x10f/0xb6c [ 1273.863674][ T4677] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1273.864320][ T4663] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1273.864342][ T4663] ? ___ratelimit+0x60/0x595 [ 1273.882631][ T4677] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1273.890206][ T4663] ? do_raw_spin_unlock+0x57/0x270 [ 1273.890226][ T4663] oom_kill_process.cold+0x10/0x15 [ 1273.890241][ T4663] out_of_memory+0x79a/0x1280 [ 1273.890257][ T4663] ? lock_downgrade+0x880/0x880 [ 1273.890271][ T4663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1273.890292][ T4663] ? oom_killer_disable+0x280/0x280 [ 1273.908558][ T4677] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1273.910748][ T4663] ? find_held_lock+0x35/0x130 [ 1273.910784][ T4663] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1273.939984][ T4663] ? memcg_event_wake+0x230/0x230 [ 1273.945236][ T4663] ? do_raw_spin_unlock+0x57/0x270 [ 1273.950381][ T4663] ? _raw_spin_unlock+0x2d/0x50 [ 1273.955603][ T4663] try_charge+0x102c/0x15c0 [ 1273.960338][ T4663] ? find_held_lock+0x35/0x130 [ 1273.965587][ T4663] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1273.971247][ T4663] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1273.976832][ T4663] ? find_held_lock+0x35/0x130 [ 1273.981910][ T4663] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1273.987766][ T4663] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1273.993482][ T4663] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1273.998833][ T4663] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1274.004743][ T4663] __memcg_kmem_charge+0x136/0x300 [ 1274.009899][ T4663] __alloc_pages_nodemask+0x437/0x7e0 [ 1274.015443][ T4663] ? free_transhuge_page+0x230/0x310 [ 1274.021061][ T4663] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1274.026938][ T4663] ? __put_compound_page+0x96/0xe0 [ 1274.032210][ T4663] ? put_page+0xe7/0x130 [ 1274.036623][ T4663] ? do_huge_pmd_anonymous_page+0x420/0x1730 [ 1274.042914][ T4663] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1274.049275][ T4663] alloc_pages_current+0x107/0x210 [ 1274.054605][ T4663] pte_alloc_one+0x1b/0x1a0 [ 1274.059405][ T4663] __pte_alloc+0x20/0x310 [ 1274.063776][ T4663] __handle_mm_fault+0x3391/0x3ec0 [ 1274.068929][ T4663] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1274.074680][ T4663] ? find_held_lock+0x35/0x130 [ 1274.079583][ T4663] ? handle_mm_fault+0x322/0xb30 [ 1274.084733][ T4663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1274.091028][ T4663] ? kasan_check_read+0x11/0x20 [ 1274.095996][ T4663] handle_mm_fault+0x43f/0xb30 [ 1274.101114][ T4663] __do_page_fault+0x5ef/0xda0 [ 1274.106040][ T4663] do_page_fault+0x71/0x581 [ 1274.110662][ T4663] ? page_fault+0x8/0x30 [ 1274.115089][ T4663] page_fault+0x1e/0x30 [ 1274.119616][ T4663] RIP: 0033:0x43ff21 [ 1274.123839][ T4663] Code: 8d 15 83 70 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1274.144700][ T4663] RSP: 002b:0000000000a4fbd8 EFLAGS: 00010202 [ 1274.150953][ T4663] RAX: 0000000020000000 RBX: 0000000000740060 RCX: 000000000000000a [ 1274.158952][ T4663] RDX: 000000000000000b RSI: 0000000000740080 RDI: 0000000020000000 [ 1274.166969][ T4663] RBP: 0000000000740068 R08: 00000000b334236b R09: 00000000b334236f [ 1274.175304][ T4663] R10: 0000000000a4fca0 R11: 0000000000000246 R12: fffffffffffffffe [ 1274.184324][ T4663] R13: 0000000000136ee3 R14: 0000000000136f10 R15: 000000000073bf0c [ 1274.337274][ T4663] memory: usage 307200kB, limit 307200kB, failcnt 4507 [ 1274.344527][ T4663] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1274.344537][ T4663] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1274.344545][ T4663] Memory cgroup stats for /syz5: cache:56KB rss:181024KB rss_huge:116736KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:181112KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1274.429562][ T4663] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=4645,uid=0 03:08:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:47 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00070002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'\x00\x00z1\x00'}, 0x45c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x801, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) [ 1274.476836][ T4663] Memory cgroup out of memory: Killed process 4645 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 03:08:47 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1274.551380][ T4707] __nla_parse: 6 callbacks suppressed [ 1274.551390][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1274.570369][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:47 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x200) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x80, 0x1, 0xffffffffffff7fff, 0x100000000, 0x5898537d, 0x80, 0x80000001, 0x8001, 0xa8, 0xdd, 0x5}, 0xb) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xe240, &(0x7f0000000000)="0adc1f123c1207009bd070") setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000340)={0x4a}, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000080)={{0x8, 0x2, 0x9, 0x1, 0x1, 0x3}, 0x3, 0x3, 0x1, 0x9, 0x4, "bf50e0b7820564ff452862f872fa9166788da78da5838c3710d02cac790b7f72ea5d8956cf8e6f2c73df3216d79ad1b8d63f7c8b1ecec11f881bbe115eae2ed8a6a13da2c766d58895d2d23b84316f82f07ebd0ce98875c9799209df976f14c39942b2b2ef391a272130ac3efde9d619aecb1eb26ff2a36d62116aa3d9f737d0"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@remote}, 0x14) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f00000002c0)=0x1f, 0x4) sched_yield() setsockopt$inet6_mreq(r2, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote}, 0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x10001}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={r3, 0x3}, &(0x7f0000000280)=0x8) 03:08:47 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@local, @in=@broadcast}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/161, 0xa1}], 0x1, 0x7ffffffffffff) 03:08:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000a0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:47 executing program 2: mknod(&(0x7f0000000040)='./bus\x00', 0x100c, 0x0) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) splice(r1, &(0x7f0000000080)=0xffffffffffffffff, r0, 0x0, 0x6, 0x0) 03:08:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:47 executing program 2: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000a00001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) r1 = add_key(&(0x7f0000000240)='/\x00g_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000280)="9d42949209f1ba7759f84a8ffeca9e77f1f70c0a1428434efa411150e9a7befc989301527caaf92ccfcbbb7baef91645e2283b8b7b6efc80caad99", 0x393, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) 03:08:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:48 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) close(r0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) inotify_init1(0x80000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmmsg$unix(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) [ 1275.257219][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000e0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:48 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x30b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:48 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3ff, 0x8000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x60000, 0x0) renameat2(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00', 0x2) r4 = dup2(r1, r0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xe073, @empty, 0x8000}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e21, 0xfffffffffffffff8, @local, 0x7}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f00000001c0)=0x84) 03:08:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000f0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:48 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0xf000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1275.545088][ T4771] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1275.570192][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:48 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00200002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00480002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:48 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f004c0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:49 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1276.411179][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:08:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1276.481366][ T4829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:49 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1276.550887][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:49 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:49 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00600002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x2c) 03:08:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00680002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:50 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03'}, 0x2c) 03:08:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04'}, 0x2c) [ 1277.297319][ T4865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1277.304774][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:50 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f006c0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05'}, 0x2c) 03:08:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00740002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:50 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x24a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1277.750400][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1277.833415][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1277.841432][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1277.851776][ T7803] Call Trace: [ 1277.855352][ T7803] dump_stack+0x172/0x1f0 [ 1277.859723][ T7803] dump_header+0x10f/0xb6c [ 1277.864265][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1277.870410][ T7803] ? ___ratelimit+0x60/0x595 [ 1277.875143][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1277.880305][ T7803] oom_kill_process.cold+0x10/0x15 [ 1277.885985][ T7803] out_of_memory+0x79a/0x1280 [ 1277.890971][ T7803] ? lock_downgrade+0x880/0x880 [ 1277.895883][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1277.902606][ T7803] ? oom_killer_disable+0x280/0x280 [ 1277.908108][ T7803] ? find_held_lock+0x35/0x130 [ 1277.913258][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1277.918968][ T7803] ? memcg_event_wake+0x230/0x230 [ 1277.924092][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1277.929237][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1277.934309][ T7803] try_charge+0x102c/0x15c0 [ 1277.938838][ T7803] ? find_held_lock+0x35/0x130 [ 1277.943632][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1277.949293][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1277.955045][ T7803] ? find_held_lock+0x35/0x130 [ 1277.959922][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1277.965608][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1277.972096][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1277.977845][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1277.983672][ T7803] __memcg_kmem_charge+0x136/0x300 [ 1277.988969][ T7803] __alloc_pages_nodemask+0x437/0x7e0 [ 1277.994496][ T7803] ? find_held_lock+0x35/0x130 [ 1277.999642][ T7803] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1278.007111][ T7803] ? kasan_check_write+0x14/0x20 [ 1278.012265][ T7803] ? lock_downgrade+0x880/0x880 [ 1278.017375][ T7803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1278.024104][ T7803] alloc_pages_current+0x107/0x210 [ 1278.029632][ T7803] pte_alloc_one+0x1b/0x1a0 [ 1278.034263][ T7803] __pte_alloc+0x20/0x310 [ 1278.038728][ T7803] copy_page_range+0x1529/0x1f90 [ 1278.044073][ T7803] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1278.050088][ T7803] ? pmd_alloc+0x180/0x180 [ 1278.054740][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1278.059474][ T7803] ? __vma_link_rb+0x279/0x370 [ 1278.064641][ T7803] copy_process.part.0+0x568b/0x7980 [ 1278.070165][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1278.075309][ T7803] _do_fork+0x257/0xfd0 [ 1278.079843][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1278.084614][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1278.090328][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1278.096038][ T7803] ? do_syscall_64+0x26/0x610 [ 1278.101075][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1278.107371][ T7803] ? do_syscall_64+0x26/0x610 [ 1278.112795][ T7803] __x64_sys_clone+0xbf/0x150 [ 1278.118071][ T7803] do_syscall_64+0x103/0x610 [ 1278.122850][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1278.128895][ T7803] RIP: 0033:0x4571fa [ 1278.132830][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1278.153355][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1278.162078][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1278.170587][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1278.179474][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1278.187605][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1278.195669][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1278.340748][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 4542 [ 1278.353923][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1278.362149][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:08:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:51 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000004c0)) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) unshare(0x400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x4, 0x80000001, 0x1000}], 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:08:51 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f007a0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1278.376329][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:179672KB rss_huge:114688KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:179776KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1278.405173][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18787,uid=0 [ 1278.467877][ T7803] Memory cgroup out of memory: Killed process 18787 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:08:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:51 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06'}, 0x2c) 03:08:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000003031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'}, 0x2c) 03:08:52 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1279.206247][ T4943] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1279.244721][ T4945] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000004031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1279.272097][ T4943] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:08:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000a031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:52 executing program 2: 03:08:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000005a031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}, 0x2c) [ 1279.708716][ T4960] __nla_parse: 6 callbacks suppressed [ 1279.708754][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1279.740216][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00020002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:52 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10'}, 0x2c) 03:08:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00030002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:53 executing program 2: 03:08:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x3300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00040002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:53 executing program 2: 03:08:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00050002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:53 executing program 2: 03:08:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:53 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00060002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1280.706469][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1280.728100][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:53 executing program 2: 03:08:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="e2bcb26e20", 0x5) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/104, 0x7}], 0x1) [ 1280.923828][ T5046] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1280.955288][ T5046] CPU: 1 PID: 5046 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1280.963157][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.973227][ T5046] Call Trace: [ 1280.976542][ T5046] dump_stack+0x172/0x1f0 [ 1280.980899][ T5046] dump_header+0x10f/0xb6c [ 1280.985354][ T5046] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1280.991176][ T5046] ? ___ratelimit+0x60/0x595 [ 1280.995777][ T5046] ? do_raw_spin_unlock+0x57/0x270 [ 1281.000933][ T5046] oom_kill_process.cold+0x10/0x15 [ 1281.006159][ T5046] out_of_memory+0x79a/0x1280 [ 1281.010970][ T5046] ? lock_downgrade+0x880/0x880 [ 1281.015847][ T5046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.022108][ T5046] ? oom_killer_disable+0x280/0x280 [ 1281.027344][ T5046] ? find_held_lock+0x35/0x130 [ 1281.032141][ T5046] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1281.037786][ T5046] ? memcg_event_wake+0x230/0x230 [ 1281.042824][ T5046] ? do_raw_spin_unlock+0x57/0x270 [ 1281.047941][ T5046] ? _raw_spin_unlock+0x2d/0x50 [ 1281.052802][ T5046] try_charge+0x102c/0x15c0 [ 1281.057313][ T5046] ? find_held_lock+0x35/0x130 [ 1281.062093][ T5046] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1281.067656][ T5046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.073929][ T5046] ? kasan_check_read+0x11/0x20 [ 1281.078809][ T5046] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1281.084394][ T5046] mem_cgroup_try_charge+0x24d/0x5e0 [ 1281.089701][ T5046] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1281.095365][ T5046] __handle_mm_fault+0x1e1f/0x3ec0 [ 1281.100496][ T5046] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1281.106058][ T5046] ? find_held_lock+0x35/0x130 [ 1281.110848][ T5046] ? handle_mm_fault+0x322/0xb30 [ 1281.115835][ T5046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.122101][ T5046] ? kasan_check_read+0x11/0x20 [ 1281.126972][ T5046] handle_mm_fault+0x43f/0xb30 [ 1281.131763][ T5046] __do_page_fault+0x5ef/0xda0 [ 1281.136568][ T5046] do_page_fault+0x71/0x581 [ 1281.141079][ T5046] ? page_fault+0x8/0x30 [ 1281.145327][ T5046] page_fault+0x1e/0x30 [ 1281.149506][ T5046] RIP: 0033:0x41063f [ 1281.153428][ T5046] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1281.173269][ T5046] RSP: 002b:0000000000a4faf0 EFLAGS: 00010206 [ 1281.179350][ T5046] RAX: 00007fba1d9f8000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 1281.187330][ T5046] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1281.195308][ T5046] RBP: 0000000000a4fbd0 R08: ffffffffffffffff R09: 0000000000000000 [ 1281.203289][ T5046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 1281.211277][ T5046] R13: 00007fba1da18700 R14: 0000000000000003 R15: 000000000073bf0c [ 1281.258243][ T5046] memory: usage 307200kB, limit 307200kB, failcnt 4582 [ 1281.265893][ T5046] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1281.277794][ T5046] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1281.285349][ T5046] Memory cgroup stats for /syz5: cache:56KB rss:178240KB rss_huge:112640KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:178448KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1281.309102][ T5046] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19386,uid=0 [ 1281.343895][ T5046] Memory cgroup out of memory: Killed process 19386 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:08:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00070002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:54 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1281.611147][ T5072] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 03:08:54 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x84000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 1281.665822][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1281.678283][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1281.715859][ T5072] CPU: 1 PID: 5072 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1281.723891][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1281.733954][ T5072] Call Trace: [ 1281.737267][ T5072] dump_stack+0x172/0x1f0 [ 1281.741621][ T5072] dump_header+0x10f/0xb6c [ 1281.746059][ T5072] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1281.751886][ T5072] ? ___ratelimit+0x60/0x595 [ 1281.756493][ T5072] ? do_raw_spin_unlock+0x57/0x270 [ 1281.761627][ T5072] oom_kill_process.cold+0x10/0x15 [ 1281.766768][ T5072] out_of_memory+0x79a/0x1280 [ 1281.771470][ T5072] ? lock_downgrade+0x880/0x880 [ 1281.776821][ T5072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.783082][ T5072] ? oom_killer_disable+0x280/0x280 [ 1281.788294][ T5072] ? find_held_lock+0x35/0x130 [ 1281.793088][ T5072] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1281.798653][ T5072] ? memcg_event_wake+0x230/0x230 [ 1281.803704][ T5072] ? do_raw_spin_unlock+0x57/0x270 [ 1281.808837][ T5072] ? _raw_spin_unlock+0x2d/0x50 [ 1281.813728][ T5072] try_charge+0x102c/0x15c0 [ 1281.818351][ T5072] ? find_held_lock+0x35/0x130 [ 1281.823142][ T5072] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1281.828714][ T5072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.834985][ T5072] ? kasan_check_read+0x11/0x20 [ 1281.839860][ T5072] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1281.845430][ T5072] mem_cgroup_try_charge+0x24d/0x5e0 [ 1281.850756][ T5072] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1281.856414][ T5072] wp_page_copy+0x408/0x1740 [ 1281.861026][ T5072] ? find_held_lock+0x35/0x130 [ 1281.865818][ T5072] ? pmd_pfn+0x1d0/0x1d0 [ 1281.870106][ T5072] ? lock_downgrade+0x880/0x880 [ 1281.875058][ T5072] ? swp_swapcount+0x540/0x540 [ 1281.879847][ T5072] ? kasan_check_read+0x11/0x20 [ 1281.884718][ T5072] ? do_raw_spin_unlock+0x57/0x270 [ 1281.889842][ T5072] do_wp_page+0x48e/0x1500 [ 1281.894280][ T5072] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1281.899674][ T5072] __handle_mm_fault+0x22e8/0x3ec0 [ 1281.904814][ T5072] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1281.910397][ T5072] ? find_held_lock+0x35/0x130 [ 1281.915204][ T5072] ? handle_mm_fault+0x322/0xb30 [ 1281.920165][ T5072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1281.926430][ T5072] ? kasan_check_read+0x11/0x20 [ 1281.931334][ T5072] handle_mm_fault+0x43f/0xb30 [ 1281.936204][ T5072] __do_page_fault+0x5ef/0xda0 [ 1281.941034][ T5072] do_page_fault+0x71/0x581 [ 1281.945556][ T5072] ? page_fault+0x8/0x30 [ 1281.949810][ T5072] page_fault+0x1e/0x30 [ 1281.953974][ T5072] RIP: 0033:0x45726a [ 1281.957898][ T5072] Code: 00 00 0f 31 48 c1 e2 20 89 c0 48 09 c2 64 48 89 14 25 20 06 00 00 b8 a0 37 41 00 48 89 15 4e f5 5f 00 48 85 c0 74 08 4c 89 cf 31 c5 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db 48 c7 05 0a cd [ 1281.977514][ T5072] RSP: 002b:0000000000a4fd30 EFLAGS: 00010206 [ 1281.983600][ T5072] RAX: 00000000004137a0 RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1281.991601][ T5072] RDX: 000002b0cd420ca1 RSI: 0000000000000000 RDI: 0000000001577940 [ 1281.999594][ T5072] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1282.007594][ T5072] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 03:08:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000a0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1282.015588][ T5072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 03:08:55 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0x101}, 0x0) 03:08:55 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000e0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:55 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000f0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00480002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1282.365225][ T5072] memory: usage 307200kB, limit 307200kB, failcnt 4645 [ 1282.376991][ T5072] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1282.384886][ T5072] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1282.392527][ T5072] Memory cgroup stats for /syz5: cache:56KB rss:178304KB rss_huge:112640KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:178436KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1282.418407][ T5072] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5055,uid=0 [ 1282.485995][ T5072] Memory cgroup out of memory: Killed process 5055 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1282.529752][ T1043] oom_reaper: reaped process 5055 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 03:08:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f004c0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:55 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1282.659379][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1282.718260][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000100)) 03:08:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00600002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:56 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1283.417813][ T5160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1283.427833][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:08:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:56 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00680002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, r0) 03:08:56 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000004c0)) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, 0x0) unshare(0x400) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) semtimedop(0x0, &(0x7f0000000400)=[{0x4, 0x80000001}], 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 03:08:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f006c0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00740002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:57 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f007a0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:57 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x33000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000302031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:57 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000502031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:57 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000602031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1285.097019][ T5242] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1285.109300][ T5242] CPU: 0 PID: 5242 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1285.117130][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.127192][ T5242] Call Trace: [ 1285.130520][ T5242] dump_stack+0x172/0x1f0 [ 1285.134868][ T5242] dump_header+0x10f/0xb6c [ 1285.139298][ T5242] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1285.145110][ T5242] ? ___ratelimit+0x60/0x595 [ 1285.149714][ T5242] ? do_raw_spin_unlock+0x57/0x270 [ 1285.154839][ T5242] oom_kill_process.cold+0x10/0x15 [ 1285.159998][ T5242] out_of_memory+0x79a/0x1280 [ 1285.164765][ T5242] ? lock_downgrade+0x880/0x880 [ 1285.169624][ T5242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.175887][ T5242] ? oom_killer_disable+0x280/0x280 [ 1285.181092][ T5242] ? find_held_lock+0x35/0x130 [ 1285.181118][ T5242] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1285.181132][ T5242] ? memcg_event_wake+0x230/0x230 [ 1285.181153][ T5242] ? do_raw_spin_unlock+0x57/0x270 [ 1285.181170][ T5242] ? _raw_spin_unlock+0x2d/0x50 [ 1285.181187][ T5242] try_charge+0x102c/0x15c0 [ 1285.181206][ T5242] ? find_held_lock+0x35/0x130 [ 1285.191516][ T5242] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1285.221261][ T5242] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1285.226823][ T5242] ? find_held_lock+0x35/0x130 [ 1285.231604][ T5242] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1285.237179][ T5242] __memcg_kmem_charge_memcg+0x7c/0x130 03:08:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1285.242740][ T5242] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1285.247948][ T5242] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1285.253517][ T5242] __memcg_kmem_charge+0x136/0x300 [ 1285.258641][ T5242] __alloc_pages_nodemask+0x437/0x7e0 [ 1285.264034][ T5242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.270299][ T5242] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1285.276044][ T5242] ? copy_process.part.0+0x1d08/0x7980 [ 1285.276067][ T5242] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1285.276083][ T5242] ? trace_hardirqs_on+0x67/0x230 [ 1285.276099][ T5242] ? kasan_check_read+0x11/0x20 [ 1285.276119][ T5242] copy_process.part.0+0x3e0/0x7980 [ 1285.276138][ T5242] ? psi_memstall_leave+0x11c/0x180 [ 1285.296732][ T5242] ? sched_clock+0x2e/0x50 [ 1285.296748][ T5242] ? psi_memstall_leave+0x12e/0x180 [ 1285.296764][ T5242] ? find_held_lock+0x35/0x130 [ 1285.296776][ T5242] ? psi_memstall_leave+0x12e/0x180 [ 1285.296803][ T5242] ? __cleanup_sighand+0x60/0x60 [ 1285.296816][ T5242] ? __lock_acquire+0x548/0x3fb0 [ 1285.296830][ T5242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.296863][ T5242] _do_fork+0x257/0xfd0 [ 1285.321596][ T5242] ? fork_idle+0x1d0/0x1d0 [ 1285.321616][ T5242] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1285.321630][ T5242] ? lock_downgrade+0x880/0x880 [ 1285.321644][ T5242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1285.321667][ T5242] ? blkcg_exit_queue+0x30/0x30 [ 1285.337783][ T5263] __nla_parse: 4 callbacks suppressed [ 1285.337793][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1285.342962][ T5242] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1285.342979][ T5242] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1285.342994][ T5242] ? do_syscall_64+0x26/0x610 [ 1285.343018][ T5242] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1285.343031][ T5242] ? do_syscall_64+0x26/0x610 [ 1285.343057][ T5242] __x64_sys_clone+0xbf/0x150 [ 1285.343078][ T5242] do_syscall_64+0x103/0x610 [ 1285.357721][ T5242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1285.357734][ T5242] RIP: 0033:0x45b5f9 [ 1285.357749][ T5242] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1285.357757][ T5242] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1285.357769][ T5242] RAX: ffffffffffffffda RBX: 00007fba1da18700 RCX: 000000000045b5f9 [ 1285.357777][ T5242] RDX: 00007fba1da189d0 RSI: 00007fba1da17db0 RDI: 00000000003d0f00 [ 1285.357785][ T5242] RBP: 0000000000a4fcb0 R08: 00007fba1da18700 R09: 00007fba1da18700 [ 1285.357793][ T5242] R10: 00007fba1da189d0 R11: 0000000000000202 R12: 0000000000000000 [ 1285.357801][ T5242] R13: 0000000000a4fb5f R14: 00007fba1da189c0 R15: 000000000073bf0c 03:08:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f006c0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000702031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1285.563638][ T5242] memory: usage 307176kB, limit 307200kB, failcnt 4689 [ 1285.592902][ T5242] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1285.621610][ T5242] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1285.644774][ T5242] Memory cgroup stats for /syz5: cache:56KB rss:176988KB rss_huge:110592KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:177100KB inactive_file:0KB active_file:0KB unevictable:0KB 03:08:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000a02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:58 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x8dffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1285.782183][ T5242] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19650,uid=0 [ 1285.863853][ T5242] Memory cgroup out of memory: Killed process 19650 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:08:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000e02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:58 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xeaffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1285.955615][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:08:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f006c0002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:59 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000f02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1286.273826][ T5292] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1286.289524][ T5292] CPU: 1 PID: 5292 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1286.297883][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.307947][ T5292] Call Trace: [ 1286.311257][ T5292] dump_stack+0x172/0x1f0 [ 1286.315630][ T5292] dump_header+0x10f/0xb6c [ 1286.315648][ T5292] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1286.315672][ T5292] ? ___ratelimit+0x60/0x595 [ 1286.325918][ T5292] ? do_raw_spin_unlock+0x57/0x270 [ 1286.325938][ T5292] oom_kill_process.cold+0x10/0x15 [ 1286.325953][ T5292] out_of_memory+0x79a/0x1280 [ 1286.325967][ T5292] ? lock_downgrade+0x880/0x880 [ 1286.325980][ T5292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1286.325994][ T5292] ? oom_killer_disable+0x280/0x280 [ 1286.326004][ T5292] ? find_held_lock+0x35/0x130 [ 1286.326036][ T5292] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1286.326059][ T5292] ? memcg_event_wake+0x230/0x230 [ 1286.362077][ T5292] ? do_raw_spin_unlock+0x57/0x270 [ 1286.382728][ T5292] ? _raw_spin_unlock+0x2d/0x50 [ 1286.382756][ T5292] try_charge+0x102c/0x15c0 [ 1286.392118][ T5292] ? find_held_lock+0x35/0x130 [ 1286.396907][ T5292] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1286.402480][ T5292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1286.408748][ T5292] ? kasan_check_read+0x11/0x20 [ 1286.413650][ T5292] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1286.419226][ T5292] mem_cgroup_try_charge+0x24d/0x5e0 [ 1286.424550][ T5292] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1286.430226][ T5292] wp_page_copy+0x408/0x1740 [ 1286.434832][ T5292] ? find_held_lock+0x35/0x130 [ 1286.439625][ T5292] ? pmd_pfn+0x1d0/0x1d0 [ 1286.443902][ T5292] ? lock_downgrade+0x880/0x880 [ 1286.448771][ T5292] ? swp_swapcount+0x540/0x540 [ 1286.454093][ T5292] ? kasan_check_read+0x11/0x20 [ 1286.459239][ T5292] ? do_raw_spin_unlock+0x57/0x270 [ 1286.464407][ T5292] do_wp_page+0x48e/0x1500 [ 1286.468867][ T5292] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1286.474800][ T5292] __handle_mm_fault+0x22e8/0x3ec0 [ 1286.479965][ T5292] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1286.485563][ T5292] ? find_held_lock+0x35/0x130 [ 1286.490341][ T5292] ? handle_mm_fault+0x322/0xb30 [ 1286.495313][ T5292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1286.501588][ T5292] ? kasan_check_read+0x11/0x20 [ 1286.506471][ T5292] handle_mm_fault+0x43f/0xb30 [ 1286.511254][ T5292] __do_page_fault+0x5ef/0xda0 [ 1286.516054][ T5292] do_page_fault+0x71/0x581 [ 1286.520608][ T5292] ? page_fault+0x8/0x30 [ 1286.524870][ T5292] page_fault+0x1e/0x30 [ 1286.529044][ T5292] RIP: 0033:0x40ee58 [ 1286.532958][ T5292] Code: 48 8b 05 63 40 30 00 48 89 08 48 8b 15 61 40 30 00 48 89 42 08 48 8b 05 46 40 30 00 48 89 05 4f 40 30 00 49 8d 81 c0 02 00 00 <48> 89 05 51 16 64 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 1286.552567][ T5292] RSP: 002b:0000000000a4fd28 EFLAGS: 00010246 [ 1286.558621][ T5292] RAX: 0000000001577c00 RBX: 0000000000a4fd30 RCX: 0000000000712ea0 [ 1286.566597][ T5292] RDX: 000000000040ec90 RSI: 0000000000712e90 RDI: 0000000001577c20 03:08:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:08:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00002002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:08:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xf3, 0x3) ioctl(r0, 0x3, &(0x7f0000000280)="0abad07000000000000000") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x6, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x7) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000380)=0xbc6, &(0x7f00000003c0)=0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x200000200}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044080}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 03:08:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:08:59 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xffffff8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1286.574576][ T5292] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1286.582576][ T5292] R10: 0000000001577c10 R11: 0000000000000202 R12: 0000000000000001 [ 1286.590544][ T5292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1286.609724][ T5292] memory: usage 307200kB, limit 307200kB, failcnt 4729 [ 1286.634334][ T5314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1286.651996][ T5292] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1286.665611][ T5292] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:08:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00004802031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1286.730331][ T5292] Memory cgroup stats for /syz5: cache:56KB rss:176976KB rss_huge:110592KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:177100KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1286.768243][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1286.774466][ T5292] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5278,uid=0 [ 1286.877239][ T5292] Memory cgroup out of memory: Killed process 5278 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 03:08:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:08:59 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xffffffea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:08:59 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) close(0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0]}) getsockopt$inet6_mreq(r1, 0x29, 0x686c66a1a7590fdb, 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) getdents(r1, 0x0, 0x496) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) r4 = dup3(r3, r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$TIOCGPTPEER(r4, 0x5441, 0xeb) 03:08:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00004c02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1287.059466][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1287.095261][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1287.103113][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.113182][ T7803] Call Trace: [ 1287.116495][ T7803] dump_stack+0x172/0x1f0 [ 1287.120854][ T7803] dump_header+0x10f/0xb6c [ 1287.125315][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1287.131157][ T7803] ? ___ratelimit+0x60/0x595 [ 1287.135764][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1287.140888][ T7803] oom_kill_process.cold+0x10/0x15 [ 1287.146006][ T7803] out_of_memory+0x79a/0x1280 [ 1287.150699][ T7803] ? lock_downgrade+0x880/0x880 [ 1287.155567][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1287.161823][ T7803] ? oom_killer_disable+0x280/0x280 [ 1287.167043][ T7803] ? find_held_lock+0x35/0x130 [ 1287.171837][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1287.177521][ T7803] ? memcg_event_wake+0x230/0x230 [ 1287.182660][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1287.187778][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1287.192722][ T7803] try_charge+0x102c/0x15c0 [ 1287.197223][ T7803] ? find_held_lock+0x35/0x130 [ 1287.202006][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1287.207596][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1287.214039][ T7803] ? kasan_check_read+0x11/0x20 [ 1287.218944][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1287.224514][ T7803] mem_cgroup_try_charge+0x24d/0x5e0 [ 1287.229868][ T7803] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1287.235518][ T7803] wp_page_copy+0x408/0x1740 [ 1287.240208][ T7803] ? find_held_lock+0x35/0x130 [ 1287.244992][ T7803] ? pmd_pfn+0x1d0/0x1d0 [ 1287.249957][ T7803] ? lock_downgrade+0x880/0x880 [ 1287.255283][ T7803] ? swp_swapcount+0x540/0x540 [ 1287.260254][ T7803] ? kasan_check_read+0x11/0x20 [ 1287.265142][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1287.270296][ T7803] do_wp_page+0x48e/0x1500 [ 1287.274742][ T7803] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1287.280144][ T7803] __handle_mm_fault+0x22e8/0x3ec0 [ 1287.285287][ T7803] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1287.290843][ T7803] ? find_held_lock+0x35/0x130 [ 1287.295617][ T7803] ? handle_mm_fault+0x322/0xb30 [ 1287.300616][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1287.306893][ T7803] ? kasan_check_read+0x11/0x20 [ 1287.311767][ T7803] handle_mm_fault+0x43f/0xb30 [ 1287.316550][ T7803] __do_page_fault+0x5ef/0xda0 [ 1287.321358][ T7803] do_page_fault+0x71/0x581 [ 1287.325883][ T7803] ? page_fault+0x8/0x30 [ 1287.330153][ T7803] page_fault+0x1e/0x30 [ 1287.334321][ T7803] RIP: 0033:0x45735a [ 1287.338239][ T7803] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba [ 1287.357852][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00010246 [ 1287.363933][ T7803] RAX: 0000000000000000 RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1287.371927][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a54fc8 [ 1287.380198][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1287.388180][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 00000000000000ca [ 1287.396156][ T7803] R13: 0000000000002360 R14: 0000000000000000 R15: 0000000000a4fdc0 03:09:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00006002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:00 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1287.553342][ T7803] memory: usage 307196kB, limit 307200kB, failcnt 4753 [ 1287.569328][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:09:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00006802031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1287.600922][ T5356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1287.620027][ T5358] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1287.621414][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1287.684584][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:176988KB rss_huge:110592KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:177084KB inactive_file:0KB active_file:0KB unevictable:0KB 03:09:00 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00006c02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1287.755180][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5333,uid=0 03:09:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1287.823904][ T7803] Memory cgroup out of memory: Killed process 5333 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB [ 1287.903897][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1287.978901][ T5339] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1287.992171][ T5339] CPU: 0 PID: 5339 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1287.999988][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.010089][ T5339] Call Trace: [ 1288.013399][ T5339] dump_stack+0x172/0x1f0 [ 1288.013420][ T5339] dump_header+0x10f/0xb6c [ 1288.013436][ T5339] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1288.013456][ T5339] ? ___ratelimit+0x60/0x595 [ 1288.022194][ T5339] ? do_raw_spin_unlock+0x57/0x270 [ 1288.022214][ T5339] oom_kill_process.cold+0x10/0x15 [ 1288.022230][ T5339] out_of_memory+0x79a/0x1280 [ 1288.022250][ T5339] ? oom_killer_disable+0x280/0x280 [ 1288.022262][ T5339] ? find_held_lock+0x35/0x130 [ 1288.022285][ T5339] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1288.032693][ T5339] ? memcg_event_wake+0x230/0x230 [ 1288.032716][ T5339] ? do_raw_spin_unlock+0x57/0x270 [ 1288.032730][ T5339] ? _raw_spin_unlock+0x2d/0x50 [ 1288.032746][ T5339] try_charge+0xa87/0x15c0 [ 1288.032759][ T5339] ? find_held_lock+0x35/0x130 [ 1288.032780][ T5339] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1288.043006][ T5339] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1288.043032][ T5339] ? find_held_lock+0x35/0x130 [ 1288.043046][ T5339] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1288.043077][ T5339] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1288.043103][ T5339] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1288.119432][ T5339] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1288.124965][ T5339] __memcg_kmem_charge+0x136/0x300 [ 1288.130066][ T5339] __alloc_pages_nodemask+0x437/0x7e0 [ 1288.135464][ T5339] ? find_held_lock+0x35/0x130 [ 1288.140223][ T5339] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1288.145927][ T5339] ? sched_clock+0x2e/0x50 [ 1288.150323][ T5339] ? find_held_lock+0x35/0x130 [ 1288.155108][ T5339] ? psi_memstall_leave+0x12e/0x180 [ 1288.160305][ T5339] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1288.166531][ T5339] alloc_pages_current+0x107/0x210 [ 1288.171634][ T5339] pte_alloc_one+0x1b/0x1a0 [ 1288.176137][ T5339] __handle_mm_fault+0x3491/0x3ec0 [ 1288.181232][ T5339] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1288.186770][ T5339] ? find_held_lock+0x35/0x130 [ 1288.191548][ T5339] ? handle_mm_fault+0x322/0xb30 [ 1288.196472][ T5339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.202702][ T5339] ? kasan_check_read+0x11/0x20 [ 1288.207536][ T5339] handle_mm_fault+0x43f/0xb30 [ 1288.212292][ T5339] __do_page_fault+0x5ef/0xda0 [ 1288.217070][ T5339] do_page_fault+0x71/0x581 [ 1288.221575][ T5339] ? page_fault+0x8/0x30 [ 1288.225824][ T5339] page_fault+0x1e/0x30 [ 1288.229969][ T5339] RIP: 0033:0x4571fa [ 1288.233862][ T5339] Code: Bad RIP value. [ 1288.237933][ T5339] RSP: 002b:0000000000a4fd30 EFLAGS: 00010246 [ 1288.243981][ T5339] RAX: 0000000000000000 RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1288.251963][ T5339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1288.259924][ T5339] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1288.267885][ T5339] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1288.275840][ T5339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1288.284745][ T5339] memory: usage 305008kB, limit 307200kB, failcnt 4753 [ 1288.291677][ T5339] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1288.299198][ T5339] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1288.306117][ T5339] Memory cgroup stats for /syz5: cache:56KB rss:174908KB rss_huge:108544KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:174928KB inactive_file:0KB active_file:0KB unevictable:0KB 03:09:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:01 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00007402031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1288.328090][ T5339] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19918,uid=0 [ 1288.343567][ T5339] Memory cgroup out of memory: Killed process 19918 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB [ 1288.421265][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1288.448763][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1288.451964][ T5399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:01 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:01 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:01 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00007a02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000202031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:01 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1288.758470][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1288.818321][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1288.826173][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.836259][ T7803] Call Trace: [ 1288.839569][ T7803] dump_stack+0x172/0x1f0 [ 1288.843905][ T7803] dump_header+0x10f/0xb6c [ 1288.848335][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1288.854157][ T7803] ? ___ratelimit+0x60/0x595 [ 1288.858758][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1288.863891][ T7803] oom_kill_process.cold+0x10/0x15 [ 1288.869031][ T7803] out_of_memory+0x79a/0x1280 [ 1288.873733][ T7803] ? lock_downgrade+0x880/0x880 [ 1288.878603][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.884861][ T7803] ? oom_killer_disable+0x280/0x280 [ 1288.890061][ T7803] ? find_held_lock+0x35/0x130 [ 1288.894837][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1288.900402][ T7803] ? memcg_event_wake+0x230/0x230 [ 1288.905469][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1288.910602][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1288.915464][ T7803] try_charge+0x102c/0x15c0 [ 1288.919980][ T7803] ? find_held_lock+0x35/0x130 [ 1288.924797][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1288.930363][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1288.935919][ T7803] ? find_held_lock+0x35/0x130 [ 1288.940704][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1288.946269][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1288.951846][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1288.957073][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1288.962820][ T7803] __memcg_kmem_charge+0x136/0x300 [ 1288.968154][ T7803] __alloc_pages_nodemask+0x437/0x7e0 [ 1288.973586][ T7803] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1288.979334][ T7803] ? copy_page_range+0x125a/0x1f90 [ 1288.984469][ T7803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1288.990724][ T7803] alloc_pages_current+0x107/0x210 [ 1288.995902][ T7803] pte_alloc_one+0x1b/0x1a0 [ 1289.000421][ T7803] __pte_alloc+0x20/0x310 [ 1289.004774][ T7803] copy_page_range+0x1529/0x1f90 [ 1289.009992][ T7803] ? find_held_lock+0x35/0x130 [ 1289.014890][ T7803] ? pmd_alloc+0x180/0x180 [ 1289.019325][ T7803] ? __rb_insert_augmented+0x231/0xdf0 [ 1289.024896][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1289.029607][ T7803] ? __vma_link_rb+0x279/0x370 [ 1289.034410][ T7803] copy_process.part.0+0x568b/0x7980 [ 1289.039730][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1289.044689][ T7803] _do_fork+0x257/0xfd0 [ 1289.048858][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1289.053314][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1289.058791][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1289.064273][ T7803] ? do_syscall_64+0x26/0x610 [ 1289.068960][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1289.075049][ T7803] ? do_syscall_64+0x26/0x610 [ 1289.079778][ T7803] __x64_sys_clone+0xbf/0x150 [ 1289.084470][ T7803] do_syscall_64+0x103/0x610 [ 1289.089082][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1289.094977][ T7803] RIP: 0033:0x4571fa [ 1289.098879][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1289.118504][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1289.126927][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1289.134925][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1289.142903][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1289.150885][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1289.158877][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 03:09:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000302031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:02 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1289.342119][ T7803] memory: usage 307176kB, limit 307200kB, failcnt 4766 03:09:02 executing program 2: r0 = socket(0x10, 0x80807, 0x7) time(&(0x7f0000000040)) r1 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000300)={0x6, 0x100000001}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f00000000c0)=""/170) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000280)) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002c000100000000000000317addae2268535e8e95d5000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000800050000000000"], 0x2c}}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)=0x0) msgget$private(0x0, 0x1) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x3, 0x9972, 0x101, 0x4, 0x0, 0x6, 0x90000, 0x8, 0x32, 0x4, 0x80, 0x7f, 0xffffffffffffffe1, 0x2, 0x2, 0x1, 0x7, 0x3, 0x5, 0x200, 0x10000, 0x6, 0x9, 0x1, 0x81, 0x300000000000, 0xfffffffffffffff9, 0x3, 0x81, 0x0, 0x6, 0x4, 0x80000001, 0x7, 0x5428, 0x9, 0x0, 0xe24, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x2000, 0x718, 0x80000001, 0x4, 0x2, 0x3f, 0x1000}, r3, 0x5, 0xffffffffffffffff, 0x8) 03:09:02 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000402031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:02 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000140)={0x6, 0x6}) recvmmsg(r0, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x2100) r3 = getpid() ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000100)=0x8) write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) 03:09:02 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x3300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1289.610333][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1289.628836][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1289.678986][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:177008KB rss_huge:110592KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:177092KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1289.738844][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5389,uid=0 03:09:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf'}, 0x2c) 03:09:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000502031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:02 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x13000, 0x78000000, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000ff3000/0x3000)=nil, 0x0) shmdt(r2) r3 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x77) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x703d}}}, 0xb8}}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) tgkill(0x0, 0x0, 0x0) [ 1289.789983][ T7803] Memory cgroup out of memory: Killed process 5389 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB [ 1289.815155][ T1043] oom_reaper: reaped process 5389 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 03:09:02 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x4a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:02 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x101, 0xff, 0x31d, 0x2, 0xd, 0xd7d5, 0x3f, 0x3ff, 0xfffffffffffffffa, 0x5}) syz_open_dev$sndpcmc(0x0, 0xd0f1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) write(r1, &(0x7f0000000140)="150000000800000000000000c86b6525000010", 0x13) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) 03:09:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd0'}, 0x2c) 03:09:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000602031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:03 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x8dffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:03 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x18a01, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100029bd7004fbdbdf25030000001c00020008000b000a0000200800040043000000080002004e2000008501afabc78696573b916642d083c6db"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 03:09:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000702031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1290.371247][ T5536] __nla_parse: 5 callbacks suppressed [ 1290.397246][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:03 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xeaffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f'}, 0x2c) 03:09:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000a02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1290.679459][ T5548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:03 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000e02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000f02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) 03:09:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00004802031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x715081, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$binfmt_script(r2, 0x0, 0xfffffd56) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7fffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={r3, 0x2, 0x6, [0x6, 0x5, 0x2, 0x4e6, 0x3, 0xe0000000000]}, 0x14) 03:09:04 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1291.350211][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:04 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xe, 0x400000) ioctl(r0, 0x9, &(0x7f0000000100)="a6c8824c9203dbd4ec0e40478c5ceea7f91d47b19a1ebd0c624048ed866675937e49cc256f4aedb5ad0e") ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x1000) accept4$tipc(r0, 0x0, &(0x7f0000000140), 0x800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000440)=""/246) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)=0xffff) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)="be3d9521afdfe2a78b03930bd7c6f8558d2b4acad22abc3ccfe8eba49464fcabbdf0dd08c0cb56e737d4c2351aedb1f4fb985164626c8fabd116f1a48640a56b50d11ddbe69ee7d4c168e4d6b9eb9335859d27cf101279d307f8cc141a51d23e1999381fbf1982ff09ab622fdbdfafdee1092aa6ef9d2e04da34fbb479ef23849bd27e038ffb69b61bdfbbd1accb208c315f31383c0d6ef9da621af97a71fda0729f7a0172d9647ec48a45155c6bb09e4cdb90d00a795fde7fed1b4a7f2b", 0x36}, {&(0x7f0000000240)="1111367c0155ec1ca9cbcd99a09cc8639b96a44ed9fc39987162969c3c19e3c85dc8a2d05f522d8718f904ff9ada623658d39514f95bfd633f567619524516198cc2342dead61bee33ed7b400fb8f83069eca7864ed2cf084d77e9b496eae81515609ec14977c7852a5b6c3ea2d6622d12b21f8330650fe6", 0x139}, {&(0x7f00000002c0)="48eac6b01761036c11121614ad80c2b92b1d1bdcf391578610091d04bc5b6db149a2c038bc", 0x25}, {&(0x7f0000000300)="6176544957cee07fa1a4ce368fd86a2fbe0a06ccef90da10f2548b7f9bd02127ef55be15cc61fcdfeb791af3412cb1a4923196974eb8f069177c184e5757ec87292aec78abec688346d99dde12a77dc282b96d72dcb6242db68c0a8c52617c4b9823", 0x62}, {&(0x7f0000000380)="374eddaf0760fbd5182d74ded1babc3c77daf5bbcbb14cbf220c663f5193aa1e57411a2db84233079b8f0077fea36722ac3d1a5d2fc62270bf6f0f70900809a3a02fda043136f881db2816466cd6794595fb70c7d31394cc1c782cee13abc077026bbe9a4fb5a8f57756a98c47b0ed5a04742792adecc318db20f04ef36ad41ab62f35580e8ebd7d", 0x1e}], 0x5, 0x0) 03:09:04 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00004c02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:04 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00006002031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1291.765029][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:05 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00006802031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1292.248670][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:05 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001580)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="de", 0x1}], 0x1) 03:09:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00006c02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1292.323563][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:05 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00007402031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:05 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00007a02031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1292.701474][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1292.748854][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1292.756698][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.766763][ T7803] Call Trace: [ 1292.770074][ T7803] dump_stack+0x172/0x1f0 [ 1292.775447][ T7803] dump_header+0x10f/0xb6c [ 1292.780001][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1292.785838][ T7803] ? ___ratelimit+0x60/0x595 [ 1292.790439][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1292.795565][ T7803] oom_kill_process.cold+0x10/0x15 [ 1292.800785][ T7803] out_of_memory+0x79a/0x1280 [ 1292.805490][ T7803] ? lock_downgrade+0x880/0x880 [ 1292.810362][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1292.816640][ T7803] ? oom_killer_disable+0x280/0x280 [ 1292.821851][ T7803] ? find_held_lock+0x35/0x130 [ 1292.826641][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1292.832210][ T7803] ? memcg_event_wake+0x230/0x230 [ 1292.837255][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1292.842545][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1292.847447][ T7803] try_charge+0x102c/0x15c0 [ 1292.851986][ T7803] ? find_held_lock+0x35/0x130 [ 1292.856783][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1292.862351][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1292.867913][ T7803] ? find_held_lock+0x35/0x130 [ 1292.872699][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1292.878276][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1292.883865][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1292.889103][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1292.894668][ T7803] __memcg_kmem_charge+0x136/0x300 [ 1292.899838][ T7803] __alloc_pages_nodemask+0x437/0x7e0 [ 1292.905259][ T7803] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1292.911048][ T7803] ? copy_page_range+0x125a/0x1f90 [ 1292.916179][ T7803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1292.922463][ T7803] alloc_pages_current+0x107/0x210 [ 1292.927618][ T7803] pte_alloc_one+0x1b/0x1a0 [ 1292.932219][ T7803] __pte_alloc+0x20/0x310 [ 1292.936572][ T7803] copy_page_range+0x1529/0x1f90 [ 1292.941513][ T7803] ? find_held_lock+0x35/0x130 [ 1292.946304][ T7803] ? pmd_alloc+0x180/0x180 [ 1292.950739][ T7803] ? __rb_insert_augmented+0x231/0xdf0 [ 1292.956223][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1292.960921][ T7803] ? __vma_link_rb+0x279/0x370 [ 1292.965711][ T7803] copy_process.part.0+0x568b/0x7980 [ 1292.971053][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1292.976041][ T7803] _do_fork+0x257/0xfd0 [ 1292.980222][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1292.984668][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1292.990162][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1292.995643][ T7803] ? do_syscall_64+0x26/0x610 [ 1293.000339][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1293.006616][ T7803] ? do_syscall_64+0x26/0x610 [ 1293.011401][ T7803] __x64_sys_clone+0xbf/0x150 [ 1293.016101][ T7803] do_syscall_64+0x103/0x610 [ 1293.020717][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1293.026643][ T7803] RIP: 0033:0x4571fa [ 1293.030552][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1293.050287][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1293.059412][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1293.067486][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1293.075474][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1293.083470][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1293.091446][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 03:09:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000003031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:06 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1293.147667][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 4809 [ 1293.154576][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1293.162178][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1293.169212][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:175684KB rss_huge:108544KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:175840KB inactive_file:0KB active_file:0KB unevictable:0KB 03:09:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140)={0x2, r0}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x4, 0x1}) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={0x0, r0, 0xd, 0x1}, 0x14) r3 = semget(0x0, 0x3, 0x110) semctl$SETVAL(r3, 0x0, 0x10, &(0x7f0000000080)=0x800) tkill(r2, 0x39) r4 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0xffffffff, 0x2) [ 1293.225155][ T5674] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1293.226388][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=5410,uid=0 03:09:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1293.266712][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1293.279205][ T5674] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:06 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1293.332914][ T7803] Memory cgroup out of memory: Killed process 5410 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB 03:09:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb7, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040), 0x1) [ 1293.393983][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1293.424553][ T1043] oom_reaper: reaped process 5410 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 03:09:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000a031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:06 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1293.618773][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1293.716676][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000005a031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000240)) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x40000000014, &(0x7f0000000300)=0x100000001, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xb}}, 0xfffffffffffffff9}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3ff, @loopback, 0x400}], 0x68) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400), 0x4) sendto$inet(r0, &(0x7f0000000080)='a', 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000005c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) recvfrom$packet(r1, &(0x7f0000000340)=""/11, 0xb, 0x120, &(0x7f0000000480)={0x11, 0x1d, r2, 0x1, 0x100000001, 0x6, @random="e4f47838fea9"}, 0x14) recvfrom$inet(r0, &(0x7f0000003b40)=""/4096, 0x5ac, 0x10122, 0x0, 0xffffffffffffff9b) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000484e591e15947827909a20747a4c23869dcfe8f7bf459c9ab766fc25c8370805000000956afd0674f4c6c03de73a1994bd1a17519b97e4436e65a3898f80e18cfbe1c5f2b3946f434b317abe96a783725678465eb77c079865dba529bd321e4d01f93a406216f56b900b1f85ba6f3290c0f23f3c00"/134, @ANYRES16=r3, @ANYBLOB="00c23708b287cc836826032abd7000fcdfdf25020000000c0008"], 0x20}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000000) 03:09:06 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000f001900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:06 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x24a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000010001900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:07 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[]) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)) 03:09:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000003031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1294.549522][ T5773] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1294.628349][ T5773] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1294.681393][ T5788] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:07 executing program 2: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000004031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @local, @broadcast}, 0xc) r1 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x4, 0x6, 0x8000, 0xdf5f, 0x1, r1}) 03:09:07 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x3300, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000a031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1295.162094][ T5833] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1295.184041][ T5833] CPU: 1 PID: 5833 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1295.191871][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.202281][ T5833] Call Trace: [ 1295.205594][ T5833] dump_stack+0x172/0x1f0 [ 1295.209947][ T5833] dump_header+0x10f/0xb6c [ 1295.214388][ T5833] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1295.220200][ T5833] ? ___ratelimit+0x60/0x595 [ 1295.224806][ T5833] ? do_raw_spin_unlock+0x57/0x270 [ 1295.229941][ T5833] oom_kill_process.cold+0x10/0x15 [ 1295.235087][ T5833] out_of_memory+0x79a/0x1280 [ 1295.239771][ T5833] ? lock_downgrade+0x880/0x880 [ 1295.244622][ T5833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1295.250870][ T5833] ? oom_killer_disable+0x280/0x280 [ 1295.256070][ T5833] ? find_held_lock+0x35/0x130 [ 1295.260857][ T5833] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1295.266417][ T5833] ? memcg_event_wake+0x230/0x230 [ 1295.271467][ T5833] ? do_raw_spin_unlock+0x57/0x270 [ 1295.276610][ T5833] ? _raw_spin_unlock+0x2d/0x50 [ 1295.281593][ T5833] try_charge+0x102c/0x15c0 [ 1295.286110][ T5833] ? find_held_lock+0x35/0x130 [ 1295.290896][ T5833] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1295.296448][ T5833] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1295.301999][ T5833] ? find_held_lock+0x35/0x130 [ 1295.306775][ T5833] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1295.312347][ T5833] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1295.317913][ T5833] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1295.323160][ T5833] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1295.328726][ T5833] __memcg_kmem_charge+0x136/0x300 [ 1295.333851][ T5833] __alloc_pages_nodemask+0x437/0x7e0 [ 1295.339226][ T5833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1295.345475][ T5833] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1295.351205][ T5833] ? copy_process.part.0+0x1d08/0x7980 [ 1295.356764][ T5833] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1295.362067][ T5833] ? trace_hardirqs_on+0x67/0x230 [ 1295.367104][ T5833] ? kasan_check_read+0x11/0x20 [ 1295.371974][ T5833] copy_process.part.0+0x3e0/0x7980 [ 1295.377197][ T5833] ? psi_memstall_leave+0x11c/0x180 [ 1295.382413][ T5833] ? sched_clock+0x2e/0x50 [ 1295.386837][ T5833] ? psi_memstall_leave+0x12e/0x180 [ 1295.392044][ T5833] ? find_held_lock+0x35/0x130 [ 1295.396805][ T5833] ? psi_memstall_leave+0x12e/0x180 [ 1295.402036][ T5833] ? __cleanup_sighand+0x60/0x60 [ 1295.406977][ T5833] ? __lock_acquire+0x548/0x3fb0 [ 1295.411928][ T5833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1295.418195][ T5833] _do_fork+0x257/0xfd0 [ 1295.422372][ T5833] ? fork_idle+0x1d0/0x1d0 [ 1295.426803][ T5833] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1295.432876][ T5833] ? lock_downgrade+0x880/0x880 [ 1295.437724][ T5833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1295.443965][ T5833] ? blkcg_exit_queue+0x30/0x30 [ 1295.448817][ T5833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1295.454275][ T5833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1295.459734][ T5833] ? do_syscall_64+0x26/0x610 [ 1295.464425][ T5833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.470520][ T5833] ? do_syscall_64+0x26/0x610 [ 1295.475219][ T5833] __x64_sys_clone+0xbf/0x150 [ 1295.479919][ T5833] do_syscall_64+0x103/0x610 [ 1295.484517][ T5833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.490403][ T5833] RIP: 0033:0x45b5f9 [ 1295.494304][ T5833] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 03:09:08 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1295.513912][ T5833] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1295.522353][ T5833] RAX: ffffffffffffffda RBX: 00007fba1d9f7700 RCX: 000000000045b5f9 [ 1295.530336][ T5833] RDX: 00007fba1d9f79d0 RSI: 00007fba1d9f6db0 RDI: 00000000003d0f00 [ 1295.538313][ T5833] RBP: 0000000000a4fcb0 R08: 00007fba1d9f7700 R09: 00007fba1d9f7700 [ 1295.546287][ T5833] R10: 00007fba1d9f79d0 R11: 0000000000000202 R12: 0000000000000000 [ 1295.554285][ T5833] R13: 0000000000a4fb5f R14: 00007fba1d9f79c0 R15: 000000000073bfac 03:09:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000005a031900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1295.599280][ T5833] memory: usage 307176kB, limit 307200kB, failcnt 4833 [ 1295.651978][ T5833] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1295.680796][ T5833] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1295.708907][ T5833] Memory cgroup stats for /syz5: cache:56KB rss:174388KB rss_huge:106496KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:174536KB inactive_file:0KB active_file:0KB unevictable:0KB 03:09:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002021900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1295.793894][ T5833] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20758,uid=0 [ 1295.840502][ T5833] Memory cgroup out of memory: Killed process 20758 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:09:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x163882) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x20000, 0x0, [0x7, 0x9, 0xfffffffffffffffe, 0x4, 0x800, 0x8, 0x5, 0x1ff]}) close(r0) 03:09:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002041900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:08 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x4a02, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1296.137294][ T5878] __nla_parse: 4 callbacks suppressed [ 1296.137304][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000600)) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="23000000250007081dfffd940101830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 1296.182811][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) 03:09:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002051900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:09 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00'}, 0x2c) [ 1296.313932][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002061900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:09 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x2}, 0x2c) [ 1296.742120][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:09 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0x40045566, &(0x7f0000000000)) 03:09:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002071900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:09 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x3}, 0x2c) [ 1297.006451][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1297.031854][ T5944] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bcsh0\x00'}) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000140)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) dup3(0xffffffffffffffff, r1, 0x4) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x0, 0x0, @loopback, 0xfffffffffffffff9}, {0xa, 0x0, 0xfffffffffffffff9, @local, 0x5}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x5c) openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) unshare(0x40200000) [ 1297.068934][ T5944] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1297.108338][ T5948] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:10 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002081900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1297.203735][ T5950] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:10 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x4}, 0x2c) [ 1297.419201][ T5953] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 03:09:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1297.472407][ T5963] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff018}, {0x80000006, 0x37ec, 0x10000000}]}, 0x10) [ 1297.555483][ T5963] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1297.618162][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:10 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002091900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x5}, 0x2c) [ 1297.824103][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1297.829992][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1297.835882][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1297.841682][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x6}, 0x2c) 03:09:10 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020a1900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1297.946310][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:11 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020b1900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x7}, 0x2c) [ 1298.386493][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:11 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, 0x0, 0xffffffffffffff48) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x101, 0x4, 0x201, 0x1fa, 0x1, 0x7a, 0xffffffff, 0xfffffffffffff0e1, r2}, 0x20) 03:09:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002101900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:11 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x33000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x8}, 0x2c) 03:09:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x10}, 0x2c) 03:09:11 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xe6}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2f}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, r0, 0x0, 0x4, &(0x7f0000000340)='fou\x00', 0xffffffffffffffff}, 0x30) sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x9) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x3, 0x8]}, 0x8) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)) 03:09:11 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002111900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:11 executing program 2: unshare(0x40000000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0xa0040) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x10001, @local, 0x80}}, 0x0, 0x4419, 0x2, 0x8, 0x3}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r1, 0x4}, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000600), 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 03:09:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x300}, 0x2c) 03:09:12 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x4a020000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002121900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1299.226532][ T6067] IPVS: ftp: loaded support on port[0] = 21 03:09:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x500}, 0x2c) 03:09:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001400)={0x53, 0xfffffffffffffffe, 0xf3, 0x3, @buffer={0x0, 0x41, &(0x7f0000000240)=""/65}, &(0x7f00000002c0)="5ec0715d5ce15cdb39b707af5f167ecb0178c655b05c929f313c515cb1e8080f0a3077a837135ef2b0537632e6edec45e32311a43213678a0b5818f942b4dd54ef178e73e0a9378ed7828b32c70cb9da7f02228842aa752042250461d9d561f45ef7db5bca94b1b823c174f26551071849628ef342cd4e39720e63e72ca62a94d6b6350b5631bf2e2834c8ffde6b196f23efe16a8e7a11cc71c22f3c24750393df5224b54c87694ca793ffa845daadae3bd56122e4b284e5fba2b0c042ad532de26c5c3e580c4b963307c7b73694b58c135ca16dd931a41f7e2bdfafd44111d4d9f41858d01f52280650ef8adc67b4e2158989", &(0x7f00000003c0)=""/4096, 0x9, 0x4, 0x1, &(0x7f00000013c0)}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) sysfs$2(0x2, 0x8, &(0x7f0000000100)=""/236) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1, 0x7e, 0x1, 0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [], 0x0, 0xffffffffffffffff, 0x7}, 0x3c) 03:09:12 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x8dffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1299.505608][ T6083] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1299.596425][ T6083] CPU: 1 PID: 6083 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1299.606730][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.616820][ T6083] Call Trace: [ 1299.620133][ T6083] dump_stack+0x172/0x1f0 [ 1299.624486][ T6083] dump_header+0x10f/0xb6c [ 1299.628931][ T6083] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1299.634758][ T6083] ? ___ratelimit+0x60/0x595 [ 1299.639354][ T6083] ? do_raw_spin_unlock+0x57/0x270 [ 1299.644837][ T6083] oom_kill_process.cold+0x10/0x15 [ 1299.650047][ T6083] out_of_memory+0x79a/0x1280 [ 1299.654780][ T6083] ? lock_downgrade+0x880/0x880 [ 1299.659651][ T6083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1299.665909][ T6083] ? oom_killer_disable+0x280/0x280 [ 1299.671379][ T6083] ? find_held_lock+0x35/0x130 [ 1299.676172][ T6083] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1299.681833][ T6083] ? memcg_event_wake+0x230/0x230 [ 1299.686876][ T6083] ? do_raw_spin_unlock+0x57/0x270 [ 1299.692000][ T6083] ? _raw_spin_unlock+0x2d/0x50 03:09:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002131900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1299.696870][ T6083] try_charge+0x102c/0x15c0 [ 1299.701395][ T6083] ? find_held_lock+0x35/0x130 [ 1299.701418][ T6083] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1299.701433][ T6083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1299.701459][ T6083] ? kasan_check_read+0x11/0x20 [ 1299.722896][ T6083] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1299.728472][ T6083] mem_cgroup_try_charge+0x24d/0x5e0 [ 1299.733803][ T6083] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1299.739461][ T6083] wp_page_copy+0x408/0x1740 [ 1299.744061][ T6083] ? find_held_lock+0x35/0x130 [ 1299.748838][ T6083] ? pmd_pfn+0x1d0/0x1d0 [ 1299.753097][ T6083] ? lock_downgrade+0x880/0x880 [ 1299.757986][ T6083] ? swp_swapcount+0x540/0x540 [ 1299.762783][ T6083] ? kasan_check_read+0x11/0x20 [ 1299.767656][ T6083] ? do_raw_spin_unlock+0x57/0x270 [ 1299.773265][ T6083] do_wp_page+0x48e/0x1500 [ 1299.777708][ T6083] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1299.783122][ T6083] __handle_mm_fault+0x22e8/0x3ec0 [ 1299.788253][ T6083] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1299.793807][ T6083] ? find_held_lock+0x35/0x130 [ 1299.798586][ T6083] ? handle_mm_fault+0x322/0xb30 [ 1299.803551][ T6083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1299.809820][ T6083] ? kasan_check_read+0x11/0x20 [ 1299.814731][ T6083] handle_mm_fault+0x43f/0xb30 [ 1299.819519][ T6083] __do_page_fault+0x5ef/0xda0 [ 1299.824316][ T6083] do_page_fault+0x71/0x581 [ 1299.828865][ T6083] ? page_fault+0x8/0x30 [ 1299.833127][ T6083] page_fault+0x1e/0x30 [ 1299.837286][ T6083] RIP: 0033:0x45727b [ 1299.841183][ T6083] Code: 25 20 06 00 00 b8 a0 37 41 00 48 89 15 4e f5 5f 00 48 85 c0 74 08 4c 89 cf e8 31 c5 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 0a cd 2b 00 00 00 00 00 48 c7 05 ef cc 2b 00 00 00 00 00 [ 1299.861310][ T6083] RSP: 002b:0000000000a4fd30 EFLAGS: 00010206 [ 1299.867384][ T6083] RAX: 0000000000000000 RBX: 0000000000a4fd30 RCX: 00000000004137b3 [ 1299.875555][ T6083] RDX: 000002ba53cfa4bb RSI: 0000000000000018 RDI: 0000000001577c20 [ 1299.883545][ T6083] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1299.891548][ T6083] R10: 0000000001577c10 R11: 0000000000000202 R12: 0000000000000001 [ 1299.899574][ T6083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 1299.927221][ T6083] memory: usage 307200kB, limit 307200kB, failcnt 4884 [ 1299.934610][ T6083] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1299.942933][ T6083] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1299.950803][ T6083] Memory cgroup stats for /syz5: cache:56KB rss:173172KB rss_huge:104448KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:173140KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1299.973859][ T6083] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21985,uid=0 [ 1299.991256][ T6083] Memory cgroup out of memory: Killed process 21985 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB [ 1300.008114][ T1043] oom_reaper: reaped process 21985 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 03:09:12 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xeaffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000025a1900000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xffffff8d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x600}, 0x2c) 03:09:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002035a00000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xffffffea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:13 executing program 2: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xffffff8d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x700}, 0x2c) 03:09:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000001000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1300.745594][ T6155] validate_nla: 4 callbacks suppressed [ 1300.752990][ T6155] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1300.777642][ T6155] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1300.792634][ T6161] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x3f00}, 0x2c) 03:09:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) 03:09:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x4000}, 0x2c) 03:09:13 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x20000}, 0x2c) 03:09:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000004000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:14 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1301.269451][ T6199] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x100000}, 0x2c) [ 1301.328751][ T6199] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:14 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1301.372081][ T6206] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1301.529030][ T6172] __nla_parse: 8 callbacks suppressed [ 1301.529040][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1301.564319][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031902000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:14 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x82, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x7b, 0x0, [0x40000021, 0x0, 0x0, 0xaa3e0000]}) 03:09:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x1000000}, 0x2c) 03:09:14 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1301.787246][ T6227] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1301.846419][ T6227] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1301.852150][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1301.865468][ T6233] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1301.880799][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:14 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1301.892222][ T6224] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 03:09:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031903000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1301.986322][ T6224] CPU: 0 PID: 6224 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1301.994171][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.994412][ T6241] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1302.004238][ T6224] Call Trace: [ 1302.004270][ T6224] dump_stack+0x172/0x1f0 [ 1302.004288][ T6224] dump_header+0x10f/0xb6c [ 1302.004303][ T6224] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1302.004318][ T6224] ? ___ratelimit+0x60/0x595 [ 1302.004332][ T6224] ? do_raw_spin_unlock+0x57/0x270 [ 1302.004347][ T6224] oom_kill_process.cold+0x10/0x15 [ 1302.004361][ T6224] out_of_memory+0x79a/0x1280 [ 1302.004375][ T6224] ? lock_downgrade+0x880/0x880 [ 1302.004389][ T6224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.004403][ T6224] ? oom_killer_disable+0x280/0x280 [ 1302.004414][ T6224] ? find_held_lock+0x35/0x130 [ 1302.004440][ T6224] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1302.076360][ T6224] ? memcg_event_wake+0x230/0x230 [ 1302.081416][ T6224] ? do_raw_spin_unlock+0x57/0x270 03:09:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031904000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1302.086624][ T6224] ? _raw_spin_unlock+0x2d/0x50 [ 1302.091489][ T6224] try_charge+0x102c/0x15c0 [ 1302.095994][ T6224] ? find_held_lock+0x35/0x130 [ 1302.100780][ T6224] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1302.106368][ T6224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.112627][ T6224] ? kasan_check_read+0x11/0x20 [ 1302.117584][ T6224] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1302.123204][ T6224] mem_cgroup_try_charge+0x24d/0x5e0 [ 1302.128512][ T6224] mem_cgroup_try_charge_delay+0x1f/0xa0 03:09:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031905000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1302.134172][ T6224] wp_page_copy+0x408/0x1740 [ 1302.138768][ T6224] ? find_held_lock+0x35/0x130 [ 1302.143545][ T6224] ? pmd_pfn+0x1d0/0x1d0 [ 1302.147791][ T6224] ? lock_downgrade+0x880/0x880 [ 1302.152656][ T6224] ? swp_swapcount+0x540/0x540 [ 1302.157430][ T6224] ? kasan_check_read+0x11/0x20 [ 1302.157445][ T6224] ? do_raw_spin_unlock+0x57/0x270 [ 1302.157463][ T6224] do_wp_page+0x48e/0x1500 [ 1302.157485][ T6224] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1302.157507][ T6224] __handle_mm_fault+0x22e8/0x3ec0 03:09:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pkey_alloc(0x0, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000080)={'veth1_to_bond\x00', @ifru_ivalue=0x8}) syz_emit_ethernet(0x300500, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000df550000000086dd60b4090000082f0006020000000000000000ffffe0000002ff0200000000000000000000000000013a0090780007040060b680fa0000000000000000000000000000ffffac1400"/102], 0x0) [ 1302.182355][ T6224] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1302.187901][ T6224] ? find_held_lock+0x35/0x130 [ 1302.187919][ T6224] ? handle_mm_fault+0x322/0xb30 [ 1302.187943][ T6224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.187962][ T6224] ? kasan_check_read+0x11/0x20 [ 1302.187984][ T6224] handle_mm_fault+0x43f/0xb30 [ 1302.213492][ T6224] __do_page_fault+0x5ef/0xda0 [ 1302.218330][ T6224] do_page_fault+0x71/0x581 [ 1302.222858][ T6224] ? page_fault+0x8/0x30 [ 1302.227124][ T6224] page_fault+0x1e/0x30 [ 1302.231281][ T6224] RIP: 0033:0x40b8f8 03:09:15 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1302.235181][ T6224] Code: d9 48 8b 47 78 48 83 f8 ff 0f 84 0b 01 00 00 48 8b 73 18 48 83 fe ff 74 29 48 81 fe e7 03 00 00 0f 87 5e 01 00 00 48 c1 e6 04 86 60 80 73 00 01 48 89 86 68 80 73 00 66 2e 0f 1f 84 00 00 00 [ 1302.254822][ T6224] RSP: 002b:0000000000a4fbb0 EFLAGS: 00010246 [ 1302.260900][ T6224] RAX: 0000000000000003 RBX: 000000000073bf00 RCX: 0000000000000001 [ 1302.268877][ T6224] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000073bf00 [ 1302.276859][ T6224] RBP: 000000000073bf00 R08: 000000000013dcd0 R09: 000000000013dcd0 03:09:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x5, 0x12, 0x17, 0x16, 0x6, 0x80000000, 0x4, 0xf6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{}], 0xa, "68113dc145993e1ec3bf3ecd77b216224a58a4a724726effec4c1ac291074e85b0df38afb51f3aa59883681cac3f395a41ac34bb0f4b0e5240fad4b257aa837b451b8906e31b23901b862960fb6ac7d79b491beeed0b0f9b4fe50a6c9abdd19ddcebc7e89b53f8810e48eed1f1d749d4b1ff68dfb161583eb13d0cf51f6e377799"}, 0x8d) setsockopt$inet6_tcp_int(r0, 0x6, 0x400000000000000c, &(0x7f0000000140)=0xffffffffffffba87, 0x4) [ 1302.284839][ T6224] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000000002d [ 1302.292818][ T6224] R13: 000000000013dcd2 R14: 000000000013dcff R15: 000000000073bf0c 03:09:15 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1302.384100][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1302.505805][ T6224] memory: usage 307200kB, limit 307200kB, failcnt 4921 [ 1302.513249][ T6224] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1302.562587][ T6224] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1302.572111][ T6224] Memory cgroup stats for /syz5: cache:56KB rss:171592KB rss_huge:102400KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:171812KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1302.637180][ T6224] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22727,uid=0 [ 1302.675007][ T6224] Memory cgroup out of memory: Killed process 22727 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB [ 1302.703715][ T1043] oom_reaper: reaped process 22727 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 03:09:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x2000000}, 0x2c) 03:09:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:15 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031906000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:15 executing program 2: r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 03:09:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1302.981416][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x3000000}, 0x2c) 03:09:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x3300000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1303.052630][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031907000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:16 executing program 2: r0 = syz_open_dev$video(0x0, 0x80, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000180)={0x0, 0x1, 0x0, [], 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x80000000004, 0x4) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, [], [{0xfffffffffffff000, 0x2, 0x3ff, 0x1ff, 0x400, 0x9}, {0x5, 0x4, 0xffff, 0x1, 0x136ed9b, 0x7fff}], [[]]}) close(r1) 03:09:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x4000000}, 0x2c) 03:09:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000203190a000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x5000000}, 0x2c) 03:09:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x4a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000203190e000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1303.826613][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1303.869876][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:16 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="b3d2c0626c423fd99f331e14aeb508d864e5bd8d86405525ec62d41047a8191e4516cb903352566047d022d0fe9ea88caafe45f28c8bdc988c96e3f18fb4b2e04700127740ea4722a8afbf1a2b78d2d5d6632b195d9bdabd103be8eba67b8801bab76177b1d0d102949946b61b90724021c8fc585c4e2265aad1205a6c22c6e3ee612931db1347c915b68e4a9c982cfce7df87719bae731cc5b79bc25f69b9dfd5d099ca8e36c165ac6f62f102f01a74e9874478a75c0637f5ac0797389b94"], &(0x7f0000001400)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 03:09:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x6000000}, 0x2c) 03:09:16 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x8dffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000203190f000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x7000000}, 0x2c) 03:09:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031948000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu\x9f$\x05\x0f\x06\x1f\xd5B@\x02\x81\xc6ax\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x804, 0x0) sendfile(r2, r1, 0x0, 0x2) read(r2, &(0x7f0000000240)=""/202, 0xca) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x2002) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x9, 0x6, 0x3, 0x5, 0x1, 0x7, 0x6, 0xa000, 0x6, 0x67, 0xc45, 0x20, 0x2, 0x5, 0x10000, 0x1}}) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000000c0)) [ 1304.107173][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0f0000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x8000000}, 0x2c) 03:09:17 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xeaffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000203194c000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1304.853807][ T6384] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1304.866463][ T6384] CPU: 0 PID: 6384 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1304.874290][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.884404][ T6384] Call Trace: [ 1304.887712][ T6384] dump_stack+0x172/0x1f0 [ 1304.892055][ T6384] dump_header+0x10f/0xb6c [ 1304.896492][ T6384] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1304.902307][ T6384] ? ___ratelimit+0x60/0x595 [ 1304.906904][ T6384] ? do_raw_spin_unlock+0x57/0x270 [ 1304.906924][ T6384] oom_kill_process.cold+0x10/0x15 [ 1304.906941][ T6384] out_of_memory+0x79a/0x1280 [ 1304.906958][ T6384] ? lock_downgrade+0x880/0x880 [ 1304.906979][ T6384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1304.917221][ T6384] ? oom_killer_disable+0x280/0x280 [ 1304.917234][ T6384] ? find_held_lock+0x35/0x130 [ 1304.917255][ T6384] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1304.917267][ T6384] ? memcg_event_wake+0x230/0x230 [ 1304.917285][ T6384] ? do_raw_spin_unlock+0x57/0x270 [ 1304.917300][ T6384] ? _raw_spin_unlock+0x2d/0x50 [ 1304.917317][ T6384] try_charge+0x102c/0x15c0 [ 1304.917338][ T6384] ? find_held_lock+0x35/0x130 [ 1304.972812][ T6384] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1304.978392][ T6384] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1304.983952][ T6384] ? find_held_lock+0x35/0x130 [ 1304.988728][ T6384] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1304.994288][ T6384] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1305.000038][ T6384] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1305.005251][ T6384] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1305.010893][ T6384] __memcg_kmem_charge+0x136/0x300 [ 1305.016032][ T6384] __alloc_pages_nodemask+0x437/0x7e0 [ 1305.021430][ T6384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.027687][ T6384] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1305.033433][ T6384] ? copy_process.part.0+0x1d08/0x7980 [ 1305.038903][ T6384] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1305.044211][ T6384] ? trace_hardirqs_on+0x67/0x230 [ 1305.049263][ T6384] copy_process.part.0+0x3e0/0x7980 [ 1305.054569][ T6384] ? psi_memstall_leave+0x11c/0x180 [ 1305.059778][ T6384] ? sched_clock+0x2e/0x50 [ 1305.064208][ T6384] ? psi_memstall_leave+0x12e/0x180 [ 1305.069416][ T6384] ? find_held_lock+0x35/0x130 [ 1305.074197][ T6384] ? psi_memstall_leave+0x12e/0x180 [ 1305.079413][ T6384] ? __cleanup_sighand+0x60/0x60 [ 1305.084363][ T6384] ? __lock_acquire+0x548/0x3fb0 [ 1305.089301][ T6384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.095561][ T6384] _do_fork+0x257/0xfd0 [ 1305.099724][ T6384] ? fork_idle+0x1d0/0x1d0 [ 1305.104147][ T6384] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1305.110214][ T6384] ? lock_downgrade+0x880/0x880 [ 1305.115091][ T6384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.121346][ T6384] ? blkcg_exit_queue+0x30/0x30 [ 1305.126237][ T6384] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1305.131727][ T6384] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1305.137192][ T6384] ? do_syscall_64+0x26/0x610 [ 1305.141867][ T6384] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1305.147935][ T6384] ? do_syscall_64+0x26/0x610 [ 1305.152623][ T6384] __x64_sys_clone+0xbf/0x150 [ 1305.157317][ T6384] do_syscall_64+0x103/0x610 [ 1305.161915][ T6384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1305.167905][ T6384] RIP: 0033:0x45b5f9 [ 1305.171811][ T6384] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1305.191445][ T6384] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 03:09:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:18 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031960000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80002, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0x5) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 1305.199866][ T6384] RAX: ffffffffffffffda RBX: 00007fba1da18700 RCX: 000000000045b5f9 [ 1305.207847][ T6384] RDX: 00007fba1da189d0 RSI: 00007fba1da17db0 RDI: 00000000003d0f00 [ 1305.215830][ T6384] RBP: 0000000000a4fcb0 R08: 00007fba1da18700 R09: 00007fba1da18700 [ 1305.223807][ T6384] R10: 00007fba1da189d0 R11: 0000000000000202 R12: 0000000000000000 [ 1305.231810][ T6384] R13: 0000000000a4fb5f R14: 00007fba1da189c0 R15: 000000000073bf0c [ 1305.271828][ T6384] memory: usage 307188kB, limit 307200kB, failcnt 4965 [ 1305.287955][ T6384] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 03:09:18 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="570000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1305.332469][ T6384] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:09:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031968000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1305.404165][ T6384] Memory cgroup stats for /syz5: cache:56KB rss:170360KB rss_huge:100352KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:170448KB inactive_file:0KB active_file:0KB unevictable:0KB 03:09:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80002, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0x5) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 03:09:18 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1305.549896][ T6384] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=26140,uid=0 [ 1305.670134][ T6384] Memory cgroup out of memory: Killed process 26140 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:09:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x1fffffbf}, 0x2c) 03:09:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x2000400000000009, 0x0) poll(&(0x7f0000000100)=[{r0, 0x8041}], 0x1, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x9, "d60700000000000000000032f101000080917149fd661837b011b15f24fc4d12", 0x0, 0x0, 0x0, 0x70effc}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000280)={r2, 0x1}) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0x18]}, &(0x7f0000000300)=0x6) pipe(&(0x7f0000000180)) syz_open_dev$sndtimer(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) r3 = semget$private(0x0, 0x2, 0x80) semctl$GETVAL(r3, 0x0, 0xc, &(0x7f00000000c0)=""/19) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x3, 0x7f, 0x80, 0x94}) 03:09:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000203196c000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:19 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x3, 0x0) syz_open_pts(r0, 0x408200) 03:09:19 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1306.135196][ T6433] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1306.158211][ T6437] validate_nla: 33 callbacks suppressed [ 1306.158220][ T6437] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1306.226178][ T6433] CPU: 1 PID: 6433 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1306.234057][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.244123][ T6433] Call Trace: [ 1306.247435][ T6433] dump_stack+0x172/0x1f0 [ 1306.251778][ T6433] dump_header+0x10f/0xb6c [ 1306.256246][ T6433] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1306.262078][ T6433] ? ___ratelimit+0x60/0x595 [ 1306.266684][ T6433] ? do_raw_spin_unlock+0x57/0x270 [ 1306.271847][ T6433] oom_kill_process.cold+0x10/0x15 [ 1306.276982][ T6433] out_of_memory+0x79a/0x1280 [ 1306.281697][ T6433] ? lock_downgrade+0x880/0x880 [ 1306.286562][ T6433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1306.292823][ T6433] ? oom_killer_disable+0x280/0x280 [ 1306.298040][ T6433] ? find_held_lock+0x35/0x130 [ 1306.302849][ T6433] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1306.308409][ T6433] ? memcg_event_wake+0x230/0x230 [ 1306.313452][ T6433] ? do_raw_spin_unlock+0x57/0x270 [ 1306.313469][ T6433] ? _raw_spin_unlock+0x2d/0x50 [ 1306.313497][ T6433] try_charge+0x102c/0x15c0 [ 1306.328935][ T6433] ? find_held_lock+0x35/0x130 [ 1306.328961][ T6433] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1306.328973][ T6433] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1306.328993][ T6433] ? find_held_lock+0x35/0x130 [ 1306.337360][ T6437] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1306.339310][ T6433] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1306.339342][ T6433] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1306.368812][ T6433] ? memcg_kmem_put_cache+0xb0/0xb0 03:09:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000201ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:19 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x900, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) close(r0) [ 1306.374297][ T6433] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1306.379864][ T6433] __memcg_kmem_charge+0x136/0x300 [ 1306.381198][ T6448] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1306.384990][ T6433] __alloc_pages_nodemask+0x437/0x7e0 [ 1306.385010][ T6433] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1306.385035][ T6433] ? kasan_check_read+0x11/0x20 [ 1306.385059][ T6433] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1306.415393][ T6433] ? tun_chr_read_iter+0x180/0x1e0 [ 1306.420519][ T6433] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1306.426784][ T6433] alloc_pages_current+0x107/0x210 [ 1306.431916][ T6433] __pmd_alloc+0x41/0x460 [ 1306.436249][ T6433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1306.442502][ T6433] __handle_mm_fault+0x192a/0x3ec0 [ 1306.447623][ T6433] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1306.453188][ T6433] ? find_held_lock+0x35/0x130 [ 1306.457977][ T6433] ? handle_mm_fault+0x322/0xb30 [ 1306.462943][ T6433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1306.469208][ T6433] ? kasan_check_read+0x11/0x20 [ 1306.474078][ T6433] handle_mm_fault+0x43f/0xb30 [ 1306.478856][ T6433] __do_page_fault+0x5ef/0xda0 [ 1306.483647][ T6433] do_page_fault+0x71/0x581 [ 1306.488159][ T6433] ? page_fault+0x8/0x30 [ 1306.492405][ T6433] page_fault+0x1e/0x30 [ 1306.496559][ T6433] RIP: 0033:0x401697 [ 1306.500461][ T6433] Code: 00 00 00 48 83 ec 08 48 8b 15 1d ee 64 00 48 8b 05 0e ee 64 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 f0 ed 64 00 48 83 c4 08 c3 48 89 c6 bf c8 88 4c 00 [ 1306.520076][ T6433] RSP: 002b:0000000000a4fbd0 EFLAGS: 00010287 03:09:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031974000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1306.526155][ T6433] RAX: 0000001b33520000 RBX: 0000000000000000 RCX: 0000001b34520000 [ 1306.534148][ T6433] RDX: 0000001b33520004 RSI: 0000000000a4f980 RDI: 0000000000000000 [ 1306.542118][ T6433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 1306.550105][ T6433] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 1306.558105][ T6433] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 03:09:19 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe54}) ftruncate(r0, 0x9) read$FUSE(r2, &(0x7f0000005080), 0xfffffe21) [ 1306.675610][ T6461] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:19 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1306.727495][ T6461] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1306.763924][ T6465] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1306.970752][ T6433] memory: usage 307196kB, limit 307200kB, failcnt 5009 [ 1306.979901][ T6433] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1306.987868][ T6433] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1306.994912][ T6433] Memory cgroup stats for /syz5: cache:56KB rss:170320KB rss_huge:100352KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:170444KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1307.032444][ T6433] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=6422,uid=0 [ 1307.052171][ T6433] Memory cgroup out of memory: Killed process 6422 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35788kB, shmem-rss:0kB [ 1307.074928][ T1043] oom_reaper: reaped process 6422 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 03:09:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x200000d0}, 0x2c) 03:09:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000203197a000007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:20 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) connect$can_bcm(r0, &(0x7f0000000180), 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x202, 0x4) getpeername$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/209) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000003c0)={0xbd, &(0x7f0000000300)="58b5f123095bd4955c055116149f54aee0271996c7f518ea566f52874957f425c5ea1dd78c67f4976c1bdfcd4c9dd4f3290dc311345dc421e5a17d530dfdedfb499fac2c6d9a99f85468f5ee4b4c1dd6352268d54ee35cbe6e468b1490edda2a59475946afc0ab8acae35a476f489304deee1d45f22f581537ed363b0f660c37a172d983df336e328d75cdaea40a0921ccfe1453b19d20c0bd3b43edd7c50652854540591760b0d08c7471e69b73018ced45e2cde435e83dc66ff5571f"}) [ 1307.137956][ T6482] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1307.188379][ T6482] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:20 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:20 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x404001, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f00000001c0)="2ba9b807e1a199c3c8524a5d6eb3db467d46b9f9e3361c25197200be1f211b2a06f572a751b3800ea7ad5230650f0129bca8fe8b57a1cf0bddc5f6c132fb541df877b2e88b6e38624736c7d846e506cc36796905a58a2b8145dee0dcf4d9cedea88a473d8bef0a750331df208d102a97db7fa1fb2c85af12ee261e98a9", 0x7d) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101400, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x207, @dev={0xfe, 0x80, [], 0x27}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r2, 0x8, 0x0, 0x7fff}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r2, 0x3}, &(0x7f00000003c0)=0x8) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x165400000000, 0x9, 0x3, {0xc, @sliced={0xfffffffffffffffb, [0x6, 0xa4b, 0x8000, 0x8, 0x9, 0x7, 0x9, 0x4, 0x770, 0x4, 0x2, 0x3, 0x6, 0x9, 0x9, 0x400, 0x6, 0x9, 0x6, 0x401, 0x2c92, 0x7f, 0x9, 0x1, 0x4, 0x5, 0x8d, 0x3, 0x4, 0x100000001, 0x1, 0x2, 0x7, 0x4, 0x1, 0x5, 0x3, 0x1, 0xd7f, 0x2, 0x3, 0x3, 0x0, 0x7, 0x7fff, 0x2, 0x3f], 0x4}}}) write$P9_RXATTRWALK(r1, &(0x7f0000000240)={0xf, 0x1f, 0x2, 0x552}, 0xf) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x40) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/53) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) 03:09:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x3f000000}, 0x2c) 03:09:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240200000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900030007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1307.408342][ T6507] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1307.422642][ T6511] __nla_parse: 4 callbacks suppressed [ 1307.422652][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:20 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000000)={0x420080522, r0}, &(0x7f0000000040)) semop(0x0, &(0x7f0000000080)=[{}], 0x1) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000140)) 03:09:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240300000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:20 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1307.457889][ T6507] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x40000000}, 0x2c) 03:09:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900050007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0xbfffff1f}, 0x2c) 03:09:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="146c0000001d41"], 0x14}}, 0x0) r1 = dup3(r0, r0, 0x80000) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x6}, 0xb) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) 03:09:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0xd0000020}, 0x2c) 03:09:20 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240400000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900060007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:20 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xfff, 0x400, 0x6, 0x9, 0x34, 0x8001, 0x20, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x7, 0x5, 0xffff, 0x1f0000000}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="86000000d7a4aed205e835b4f5c0dd6662b6c5f69d65cde8656196add45c5d2ad1a9ec912ac5c6b51cd60a4bc1857b08d77446bcf6e10a4cc5b7eb987b5a04c44b0596bdc7f3b166c85ee54d33a77ae45b57d90bcc26f7ca181d406fa54dd2077e50f0a8b7c2d9c03a78bb4b5a9b369515e67feadb4dfad9f4ab"], &(0x7f0000000040)=0x8e) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000540)={r1, 0x3}, 0x8) [ 1307.863700][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x800000000}, 0x2c) 03:09:20 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x2000000000000}, 0x2c) 03:09:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240700000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900070007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x10000000000000}, 0x2c) 03:09:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240a00000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x24a, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x74, 0x6, "b9911ccc98898ba2dd4e8330e848b824d8031d0c89d1a708c1b59f0afde89663ee45d7e0112fafa3d8153b9e2e1d510c1232c8d401a90c0eda664ff42c52d501ab02c53e18be457de1ddcd479c363bb9870176e805a1fc1d0faac8ac8578f6a5bc24c4481789e6aef84695cb"}, &(0x7f0000000180), 0x1400) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r1, 0xffffffffbfffbfb3, 0x0) 03:09:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000a0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x100000000000000}, 0x2c) 03:09:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) msgget$private(0x0, 0x8) msgctl$IPC_RMID(0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) listen(r3, 0x4000000020000000) r4 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) getpeername$unix(r1, &(0x7f0000000100), &(0x7f0000000080)=0x6e) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="ce35d855d1f45b122d2f4e44edfd16ed2d25190176a919d34545a5143605d6c59fbb34c7"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_elf64(r0, &(0x7f0000001300)=ANY=[@ANYRESOCT=r5, @ANYRESHEX], 0x15) 03:09:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240e00000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000e0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1308.769849][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x200000000000000}, 0x2c) 03:09:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="246000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000f0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:21 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24f000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900200007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1309.108445][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1309.145099][ T6656] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1309.190952][ T6656] CPU: 1 PID: 6656 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1309.198812][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.208878][ T6656] Call Trace: [ 1309.212183][ T6656] dump_stack+0x172/0x1f0 [ 1309.216526][ T6656] dump_header+0x10f/0xb6c [ 1309.220961][ T6656] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1309.226812][ T6656] ? ___ratelimit+0x60/0x595 [ 1309.231422][ T6656] ? do_raw_spin_unlock+0x57/0x270 [ 1309.236548][ T6656] oom_kill_process.cold+0x10/0x15 [ 1309.241786][ T6656] out_of_memory+0x79a/0x1280 [ 1309.246478][ T6656] ? lock_downgrade+0x880/0x880 [ 1309.251344][ T6656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1309.258238][ T6656] ? oom_killer_disable+0x280/0x280 [ 1309.263642][ T6656] ? find_held_lock+0x35/0x130 [ 1309.268436][ T6656] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1309.274043][ T6656] ? memcg_event_wake+0x230/0x230 [ 1309.279104][ T6656] ? do_raw_spin_unlock+0x57/0x270 [ 1309.284251][ T6656] ? _raw_spin_unlock+0x2d/0x50 [ 1309.289115][ T6656] try_charge+0x102c/0x15c0 [ 1309.293622][ T6656] ? find_held_lock+0x35/0x130 [ 1309.298424][ T6656] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1309.304079][ T6656] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1309.309727][ T6656] ? find_held_lock+0x35/0x130 [ 1309.314519][ T6656] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1309.320221][ T6656] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1309.327270][ T6656] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1309.332507][ T6656] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1309.338074][ T6656] __memcg_kmem_charge+0x136/0x300 [ 1309.343195][ T6656] __alloc_pages_nodemask+0x437/0x7e0 [ 1309.348590][ T6656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1309.354852][ T6656] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1309.360593][ T6656] ? copy_process.part.0+0x1d08/0x7980 [ 1309.366171][ T6656] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1309.371475][ T6656] ? trace_hardirqs_on+0x67/0x230 [ 1309.376546][ T6656] copy_process.part.0+0x3e0/0x7980 [ 1309.381779][ T6656] ? __handle_mm_fault+0x21b7/0x3ec0 [ 1309.387074][ T6656] ? find_held_lock+0x35/0x130 [ 1309.391844][ T6656] ? __handle_mm_fault+0x21b7/0x3ec0 [ 1309.397143][ T6656] ? lock_downgrade+0x880/0x880 [ 1309.402038][ T6656] ? migration_entry_to_page+0x320/0x320 [ 1309.407703][ T6656] ? lru_cache_add+0x21c/0x590 [ 1309.412523][ T6656] ? __cleanup_sighand+0x60/0x60 [ 1309.417477][ T6656] ? __handle_mm_fault+0x7cd/0x3ec0 [ 1309.422701][ T6656] ? __do_page_fault+0x623/0xda0 [ 1309.427654][ T6656] ? find_held_lock+0x35/0x130 [ 1309.432425][ T6656] _do_fork+0x257/0xfd0 [ 1309.436597][ T6656] ? fork_idle+0x1d0/0x1d0 [ 1309.441020][ T6656] ? kasan_check_write+0x14/0x20 [ 1309.445970][ T6656] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1309.451443][ T6656] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1309.456918][ T6656] ? do_syscall_64+0x26/0x610 [ 1309.461614][ T6656] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1309.467694][ T6656] ? do_syscall_64+0x26/0x610 [ 1309.472392][ T6656] __x64_sys_clone+0xbf/0x150 [ 1309.477084][ T6656] do_syscall_64+0x103/0x610 [ 1309.481691][ T6656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1309.487592][ T6656] RIP: 0033:0x45b5f9 [ 1309.491490][ T6656] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1309.511125][ T6656] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1309.519561][ T6656] RAX: ffffffffffffffda RBX: 00007fba1d9f7700 RCX: 000000000045b5f9 [ 1309.527580][ T6656] RDX: 00007fba1d9f79d0 RSI: 00007fba1d9f6db0 RDI: 00000000003d0f00 03:09:22 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1309.535564][ T6656] RBP: 0000000000a4fcb0 R08: 00007fba1d9f7700 R09: 00007fba1d9f7700 [ 1309.543555][ T6656] R10: 00007fba1d9f79d0 R11: 0000000000000202 R12: 0000000000000000 [ 1309.551534][ T6656] R13: 0000000000a4fb5f R14: 00007fba1d9f79c0 R15: 000000000073bfac [ 1309.600303][ T6656] memory: usage 307144kB, limit 307200kB, failcnt 5030 [ 1309.609266][ T6656] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1309.617863][ T6656] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1309.625354][ T6656] Memory cgroup stats for /syz5: cache:56KB rss:169024KB rss_huge:98304KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:169140KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1309.664668][ T6656] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=30425,uid=0 [ 1309.738699][ T6656] Memory cgroup out of memory: Killed process 30425 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35792kB, shmem-rss:0kB 03:09:22 executing program 2: ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000009c0)=ANY=[@ANYBLOB]) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80, 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8020c00f}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00d828d46914e3c28b53b170a6cfe0f3b912da713af53224ed18b751e5b160004311ae39fbe85f6a8360ab26e834314875ff5da78948818d071484f98b130440f4769c449f8c1e77e3cb20e1af75f6ad0ac6040a0e452c7e45f011a7fe2dfb9b36487916d60b5ed69c6279d33d8bbbded5a35f4f9b473496109e307d6d24", @ANYRES16=r1, @ANYBLOB="000029bd7000fcdbdf25080000000800060001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c081) socket$inet6(0xa, 0x805, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000800)='/dev/qat_adf_ctl\x00', 0x0, 0x0) futex(&(0x7f0000000080)=0x2, 0xfffffffffffffffc, 0x2, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000580)=@known='trusted.overlay.impure\x00') gettid() getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0xffffffff, 0x81}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={r3, 0x1c, "9ae9047e1a9d289868dec45d54da25465500b74de21da991669b534a"}, &(0x7f0000000440)=0x24) perf_event_open(&(0x7f0000000200)={0xffffffffffffffff, 0x70, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 03:09:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900480007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240003000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x300000000000000}, 0x2c) 03:09:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:22 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1309.993641][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x400000000000000}, 0x2c) 03:09:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319004c0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240007000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:23 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3300, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1310.199751][ T7803] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1310.301204][ T7803] CPU: 1 PID: 7803 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1310.309068][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.319160][ T7803] Call Trace: [ 1310.322604][ T7803] dump_stack+0x172/0x1f0 [ 1310.326974][ T7803] dump_header+0x10f/0xb6c [ 1310.331447][ T7803] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1310.337291][ T7803] ? ___ratelimit+0x60/0x595 [ 1310.341889][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1310.347012][ T7803] oom_kill_process.cold+0x10/0x15 [ 1310.352150][ T7803] out_of_memory+0x79a/0x1280 [ 1310.356846][ T7803] ? lock_downgrade+0x880/0x880 [ 1310.361711][ T7803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1310.367975][ T7803] ? oom_killer_disable+0x280/0x280 [ 1310.373214][ T7803] ? find_held_lock+0x35/0x130 [ 1310.378005][ T7803] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1310.383585][ T7803] ? memcg_event_wake+0x230/0x230 [ 1310.388630][ T7803] ? do_raw_spin_unlock+0x57/0x270 [ 1310.393746][ T7803] ? _raw_spin_unlock+0x2d/0x50 [ 1310.398618][ T7803] try_charge+0x102c/0x15c0 [ 1310.403145][ T7803] ? find_held_lock+0x35/0x130 [ 1310.407934][ T7803] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1310.413504][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1310.419097][ T7803] ? find_held_lock+0x35/0x130 [ 1310.423898][ T7803] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1310.429475][ T7803] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1310.435046][ T7803] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1310.440253][ T7803] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1310.445801][ T7803] __memcg_kmem_charge+0x136/0x300 [ 1310.451112][ T7803] __alloc_pages_nodemask+0x437/0x7e0 [ 1310.456508][ T7803] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1310.462252][ T7803] ? save_stack+0x45/0xd0 [ 1310.466598][ T7803] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1310.472429][ T7803] ? __lock_acquire+0x548/0x3fb0 [ 1310.477387][ T7803] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1310.483648][ T7803] alloc_pages_current+0x107/0x210 [ 1310.488781][ T7803] pte_alloc_one+0x1b/0x1a0 [ 1310.493304][ T7803] __pte_alloc+0x20/0x310 [ 1310.497660][ T7803] copy_page_range+0x1529/0x1f90 [ 1310.502645][ T7803] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1310.508388][ T7803] ? pmd_alloc+0x180/0x180 [ 1310.512821][ T7803] ? validate_mm_rb+0xa3/0xc0 [ 1310.517543][ T7803] ? __vma_link_rb+0x279/0x370 [ 1310.522353][ T7803] copy_process.part.0+0x568b/0x7980 [ 1310.527772][ T7803] ? __cleanup_sighand+0x60/0x60 [ 1310.532744][ T7803] _do_fork+0x257/0xfd0 [ 1310.536910][ T7803] ? fork_idle+0x1d0/0x1d0 [ 1310.541339][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1310.546803][ T7803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1310.552289][ T7803] ? do_syscall_64+0x26/0x610 [ 1310.556981][ T7803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1310.563064][ T7803] ? do_syscall_64+0x26/0x610 [ 1310.567760][ T7803] __x64_sys_clone+0xbf/0x150 [ 1310.572479][ T7803] do_syscall_64+0x103/0x610 [ 1310.577090][ T7803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1310.582999][ T7803] RIP: 0033:0x4571fa [ 1310.586915][ T7803] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1310.606541][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1310.614976][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1310.622962][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1310.630959][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1310.638950][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 03:09:23 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900600007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:23 executing program 2: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x20032, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x500, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000d27ffc), 0x14) [ 1310.646923][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 03:09:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000a000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1310.728837][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 5057 [ 1310.745973][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1310.764732][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:09:23 executing program 2: futex(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x44000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, 0x0) io_setup(0x8, &(0x7f0000000240)=0x0) io_getevents(r3, 0x75d, 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/116, 0x74}], 0x1, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000440)=0x8) tkill(0x0, 0x0) 03:09:23 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x4a02, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900680007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1310.818087][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:169128KB rss_huge:98304KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:169156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1310.843220][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1310.887573][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=6700,uid=0 [ 1310.996182][ T7803] Memory cgroup out of memory: Killed process 6700 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB 03:09:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x500000000000000}, 0x2c) 03:09:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000e000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319006c0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:24 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1311.134880][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900740007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x600000000000000}, 0x2c) 03:09:24 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1311.274166][ T6776] validate_nla: 35 callbacks suppressed [ 1311.274176][ T6776] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1311.397086][ T6776] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1311.456417][ T6786] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1311.508081][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:24 executing program 2: r0 = socket(0x1e, 0x4, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000880)=0x7ffffffe) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000009c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)}}, 0xfffffe78) accept4$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000800)={0x0, 0x400, 0x2, 0x3ff, 0x9, 0x1000}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xf6) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x0, 0x0, 0x2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x45d, 0xff77575b, 0x2, @stepwise={0x7, 0x9, 0x4, 0x3, 0x4a, 0x101}}) get_robust_list(0x0, 0x0, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x8000}, &(0x7f0000000580)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/sys/net/ipv4/vs/lblc_expiration\x00d\xa3\x92\x05\xd7\x1d\xdb\xbcl\xce\xf0\xd3B\xc1O\xcd\xbf\xff\x02\xbbPt\x1a\x1e\xfe\xb2un\x80\xe3\xa7\x13z,0o\xee.Q\n\x00\x907 Z\xd8\x96\xf3{\xa3\xb6(Zc>eDxO0\n\xba\xdaO\x13\xa5uX\xa8\xfdO\xf8\x84K\xd1_\x9e[.u\xb8N\x93B~rd\v5I^\x98\x19I\f\x14\x13R\xac\xe4\xafqr/+\xe1\x8fJ9\xb5\xa7x\x92`\b\xe51\x8d\xefd\x836n\xf4|A=\xd5z\xe0\x9c\x9d\x8beDxO0\n\xba\xdaO\x13\xa5uX\xa8\xfdO\xf8\x84K\xd1_\x9e[.u\xb8N\x93B~rd\v5I^\x98\x19I\f\x14\x13R\xac\xe4\xafqr/+\xe1\x8fJ9\xb5\xa7x\x92`\b\xe51\x8d\xefd\x836n\xf4|A=\xd5z\xe0\x9c\x9d\x8beDxO0\n\xba\xdaO\x13\xa5uX\xa8\xfdO\xf8\x84K\xd1_\x9e[.u\xb8N\x93B~rd\v5I^\x98\x19I\f\x14\x13R\xac\xe4\xafqr/+\xe1\x8fJ9\xb5\xa7x\x92`\b\xe51\x8d\xefd\x836n\xf4|A=\xd5z\xe0\x9c\x9d\x8b 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1313.056473][ T7803] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1313.056487][ T7803] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 00000000004571fa [ 1313.056495][ T7803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1313.056503][ T7803] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001577940 [ 1313.056519][ T7803] R10: 0000000001577c10 R11: 0000000000000246 R12: 0000000000000001 [ 1313.065781][ T7803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 03:09:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900050007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:26 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240ec0000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1313.138946][ T7803] memory: usage 307200kB, limit 307200kB, failcnt 5088 [ 1313.178019][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1313.205887][ T7803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1313.225869][ T7803] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 03:09:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900060007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1313.268896][ T7803] Memory cgroup stats for /syz5: cache:56KB rss:167664KB rss_huge:96256KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:167876KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1313.316467][ T7803] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23293,uid=0 [ 1313.347204][ T7803] Memory cgroup out of memory: Killed process 23293 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB 03:09:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x2}, 0x2c) 03:09:26 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400f0000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:26 executing program 2: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) io_setup(0xfffffffffffffffb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) clone(0x8102000, 0x0, 0x0, 0x0, 0x0) 03:09:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900070007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1313.377048][ T1043] oom_reaper: reaped process 23293 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 03:09:26 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x33000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1313.468935][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000a0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000005, 0x0) lseek(r0, 0x0, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x1, 0x0, [0x7fffffff, 0x10000, 0x800, 0x8, 0x1, 0x1e3, 0x1f, 0xffffffff80000001, 0x7fffffff, 0x7, 0x8, 0x40, 0x0, 0x1ff, 0x6, 0x1f]}], r1, 0x1, 0x1, 0x48}}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x8040, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x1) 03:09:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000501ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x3}, 0x2c) 03:09:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000e0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x5460, 0x0) r2 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x6) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000140)) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x100, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) getsockname(r3, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80) [ 1313.732865][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:26 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x4}, 0x2c) 03:09:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000601ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:26 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x4a020000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1313.922147][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319000f0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x5}, 0x2c) [ 1313.993478][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x503001) getgroups(0x4, &(0x7f0000000080)=[0xee00, 0xee01, 0xee01, 0xee01]) r3 = getgid() prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) getgroups(0xa, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0x0, 0xee01, 0x0, 0x0, 0x0]) setresgid(r2, r3, r4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x25, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 03:09:27 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x8dffffff, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000801ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900480007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000100)=0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair(0x10, 0x0, 0x8000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0xfffffffffffffede) write$binfmt_aout(r0, &(0x7f00000001c0)={{}, "", [[], []]}, 0x220) 03:09:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x6}, 0x2c) 03:09:27 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xeaffffff, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319004c0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000901ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1314.373107][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000a01ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900600007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:27 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x6, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d0000000200001f01000000fc0002c9130001000000000050000000586700a28663b3", 0x2f}], 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 03:09:27 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000b01ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900680007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2000000000003, 0x4) r1 = socket$netlink(0x10, 0x3, 0x20008000000004) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xc0000, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000001c0)) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 03:09:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001001ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319006c0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x7}, 0x2c) 03:09:28 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xffffff8d, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:28 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xffffffea, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1315.144131][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x8}, 0x2c) 03:09:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900740007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001101ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:28 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f000000020319007a0007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:28 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) write$smack_current(r0, &(0x7f0000000040)='\x00', 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x1ffe, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000080)={0x2, 0x7f, 0x2}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8008700b, 0x0) 03:09:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x10}, 0x2c) 03:09:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001201ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:28 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000307000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000507000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:28 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffff, 0x10400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x10000, 0x1}, 'port0\x00', 0x18, 0x80404, 0x1ab, 0x3, 0xab, 0x6, 0x8, 0x0, 0x2, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x2, 0x0) mq_timedreceive(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x2, &(0x7f0000000080)={0x0, 0x989680}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0xe, &(0x7f0000000100), 0x9c) 03:09:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x300}, 0x2c) [ 1315.872975][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1315.912164][ T7147] sock: process `syz-executor.2' is using obsolete setsockopt SO_BSDCOMPAT 03:09:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000607000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1316.344918][ T7168] validate_nla: 52 callbacks suppressed [ 1316.344928][ T7168] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1316.367369][ T7168] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1316.382067][ T7169] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240002000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:29 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) chmod(&(0x7f0000000080)='./file0\x00', 0x16) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000040)={{r1, r2/1000+30000}, 0x0, 0x678f, 0x7f}, 0x18) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) 03:09:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x500}, 0x2c) 03:09:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000707000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1316.511512][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x600}, 0x2c) [ 1316.589858][ T7180] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) unshare(0x600) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes256, 0x400000000001, "c99f342d4adc7826"}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') r3 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x8, 0x10000) syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'b\x00', {0x2, 0x4e20, @empty}}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) setsockopt$sock_void(r4, 0x1, 0x3f, 0x0, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) migrate_pages(0x0, 0x2a, &(0x7f00000004c0), 0x0) seccomp(0x1, 0x1, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x4, 0x0, 0x5}]}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000400)="25cc0c2c3017706510b9a7daf159a611ea7de03f5160b699d0e3b5147bfac274c4fc4896983994e3fdfbbeb669d358eb47c89e7eb088f4e39fb04711216658e3a674ddced64947d978b503ff87ba78f6c578fae576e76832c2d178f160d9e708ea20cd3ae94bb7d7a6c5523e4af2d0aa8c062e7e72740f8676463fd268effe6ed0f9120149457fbe8dba5c", 0x8b}, {&(0x7f0000000180)="cb345586a4137920daeae9b612c57fce8150206b84533a031ef9a10691c50bf41e09f83943ecba5d0f36af80c659c8e97f15da7bc1e005a6e412a51b7e967331da6eaf1bfacd937f7b92318a7c421e8bbe0a03e6ad354bb0a759bf6cab9e5de69fa72d61163b76176d2a8beceb7455a228322c224b06be14fc98", 0x7a}], 0x2) 03:09:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240003000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:29 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x700}, 0x2c) [ 1316.827687][ T7180] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240004000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:30 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000a07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240007000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1317.425169][ T7221] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000a000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1317.471901][ T7221] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1317.472153][ T7227] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:30 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1317.578000][ T7231] __nla_parse: 1 callbacks suppressed [ 1317.578079][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000e07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1317.687614][ T7241] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1317.908957][ T7241] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000e000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:31 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000f07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x3f00}, 0x2c) 03:09:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xe17, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1df}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000fa00000000e23f0003000001000000000000004262b700fff08ec0a58b0bf787ffff0403fffffff300000a00ea109c38f0be75ba278bf622e1d15e56b9d475da4af2aa0f028ee5dafa1f2eb87bf2c9d138a9c46325d7070361f9ff3e000000001e00"/129]) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4138ae84, &(0x7f0000000000)) 03:09:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x4000}, 0x2c) [ 1318.742303][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900002007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240060000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:31 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400f0000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900004807000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000030301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:32 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3300000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900004c07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900004807000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x20000}, 0x2c) 03:09:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900006007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:32 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x100000}, 0x2c) 03:09:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x140000000000000, 0x400000) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000540)={"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"}) dup2(r0, r0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x3, 0x100000001) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r3 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r3, 0x8007ffc) sendfile(r2, r3, 0x0, 0x400008bca) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) 03:09:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000070301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000a0301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:32 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x4a02000000000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1319.709539][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900006807000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000040)='./file0\x00', 0x2fc, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) flock(r2, 0x5) r4 = dup2(r0, r3) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xfffffd7e, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) flock(r1, 0x2) r6 = dup3(r4, r2, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x116, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200000c4) 03:09:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x1000000}, 0x2c) 03:09:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900006c07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1320.441110][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:33 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400000040000, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000100)='y\x00', 0x2, 0x2) r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000300000000"], 0x17) execveat(r0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x109201, 0x0) 03:09:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x8dffffff00000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900007407000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000e0301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xeaffffff00000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1320.589508][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400c00e0301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900007a07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:33 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4f5002bc6110040b10180002279daa88d5f5acec4640ec6ffcca8fef2409662d8f6740af4794312420b78c71d7dd2e75c6a8054da62d69514843f8f5d6aa3e171108404a8873332dd0f670a939df924ade93b4b21dc64fcfcbf4c82aa38375dd769a61bc2ce32baab28b23af4466702125581bcdb7ec4334e928fde316f7d9a0f2f24354469b4f1401f145aa8915500a28b091e2841891e3dfd13aa48a622b42df761b4781bd78c64fa2bbcd41e509d6d0d0471b4068e288337a1", @ANYRES16=r1, @ANYBLOB="040026bd7000fbdbdf250f0000003c0002000800040008000000080009000900000008000800ffff000008000800ff0f0000080005006f96000008000900cb00000008000600fffffeff34000100080004004e240000080009000300000008000100020000000800050003000000080005000400000008000b00736970000800040000bd00002800030008000300030000001400020065727370616e300000000000000000000800080003000000"], 0xb4}}, 0x48094) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r2 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='keyring\x00', 0xfffffffffffffff9) keyctl$get_persistent(0x16, 0xffffffffffffffff, r2) 03:09:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x2000000}, 0x2c) 03:09:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400291d0301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000207000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:33 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000001140)={'bridge_slave_1\x00', {0x2, 0x4e21, @multicast2}}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000000c0)={'ip6_vth0\x00', {0x2, 0xfffffffffffffffc, @multicast2}}) r2 = accept4(r1, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80, 0x80800) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000100)=""/4096, &(0x7f0000001100)=0x1000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sequencer\x00', 0x401, 0x0) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000001200)={{0xa, 0x0, 0x0, 0x3, '\x00', 0x18f}, 0x0, [0x512, 0x2, 0x1f, 0xfffffffffffffffb, 0x9, 0x3, 0x2, 0xfff, 0x5, 0x3, 0x0, 0x9, 0x0, 0x4, 0x7fff, 0x7, 0x100, 0xffffffff, 0x9, 0x5fabf0c6, 0x2, 0x7ff, 0xfffffffffffffff9, 0x23, 0x4, 0xffffffffffffff7f, 0x9e1, 0x1ff, 0x7f, 0x1, 0x3, 0x3, 0x80000001, 0x99, 0x5, 0x7fffffff, 0x7, 0x8, 0x4, 0x8, 0x1, 0xaaf, 0x2e, 0x2, 0x40, 0x4, 0x1, 0x8, 0x81, 0x7ff, 0x40, 0xea, 0xff, 0x3ff, 0x600000000, 0x415, 0x4, 0x8, 0xcdc, 0x3, 0x2, 0xbe16, 0x2, 0x800, 0x4, 0x4c2c, 0x7, 0x40, 0x401, 0x8, 0x0, 0x0, 0x17, 0x8, 0x8, 0x7, 0x5, 0x0, 0xc810, 0x1, 0x308, 0x100000001, 0x800, 0x7, 0x7, 0x40, 0x7a9a3567, 0xb6, 0x89, 0x80, 0x5, 0x7f, 0x3, 0x2, 0x3, 0x1, 0x5, 0x100000000, 0x3, 0x1, 0x5, 0x0, 0x5, 0x2, 0xfffffffffffff27b, 0x5, 0x80000000, 0xffff, 0x1, 0x7ffded81, 0x8000, 0x70, 0xffffffff00000000, 0x4, 0x80000000, 0x5, 0x80, 0x401, 0xaea, 0x6, 0x3, 0xfffffffffffffff9, 0x40, 0x0, 0xf662, 0xffffffffffffaddb, 0x1fffe00000, 0x200], {r4, r5+10000000}}) setsockopt$inet6_buf(r1, 0x29, 0x80000000000040, &(0x7f0000000080), 0x2b) [ 1321.061867][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:34 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000307000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:34 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20000, 0x154) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000180)=0x8) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000200)=0x3) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x10000}, 0x8) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000240)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x80000000004e24, @dev={0xac, 0x14, 0x14, 0xd}}}) r3 = socket$inet(0x10, 0x3, 0xb) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e28000000110affffba010000000009b356da5b80d12ce34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:09:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24001d290301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:34 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x53, 0xb9e3ce1810d7748a, 0x0, 0xe251, @buffer={0x0, 0xe6, &(0x7f0000000040)=""/230}, 0xffffffffffffffff, &(0x7f00000001c0)=""/162, 0x8, 0x4, 0x3, &(0x7f0000000140)}) sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[{0x10}], 0xec}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003980)=ANY=[@ANYBLOB="8000000000000000100100001000000021f648afb4c00d39541b098fc9bd3856ffc8a743d5ffd52f23214a4d1f0f6211e711a9d73697665610541623e9a504d31fdac1937bb2a9c8f1224d9d0875b56338fc0b35f312592ae05cf18ff01ec4325a0e6098f63ba4202cbc4376013553c4b015ca870d78e7d29c1e22e900000000e0000000000000009d01000000020000e6986fc94e3ebd10477455ff568869f3974ec1879d578477b6b8f7a9e6ffde721b30cecbbd75586adce7566a214942bdcdf9d8ec65149ba4973bf7f82d224a80dad4ca22ab25dbeff1c69077756365548d5d06bd6ea27cbd8f3de9cbf869798f785f79b0b87c6a67212d4e0632ca0d4340d59e3771e4930ea7032f18608610cd53b5c5ccff5a4ad02bb5ba9b549df86a0e9a98024d18543435bcb1b6fd36bb49639112f7fc14adce9b88e510f7f723efed9f153fdab312835620a940e2fda73c9e3e20abb9f84dde020c62d9fb00000010100000000000008f01000005000000425a6da42758e64cd8fe983f0dbfab69e411ff90160cc3caa2b5fa43af5118892363c5614edae7f01efbfb9b1a93ff10a5be219d5bd61bfdd5e9524f3d653f6204d0aa26402935056a686327c13f2e7e95d5f412932a82e5916f4120d88c075b299b6794b1047e1bfe7d5562cc788119db367e4a7ca2c088d91c1b42aabc2df4ff80cee879595d617226be7b43b81be5e1f75d085872e6c9aa5b25a969050f313e324808791f836d98173ab8126c7bc1f2e5836bb0ac72ab1f8053a40bd2cfd0da04f5193a9d6be5a0e01a46218a8fa00949d9f18d9fb338025c749bd979794efde5e4a3d4cdee5f6f93495723f92c4017a913348f1078dadf690ccc491ddd3ac9fbec97ddf411d07b95d9b9c7b62c3e7f0093c3a4efff2922d7d4c7632e09f888f374117827b59a003a1c505404673b73c9679881299b7a6cd1a4c38c3de09c191a7385d558e151f1e8427c2f9a56ce522395dd814e8acdfba50d83547d82a57fcb29b9c2a8f409f3095713bdf6aef17a36456b45e797abe9743577cb27eecde7c1ceee14cae07e9921907042014597e796ce8f7017b1e1d829deb62429b7fa58fd272cd315e73e3486437c148a4f52ee0c2b20f5de331f112f5232b0408fc642cdb94d8e5bd24e9b1046e31c803534246761fbd6a93fe8a3301d041219f3092f81a953a1451c1ea02389c2a20c4487923eba83db45b1826e1697786f847f3d0d6a5ed8018f6ac2ab0b1ec6679ebad5a4d795859a2a0d6505b0528b70c5ece887e392a5bba104adf8bd60b9d85a262de776938a5053dac71d575bc59136010f77110787443a21e9586fdd079d87d995f644d6724ff71fb71d715bdca0dd509829bfc8bc35679a62cc93e51a43ffe666b77f5c3fc5867397bfed4d0665d580d255409893462dd7b5a6e4104f0aca38948b095e29c52fc8b667eb70ced68163496792bd0eb8a51c1c4a3b50a0f553a84dd04c0fba5756fb79ad75a71b091ce678ee55a1dc2573f9329c66911fab31596bfcc01835f04ee4ab6bb653f1a0497534b4f24fdb55330ab10e62ab61bc2dfed5008d8901c5880ec67ac6cdf3c8b13e83b9da4633a35eb24999a9ceaae5eb45722291d50e85743b8942feaf2a99376e94da99f0d022060fae4620f67315ff66f63161d41f456fda07096c593a3352a92412cc1967573fb24a5b67ae7fbfbe7719b88a459797bd150152653c27247ac2a290e2dcb36660c89a4df72b2392cd1bd098bc836dac3590bd39a05b48494cf86f5a2b91d4677b2174d2db3ea10bcc10f39bbdd819bce1a743864ba89d8cea6751afff8e3482a681b99ea967a0692c50b66dfd6f3e5d427317c157bfa41d77f92718f906d1634b5fef8304896412b80d60af33c1e7c3bc1fe3a6d2dd5d4799ff412dcbaf2c00d1cc7dccfc2795f3e5e05ccb8381bff20715e3daec18d08b732856d228ba5d17adc6434dbe43e27d17042c90e4fb3c11d77dc479ecdc7eea75b2873fdcdf636a57c2d69a89e1cbaace6b92fc3b95c67a62eeb3de6424088d09099678dab47664618d7a2b932ffb4677da3b62cc50f4ad08c12060f3df1e033efc858317634726027fc00c712ca4c5df50667a266877dd73c6cd4b9f829be97fb5a3b32a623e0eb1e3897b9a5a34a37079e0e5edb5e22742423ecb2da1d0d80ddc8804a2441d54decb00b36453452466805d958571de2ca15e9f2bfa86087eb9c57a7535b9a5a6f7a43faaa67202a304deb0a77439cc57d6e31edcd00bee39928a63a047c707149b72c5c8b621e8287f2e8a4a8cf5745cc88734693dcbfd17572e48ee89923a650e235f1f2a8d0e2433c0f8a3e1e211b3122674b9f4d94cfe6390f28231c120b00b091a2a0a0c87b044e0ae485712cfb24f032e8cee7b8115200320854b16ebfa8413fc1589c5e0368cde0a2301dc79fe72270741f886f8ac84fb9316a9fff35360525bca2f9dc40949b11f175926e8bb618bc2bfbb9bc5db34742a006af68b7ded210cee4213989b4f76e7058749a7ade8b8edf5d4d48d864c948badfe550d21d98c9da57aac608e502694124a39dcdb69df1e65ef8b77bfe60911407138d73ef43cab96571e18d599895e36f9a366da37b5dee006efbb4f9c7339db3848a147784ab5f91b7216bb4a852520796184e9bbdff9117053aed390d0dd8ad9c0771bdd8125ddd1dd342a670d9c455ec7ef7cd826e4b7dfcfaa861d5bd9f2aab3465c1301a9784259ec040cc44026441885ddcfefb0ed08685321af850d7af88312a17fcdcf2ab4836f67f57ccea4070b09f20f67eee92e5a50545ee3b032de5ff326c5b674c584db040fb1b18b7812e511cbd124cb48a6ad8739bbd1f0fbf6bd913f7e38264ca187469447c77066953170ed6ca1ff70124aa0a1a4e5eec2b9fead093b63e38025cf1b056087f658fdf30215e3faed918598af9f8bd5aaac769260de5b2aec8f929351570f4d8337a9e8164b05c2874a19f207988b3d3d899938b117bec030783b3a922bc87c5826911a70e389b716e29beb4a2497d38ac86597b562b4bb925d64b5781553ed6662fbb7ed19797cad2064d95beef0e183d2ff036ee72118d18b29e173ae65cd024e2b760a1d3f32de7a8430937e8e6f6587ed4c2d204f95b7670ef090d34f3ad0996f6cdfda28b3360df5b19bc7963e6b5737417017156f8719763c7e841456879215ef13064d396f689fd1da68a0a334bd3a32951dd4ec4ed6542d5ecc1a6a19480ec66fe043acc514c8239c6697684cbc7c812bf50068b78936f3812d80ae09f09e33fd203043a4dc071d7ca001f49ea058f14663683fc41c2e4aa2f850aaec03d35e4ec26a1de9a82a576e85cb3a4ded2e3466046d12b1c95db18e570e7243c4d341e69acfabb6044dc9c0dec05429577c9e3c4970275d918ffb7a9b4b2ce6d50141721e42d22182e9dc755f1e642ed89bd3f6e2552413043e7caff5784e187d7565dea59c00f9d77ae4310f229ea93b97cdbe8367f52bf9ec9aebdd04b48fdfe87235e80049a627bbbdc320a42cc4a95ae787bd5c4e9107ea29dc02d43283c91f27be493efa2666e821c39cdfee4931455b4c2608f6b1b1c28cd6e62de0ca79d6bf0f650c85d9563ea84f0e5227e412cc2167eeae13d77998378a92e3660c54c786733b5def52e5e48647df1031e1e74f925ac2d7a50929b70b2d2d528d6cb08569bc178733876bc9b6845dc941a5e3c0649eccfa906a8b2f70ecb64c3ba0e31e9e21d2a56c83c314fe53333dfd34fcc3814a21feb32cdbd468cf2166b7ad274b7fb41f445db8e3293f9b0571f5d95c676220cd492e61b3153b3385ada19cd8c1b21ffca5dc6f2cf746153a33b5d8b1b5277d9c65cd7934120c10f98c7bc53a5507b0483b7ed7c7e536bf83b08f7cf4769ed4eaa493a70add33d3170e0b8fc0614800003a0a6ef5e14617cce4580483cd8d0ee0620f854f485bcf2869e23d75a850788c58e77036e2550a64569268b7c503e05ffac3ece847cf7c9e4822c1547eacfc8fa2e420cc2b33fe20d04ebd4496389d89aae408c822630b5c3698c3f6d76398a7fb460ea9fa9274cdd1864ba7e21b879103d60adc9928829ec8e38ab4a93045e179c0a432aecbd6831e99f81d644a94223b5cf6b9b6952bd3e147edd330c0a27b64a38f33f95008d0150457051892e21c5e0979e72dcb38ecaf5ef9acbbb5248beb33d68c0b84c1ffc0fb8eca0c27b68c0e56a6ccdd859d24ac767aabf39bc14c481bd1c6fdd3ebd04eb6d241d891512170990f67c35fd20ab096647e36e9bc17bcc61590e75393f17c3de32a93572a55254d0fad72903b901bfdd579e9ab32abe05ce60034796af2c6121dd44266d4e08184e15cd0cd320f19e6715029faece0a8a1eba7a50bf021cb0dcc1c3b066959de33ec0af60736d3525418dc6b5582dc83d04af0e9e5ffea4a7fc90851238aa19eadf7d035d079a1ae9b002166f2819316dd2d4884e836d5c6acf656d5101ef3f450393c6a385dbaea2beebfa3d885f1118d41db40fd753c04c32f3d658b8279206ecc473f267e5a5d82b4dd6fd5aa6a50e674439eb129022d5541ba105a821f1c56be06fcf83a0e3a60dead692efa5bf9921abaca31b9db21e1733d2d3dbdbf0074f7a52eccf45187fbdd1ec08cb1957e297c39a65e64430089f3cbe157b706461e7a2acc1ad941921815a4dcb254cf32947a06f388ca6e45f3af8aa0664798785990f90d4472f66d8b4d72dcf3af0f5e594cc6939051e39f96dbe8eefee490744facc9db7823ff2c5a040000000000000029cd510ed41a2c56d7e56a7a35e4eb0920924bb90e69cc87f57259c9afe3880fe3d9254035cf341653c52547527c5702c5741801877ff787007403d1a0c1d7151d657069582e09a76f84f841612fd61a56643e4b59acd4c7b906a0fe337ebf2e17c7dab4f450e1a82997f9f666ae405ac20d6b204ff1e6b709ebea563cfbdfc1896cd2d37c58a7337e43f7fd5135b7ef4bd150f6049b220eb5a3fdcfb9226290a8f0f6369d0956de00f5b0a2a9109ff810a905de4a13a1f935ae8105e3a2391daa86af8d19993c21e222cc933e6226d961578c91ac77e4bf9fa22662b390b44a1f8eccf814c1ac40cc25042d141fa86ec00f25669b017a031412d1ab16a15789e0931c6e6a9f3d0f8561868e912cf172fa9b5d8c9eef1801d0c1919d251640d20a540bb6abd57cea5c37d92da93168696cb4a757504fb6a5677dbf1228fa1d43a96a7f0922528cc4a33b7a6d2a7ff5c420136ca63caa822184dad97a1de400210a3f4a3e36a42c9ed00a2a2a9fd22bb7fe4c985355a2ece1ca908a7a8a7c8b6da347f6a2f5169edc0edffc0949314c19fdf3a42f8d668395f2211b7def63c2f9cb8ccfc632085e514b1b2f8048d9902fd7e8167491fa8c0bbb70ca5a0cf9f6143bae5b2ee07868e2b445090325fff9f723a77ee99b54fa1acf4c51c6ee38f441932b89456ccd5957fccce0e322b304abf04e5bc04a9bbc8a5e8db2b6c3924824a7666d89a99b8a6dcff66a88b15cbfd1b4acaef6b0fcb853b46213da5ec4c06b79ee2428fbe3e3c78c7127d9359e70d1cb17997ead1960c95c382a883c088ab4300044f93befe5918e567ca4a39c4ac90c84e3a2084ead59f2087781118ecc1e91712241c168015a07ef540f5f08ee20b356f958a7032c21102ad4d90d28e10f91238dce2289b93fa6f0d7dcf6e27f50e1bb487d21ed9d9e5012b09cca2146697e6e5cfc5d970ef21aeb627cacc57d185e09d8297206d01757ec1962fe0807a7f7b29c0bc572a3b5a3b46631084d53b921a7cfaa20c63072ce9e9b45fe05c08263f57bfa424387785dc749a2fba6284012e4228de08fdc0efbfa9c99058543ad9be684f8caa17abd800f305bc6628a58cead45b89d4a95bf1c51fb4d2bea796a57633ac78fec1e9b7580f5523c859d21c30680d0a0dfa38369b2d4da69e9e8905f9710ad4059592def61653ea7e5774ac35566e0fab5f3faa45f029245fa252b5d29f34d42455e33ba789608ad0300c7baeffdc030d96ad21b988c7a269fdaf875bf0ca52d23ed8858ea577e0b75924ec3387bdd1dd92f20bd6602ffd7132528bb61c46bcfadb141dacb7fdb1bc0e5667deb1498a7e0b892cdf4658061ace68758a8470fcd9ea4a1218216b93429bf05f48f05f2aeb1546e452d2ff1ad93baf6001849c5c0bea23e51caa8e5764b1ebe7507250861c6d97a9979443806be9ff3cce1aa54963fe0282a2a7ae57295b41b95b25b16f356ac362d4a693d54bd77c60729db2630052d490528010000000000003a000000ff0f00001c8906eee7c746e48a31c6314d4c4cec9ef9379f504a95f68d6d95d9deba575b49fde3b7bba11729d1f0091eb130df0f7b8423c2f00ee8b3ef05cbdad70b1fa34afa981295ce52f5cd6e6f7ab5de17f9a414a0f6444271c2199671a50f0e3eb9be8eed4ac1837293869529c24e0831b6cc03fcc4ba646abd763a0ba69b22dd32ad9e04ccb97d07a449514d9069e8de76d8a02cd601a93ac07c7a083399ece39b7bd01b822204c4894fcc9add5201ef12fac0b5cbf65b24e216385028815d277c67f1fa5f1d0a25d32de39cb149956bb35e5df35002667206bdb59d2cd20483a06fb9f366fcd6fdfda50a1d5b67563814438d78ed7a3daccd31bd2088970c50ea947c728aa776986dd6d4fced6077fbe8a06a53260ea74592"], 0x1298}}], 0x1, 0x0) ioctl$sock_ifreq(r1, 0x891f, &(0x7f0000000300)={'veth0\x00', @ifru_names='teql0\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x101, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000440)={r3, &(0x7f0000000400)=""/61}) 03:09:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400003f0301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x3000000}, 0x2c) 03:09:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000407000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:34 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000600301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x102}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r1 = socket$kcm(0x29, 0x805, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)=0x10000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000240)={0x0, @speck128}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD4\x88\xbc\x13V7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 03:09:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:35 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1322.024684][ T7469] validate_nla: 34 callbacks suppressed [ 1322.024695][ T7469] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1322.041131][ T7469] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1322.050117][ T7470] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1322.063926][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000507000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000ec00301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1322.226203][ T7485] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:35 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000f00301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1322.268125][ T7485] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1322.321299][ T7492] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000d20001ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1322.578444][ T7465] device nr0 entered promiscuous mode 03:09:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000607000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:35 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x4000000}, 0x2c) [ 1323.038827][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1323.056216][ T7513] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1323.117938][ T7513] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1323.161497][ T7516] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1323.304934][ T7473] device nr0 entered promiscuous mode 03:09:37 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x3, 0x81, @value=0x6}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {0x400, 0x7, 0x7fff, 0x3ff}, 0x16, [0x2, 0x80, 0x1, 0x6, 0x2, 0x81, 0x9, 0x200, 0x4, 0x9, 0x6, 0x280000000000, 0x3, 0xfc, 0x24f, 0x7fff, 0x3, 0x6, 0x81, 0x8000, 0x0, 0x6, 0x0, 0x8e, 0x100000000, 0x1, 0x8, 0x1, 0x100, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0x2, 0x8, 0x646, 0x0, 0x100, 0x40, 0x4, 0x5, 0x99d, 0x40, 0x20, 0x7, 0x6, 0x1, 0x4, 0x1, 0xfffffffffffffc00, 0x3, 0x5, 0xe2, 0x286f, 0xb7, 0xff4, 0x3, 0x10001, 0x3, 0x67, 0x1, 0x20, 0x4, 0x989d], [0xfffffffffffffffd, 0x8, 0x11, 0xf2, 0x7, 0x1, 0x3, 0x1, 0x8001, 0x2, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x4, 0x7, 0x81, 0xbdaa, 0x900, 0x7, 0x7, 0x1000, 0x9, 0x0, 0x8001, 0x6, 0x4, 0xffffffff, 0x5, 0x5, 0x2d8c, 0x788d, 0x6, 0x36a, 0xffffffff, 0x8, 0x8000, 0x100, 0xfffffffffffffeff, 0x200, 0xe7d9, 0x2, 0x0, 0x3, 0x1, 0xfffffffffffffffc, 0xfff, 0x1, 0x1, 0x2, 0x7, 0x1, 0xbbf0, 0x9, 0x2a, 0xbc63, 0x5e, 0x80000000, 0xd0c, 0x800, 0x9aa, 0x7917], [0x7, 0x8, 0xd5d, 0x75f, 0x3, 0x3f, 0x9, 0xf6, 0x8dd, 0x81, 0x7ff, 0x54, 0x6, 0x1, 0xc1e2, 0x8, 0x7, 0x800, 0x80, 0x7, 0x0, 0xcc, 0x100000001, 0x7, 0x6, 0x4800000000000, 0x20, 0x1, 0xb8b8, 0x6, 0x7f, 0xe76, 0x6580, 0xfff, 0xbf7, 0x1, 0x80, 0x0, 0x4, 0x400, 0x9, 0xff, 0x1, 0xf8, 0x1, 0x5f41, 0x7, 0x100000000, 0x2, 0x8, 0x80000000, 0x100, 0x5, 0x100, 0x3, 0x0, 0x7fff, 0x2, 0x20, 0x80000001, 0x7, 0x4, 0x421811f6, 0x3], [0x2, 0xfffffffffffffff9, 0x3c, 0x400, 0x1, 0x2, 0x1ff, 0x5, 0x1, 0x3, 0xffffffff7fffffff, 0x5, 0x2, 0x80000001, 0x8, 0x8000, 0x6, 0x8, 0xf1, 0x7, 0x4, 0x4, 0x4, 0x2, 0xa6, 0x100, 0x9, 0xffffffffffffff02, 0x2b, 0x4, 0x8, 0x6, 0x5, 0x9, 0x101, 0x1000, 0x4, 0xa1, 0x100000001, 0x1, 0x4, 0x100000000, 0x200, 0x2, 0x3, 0x800, 0x819, 0x0, 0x1000, 0x0, 0x7, 0xc3, 0x2, 0x3ff, 0x400, 0x6, 0xf1c, 0x1, 0x1, 0x7, 0xae9, 0x2, 0x4]}, 0x45c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x0) 03:09:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000020301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000707000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:37 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) [ 1324.100549][ T7529] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1324.121294][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:37 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000030301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000a07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:37 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000e07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000040301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x5000000}, 0x2c) 03:09:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e23, 0xffff, @loopback, 0x5}, {0xa, 0x4e21, 0x2, @mcast2, 0x2}, 0x0, [0xe0, 0x6, 0xfffffffffffffff7, 0x6, 0x2, 0x7, 0xfffffffffffffffd, 0x9]}, 0x5c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@dstopts, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0xe0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x61, 0x3, 0x3, 0xffffffffffffffdf, 0x0, 0x400, 0x7f00, 0x4, 0x2, 0x5, 0x0, 0x7fff800, 0x2, 0x1, 0x1, 0xea30, 0x101, 0x3, 0x56aae00f, 0x8, 0x72e, 0x8001, 0x80, 0x2, 0xa00000000000000, 0x6, 0x80000000, 0xba06, 0x5, 0x1f, 0x40, 0x7fffffff, 0x2, 0x7, 0x410ed54c, 0xffffffffffff8000, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x4, 0x40, 0x6, 0x7, 0x78a6b8d3, 0x7}, r2, 0x7, r1, 0x8) 03:09:37 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000f07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000070301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1324.927414][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900004807000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:38 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x24a, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000a0301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900004c07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:38 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000e0301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x6000000}, 0x2c) 03:09:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900006007000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:39 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000600301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xd) write(r1, &(0x7f0000000100)="a6", 0x1) ioctl$TCFLSH(r1, 0x540b, 0x1) [ 1326.186764][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:39 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x2e) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x100000000, 0x1], 0x60, 0x5, 0x1, &(0x7f00000001c0)=[0xffff800000000000, 0x3, 0x3, 0x8, 0x2], &(0x7f0000000240)=[0x2, 0x8, 0x92f, 0x10001, 0x2, 0x7]}) 03:09:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000501ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900006807000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xea53, @mcast2, 0x1}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x10001}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x80000000, @remote, 0xffff}, @in={0x2, 0x4e20, @broadcast}], 0x94) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) fchmod(r1, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x100000000, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0xd000, 0x3, 0x2, 0x9, 0xdccb, 0x3, 0xb83, 0xfff, 0x200000000, 0x6, 0x8}, {0x2000, 0x0, 0xf, 0x10f8c0, 0x80000001, 0x2000, 0x3, 0xac, 0x544b2c3, 0x4a, 0x800, 0x9de}, {0x1000, 0x4000, 0xb, 0xf2b, 0xd0, 0x1, 0x5, 0xb6b, 0x1f, 0x400, 0xc2c, 0x7fffffff}, {0x1, 0x4000, 0xd, 0x100, 0x3, 0x4, 0x1, 0x7, 0x8, 0x0, 0x0, 0x3e1}, {0x1, 0x2000, 0x0, 0x8, 0x2, 0x1, 0x9, 0x3, 0x6, 0x7fff, 0x3, 0x80000000}, {0x0, 0x1, 0xf, 0x8, 0x0, 0x8, 0x1, 0x100, 0xb3, 0x2, 0xfffffffeffffffff, 0x7}, {0xf001, 0xd000, 0x1f, 0x0, 0x8000, 0x101, 0xfffffffffffffffe, 0x3, 0x8, 0x3186, 0xf23, 0x100000001}, {0x2000, 0x103000, 0xa, 0x0, 0x6, 0x969, 0x0, 0x0, 0xa3, 0xab6, 0x4, 0x101}, {0x2000, 0xf000}, {0x4, 0x1000}, 0x10, 0x0, 0x1f003, 0x1, 0x6, 0x0, 0x4000, [0x8, 0x4, 0x1, 0x5]}) [ 1326.379474][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:09:39 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000601ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900006c07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:40 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x7000000}, 0x2c) 03:09:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:40 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x4000) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000002c0)={0x3, 0x57, 0x2, 0x1000, 0xc, 0x400, 0x4, 0x80000000, 0x200, 0x3}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x27, 0x10000) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0xedb610b2b54c520c}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000340)='./file0\x00', r3, r4, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000003c0)) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xffff) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1}) [ 1327.172845][ T7667] validate_nla: 23 callbacks suppressed [ 1327.172855][ T7667] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1327.200698][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:40 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x3300, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1327.218693][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1327.233025][ T7667] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x404001, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d09004bd4e40d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000040)={0x7, 0x9, 0x4, 0x400, {0x0, 0x7530}, {0x5, 0xe, 0x0, 0x80000000, 0x8, 0x10000, "2a1375c4"}, 0xe2, 0x7, @offset=0x7fffffff, 0x4}) 03:09:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900007407000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:40 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1327.520078][ T7690] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000901ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1327.569023][ T7690] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1327.621590][ T7693] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1327.880176][ T7702] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900007a07000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) 03:09:40 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x4a02, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000a01ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1327.948517][ T7702] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000203190000005a000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1328.022016][ T7712] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1328.127912][ T7717] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1328.156404][ T7714] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:09:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x20000000000008}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x8000000}, 0x2c) 03:09:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000b01ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) 03:09:41 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 03:09:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(r0, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getgid() sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000301ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679"], 0x33}}, 0x0) 03:09:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x78}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000240)={@mcast1, r2}, 0x14) 03:09:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000004000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1328.803664][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 03:09:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f0000000203190000005a000000068100ed853b09000300010100ff3ffe58", 0x1f}], 0x1) [ 1328.880181][ T7734] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1328.907954][ T7734] CPU: 1 PID: 7734 Comm: syz-executor.5 Not tainted 5.1.0-rc6 #80 [ 1328.915836][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.915842][ T7734] Call Trace: 03:09:41 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1328.915868][ T7734] dump_stack+0x172/0x1f0 [ 1328.915886][ T7734] dump_header+0x10f/0xb6c [ 1328.915902][ T7734] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1328.915917][ T7734] ? ___ratelimit+0x60/0x595 [ 1328.915930][ T7734] ? do_raw_spin_unlock+0x57/0x270 [ 1328.915946][ T7734] oom_kill_process.cold+0x10/0x15 [ 1328.915961][ T7734] out_of_memory+0x79a/0x1280 [ 1328.915976][ T7734] ? lock_downgrade+0x880/0x880 [ 1328.915989][ T7734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1328.916003][ T7734] ? oom_killer_disable+0x280/0x280 03:09:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001101ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1328.916013][ T7734] ? find_held_lock+0x35/0x130 [ 1328.916046][ T7734] mem_cgroup_out_of_memory+0x1ca/0x230 [ 1328.916060][ T7734] ? memcg_event_wake+0x230/0x230 [ 1328.916080][ T7734] ? do_raw_spin_unlock+0x57/0x270 [ 1328.916093][ T7734] ? _raw_spin_unlock+0x2d/0x50 [ 1328.916110][ T7734] try_charge+0x102c/0x15c0 [ 1328.916121][ T7734] ? find_held_lock+0x35/0x130 [ 1328.916141][ T7734] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1328.916154][ T7734] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1328.916168][ T7734] ? find_held_lock+0x35/0x130 03:09:41 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1328.916188][ T7734] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 1328.953740][ T7734] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1328.953757][ T7734] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1328.953777][ T7734] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 1328.953794][ T7734] __memcg_kmem_charge+0x136/0x300 [ 1328.953814][ T7734] __alloc_pages_nodemask+0x437/0x7e0 [ 1328.974686][ T7734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1328.974709][ T7734] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1328.974727][ T7734] ? copy_process.part.0+0x1d08/0x7980 [ 1328.974744][ T7734] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1328.974761][ T7734] ? trace_hardirqs_on+0x67/0x230 [ 1328.974783][ T7734] ? kasan_check_read+0x11/0x20 [ 1329.046668][ T7734] copy_process.part.0+0x3e0/0x7980 [ 1329.046685][ T7734] ? psi_memstall_leave+0x11c/0x180 [ 1329.046701][ T7734] ? sched_clock+0x2e/0x50 [ 1329.046713][ T7734] ? psi_memstall_leave+0x12e/0x180 [ 1329.046732][ T7734] ? find_held_lock+0x35/0x130 [ 1329.046744][ T7734] ? psi_memstall_leave+0x12e/0x180 [ 1329.046770][ T7734] ? __cleanup_sighand+0x60/0x60 03:09:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001201ffff000000000000000000000000080015000000001e720008008d2b9b9590843173a4c4924b32f380cc87c679f4705a383e56df98f85f710c3f48097b3f994db273db8d5d1e6c934e72e79c14abed8823"], 0x57}}, 0x0) [ 1329.046781][ T7734] ? __lock_acquire+0x548/0x3fb0 [ 1329.046795][ T7734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.046822][ T7734] _do_fork+0x257/0xfd0 [ 1329.080252][ T7734] ? fork_idle+0x1d0/0x1d0 [ 1329.080270][ T7734] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 1329.080283][ T7734] ? lock_downgrade+0x880/0x880 [ 1329.080296][ T7734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.080312][ T7734] ? blkcg_exit_queue+0x30/0x30 [ 1329.080328][ T7734] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1329.080343][ T7734] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1329.080356][ T7734] ? do_syscall_64+0x26/0x610 [ 1329.080369][ T7734] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1329.080390][ T7734] ? do_syscall_64+0x26/0x610 [ 1329.198817][ T7734] __x64_sys_clone+0xbf/0x150 [ 1329.203505][ T7734] do_syscall_64+0x103/0x610 [ 1329.208114][ T7734] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1329.214014][ T7734] RIP: 0033:0x45b5f9 03:09:42 executing program 1: syz_emit_ethernet(0x258, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x33, 0x0, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) [ 1329.217930][ T7734] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1329.237540][ T7734] RSP: 002b:0000000000a4faa8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1329.246129][ T7734] RAX: ffffffffffffffda RBX: 00007fba1da18700 RCX: 000000000045b5f9 [ 1329.246138][ T7734] RDX: 00007fba1da189d0 RSI: 00007fba1da17db0 RDI: 00000000003d0f00 [ 1329.246146][ T7734] RBP: 0000000000a4fcb0 R08: 00007fba1da18700 R09: 00007fba1da18700 [ 1329.246154][ T7734] R10: 00007fba1da189d0 R11: 0000000000000202 R12: 0000000000000000 [ 1329.246163][ T7734] R13: 0000000000a4fb5f R14: 00007fba1da189c0 R15: 000000000073bf0c [ 1329.280158][ T7734] memory: usage 307192kB, limit 307200kB, failcnt 5172 [ 1329.302300][ T7734] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1329.318348][ T7734] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1329.325357][ T7734] Memory cgroup stats for /syz5: cache:56KB rss:166516KB rss_huge:94208KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:0KB active_anon:166700KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1329.369073][ T7734] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=10990,uid=0 [ 1329.397319][ T7734] Memory cgroup out of memory: Killed process 10990 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB [ 1329.430324][ T1043] oom_reaper: reaped process 10990 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1330.865786][ T1553] page:ffffea0000e90000 count:512 mapcount:0 mapping:ffff8880a08335b1 index:0x20000 compound_mapcount: -1 [ 1330.878837][ T1553] anon [ 1330.878852][ T1553] flags: 0x1fffc000009000d(locked|uptodate|dirty|head|swapbacked) [ 1330.889556][ T1553] raw: 01fffc000009000d dead000000000100 dead000000000200 ffff8880a08335b1 [ 1330.898245][ T1553] raw: 0000000000020000 0000000000000000 0000020000000000 ffff88805d35c800 [ 1330.907325][ T1553] page dumped because: VM_BUG_ON_PAGE(compound_mapcount(head)) [ 1330.914973][ T1553] page->mem_cgroup:ffff88805d35c800 [ 1330.920926][ T1553] ------------[ cut here ]------------ [ 1330.926497][ T1553] kernel BUG at mm/huge_memory.c:2716! [ 1330.932773][ T1553] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1330.938857][ T1553] CPU: 0 PID: 1553 Comm: kswapd0 Not tainted 5.1.0-rc6 #80 [ 1330.946055][ T1553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.956140][ T1553] RIP: 0010:split_huge_page_to_list+0x20cc/0x2de0 [ 1330.962651][ T1553] Code: e8 59 33 c5 ff 48 c7 c6 00 2d 74 87 4c 89 e7 e8 1a a2 ee ff 0f 0b e8 43 33 c5 ff 48 c7 c6 40 2d 74 87 4c 89 e7 e8 04 a2 ee ff <0f> 0b e8 2d 33 c5 ff 4d 8d 77 ff e9 e6 e7 ff ff 41 be 02 00 00 00 [ 1330.982261][ T1553] RSP: 0018:ffff8880a61c7630 EFLAGS: 00010293 [ 1330.988325][ T1553] RAX: ffff8880a61ca440 RBX: ffffea0000e90080 RCX: 0000000000000000 [ 1330.996296][ T1553] RDX: 0000000000000000 RSI: ffffffff819a0c42 RDI: ffffed1014c38eaa [ 1331.004293][ T1553] RBP: ffff8880a61c77a0 R08: 0000000000000021 R09: ffffed1015d05011 [ 1331.012278][ T1553] R10: ffffed1015d05010 R11: ffff8880ae828087 R12: ffffea0000e90000 [ 1331.020261][ T1553] R13: 01fffc000009000d R14: 00000000fffffffe R15: ffffea0000e90054 [ 1331.028266][ T1553] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1331.037201][ T1553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.043799][ T1553] CR2: 00007ffcd8869ed8 CR3: 000000009033b000 CR4: 00000000001426f0 [ 1331.051785][ T1553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1331.059785][ T1553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1331.067766][ T1553] Call Trace: [ 1331.071077][ T1553] ? trace_hardirqs_on+0x67/0x230 [ 1331.076127][ T1553] ? kasan_check_read+0x11/0x20 [ 1331.080992][ T1553] ? mark_held_locks+0xa4/0xf0 [ 1331.085768][ T1553] ? can_split_huge_page+0x490/0x490 [ 1331.091064][ T1553] ? __put_page+0x92/0xd0 [ 1331.095396][ T1553] deferred_split_scan+0x64b/0xa60 [ 1331.100522][ T1553] ? split_huge_page_to_list+0x2de0/0x2de0 [ 1331.106342][ T1553] do_shrink_slab+0x400/0xa80 [ 1331.111063][ T1553] shrink_slab+0x4be/0x5e0 [ 1331.115489][ T1553] ? unregister_memcg_shrinker.isra.0+0x50/0x50 [ 1331.121746][ T1553] ? __lock_acquire+0x548/0x3fb0 [ 1331.126697][ T1553] shrink_node+0x552/0x1570 [ 1331.131216][ T1553] ? shrink_node_memcg+0x1430/0x1430 [ 1331.136503][ T1553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1331.142737][ T1553] ? pgdat_balanced+0x13a/0x180 [ 1331.147588][ T1553] balance_pgdat+0x56c/0xe80 [ 1331.152283][ T1553] ? mem_cgroup_shrink_node+0x6e0/0x6e0 [ 1331.157852][ T1553] ? finish_wait+0x18c/0x260 [ 1331.162457][ T1553] kswapd+0x5f4/0xfd0 [ 1331.166445][ T1553] ? balance_pgdat+0xe80/0xe80 [ 1331.171214][ T1553] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1331.176507][ T1553] ? trace_hardirqs_on+0x67/0x230 [ 1331.181538][ T1553] ? finish_wait+0x260/0x260 [ 1331.186125][ T1553] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1331.191921][ T1553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1331.198156][ T1553] ? __kthread_parkme+0xfb/0x1b0 [ 1331.203091][ T1553] kthread+0x357/0x430 [ 1331.207153][ T1553] ? balance_pgdat+0xe80/0xe80 [ 1331.211913][ T1553] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1331.218154][ T1553] ret_from_fork+0x3a/0x50 [ 1331.222591][ T1553] Modules linked in: [ 1331.228205][ T1553] ---[ end trace 829ccad8e84a40a6 ]--- [ 1331.233694][ T1553] RIP: 0010:split_huge_page_to_list+0x20cc/0x2de0 [ 1331.240414][ T1553] Code: e8 59 33 c5 ff 48 c7 c6 00 2d 74 87 4c 89 e7 e8 1a a2 ee ff 0f 0b e8 43 33 c5 ff 48 c7 c6 40 2d 74 87 4c 89 e7 e8 04 a2 ee ff <0f> 0b e8 2d 33 c5 ff 4d 8d 77 ff e9 e6 e7 ff ff 41 be 02 00 00 00 [ 1331.260385][ T1553] RSP: 0018:ffff8880a61c7630 EFLAGS: 00010293 [ 1331.266718][ T1553] RAX: ffff8880a61ca440 RBX: ffffea0000e90080 RCX: 0000000000000000 [ 1331.274704][ T1553] RDX: 0000000000000000 RSI: ffffffff819a0c42 RDI: ffffed1014c38eaa [ 1331.283128][ T1553] RBP: ffff8880a61c77a0 R08: 0000000000000021 R09: ffffed1015d05011 [ 1331.291405][ T1553] R10: ffffed1015d05010 R11: ffff8880ae828087 R12: ffffea0000e90000 [ 1331.299690][ T1553] R13: 01fffc000009000d R14: 00000000fffffffe R15: ffffea0000e90054 [ 1331.307978][ T1553] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1331.317272][ T1553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.323982][ T1553] CR2: 00007ffcd8869ed8 CR3: 000000009033b000 CR4: 00000000001426f0 [ 1331.332315][ T1553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1331.340585][ T1553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1331.348868][ T1553] Kernel panic - not syncing: Fatal exception [ 1331.355872][ T1553] Kernel Offset: disabled [ 1331.360199][ T1553] Rebooting in 86400 seconds..