e01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x0, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:30 executing program 4: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff00989837f082138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 01:50:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty}}) 01:50:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5460, 0x0) 01:50:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8912, 0x0) [ 2081.867857][T16959] active_anon 266240 [ 2081.867857][T16959] inactive_file 0 [ 2081.867857][T16959] active_file 0 [ 2081.867857][T16959] unevictable 0 [ 2081.867857][T16959] slab_reclaimable 19640 [ 2081.867857][T16959] slab_unreclaimable 308563784 [ 2081.932131][T16969] wg2 speed is unknown, defaulting to 1000 [ 2081.969842][T16959] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16959,uid=0 [ 2081.999124][T16959] Memory cgroup out of memory: Killed process 16959 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2082.011971][T16972] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2082.025239][T16972] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2082.033686][T16972] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 01:50:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) 01:50:30 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="b3", 0x1}], 0x1}, 0x0) 01:50:30 executing program 3: socketpair(0x11, 0x3, 0x3, &(0x7f0000001340)) 01:50:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8903, &(0x7f0000000080)) 01:50:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 2082.042696][T16972] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2082.052107][T16977] ieee802154 phy0 wpan0: encryption failed: -22 [ 2082.055625][T16972] device vxlan0 entered promiscuous mode [ 2082.082054][T16972] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.090880][T16972] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 01:50:31 executing program 3: bpf$BPF_PROG_QUERY(0x23, 0x0, 0x0) 01:50:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) [ 2082.099431][T16972] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.107886][T16972] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.170052][T16984] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2082.181684][T16984] CPU: 0 PID: 16984 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2082.192141][T16984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2082.202248][T16984] Call Trace: [ 2082.205535][T16984] [ 2082.208477][T16984] dump_stack_lvl+0xcd/0x134 [ 2082.213131][T16984] dump_header+0x10b/0x85f [ 2082.217569][T16984] oom_kill_process.cold+0x10/0x15 [ 2082.223136][T16984] out_of_memory+0x358/0x14a0 [ 2082.227836][T16984] ? rcu_read_lock_sched_held+0xd/0x70 [ 2082.233618][T16984] ? __mod_timer+0x83c/0xe30 [ 2082.238256][T16984] ? rcu_read_lock_sched_held+0xd/0x70 [ 2082.243873][T16984] ? lock_acquire+0x4fc/0x630 [ 2082.248670][T16984] ? oom_killer_disable+0x270/0x270 [ 2082.253875][T16984] ? rcu_read_lock_sched_held+0xd/0x70 [ 2082.259361][T16984] ? lock_release+0x5cb/0x810 [ 2082.264213][T16984] ? rcu_read_unlock+0x9/0x60 [ 2082.268895][T16984] ? lock_downgrade+0x6e0/0x6e0 [ 2082.273750][T16984] mem_cgroup_out_of_memory+0x206/0x270 [ 2082.279394][T16984] ? mem_cgroup_margin+0x130/0x130 [ 2082.284518][T16984] ? lock_downgrade+0x6e0/0x6e0 [ 2082.289493][T16984] try_charge_memcg+0xef8/0x12f0 [ 2082.294549][T16984] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2082.300802][T16984] ? lock_release+0x5cb/0x810 [ 2082.305482][T16984] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2082.311381][T16984] ? lock_downgrade+0x6e0/0x6e0 [ 2082.316233][T16984] ? lock_release+0x5cb/0x810 [ 2082.320910][T16984] ? rcu_read_unlock+0x9/0x60 [ 2082.325590][T16984] ? lock_downgrade+0x6e0/0x6e0 [ 2082.330439][T16984] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2082.336342][T16984] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2082.341902][T16984] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2082.348074][T16984] copy_process+0x73e/0x7190 [ 2082.352755][T16984] ? rcu_read_lock_sched_held+0xd/0x70 [ 2082.358309][T16984] ? lock_acquire+0x4fc/0x630 [ 2082.362985][T16984] ? rcu_read_lock_sched_held+0xd/0x70 [ 2082.368464][T16984] ? lock_release+0x5cb/0x810 [ 2082.373147][T16984] ? psi_task_change+0x1bb/0x2f0 [ 2082.378100][T16984] ? lock_downgrade+0x6e0/0x6e0 [ 2082.382971][T16984] ? __cleanup_sighand+0xb0/0xb0 [ 2082.387921][T16984] ? psi_memstall_leave+0x170/0x250 [ 2082.393214][T16984] ? lock_downgrade+0x6e0/0x6e0 [ 2082.398066][T16984] kernel_clone+0xe7/0x980 [ 2082.402497][T16984] ? lock_acquire+0x4fc/0x630 [ 2082.407183][T16984] ? create_io_thread+0xe0/0xe0 [ 2082.412042][T16984] ? lock_release+0x810/0x810 [ 2082.416725][T16984] ? rcu_read_lock_sched_held+0xd/0x70 [ 2082.422197][T16984] ? lock_release+0x5cb/0x810 [ 2082.426873][T16984] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2082.433120][T16984] ? rcu_read_lock_sched_held+0xd/0x70 [ 2082.438590][T16984] ? lock_acquire+0x4fc/0x630 [ 2082.443272][T16984] ? rcu_read_lock_sched_held+0xd/0x70 [ 2082.448856][T16984] ? lock_release+0x5cb/0x810 [ 2082.453564][T16984] ? __ct_user_exit+0xff/0x150 [ 2082.458339][T16984] __do_sys_clone+0xba/0x100 [ 2082.463108][T16984] ? kernel_clone+0x980/0x980 [ 2082.467795][T16984] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2082.473695][T16984] ? trace_hardirqs_on+0x2d/0x160 [ 2082.478725][T16984] do_syscall_64+0x35/0xb0 [ 2082.483153][T16984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2082.489055][T16984] RIP: 0033:0x7f5e99a8ca21 [ 2082.493467][T16984] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2082.513076][T16984] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2082.521490][T16984] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2082.529461][T16984] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2082.537430][T16984] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2082.545398][T16984] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2082.553388][T16984] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2082.561364][T16984] [ 2082.570581][T16984] memory: usage 307188kB, limit 307200kB, failcnt 8322 [ 2082.578079][T16984] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2082.585233][T16984] Memory cgroup stats for /syz1: [ 2082.585407][T16984] anon 94208 [ 2082.585407][T16984] file 274432 [ 2082.585407][T16984] kernel 314191872 [ 2082.585407][T16984] kernel_stack 32768 [ 2082.585407][T16984] pagetables 77824 [ 2082.585407][T16984] sec_pagetables 0 [ 2082.585407][T16984] percpu 5423904 [ 2082.585407][T16984] sock 0 [ 2082.585407][T16984] vmalloc 8192 [ 2082.585407][T16984] shmem 274432 [ 2082.585407][T16984] zswap 0 [ 2082.585407][T16984] zswapped 0 [ 2082.585407][T16984] file_mapped 258048 [ 2082.585407][T16984] file_dirty 0 [ 2082.585407][T16984] file_writeback 0 [ 2082.585407][T16984] swapcached 0 [ 2082.585407][T16984] anon_thp 0 [ 2082.585407][T16984] file_thp 0 [ 2082.585407][T16984] shmem_thp 0 [ 2082.585407][T16984] inactive_anon 86016 [ 2082.585407][T16984] active_anon 266240 [ 2082.585407][T16984] inactive_file 0 [ 2082.585407][T16984] active_file 0 [ 2082.585407][T16984] unevictable 0 [ 2082.585407][T16984] slab_reclaimable 19640 [ 2082.585407][T16984] slab_unreclaimable 308575280 [ 2082.681719][T16984] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16984,uid=0 [ 2082.699247][T16984] Memory cgroup out of memory: Killed process 16984 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2082.724824][T16970] wg2 speed is unknown, defaulting to 1000 01:50:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x0, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x89a1, 0x0) 01:50:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x801c581f, 0x0) 01:50:32 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1060, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "b40797b4ff82889a6d5ebddb1dd777fdc0ebd2a95d944b7a29731f6ff3059074", "0d41a95b076a16f9724499f0044a66e9113dd80b57194165bcbbfcf8c3fc7702", [{}, {}, {0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x0, 0xd23}}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x7}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "1a793c8d9dffb0df333422d3b7aa33988ad855e09f66c344e7d34baac36ccb55", "5c09cfa10f3058640b1f14040b42dce634ea39b6995c32ee34d7fa1a0d86f1af"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "dbc28c1e97f9e6a38d223527a2eac926db42fa0b326fb42254e9c575bdb821cd", "d81c81d7da3ae9378bd444756e42010c0b32d8bf0584c624b39ea9153619828b"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "3f0b5baf5c2ef49592098674c570f4e7f4e3da0af6f7a22921eb3163b3801f77", "353f12c846007a334b67eb2cc4007d0f9991edc1a3aa4d19878cab90b6c23f9f"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "62d12a2bdccc18af2f07858183dd8cf1a3446c7a4ff5f0fcc91e554ecbbf6785", "15a070fda6dd40dea078b51743a1610f95713c22c851e1c40cee6fc5c0090a31"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "5d8a3443d5f1985b6acf0cf35b1f7567c12872364cbe872c0189557fdddbc055", "50d75a2e13c457eb61efef2eb2f246533924f2885a0ff41151a9957cb6fa9eab"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "71c377eab506c62f0c623dfeea5d10c5381057fa470ca1e0fa2031c054d6e5ef", "e253e860be0fc8c0e4bc6538041afd105b9051972260e01ee3e69372c25a4fa9"}}}]}, 0x1060}}, 0x0) 01:50:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x38, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xc, 0x1, @local}, {0x8, 0x2, @empty}}}]}]}, 0x38}}, 0x0) 01:50:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) 01:50:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40088c1) 01:50:32 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, 0x0}, 0x80) 01:50:32 executing program 2: socketpair(0x35, 0x0, 0x0, &(0x7f0000000000)) [ 2083.522299][T16996] __nla_validate_parse: 484 callbacks suppressed [ 2083.522317][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:50:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) 01:50:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@bloom_filter, 0x48) [ 2083.569031][T16996] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2083.594740][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2083.650807][T17001] wg2 speed is unknown, defaulting to 1000 [ 2083.675335][T16992] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2083.689520][T17012] wg2 speed is unknown, defaulting to 1000 [ 2083.713056][T16992] CPU: 0 PID: 16992 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2083.723526][T16992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2083.733866][T16992] Call Trace: [ 2083.737178][T16992] [ 2083.740130][T16992] dump_stack_lvl+0xcd/0x134 [ 2083.745042][T16992] dump_header+0x10b/0x85f [ 2083.749524][T16992] oom_kill_process.cold+0x10/0x15 [ 2083.754676][T16992] out_of_memory+0x358/0x14a0 [ 2083.759388][T16992] ? rcu_read_lock_sched_held+0xd/0x70 [ 2083.764965][T16992] ? __mod_timer+0x83c/0xe30 [ 2083.769585][T16992] ? rcu_read_lock_sched_held+0xd/0x70 [ 2083.775424][T16992] ? lock_acquire+0x4fc/0x630 [ 2083.780108][T16992] ? oom_killer_disable+0x270/0x270 [ 2083.785315][T16992] ? rcu_read_lock_sched_held+0xd/0x70 [ 2083.790815][T16992] ? lock_release+0x5cb/0x810 [ 2083.795625][T16992] ? rcu_read_unlock+0x9/0x60 [ 2083.800316][T16992] ? lock_downgrade+0x6e0/0x6e0 [ 2083.805353][T16992] mem_cgroup_out_of_memory+0x206/0x270 [ 2083.811079][T16992] ? mem_cgroup_margin+0x130/0x130 [ 2083.816300][T16992] ? lock_downgrade+0x6e0/0x6e0 [ 2083.821283][T16992] try_charge_memcg+0xef8/0x12f0 [ 2083.826234][T16992] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2083.832227][T16992] ? lock_acquire+0x4fc/0x630 [ 2083.836906][T16992] ? rcu_read_lock_sched_held+0xd/0x70 [ 2083.842550][T16992] ? lock_release+0x5cb/0x810 [ 2083.847238][T16992] ? rcu_read_unlock+0x9/0x60 [ 2083.851914][T16992] ? lock_downgrade+0x6e0/0x6e0 [ 2083.856768][T16992] ? do_raw_spin_unlock+0x171/0x230 [ 2083.862165][T16992] charge_memcg+0x99/0x3b0 [ 2083.866592][T16992] __mem_cgroup_charge+0x27/0x90 [ 2083.871716][T16992] ? _compound_head+0x5d/0x150 [ 2083.876506][T16992] __handle_mm_fault+0x17e7/0x3a40 [ 2083.881623][T16992] ? lock_acquire+0x4fc/0x630 [ 2083.886303][T16992] ? vm_iomap_memory+0x180/0x180 [ 2083.891419][T16992] ? lock_release+0x810/0x810 [ 2083.896194][T16992] handle_mm_fault+0x1c8/0x780 [ 2083.900972][T16992] do_user_addr_fault+0x475/0x1210 [ 2083.906093][T16992] ? rcu_read_lock_sched_held+0xd/0x70 [ 2083.911565][T16992] exc_page_fault+0x94/0x170 [ 2083.916266][T16992] asm_exc_page_fault+0x22/0x30 [ 2083.921124][T16992] RIP: 0033:0x7f5e99a3638d [ 2083.925623][T16992] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 53 52 05 00 <83> 05 6c 9c 57 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 07 f0 0a 01 [ 2083.945243][T16992] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010207 [ 2083.951309][T16992] RAX: 0000000000000001 RBX: 00007f5e99babf8c RCX: 00007f5e99a8b5f9 [ 2083.959310][T16992] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5e99babf88 [ 2083.967301][T16992] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 0000000000000000 [ 2083.975364][T16992] R10: 00007f5e991ff700 R11: 0000000000000246 R12: 00007f5e99babf8c [ 2083.983338][T16992] R13: 00007f5e99bb0078 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2083.991325][T16992] 01:50:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x0, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:32 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) 01:50:32 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)=""/143, 0x1a, 0x8f, 0x1}, 0x20) [ 2084.011832][T16992] memory: usage 307200kB, limit 307200kB, failcnt 8450 [ 2084.036055][T16992] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2084.055425][T16992] Memory cgroup stats for /syz1: [ 2084.055667][T16992] anon 94208 [ 2084.055667][T16992] file 274432 [ 2084.055667][T16992] kernel 314204160 [ 2084.055667][T16992] kernel_stack 65536 [ 2084.055667][T16992] pagetables 81920 [ 2084.055667][T16992] sec_pagetables 0 [ 2084.055667][T16992] percpu 5423904 [ 2084.055667][T16992] sock 0 [ 2084.055667][T16992] vmalloc 8192 [ 2084.055667][T16992] shmem 274432 [ 2084.055667][T16992] zswap 0 [ 2084.055667][T16992] zswapped 0 [ 2084.055667][T16992] file_mapped 258048 [ 2084.055667][T16992] file_dirty 0 [ 2084.055667][T16992] file_writeback 0 [ 2084.055667][T16992] swapcached 0 [ 2084.055667][T16992] anon_thp 0 [ 2084.055667][T16992] file_thp 0 [ 2084.055667][T16992] shmem_thp 0 [ 2084.055667][T16992] inactive_anon 102400 [ 2084.055667][T16992] active_anon 266240 [ 2084.055667][T16992] inactive_file 0 [ 2084.055667][T16992] active_file 0 [ 2084.055667][T16992] unevictable 0 [ 2084.055667][T16992] slab_reclaimable 19640 [ 2084.055667][T16992] slab_unreclaimable 308563944 [ 2084.091565][T17021] wg2 speed is unknown, defaulting to 1000 [ 2084.151277][T16992] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16992,uid=0 01:50:33 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x10, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) 01:50:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) 01:50:33 executing program 2: socketpair(0x28, 0x0, 0x80000001, &(0x7f0000000000)) 01:50:33 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) 01:50:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x3}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000001c0)=""/143, 0x36, 0x8f, 0x1}, 0x20) [ 2084.179423][T16992] Memory cgroup out of memory: Killed process 16992 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 01:50:33 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 01:50:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 01:50:33 executing program 4: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x4910ca79c21eb0e) [ 2084.344597][T17038] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2084.366545][T17038] CPU: 1 PID: 17038 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2084.377101][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2084.387174][T17038] Call Trace: [ 2084.390464][T17038] [ 2084.393406][T17038] dump_stack_lvl+0xcd/0x134 [ 2084.398025][T17038] dump_header+0x10b/0x85f [ 2084.402463][T17038] oom_kill_process.cold+0x10/0x15 [ 2084.407604][T17038] out_of_memory+0x358/0x14a0 [ 2084.412308][T17038] ? rcu_read_lock_sched_held+0xd/0x70 [ 2084.417797][T17038] ? __mod_timer+0x83c/0xe30 [ 2084.422398][T17038] ? rcu_read_lock_sched_held+0xd/0x70 [ 2084.427871][T17038] ? lock_acquire+0x4fc/0x630 [ 2084.432553][T17038] ? oom_killer_disable+0x270/0x270 [ 2084.437792][T17038] ? rcu_read_lock_sched_held+0xd/0x70 [ 2084.443264][T17038] ? lock_release+0x5cb/0x810 [ 2084.447957][T17038] ? rcu_read_unlock+0x9/0x60 [ 2084.452643][T17038] ? lock_downgrade+0x6e0/0x6e0 [ 2084.457500][T17038] mem_cgroup_out_of_memory+0x206/0x270 [ 2084.463143][T17038] ? mem_cgroup_margin+0x130/0x130 [ 2084.468259][T17038] ? lock_downgrade+0x6e0/0x6e0 [ 2084.473142][T17038] try_charge_memcg+0xef8/0x12f0 [ 2084.478097][T17038] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2084.484262][T17038] ? lock_release+0x5cb/0x810 [ 2084.488940][T17038] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2084.494778][T17038] ? lock_downgrade+0x6e0/0x6e0 [ 2084.499628][T17038] ? lock_release+0x5cb/0x810 [ 2084.504311][T17038] ? rcu_read_unlock+0x9/0x60 [ 2084.509077][T17038] ? lock_downgrade+0x6e0/0x6e0 [ 2084.513929][T17038] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2084.519835][T17038] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2084.525393][T17038] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2084.531562][T17038] copy_process+0x73e/0x7190 [ 2084.536156][T17038] ? rcu_read_lock_sched_held+0xd/0x70 [ 2084.541625][T17038] ? lock_acquire+0x4fc/0x630 [ 2084.546301][T17038] ? rcu_read_lock_sched_held+0xd/0x70 [ 2084.551775][T17038] ? lock_release+0x5cb/0x810 [ 2084.556528][T17038] ? psi_task_change+0x1bb/0x2f0 [ 2084.561474][T17038] ? lock_downgrade+0x6e0/0x6e0 [ 2084.566329][T17038] ? __cleanup_sighand+0xb0/0xb0 [ 2084.571272][T17038] ? psi_memstall_leave+0x170/0x250 [ 2084.576477][T17038] ? lock_downgrade+0x6e0/0x6e0 [ 2084.581502][T17038] kernel_clone+0xe7/0x980 [ 2084.586011][T17038] ? lock_acquire+0x4fc/0x630 [ 2084.590691][T17038] ? create_io_thread+0xe0/0xe0 [ 2084.595543][T17038] ? lock_release+0x810/0x810 [ 2084.600220][T17038] ? rcu_read_lock_sched_held+0xd/0x70 [ 2084.605780][T17038] ? lock_release+0x5cb/0x810 [ 2084.610455][T17038] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2084.616792][T17038] ? rcu_read_lock_sched_held+0xd/0x70 [ 2084.622350][T17038] ? lock_acquire+0x4fc/0x630 [ 2084.627047][T17038] ? rcu_read_lock_sched_held+0xd/0x70 [ 2084.632518][T17038] ? lock_release+0x5cb/0x810 [ 2084.637195][T17038] ? __ct_user_exit+0xff/0x150 [ 2084.642049][T17038] __do_sys_clone+0xba/0x100 [ 2084.646657][T17038] ? kernel_clone+0x980/0x980 [ 2084.651349][T17038] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2084.657247][T17038] ? trace_hardirqs_on+0x2d/0x160 [ 2084.662372][T17038] do_syscall_64+0x35/0xb0 [ 2084.666885][T17038] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2084.672963][T17038] RIP: 0033:0x7f5e99a8ca21 [ 2084.677737][T17038] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2084.697889][T17038] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2084.706323][T17038] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2084.715083][T17038] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2084.723143][T17038] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2084.731115][T17038] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2084.739188][T17038] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2084.747431][T17038] [ 2084.751791][T22400] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2084.782838][T17022] wg2 speed is unknown, defaulting to 1000 01:50:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x0, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:33 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000087000a0002"], 0x28}}, 0x0) 01:50:33 executing program 4: bpf$BPF_PROG_QUERY(0x7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0}, 0x20) [ 2084.841350][T17038] memory: usage 307172kB, limit 307200kB, failcnt 8539 [ 2084.848393][T17038] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2084.861368][T17038] Memory cgroup stats for /syz1: [ 2084.861570][T17038] anon 94208 [ 2084.861570][T17038] file 274432 [ 2084.861570][T17038] kernel 314175488 [ 2084.861570][T17038] kernel_stack 32768 [ 2084.861570][T17038] pagetables 77824 [ 2084.861570][T17038] sec_pagetables 0 [ 2084.861570][T17038] percpu 5423904 [ 2084.861570][T17038] sock 0 [ 2084.861570][T17038] vmalloc 8192 [ 2084.861570][T17038] shmem 274432 [ 2084.861570][T17038] zswap 0 [ 2084.861570][T17038] zswapped 0 [ 2084.861570][T17038] file_mapped 258048 [ 2084.861570][T17038] file_dirty 0 [ 2084.861570][T17038] file_writeback 0 [ 2084.861570][T17038] swapcached 0 [ 2084.861570][T17038] anon_thp 0 [ 2084.861570][T17038] file_thp 0 [ 2084.861570][T17038] shmem_thp 0 [ 2084.861570][T17038] inactive_anon 102400 [ 2084.861570][T17038] active_anon 266240 [ 2084.861570][T17038] inactive_file 0 [ 2084.861570][T17038] active_file 0 [ 2084.861570][T17038] unevictable 0 [ 2084.861570][T17038] slab_reclaimable 19640 [ 2084.861570][T17038] slab_unreclaimable 308552480 [ 2084.969459][T17038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17038,uid=0 [ 2084.979967][T17045] wg2 speed is unknown, defaulting to 1000 01:50:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894b, 0x0) 01:50:34 executing program 2: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0}, 0x20) 01:50:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40049409, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:50:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894c, 0x0) 01:50:34 executing program 3: bpf$BPF_PROG_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0}, 0x20) [ 2084.985421][T17047] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 2084.994752][T17038] Memory cgroup out of memory: Killed process 17038 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2085.008741][T17046] wg2 speed is unknown, defaulting to 1000 01:50:34 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0}, 0x20) 01:50:34 executing program 0: bpf$LINK_GET_NEXT_ID(0x5, 0x0, 0x9f) 01:50:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8906, 0x0) 01:50:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8902, 0x0) [ 2085.198720][T17064] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2085.220733][T17064] CPU: 0 PID: 17064 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2085.231199][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2085.241272][T17064] Call Trace: [ 2085.244552][T17064] [ 2085.247483][T17064] dump_stack_lvl+0xcd/0x134 [ 2085.252084][T17064] dump_header+0x10b/0x85f [ 2085.256502][T17064] oom_kill_process.cold+0x10/0x15 [ 2085.261696][T17064] out_of_memory+0x358/0x14a0 [ 2085.266376][T17064] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.271843][T17064] ? __mod_timer+0x83c/0xe30 [ 2085.276433][T17064] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.281897][T17064] ? lock_acquire+0x4fc/0x630 [ 2085.286573][T17064] ? oom_killer_disable+0x270/0x270 [ 2085.291783][T17064] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.297250][T17064] ? lock_release+0x5cb/0x810 [ 2085.301924][T17064] ? rcu_read_unlock+0x9/0x60 [ 2085.306606][T17064] ? lock_downgrade+0x6e0/0x6e0 [ 2085.311548][T17064] mem_cgroup_out_of_memory+0x206/0x270 [ 2085.317102][T17064] ? mem_cgroup_margin+0x130/0x130 [ 2085.322216][T17064] ? lock_downgrade+0x6e0/0x6e0 [ 2085.327157][T17064] try_charge_memcg+0xef8/0x12f0 [ 2085.332126][T17064] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2085.338112][T17064] ? lock_acquire+0x4fc/0x630 [ 2085.342873][T17064] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.348357][T17064] ? lock_release+0x5cb/0x810 [ 2085.353040][T17064] ? rcu_read_unlock+0x9/0x60 [ 2085.357716][T17064] ? lock_downgrade+0x6e0/0x6e0 [ 2085.362631][T17064] charge_memcg+0x99/0x3b0 [ 2085.367113][T17064] __mem_cgroup_charge+0x27/0x90 [ 2085.372078][T17064] wp_page_copy+0x2bf/0x1c90 [ 2085.376687][T17064] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.382254][T17064] ? lock_release+0x5cb/0x810 [ 2085.386959][T17064] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2085.393900][T17064] ? lock_downgrade+0x6e0/0x6e0 [ 2085.398751][T17064] ? vm_normal_page+0x146/0x2a0 [ 2085.404674][T17064] ? __pte_alloc_kernel+0x110/0x110 [ 2085.409873][T17064] ? lock_release+0x5cb/0x810 [ 2085.414555][T17064] do_wp_page+0x538/0x1930 [ 2085.418993][T17064] __handle_mm_fault+0x181b/0x3a40 [ 2085.424126][T17064] ? lock_acquire+0x4fc/0x630 [ 2085.428916][T17064] ? vm_iomap_memory+0x180/0x180 [ 2085.434046][T17064] handle_mm_fault+0x1c8/0x780 [ 2085.438818][T17064] do_user_addr_fault+0x475/0x1210 [ 2085.443952][T17064] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.449457][T17064] exc_page_fault+0x94/0x170 [ 2085.454066][T17064] asm_exc_page_fault+0x22/0x30 [ 2085.458924][T17064] RIP: 0033:0x7f5e99a3632e [ 2085.463343][T17064] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 47 5c 17 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2085.483061][T17064] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010246 [ 2085.489152][T17064] RAX: 00007f5e99babf80 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2085.497223][T17064] RDX: 0000000000000000 RSI: 00007f5e99babf88 RDI: 0000000000000000 [ 2085.505194][T17064] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2085.513297][T17064] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007f5e99babf8c [ 2085.521287][T17064] R13: 00007f5e99bb0060 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2085.529268][T17064] [ 2085.536572][T17064] memory: usage 307184kB, limit 307200kB, failcnt 8628 [ 2085.549232][T17064] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2085.556591][T17064] Memory cgroup stats for /syz1: [ 2085.556752][T17064] anon 90112 [ 2085.556752][T17064] file 274432 [ 2085.556752][T17064] kernel 314191872 [ 2085.556752][T17064] kernel_stack 65536 [ 2085.556752][T17064] pagetables 69632 [ 2085.556752][T17064] sec_pagetables 0 [ 2085.556752][T17064] percpu 5423904 [ 2085.556752][T17064] sock 0 [ 2085.556752][T17064] vmalloc 8192 [ 2085.556752][T17064] shmem 274432 [ 2085.556752][T17064] zswap 0 01:50:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x0, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:34 executing program 4: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0}, 0x20) 01:50:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x40086602, 0x0) [ 2085.556752][T17064] zswapped 0 [ 2085.556752][T17064] file_mapped 258048 [ 2085.556752][T17064] file_dirty 0 [ 2085.556752][T17064] file_writeback 0 [ 2085.556752][T17064] swapcached 0 [ 2085.556752][T17064] anon_thp 0 [ 2085.556752][T17064] file_thp 0 [ 2085.556752][T17064] shmem_thp 0 [ 2085.556752][T17064] inactive_anon 98304 [ 2085.556752][T17064] active_anon 266240 [ 2085.556752][T17064] inactive_file 0 [ 2085.556752][T17064] active_file 0 [ 2085.556752][T17064] unevictable 0 [ 2085.556752][T17064] slab_reclaimable 19640 [ 2085.556752][T17064] slab_unreclaimable 308563944 01:50:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5460, 0x0) 01:50:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_delroute={0x10}, 0x1c}}, 0x0) 01:50:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x2, 0x0) 01:50:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 01:50:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) [ 2085.611415][T17070] wg2 speed is unknown, defaulting to 1000 [ 2085.657199][T17064] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17064,uid=0 [ 2085.683254][T17064] Memory cgroup out of memory: Killed process 17064 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:50:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8983, 0x0) 01:50:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:50:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8922, &(0x7f0000000340)={'batadv_slave_0\x00'}) [ 2085.799188][T17091] batadv_slave_0: mtu less than device minimum [ 2085.817413][T17084] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2085.841869][T17074] wg2 speed is unknown, defaulting to 1000 [ 2085.851758][T17084] CPU: 0 PID: 17084 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2085.862237][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2085.872310][T17084] Call Trace: [ 2085.875702][T17084] [ 2085.878677][T17084] dump_stack_lvl+0xcd/0x134 [ 2085.883300][T17084] dump_header+0x10b/0x85f [ 2085.887739][T17084] oom_kill_process.cold+0x10/0x15 [ 2085.892879][T17084] out_of_memory+0x358/0x14a0 [ 2085.897578][T17084] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.903045][T17084] ? __mod_timer+0x83c/0xe30 [ 2085.907695][T17084] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.913161][T17084] ? lock_acquire+0x4fc/0x630 [ 2085.917850][T17084] ? oom_killer_disable+0x270/0x270 [ 2085.923072][T17084] ? rcu_read_lock_sched_held+0xd/0x70 [ 2085.928567][T17084] ? lock_release+0x5cb/0x810 [ 2085.933267][T17084] ? rcu_read_unlock+0x9/0x60 [ 2085.937960][T17084] ? lock_downgrade+0x6e0/0x6e0 [ 2085.943801][T17084] mem_cgroup_out_of_memory+0x206/0x270 [ 2085.949368][T17084] ? mem_cgroup_margin+0x130/0x130 [ 2085.954495][T17084] ? lock_downgrade+0x6e0/0x6e0 [ 2085.959376][T17084] try_charge_memcg+0xef8/0x12f0 [ 2085.964350][T17084] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2085.970447][T17084] ? lock_release+0x5cb/0x810 [ 2085.975144][T17084] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2085.980886][T17084] ? lock_downgrade+0x6e0/0x6e0 [ 2085.985761][T17084] ? lock_release+0x5cb/0x810 [ 2085.990456][T17084] ? rcu_read_unlock+0x9/0x60 [ 2085.995139][T17084] ? lock_downgrade+0x6e0/0x6e0 [ 2085.999990][T17084] ? lock_release+0x5cb/0x810 [ 2086.004680][T17084] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2086.010279][T17084] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2086.016549][T17084] copy_process+0x15ed/0x7190 [ 2086.021231][T17084] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.027344][T17084] ? lock_acquire+0x4fc/0x630 [ 2086.032041][T17084] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.037531][T17084] ? lock_release+0x5cb/0x810 [ 2086.042232][T17084] ? psi_task_change+0x1bb/0x2f0 [ 2086.047190][T17084] ? lock_downgrade+0x6e0/0x6e0 [ 2086.052131][T17084] ? __cleanup_sighand+0xb0/0xb0 [ 2086.057105][T17084] ? psi_memstall_leave+0x170/0x250 [ 2086.063117][T17084] ? lock_downgrade+0x6e0/0x6e0 [ 2086.068082][T17084] kernel_clone+0xe7/0x980 [ 2086.072599][T17084] ? lock_acquire+0x4fc/0x630 [ 2086.077387][T17084] ? create_io_thread+0xe0/0xe0 [ 2086.082374][T17084] ? lock_release+0x810/0x810 [ 2086.087188][T17084] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.092662][T17084] ? lock_release+0x5cb/0x810 [ 2086.097342][T17084] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2086.103590][T17084] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.109058][T17084] ? lock_acquire+0x4fc/0x630 [ 2086.113736][T17084] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.119209][T17084] ? lock_release+0x5cb/0x810 [ 2086.123883][T17084] ? __ct_user_exit+0xff/0x150 [ 2086.128665][T17084] __do_sys_clone+0xba/0x100 [ 2086.133265][T17084] ? kernel_clone+0x980/0x980 [ 2086.138216][T17084] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2086.144195][T17084] ? trace_hardirqs_on+0x2d/0x160 [ 2086.149222][T17084] do_syscall_64+0x35/0xb0 [ 2086.153647][T17084] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2086.159637][T17084] RIP: 0033:0x7f5e99a8ca21 [ 2086.164053][T17084] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2086.183842][T17084] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2086.192343][T17084] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2086.200522][T17084] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2086.208782][T17084] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2086.216781][T17084] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2086.224765][T17084] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2086.232846][T17084] [ 2086.242201][T17084] memory: usage 307188kB, limit 307200kB, failcnt 8711 01:50:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x0, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0xfc26}, 0x0) 01:50:35 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x2, 0x0, 0x29) 01:50:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8981, 0x0) [ 2086.255520][T17084] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2086.267487][T17084] Memory cgroup stats for /syz1: [ 2086.267691][T17084] anon 90112 [ 2086.267691][T17084] file 274432 [ 2086.267691][T17084] kernel 314179584 [ 2086.267691][T17084] kernel_stack 32768 [ 2086.267691][T17084] pagetables 69632 [ 2086.267691][T17084] sec_pagetables 0 [ 2086.267691][T17084] percpu 5423904 [ 2086.267691][T17084] sock 0 [ 2086.267691][T17084] vmalloc 8192 [ 2086.267691][T17084] shmem 274432 [ 2086.267691][T17084] zswap 0 [ 2086.267691][T17084] zswapped 0 [ 2086.267691][T17084] file_mapped 258048 [ 2086.267691][T17084] file_dirty 0 [ 2086.267691][T17084] file_writeback 0 [ 2086.267691][T17084] swapcached 0 [ 2086.267691][T17084] anon_thp 0 [ 2086.267691][T17084] file_thp 0 [ 2086.267691][T17084] shmem_thp 0 [ 2086.267691][T17084] inactive_anon 98304 [ 2086.267691][T17084] active_anon 266240 [ 2086.267691][T17084] inactive_file 0 [ 2086.267691][T17084] active_file 0 [ 2086.267691][T17084] unevictable 0 [ 2086.267691][T17084] slab_reclaimable 19640 [ 2086.267691][T17084] slab_unreclaimable 308563784 [ 2086.327310][T17095] wg2 speed is unknown, defaulting to 1000 01:50:35 executing program 1: bpf$BPF_PROG_QUERY(0x1d, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0}, 0x20) 01:50:35 executing program 4: bpf$OBJ_GET_PROG(0x9, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x10) 01:50:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8990, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:50:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) 01:50:35 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) 01:50:35 executing program 4: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 01:50:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89b0, &(0x7f0000000680)={'wlan1\x00'}) 01:50:35 executing program 0: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00', 0x1}, 0x10) [ 2086.391834][T17084] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17084,uid=0 [ 2086.413630][T17084] Memory cgroup out of memory: Killed process 17084 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2086.419385][T17101] wg2 speed is unknown, defaulting to 1000 [ 2086.558927][T17117] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2086.573217][T17117] CPU: 1 PID: 17117 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2086.583855][T17117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2086.593907][T17117] Call Trace: [ 2086.597187][T17117] [ 2086.600119][T17117] dump_stack_lvl+0xcd/0x134 [ 2086.604720][T17117] dump_header+0x10b/0x85f [ 2086.609137][T17117] oom_kill_process.cold+0x10/0x15 [ 2086.614433][T17117] out_of_memory+0x358/0x14a0 [ 2086.620265][T17117] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.625928][T17117] ? __mod_timer+0x83c/0xe30 [ 2086.630539][T17117] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.636272][T17117] ? lock_acquire+0x4fc/0x630 [ 2086.640949][T17117] ? oom_killer_disable+0x270/0x270 [ 2086.646151][T17117] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.651621][T17117] ? lock_release+0x5cb/0x810 [ 2086.657169][T17117] ? rcu_read_unlock+0x9/0x60 [ 2086.661962][T17117] ? lock_downgrade+0x6e0/0x6e0 [ 2086.666817][T17117] mem_cgroup_out_of_memory+0x206/0x270 [ 2086.672373][T17117] ? mem_cgroup_margin+0x130/0x130 [ 2086.677504][T17117] ? lock_downgrade+0x6e0/0x6e0 [ 2086.682767][T17117] try_charge_memcg+0xef8/0x12f0 [ 2086.687713][T17117] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2086.693700][T17117] ? lock_release+0x5cb/0x810 [ 2086.698372][T17117] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2086.704099][T17117] ? lock_downgrade+0x6e0/0x6e0 [ 2086.708949][T17117] ? lock_release+0x5cb/0x810 [ 2086.714667][T17117] ? rcu_read_unlock+0x9/0x60 [ 2086.719470][T17117] ? lock_downgrade+0x6e0/0x6e0 [ 2086.724327][T17117] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2086.730080][T17117] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2086.736428][T17117] copy_process+0x73e/0x7190 [ 2086.741114][T17117] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.746758][T17117] ? lock_acquire+0x4fc/0x630 [ 2086.751432][T17117] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.756908][T17117] ? lock_release+0x5cb/0x810 [ 2086.761587][T17117] ? psi_task_change+0x1bb/0x2f0 [ 2086.766541][T17117] ? lock_downgrade+0x6e0/0x6e0 [ 2086.771459][T17117] ? __cleanup_sighand+0xb0/0xb0 [ 2086.776491][T17117] ? psi_memstall_leave+0x170/0x250 [ 2086.781784][T17117] ? lock_downgrade+0x6e0/0x6e0 [ 2086.786641][T17117] kernel_clone+0xe7/0x980 [ 2086.791150][T17117] ? lock_acquire+0x4fc/0x630 [ 2086.796085][T17117] ? create_io_thread+0xe0/0xe0 [ 2086.801032][T17117] ? lock_release+0x810/0x810 [ 2086.805703][T17117] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.811178][T17117] ? lock_release+0x5cb/0x810 [ 2086.815862][T17117] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2086.822216][T17117] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.827770][T17117] ? lock_acquire+0x4fc/0x630 [ 2086.832542][T17117] ? rcu_read_lock_sched_held+0xd/0x70 [ 2086.838094][T17117] ? lock_release+0x5cb/0x810 [ 2086.842964][T17117] ? __ct_user_exit+0xff/0x150 [ 2086.847730][T17117] __do_sys_clone+0xba/0x100 [ 2086.852333][T17117] ? kernel_clone+0x980/0x980 [ 2086.857022][T17117] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2086.862915][T17117] ? trace_hardirqs_on+0x2d/0x160 [ 2086.867940][T17117] do_syscall_64+0x35/0xb0 [ 2086.872368][T17117] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2086.878266][T17117] RIP: 0033:0x7f5e99a8ca21 [ 2086.883438][T17117] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2086.904372][T17117] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2086.912788][T17117] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2086.920846][T17117] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2086.929297][T17117] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2086.937301][T17117] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2086.945481][T17117] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2086.953562][T17117] [ 2086.964029][T17117] memory: usage 307200kB, limit 307200kB, failcnt 8830 [ 2086.971607][T17117] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2086.979646][T17117] Memory cgroup stats for /syz1: [ 2086.979827][T17117] anon 94208 [ 2086.979827][T17117] file 274432 [ 2086.979827][T17117] kernel 314204160 [ 2086.979827][T17117] kernel_stack 32768 [ 2086.979827][T17117] pagetables 77824 [ 2086.979827][T17117] sec_pagetables 0 [ 2086.979827][T17117] percpu 5423904 [ 2086.979827][T17117] sock 0 [ 2086.979827][T17117] vmalloc 8192 [ 2086.979827][T17117] shmem 274432 [ 2086.979827][T17117] zswap 0 [ 2086.979827][T17117] zswapped 0 [ 2086.979827][T17117] file_mapped 258048 [ 2086.979827][T17117] file_dirty 0 [ 2086.979827][T17117] file_writeback 0 [ 2086.979827][T17117] swapcached 0 [ 2086.979827][T17117] anon_thp 0 [ 2086.979827][T17117] file_thp 0 [ 2086.979827][T17117] shmem_thp 0 [ 2086.979827][T17117] inactive_anon 102400 [ 2086.979827][T17117] active_anon 266240 [ 2086.979827][T17117] inactive_file 0 [ 2086.979827][T17117] active_file 0 01:50:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0x0, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:35 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='.\x00'}, 0x10) 01:50:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='ip6erspan0\x00') 01:50:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 2086.979827][T17117] unevictable 0 [ 2086.979827][T17117] slab_reclaimable 19640 [ 2086.979827][T17117] slab_unreclaimable 308575280 [ 2087.039086][T17122] wg2 speed is unknown, defaulting to 1000 01:50:36 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) 01:50:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, &(0x7f0000000680)={'wlan1\x00'}) 01:50:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8921, &(0x7f0000000680)={'wlan1\x00'}) 01:50:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 01:50:36 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl1\x00', 0x0}) socketpair(0x0, 0xd, 0x0, &(0x7f0000000000)) 01:50:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8912, 0x0) 01:50:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000680)={'wlan1\x00'}) [ 2087.111533][T17117] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17117,uid=0 [ 2087.128022][T17117] Memory cgroup out of memory: Killed process 17117 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 01:50:36 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x17, &(0x7f0000000000)=@gcm_256={{}, "c769247d17a2ad6d", "105d51e3d782f9469ec034d1f8f8d8b1f3a941d0cdd5e5cf70faf5d1014878f4", "d4d0fe77", "b8b0da04e1c05663"}, 0x38) [ 2087.256879][T17142] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2087.274827][T17142] CPU: 1 PID: 17142 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2087.285295][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2087.286336][T17127] wg2 speed is unknown, defaulting to 1000 [ 2087.295552][T17142] Call Trace: [ 2087.295568][T17142] [ 2087.295577][T17142] dump_stack_lvl+0xcd/0x134 [ 2087.295609][T17142] dump_header+0x10b/0x85f [ 2087.295631][T17142] oom_kill_process.cold+0x10/0x15 [ 2087.295653][T17142] out_of_memory+0x358/0x14a0 [ 2087.295679][T17142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2087.295709][T17142] ? __mod_timer+0x83c/0xe30 [ 2087.295734][T17142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2087.295767][T17142] ? lock_acquire+0x4fc/0x630 [ 2087.295786][T17142] ? oom_killer_disable+0x270/0x270 [ 2087.295809][T17142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2087.295839][T17142] ? lock_release+0x5cb/0x810 [ 2087.295859][T17142] ? rcu_read_unlock+0x9/0x60 [ 2087.295881][T17142] ? lock_downgrade+0x6e0/0x6e0 [ 2087.295905][T17142] mem_cgroup_out_of_memory+0x206/0x270 [ 2087.295930][T17142] ? mem_cgroup_margin+0x130/0x130 [ 2087.295953][T17142] ? lock_downgrade+0x6e0/0x6e0 [ 2087.295982][T17142] try_charge_memcg+0xef8/0x12f0 [ 2087.296011][T17142] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2087.400865][T17142] ? lock_release+0x5cb/0x810 01:50:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0x0, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:36 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x44) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2}, 0x8) 01:50:36 executing program 0: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x103, 0x10b8, 0x0, 0x300, 0x0, "", [@generic="d96e6c8d5e85894f45f00d80724e11d569066e3a1ce41e2a56693444b2b103d10e438dd0945f0e47753e40feef2bafcaea60b781678f99e4c2675c7ae9080cdb76a23c4a0600bd263feb36ecb459ae2151cd35a3575916344f7bdea7c04c60115bc470093504eefa017ffcdf971fa4d77e56221b07accd79028a7f1291092bf86b25070a68abdf2115c3b7c6f86944779fb01bccda628d0657b1d2330d853ee2f11054f7fc5d175d766ae73e89f5637de95bca35c0b64361fdde2ad0a03a045362e86870942cb9ece17f244d857a8650d6f97d38ef2ac4cb0f509db3caa06f53a855ba0b3db32b5c14bb4c3618"]}, 0x1100}], 0x1}, 0x0) 01:50:36 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000000)=@gcm_256={{}, "c769247d17a2ad6d", "105d51e3d782f9469ec034d1f8f8d8b1f3a941d0cdd5e5cf70faf5d1014878f4", "d4d0fe77", "b8b0da04e1c05663"}, 0x38) [ 2087.405607][T17142] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2087.411461][T17142] ? lock_downgrade+0x6e0/0x6e0 [ 2087.416367][T17142] ? lock_release+0x5cb/0x810 [ 2087.421076][T17142] ? rcu_read_unlock+0x9/0x60 [ 2087.425866][T17142] ? lock_downgrade+0x6e0/0x6e0 [ 2087.426236][T17146] wg2 speed is unknown, defaulting to 1000 [ 2087.430772][T17142] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2087.430814][T17142] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2087.448257][T17142] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2087.454452][T17142] copy_process+0x73e/0x7190 [ 2087.459257][T17142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2087.464854][T17142] ? lock_acquire+0x4fc/0x630 [ 2087.469564][T17142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2087.475243][T17142] ? lock_release+0x5cb/0x810 [ 2087.479953][T17142] ? psi_task_change+0x1bb/0x2f0 [ 2087.484935][T17142] ? lock_downgrade+0x6e0/0x6e0 [ 2087.489820][T17142] ? __cleanup_sighand+0xb0/0xb0 [ 2087.494794][T17142] ? psi_memstall_leave+0x170/0x250 [ 2087.500234][T17142] ? lock_downgrade+0x6e0/0x6e0 [ 2087.505381][T17142] kernel_clone+0xe7/0x980 [ 2087.508386][T17149] wg2 speed is unknown, defaulting to 1000 [ 2087.509815][T17142] ? lock_acquire+0x4fc/0x630 [ 2087.509901][T17142] ? create_io_thread+0xe0/0xe0 [ 2087.509927][T17142] ? lock_release+0x810/0x810 [ 2087.509945][T17142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2087.509976][T17142] ? lock_release+0x5cb/0x810 [ 2087.540359][T17142] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2087.546712][T17142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2087.552642][T17142] ? lock_acquire+0x4fc/0x630 [ 2087.557524][T17142] ? rcu_read_lock_sched_held+0xd/0x70 [ 2087.563024][T17142] ? lock_release+0x5cb/0x810 [ 2087.567737][T17142] ? __ct_user_exit+0xff/0x150 [ 2087.572535][T17142] __do_sys_clone+0xba/0x100 [ 2087.577327][T17142] ? kernel_clone+0x980/0x980 [ 2087.582064][T17142] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2087.587987][T17142] ? trace_hardirqs_on+0x2d/0x160 [ 2087.593133][T17142] do_syscall_64+0x35/0xb0 [ 2087.597584][T17142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2087.603862][T17142] RIP: 0033:0x7f5e99a8ca21 [ 2087.608485][T17142] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2087.628469][T17142] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2087.636995][T17142] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2087.645100][T17142] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2087.653183][T17142] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2087.661180][T17142] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2087.669212][T17142] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2087.677221][T17142] [ 2087.692359][T17142] memory: usage 307184kB, limit 307200kB, failcnt 8934 [ 2087.704511][T17142] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2087.711612][T17142] Memory cgroup stats for /syz1: [ 2087.711799][T17142] anon 90112 [ 2087.711799][T17142] file 274432 [ 2087.711799][T17142] kernel 314179584 [ 2087.711799][T17142] kernel_stack 32768 [ 2087.711799][T17142] pagetables 69632 [ 2087.711799][T17142] sec_pagetables 0 [ 2087.711799][T17142] percpu 5423904 [ 2087.711799][T17142] sock 0 [ 2087.711799][T17142] vmalloc 8192 [ 2087.711799][T17142] shmem 274432 [ 2087.711799][T17142] zswap 0 [ 2087.711799][T17142] zswapped 0 [ 2087.711799][T17142] file_mapped 258048 [ 2087.711799][T17142] file_dirty 0 [ 2087.711799][T17142] file_writeback 0 [ 2087.711799][T17142] swapcached 0 [ 2087.711799][T17142] anon_thp 0 [ 2087.711799][T17142] file_thp 0 [ 2087.711799][T17142] shmem_thp 0 [ 2087.711799][T17142] inactive_anon 98304 [ 2087.711799][T17142] active_anon 266240 [ 2087.711799][T17142] inactive_file 0 [ 2087.711799][T17142] active_file 0 [ 2087.711799][T17142] unevictable 0 [ 2087.711799][T17142] slab_reclaimable 19640 [ 2087.711799][T17142] slab_unreclaimable 308574880 01:50:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0xf}}, 0x0) 01:50:36 executing program 2: r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x103, 0x10b8, 0x0, 0x0, 0x0, "", [@generic="d96e6c8d5e85080045f00d80724e11d569066e3a1ce41e2a56693444b2b103d10e438dd0945f0e47753e40feef2bafcaea60b781678f99e4c2675c7ae9080cdb76a23c4a0600bd263feb36ecb459ae2151cd35a3575916344f7bdea7c04c60115bc470093504eefa017ffcdf971fa4d77e56221b07accd79028a7f1291092bf86b25070a68abdf2115c3b7c6f86944779fb01bccda628d0657b1d2330d853ee2f11054f7fc5d175d766ae73e89f5637de95bca35c0b64361fdde2ad0a03a045362e86870942cb9ece17f244d857a8650d6f97d38ef2ac4cb0f509db3caa06f53a855ba0b3db32b5c14bb4c3618"]}, 0x1100}], 0x1}, 0x0) 01:50:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000101030e000000000000000002000000040001800c0019800800010004"], 0x24}}, 0x0) 01:50:36 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1bfc0}, 0x8}, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 01:50:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x54}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) 01:50:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0x0, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2087.809948][T17142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17142,uid=0 [ 2087.831354][T17142] Memory cgroup out of memory: Killed process 17142 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 01:50:36 executing program 3: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x9e3}, 0x0, &(0x7f0000000240)={&(0x7f0000000180), 0x8}) 01:50:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[], 0x18) 01:50:36 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)=""/234, 0x1a, 0xea, 0x1}, 0x20) 01:50:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0xf, 0x0, 0x0) 01:50:36 executing program 4: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 2087.960472][T17165] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 01:50:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x6, 0x0, 0x0, 0x0) [ 2088.057931][T17165] CPU: 1 PID: 17165 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2088.068666][T17165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2088.078914][T17165] Call Trace: [ 2088.082212][T17165] [ 2088.085201][T17165] dump_stack_lvl+0xcd/0x134 [ 2088.089955][T17165] dump_header+0x10b/0x85f [ 2088.094756][T17165] oom_kill_process.cold+0x10/0x15 [ 2088.099969][T17165] out_of_memory+0x358/0x14a0 [ 2088.104713][T17165] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.110207][T17165] ? __mod_timer+0x83c/0xe30 [ 2088.114814][T17165] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.120577][T17165] ? lock_acquire+0x4fc/0x630 [ 2088.125290][T17165] ? oom_killer_disable+0x270/0x270 [ 2088.130507][T17165] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.136160][T17165] ? lock_release+0x5cb/0x810 [ 2088.140837][T17165] ? rcu_read_unlock+0x9/0x60 [ 2088.145605][T17165] ? lock_downgrade+0x6e0/0x6e0 [ 2088.150560][T17165] mem_cgroup_out_of_memory+0x206/0x270 [ 2088.156110][T17165] ? mem_cgroup_margin+0x130/0x130 [ 2088.161462][T17165] ? lock_downgrade+0x6e0/0x6e0 [ 2088.166499][T17165] try_charge_memcg+0xef8/0x12f0 [ 2088.171451][T17165] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2088.177774][T17165] ? lock_release+0x5cb/0x810 [ 2088.182455][T17165] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2088.188318][T17165] ? lock_downgrade+0x6e0/0x6e0 [ 2088.193193][T17165] ? lock_release+0x5cb/0x810 [ 2088.197986][T17165] ? rcu_read_unlock+0x9/0x60 [ 2088.202779][T17165] ? lock_downgrade+0x6e0/0x6e0 [ 2088.207849][T17165] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2088.213749][T17165] __alloc_pages+0x1ef/0x5a0 [ 2088.218341][T17165] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2088.225308][T17165] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.230862][T17165] ? lock_acquire+0x4fc/0x630 [ 2088.235581][T17165] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.241047][T17165] ? lock_downgrade+0x6e0/0x6e0 [ 2088.246019][T17165] ? do_raw_spin_lock+0x120/0x2a0 [ 2088.251275][T17165] alloc_pages+0x1a6/0x270 [ 2088.255712][T17165] __pmd_alloc+0x3b/0x5c0 [ 2088.260070][T17165] ? __pud_alloc+0xe0/0x180 [ 2088.264620][T17165] __handle_mm_fault+0x8c8/0x3a40 [ 2088.269663][T17165] ? lock_acquire+0x4fc/0x630 [ 2088.274378][T17165] ? vm_iomap_memory+0x180/0x180 [ 2088.279419][T17165] ? lock_release+0x810/0x810 [ 2088.284101][T17165] handle_mm_fault+0x1c8/0x780 [ 2088.289047][T17165] do_user_addr_fault+0x475/0x1210 [ 2088.294165][T17165] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.299635][T17165] exc_page_fault+0x94/0x170 [ 2088.304237][T17165] asm_exc_page_fault+0x22/0x30 [ 2088.309097][T17165] RIP: 0033:0x7f5e99a275f6 [ 2088.313506][T17165] Code: ff ff 66 90 48 8b 0d f9 dd 0b 01 4c 63 05 e2 dd 0b 01 48 8b 05 e3 dd 0b 01 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 c9 dd 0b 01 c3 52 48 8d 35 92 de 0b 00 48 89 c2 48 [ 2088.333112][T17165] RSP: 002b:00007ffdae1695a8 EFLAGS: 00010287 [ 2088.339261][T17165] RAX: 0000001b2e920000 RBX: 0000000000000003 RCX: 0000001b2e920000 [ 2088.347327][T17165] RDX: 0000001b2e920004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 2088.355306][T17165] RBP: 0000000000000000 R08: 0000001b2ed20000 R09: 0000000000040000 [ 2088.363432][T17165] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 2088.371592][T17165] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdae169850 [ 2088.379669][T17165] [ 2088.385328][T17165] memory: usage 307140kB, limit 307200kB, failcnt 9014 [ 2088.392278][T17165] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2088.397117][T17167] wg2 speed is unknown, defaulting to 1000 [ 2088.399926][T17165] Memory cgroup stats for /syz1: [ 2088.407006][T17165] anon 77824 [ 2088.407006][T17165] file 274432 [ 2088.407006][T17165] kernel 314159104 [ 2088.407006][T17165] kernel_stack 32768 [ 2088.407006][T17165] pagetables 61440 [ 2088.407006][T17165] sec_pagetables 0 [ 2088.407006][T17165] percpu 5423904 [ 2088.407006][T17165] sock 0 [ 2088.407006][T17165] vmalloc 8192 [ 2088.407006][T17165] shmem 274432 [ 2088.407006][T17165] zswap 0 [ 2088.407006][T17165] zswapped 0 [ 2088.407006][T17165] file_mapped 258048 [ 2088.407006][T17165] file_dirty 0 [ 2088.407006][T17165] file_writeback 0 [ 2088.407006][T17165] swapcached 0 [ 2088.407006][T17165] anon_thp 0 [ 2088.407006][T17165] file_thp 0 [ 2088.407006][T17165] shmem_thp 0 [ 2088.407006][T17165] inactive_anon 86016 [ 2088.407006][T17165] active_anon 266240 [ 2088.407006][T17165] inactive_file 0 [ 2088.407006][T17165] active_file 0 [ 2088.407006][T17165] unevictable 0 [ 2088.407006][T17165] slab_reclaimable 19640 [ 2088.407006][T17165] slab_unreclaimable 308566536 01:50:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14}, 0x14}}, 0x0) [ 2088.509043][T17165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17165,uid=0 [ 2088.527280][T17165] Memory cgroup out of memory: Killed process 17165 (syz-executor.1) total-vm:54464kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 [ 2088.572424][T17176] wg2 speed is unknown, defaulting to 1000 [ 2088.580598][T17182] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2088.593078][T17182] CPU: 0 PID: 17182 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2088.603778][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2088.613855][T17182] Call Trace: [ 2088.617144][T17182] [ 2088.620095][T17182] dump_stack_lvl+0xcd/0x134 [ 2088.624890][T17182] dump_header+0x10b/0x85f [ 2088.629351][T17182] oom_kill_process.cold+0x10/0x15 [ 2088.634746][T17182] out_of_memory+0x358/0x14a0 [ 2088.639488][T17182] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.645010][T17182] ? __mod_timer+0x83c/0xe30 [ 2088.649740][T17182] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.655234][T17182] ? lock_acquire+0x4fc/0x630 [ 2088.659917][T17182] ? oom_killer_disable+0x270/0x270 [ 2088.665121][T17182] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.670684][T17182] ? lock_release+0x5cb/0x810 [ 2088.675361][T17182] ? rcu_read_unlock+0x9/0x60 [ 2088.680124][T17182] ? lock_downgrade+0x6e0/0x6e0 [ 2088.684994][T17182] mem_cgroup_out_of_memory+0x206/0x270 [ 2088.690553][T17182] ? mem_cgroup_margin+0x130/0x130 [ 2088.695664][T17182] ? lock_downgrade+0x6e0/0x6e0 [ 2088.700521][T17182] try_charge_memcg+0xef8/0x12f0 [ 2088.705469][T17182] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2088.711456][T17182] ? lock_release+0x5cb/0x810 [ 2088.716137][T17182] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2088.721951][T17182] ? lock_downgrade+0x6e0/0x6e0 [ 2088.726817][T17182] ? lock_release+0x5cb/0x810 [ 2088.731522][T17182] ? rcu_read_unlock+0x9/0x60 [ 2088.736214][T17182] ? lock_downgrade+0x6e0/0x6e0 [ 2088.741073][T17182] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2088.746632][T17182] __alloc_pages+0x1ef/0x5a0 [ 2088.751226][T17182] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2088.757986][T17182] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.763455][T17182] ? lock_acquire+0x4fc/0x630 [ 2088.768135][T17182] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.773603][T17182] ? lock_downgrade+0x6e0/0x6e0 [ 2088.778457][T17182] ? do_raw_spin_lock+0x120/0x2a0 [ 2088.783503][T17182] alloc_pages+0x1a6/0x270 [ 2088.787932][T17182] __pmd_alloc+0x3b/0x5c0 [ 2088.792367][T17182] ? __pud_alloc+0xe0/0x180 [ 2088.796885][T17182] __handle_mm_fault+0x8c8/0x3a40 [ 2088.801923][T17182] ? lock_acquire+0x4fc/0x630 [ 2088.806600][T17182] ? vm_iomap_memory+0x180/0x180 [ 2088.811539][T17182] ? lock_release+0x810/0x810 [ 2088.816224][T17182] handle_mm_fault+0x1c8/0x780 [ 2088.821006][T17182] do_user_addr_fault+0x475/0x1210 [ 2088.826219][T17182] ? rcu_read_lock_sched_held+0xd/0x70 [ 2088.831698][T17182] exc_page_fault+0x94/0x170 [ 2088.836289][T17182] asm_exc_page_fault+0x22/0x30 [ 2088.841244][T17182] RIP: 0033:0x7f5e99a275f6 [ 2088.845671][T17182] Code: ff ff 66 90 48 8b 0d f9 dd 0b 01 4c 63 05 e2 dd 0b 01 48 8b 05 e3 dd 0b 01 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 c9 dd 0b 01 c3 52 48 8d 35 92 de 0b 00 48 89 c2 48 [ 2088.865381][T17182] RSP: 002b:00007ffdae1695a8 EFLAGS: 00010287 [ 2088.871708][T17182] RAX: 0000001b2e920000 RBX: 0000000000000003 RCX: 0000001b2e920000 [ 2088.879767][T17182] RDX: 0000001b2e920004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 2088.887737][T17182] RBP: 0000000000000000 R08: 0000001b2ed20000 R09: 0000000000040000 [ 2088.895717][T17182] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 2088.903815][T17182] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdae169850 [ 2088.912036][T17182] [ 2088.919199][T17182] memory: usage 307200kB, limit 307200kB, failcnt 9087 [ 2088.926653][T17182] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2088.937515][T17182] Memory cgroup stats for /syz1: [ 2088.937669][T17182] anon 77824 [ 2088.937669][T17182] file 274432 [ 2088.937669][T17182] kernel 314159104 [ 2088.937669][T17182] kernel_stack 32768 [ 2088.937669][T17182] pagetables 61440 [ 2088.937669][T17182] sec_pagetables 0 [ 2088.937669][T17182] percpu 5423904 [ 2088.937669][T17182] sock 0 [ 2088.937669][T17182] vmalloc 8192 [ 2088.937669][T17182] shmem 274432 [ 2088.937669][T17182] zswap 0 [ 2088.937669][T17182] zswapped 0 [ 2088.937669][T17182] file_mapped 258048 [ 2088.937669][T17182] file_dirty 0 [ 2088.937669][T17182] file_writeback 0 [ 2088.937669][T17182] swapcached 0 [ 2088.937669][T17182] anon_thp 0 [ 2088.937669][T17182] file_thp 0 [ 2088.937669][T17182] shmem_thp 0 [ 2088.937669][T17182] inactive_anon 53248 [ 2088.937669][T17182] active_anon 266240 [ 2088.937669][T17182] inactive_file 0 [ 2088.937669][T17182] active_file 0 [ 2088.937669][T17182] unevictable 0 [ 2088.937669][T17182] slab_reclaimable 22600 [ 2088.937669][T17182] slab_unreclaimable 308568480 [ 2089.036507][T17182] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17182,uid=0 [ 2089.052083][T17182] Memory cgroup out of memory: Killed process 17182 (syz-executor.1) total-vm:54464kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:1000 01:50:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x0, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:39 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xfffffffffffffe0a, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}}, 0x0) 01:50:39 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) 01:50:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x6, 0x12, 0x0, &(0x7f00000002c0)) 01:50:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 01:50:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x6, 0x15, 0x0, &(0x7f00000002c0)) 01:50:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 01:50:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x5, 0x0, 0x0) 01:50:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000001c0)={{0x2, 0x0, @dev}, {0x1, @dev}, 0x4a, {0x2, 0x0, @dev}, 'wg1\x00'}) 01:50:39 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f00000015c0)=[@cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x58}, 0x11) 01:50:39 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@loopback, @local}, 0x8) 01:50:39 executing program 0: socket$inet6(0xa, 0x0, 0x1a00) [ 2090.354413][T17187] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2090.392352][T17193] wg2 speed is unknown, defaulting to 1000 [ 2090.404260][T17187] CPU: 0 PID: 17187 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2090.414822][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2090.425009][T17187] Call Trace: [ 2090.428315][T17187] [ 2090.429381][T17203] wg2 speed is unknown, defaulting to 1000 [ 2090.431333][T17187] dump_stack_lvl+0xcd/0x134 [ 2090.441850][T17187] dump_header+0x10b/0x85f [ 2090.446309][T17187] oom_kill_process.cold+0x10/0x15 [ 2090.451557][T17187] out_of_memory+0x358/0x14a0 [ 2090.456265][T17187] ? rcu_read_lock_sched_held+0xd/0x70 [ 2090.461764][T17187] ? __mod_timer+0x83c/0xe30 [ 2090.466516][T17187] ? rcu_read_lock_sched_held+0xd/0x70 [ 2090.472009][T17187] ? lock_acquire+0x4fc/0x630 [ 2090.476713][T17187] ? oom_killer_disable+0x270/0x270 [ 2090.482023][T17187] ? rcu_read_lock_sched_held+0xd/0x70 [ 2090.487522][T17187] ? lock_release+0x5cb/0x810 [ 2090.492538][T17187] ? rcu_read_unlock+0x9/0x60 [ 2090.497758][T17187] ? lock_downgrade+0x6e0/0x6e0 [ 2090.502711][T17187] mem_cgroup_out_of_memory+0x206/0x270 [ 2090.508356][T17187] ? mem_cgroup_margin+0x130/0x130 [ 2090.513476][T17187] ? lock_downgrade+0x6e0/0x6e0 [ 2090.518470][T17187] try_charge_memcg+0xef8/0x12f0 [ 2090.523466][T17187] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2090.529626][T17187] ? lock_acquire+0x4fc/0x630 [ 2090.534566][T17187] ? rcu_read_lock_sched_held+0xd/0x70 [ 2090.540308][T17187] ? lock_release+0x5cb/0x810 [ 2090.544999][T17187] ? rcu_read_unlock+0x9/0x60 [ 2090.549678][T17187] ? lock_downgrade+0x6e0/0x6e0 [ 2090.554621][T17187] charge_memcg+0x99/0x3b0 [ 2090.559058][T17187] __mem_cgroup_charge+0x27/0x90 [ 2090.564024][T17187] wp_page_copy+0x2bf/0x1c90 [ 2090.568725][T17187] ? rcu_read_lock_sched_held+0xd/0x70 [ 2090.574237][T17187] ? lock_release+0x5cb/0x810 [ 2090.578908][T17187] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2090.585584][T17187] ? lock_downgrade+0x6e0/0x6e0 [ 2090.590430][T17187] ? vm_normal_page+0x146/0x2a0 [ 2090.595444][T17187] ? __pte_alloc_kernel+0x110/0x110 [ 2090.600636][T17187] ? lock_release+0x5cb/0x810 [ 2090.605481][T17187] do_wp_page+0x538/0x1930 [ 2090.609894][T17187] __handle_mm_fault+0x181b/0x3a40 [ 2090.615102][T17187] ? lock_acquire+0x4fc/0x630 [ 2090.619895][T17187] ? vm_iomap_memory+0x180/0x180 [ 2090.624870][T17187] ? lock_release+0x810/0x810 [ 2090.629723][T17187] handle_mm_fault+0x1c8/0x780 [ 2090.634578][T17187] do_user_addr_fault+0x475/0x1210 [ 2090.639691][T17187] ? rcu_read_lock_sched_held+0xd/0x70 [ 2090.645151][T17187] exc_page_fault+0x94/0x170 [ 2090.649733][T17187] asm_exc_page_fault+0x22/0x30 [ 2090.654585][T17187] RIP: 0033:0x7f5e99a3632e [ 2090.659024][T17187] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 47 5c 17 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2090.678718][T17187] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010246 [ 2090.684780][T17187] RAX: 00007f5e99babf80 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2090.692747][T17187] RDX: 0000000000000000 RSI: 00007f5e99babf88 RDI: 0000000000000000 [ 2090.700805][T17187] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2090.708782][T17187] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007f5e99babf8c [ 2090.716779][T17187] R13: 00007f5e99bb0060 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2090.724872][T17187] [ 2090.737012][T17187] memory: usage 307172kB, limit 307200kB, failcnt 9177 [ 2090.744215][T17187] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2090.751247][T17187] Memory cgroup stats for /syz1: [ 2090.751442][T17187] anon 90112 [ 2090.751442][T17187] file 274432 [ 2090.751442][T17187] kernel 314179584 [ 2090.751442][T17187] kernel_stack 65536 [ 2090.751442][T17187] pagetables 69632 [ 2090.751442][T17187] sec_pagetables 0 [ 2090.751442][T17187] percpu 5423904 [ 2090.751442][T17187] sock 0 [ 2090.751442][T17187] vmalloc 8192 [ 2090.751442][T17187] shmem 274432 [ 2090.751442][T17187] zswap 0 [ 2090.751442][T17187] zswapped 0 [ 2090.751442][T17187] file_mapped 258048 [ 2090.751442][T17187] file_dirty 0 [ 2090.751442][T17187] file_writeback 0 [ 2090.751442][T17187] swapcached 0 [ 2090.751442][T17187] anon_thp 0 [ 2090.751442][T17187] file_thp 0 [ 2090.751442][T17187] shmem_thp 0 [ 2090.751442][T17187] inactive_anon 98304 [ 2090.751442][T17187] active_anon 266240 [ 2090.751442][T17187] inactive_file 0 [ 2090.751442][T17187] active_file 0 [ 2090.751442][T17187] unevictable 0 [ 2090.751442][T17187] slab_reclaimable 19640 [ 2090.751442][T17187] slab_unreclaimable 308552848 [ 2090.847735][T17187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17187,uid=0 [ 2090.864149][T17187] Memory cgroup out of memory: Killed process 17187 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x0, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r0, 0x29, 0x8, 0x0, &(0x7f0000000040)) 01:50:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(arc4)\x00'}, 0x58) 01:50:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x6, 0x10001}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000080), 0x0}, 0x20) 01:50:39 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000002c0), 0x12) 01:50:39 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) 01:50:39 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000001000)={0x2, 0x0, @broadcast}, 0x10) 01:50:39 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 01:50:39 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000002c0), 0x12) [ 2090.966050][T17211] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 01:50:40 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000002c0), 0x12) 01:50:40 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000006c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000002c0), 0x12) [ 2091.029307][T17211] CPU: 0 PID: 17211 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2091.039788][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2091.049866][T17211] Call Trace: [ 2091.053163][T17211] [ 2091.056210][T17211] dump_stack_lvl+0xcd/0x134 [ 2091.060842][T17211] dump_header+0x10b/0x85f [ 2091.065293][T17211] oom_kill_process.cold+0x10/0x15 [ 2091.070547][T17211] out_of_memory+0x358/0x14a0 01:50:40 executing program 3: clock_gettime(0x0, &(0x7f0000000600)) [ 2091.075273][T17211] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.080860][T17211] ? __mod_timer+0x83c/0xe30 [ 2091.085491][T17211] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.090997][T17211] ? lock_acquire+0x4fc/0x630 [ 2091.095704][T17211] ? oom_killer_disable+0x270/0x270 [ 2091.101112][T17211] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.106614][T17211] ? lock_release+0x5cb/0x810 [ 2091.111324][T17211] ? rcu_read_unlock+0x9/0x60 [ 2091.116031][T17211] ? lock_downgrade+0x6e0/0x6e0 [ 2091.120915][T17211] mem_cgroup_out_of_memory+0x206/0x270 [ 2091.126626][T17211] ? mem_cgroup_margin+0x130/0x130 [ 2091.131770][T17211] ? lock_downgrade+0x6e0/0x6e0 [ 2091.136660][T17211] try_charge_memcg+0xef8/0x12f0 [ 2091.141641][T17211] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2091.147667][T17211] ? lock_acquire+0x4fc/0x630 [ 2091.152377][T17211] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.157877][T17211] ? lock_release+0x5cb/0x810 [ 2091.162585][T17211] ? rcu_read_unlock+0x9/0x60 [ 2091.167288][T17211] ? lock_downgrade+0x6e0/0x6e0 [ 2091.172177][T17211] charge_memcg+0x99/0x3b0 [ 2091.176640][T17211] __mem_cgroup_charge+0x27/0x90 [ 2091.181622][T17211] wp_page_copy+0x2bf/0x1c90 [ 2091.186255][T17211] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.191753][T17211] ? lock_release+0x5cb/0x810 [ 2091.196463][T17211] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2091.203083][T17211] ? lock_downgrade+0x6e0/0x6e0 [ 2091.207963][T17211] ? vm_normal_page+0x146/0x2a0 [ 2091.212843][T17211] ? __pte_alloc_kernel+0x110/0x110 [ 2091.218082][T17211] ? lock_release+0x5cb/0x810 [ 2091.222811][T17211] do_wp_page+0x538/0x1930 [ 2091.227288][T17211] __handle_mm_fault+0x181b/0x3a40 [ 2091.232435][T17211] ? lock_acquire+0x4fc/0x630 [ 2091.237142][T17211] ? vm_iomap_memory+0x180/0x180 [ 2091.242234][T17211] ? lock_release+0x810/0x810 [ 2091.246944][T17211] handle_mm_fault+0x1c8/0x780 [ 2091.251735][T17211] do_user_addr_fault+0x475/0x1210 [ 2091.256961][T17211] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.262446][T17211] exc_page_fault+0x94/0x170 [ 2091.267066][T17211] asm_exc_page_fault+0x22/0x30 [ 2091.272028][T17211] RIP: 0033:0x7f5e99a3632e [ 2091.276444][T17211] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 47 5c 17 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2091.296230][T17211] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010246 [ 2091.302377][T17211] RAX: 00007f5e99babf80 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2091.310338][T17211] RDX: 0000000000000000 RSI: 00007f5e99babf88 RDI: 0000000000000000 [ 2091.318303][T17211] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2091.326281][T17211] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007f5e99babf8c [ 2091.334423][T17211] R13: 00007f5e99bb0060 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2091.342478][T17211] [ 2091.354167][T17211] memory: usage 307172kB, limit 307200kB, failcnt 9268 [ 2091.366805][T17225] wg2 speed is unknown, defaulting to 1000 [ 2091.367029][T17211] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2091.380176][T17211] Memory cgroup stats for /syz1: [ 2091.380355][T17211] anon 90112 [ 2091.380355][T17211] file 274432 [ 2091.380355][T17211] kernel 314179584 [ 2091.380355][T17211] kernel_stack 65536 [ 2091.380355][T17211] pagetables 69632 [ 2091.380355][T17211] sec_pagetables 0 [ 2091.380355][T17211] percpu 5423904 [ 2091.380355][T17211] sock 0 [ 2091.380355][T17211] vmalloc 8192 [ 2091.380355][T17211] shmem 274432 [ 2091.380355][T17211] zswap 0 [ 2091.380355][T17211] zswapped 0 [ 2091.380355][T17211] file_mapped 258048 [ 2091.380355][T17211] file_dirty 0 [ 2091.380355][T17211] file_writeback 0 [ 2091.380355][T17211] swapcached 0 [ 2091.380355][T17211] anon_thp 0 [ 2091.380355][T17211] file_thp 0 [ 2091.380355][T17211] shmem_thp 0 [ 2091.380355][T17211] inactive_anon 98304 [ 2091.380355][T17211] active_anon 266240 [ 2091.380355][T17211] inactive_file 0 [ 2091.380355][T17211] active_file 0 [ 2091.380355][T17211] unevictable 0 [ 2091.380355][T17211] slab_reclaimable 19640 [ 2091.380355][T17211] slab_unreclaimable 308552848 [ 2091.398920][T17235] wg2 speed is unknown, defaulting to 1000 [ 2091.488608][T17211] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17211,uid=0 [ 2091.510297][T17211] Memory cgroup out of memory: Killed process 17211 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x0, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:50:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x7, 0x0, 0x0) 01:50:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x14c5, 0x1}, 0x48) 01:50:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}) 01:50:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', 0x0}) 01:50:40 executing program 0: socket$inet6(0xa, 0x1, 0x8c) 01:50:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00'}) 01:50:40 executing program 2: getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) 01:50:40 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000000c0)={0x0, "c62fcc93fc2fbd09b1fd13700d587baad5c40bc64e7836a37a569e6f64602237ff2a59ffbe8377cb1a523d97ee82ae9c3957fe16f1212313d6cef446fff9a41809b332300fcfef82c234c870ff05d1e61792a11277d3e2c701a0f6709f872e9ae356e42fad04d5e284fdf20be020c62aa1e29b88b8db9d8df7732e19c3fffd55"}) 01:50:40 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) 01:50:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250d0000000c000600000000000000000008000300", @ANYBLOB="080001"], 0x64}}, 0x0) [ 2091.705677][T17258] syz-executor.1 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2091.721624][T17265] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2091.738322][T17258] CPU: 1 PID: 17258 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2091.748793][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2091.758941][T17258] Call Trace: [ 2091.762224][T17258] [ 2091.765155][T17258] dump_stack_lvl+0xcd/0x134 [ 2091.769786][T17258] dump_header+0x10b/0x85f [ 2091.774294][T17258] oom_kill_process.cold+0x10/0x15 [ 2091.779415][T17258] out_of_memory+0x358/0x14a0 [ 2091.784104][T17258] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.789578][T17258] ? __mod_timer+0x83c/0xe30 [ 2091.794261][T17258] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.799737][T17258] ? lock_acquire+0x4fc/0x630 [ 2091.804421][T17258] ? oom_killer_disable+0x270/0x270 [ 2091.809627][T17258] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.815130][T17258] ? lock_release+0x5cb/0x810 [ 2091.819877][T17258] ? rcu_read_unlock+0x9/0x60 [ 2091.824557][T17258] ? lock_downgrade+0x6e0/0x6e0 [ 2091.829412][T17258] mem_cgroup_out_of_memory+0x206/0x270 [ 2091.834967][T17258] ? mem_cgroup_margin+0x130/0x130 [ 2091.840082][T17258] ? lock_downgrade+0x6e0/0x6e0 [ 2091.844943][T17258] try_charge_memcg+0xef8/0x12f0 [ 2091.849897][T17258] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2091.855974][T17258] ? lock_acquire+0x4fc/0x630 [ 2091.860652][T17258] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2091.866382][T17258] ? lock_downgrade+0x6e0/0x6e0 [ 2091.871240][T17258] ? lock_release+0x5cb/0x810 [ 2091.875924][T17258] ? obj_cgroup_charge+0x244/0x5e0 [ 2091.881062][T17258] ? lock_downgrade+0x6e0/0x6e0 [ 2091.885917][T17258] ? lock_release+0x5cb/0x810 [ 2091.890682][T17258] ? rcu_read_lock_sched_held+0xd/0x70 [ 2091.896158][T17258] ? rcu_read_unlock+0x9/0x60 [ 2091.900845][T17258] obj_cgroup_charge+0x2ab/0x5e0 [ 2091.905799][T17258] ? __alloc_file+0x21/0x270 [ 2091.910479][T17258] kmem_cache_alloc+0x9b/0x3c0 [ 2091.915338][T17258] ? d_instantiate+0x75/0x90 [ 2091.919942][T17258] __alloc_file+0x21/0x270 [ 2091.924454][T17258] alloc_empty_file+0x6d/0x170 [ 2091.929221][T17258] alloc_file+0x59/0x800 [ 2091.933469][T17258] alloc_file_pseudo+0x165/0x250 [ 2091.938495][T17258] ? alloc_file+0x800/0x800 [ 2091.943005][T17258] ? alloc_fd+0x2d8/0x6d0 [ 2091.947348][T17258] sock_alloc_file+0x4f/0x190 [ 2091.952131][T17258] __sys_socket+0x1a4/0x240 [ 2091.956653][T17258] ? __sys_socket_file+0x1f0/0x1f0 [ 2091.961782][T17258] __x64_sys_socket+0x6f/0xb0 [ 2091.966471][T17258] do_syscall_64+0x35/0xb0 [ 2091.970906][T17258] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2091.976812][T17258] RIP: 0033:0x7f5e99a8b5f9 [ 2091.981227][T17258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2092.000842][T17258] RSP: 002b:00007f5e991ff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2092.009258][T17258] RAX: ffffffffffffffda RBX: 00007f5e99babf80 RCX: 00007f5e99a8b5f9 [ 2092.017237][T17258] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 2092.025227][T17258] RBP: 00007f5e99ae67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2092.033379][T17258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2092.041353][T17258] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2092.049433][T17258] [ 2092.076196][T17253] wg2 speed is unknown, defaulting to 1000 [ 2092.082417][T17268] ip6_vti0: mtu greater than device maximum [ 2092.094775][T17267] wg2 speed is unknown, defaulting to 1000 [ 2092.113555][T17258] memory: usage 307200kB, limit 307200kB, failcnt 9379 [ 2092.122857][T17258] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2092.133479][T17258] Memory cgroup stats for /syz1: [ 2092.133658][T17258] anon 98304 [ 2092.133658][T17258] file 274432 [ 2092.133658][T17258] kernel 314200064 [ 2092.133658][T17258] kernel_stack 65536 [ 2092.133658][T17258] pagetables 73728 [ 2092.133658][T17258] sec_pagetables 0 [ 2092.133658][T17258] percpu 5423904 [ 2092.133658][T17258] sock 0 [ 2092.133658][T17258] vmalloc 8192 [ 2092.133658][T17258] shmem 274432 [ 2092.133658][T17258] zswap 0 [ 2092.133658][T17258] zswapped 0 [ 2092.133658][T17258] file_mapped 258048 [ 2092.133658][T17258] file_dirty 0 [ 2092.133658][T17258] file_writeback 0 [ 2092.133658][T17258] swapcached 0 [ 2092.133658][T17258] anon_thp 0 [ 2092.133658][T17258] file_thp 0 [ 2092.133658][T17258] shmem_thp 0 [ 2092.133658][T17258] inactive_anon 106496 [ 2092.133658][T17258] active_anon 266240 [ 2092.133658][T17258] inactive_file 0 [ 2092.133658][T17258] active_file 0 [ 2092.133658][T17258] unevictable 0 [ 2092.133658][T17258] slab_reclaimable 21568 [ 2092.133658][T17258] slab_unreclaimable 308565808 [ 2092.241101][T17258] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17248,uid=0 [ 2092.257062][T17258] Memory cgroup out of memory: Killed process 17248 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 01:50:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:50:41 executing program 4: socketpair(0x1d, 0x0, 0x8, &(0x7f0000000940)) 01:50:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 01:50:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}}, 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 01:50:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 01:50:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x0, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:41 executing program 3: socketpair(0x3, 0x0, 0x7ffa, &(0x7f0000000940)) 01:50:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 01:50:41 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000023c0)=[{&(0x7f0000000180)="1ac6f8a68072e1cd07d4fe72eab279248a75958dc4c3bcbc469c3af89669ad65a82af600348810499f154d9d5f6322e75258e03f6f8b6633c454be80d0cbf8d30819ba6ebb8ac52663d501d72d722bfcfc02e9b904433050571ded079d8b8a64f9b84423f5a420fbfc5438c24afbbef02bc97166aa20fe44e07ac0fa94ac98caadb9cc18856640cca640f8fde327e3b76dcce8baf7bdc68b327484eaf9a22e22f0fc2b10e48e862e4a273287083fd9640c558ef07fd9f57cf441", 0xba}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 01:50:41 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@remote, @remote, @val, {@ipv4={0x8100}}}, 0x0) 01:50:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x8, 0x5}, 0x14}}, 0x0) 01:50:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) [ 2092.428672][T17275] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 01:50:41 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={0x0, 0x0, 0x727d6735866aa00b}, 0x10) [ 2092.477608][T17275] CPU: 0 PID: 17275 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2092.481798][T17280] wg2 speed is unknown, defaulting to 1000 [ 2092.488148][T17275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2092.488164][T17275] Call Trace: [ 2092.488172][T17275] [ 2092.488180][T17275] dump_stack_lvl+0xcd/0x134 [ 2092.488213][T17275] dump_header+0x10b/0x85f [ 2092.488236][T17275] oom_kill_process.cold+0x10/0x15 01:50:41 executing program 2: setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 01:50:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x11, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x16}, @sadb_spirange={0x2}]}, 0x28}}, 0x0) [ 2092.488259][T17275] out_of_memory+0x358/0x14a0 [ 2092.529163][T17275] ? rcu_read_lock_sched_held+0xd/0x70 [ 2092.534657][T17275] ? __mod_timer+0x83c/0xe30 [ 2092.539271][T17275] ? rcu_read_lock_sched_held+0xd/0x70 [ 2092.544775][T17275] ? lock_acquire+0x4fc/0x630 [ 2092.549494][T17275] ? oom_killer_disable+0x270/0x270 [ 2092.554808][T17275] ? rcu_read_lock_sched_held+0xd/0x70 [ 2092.560309][T17275] ? lock_release+0x5cb/0x810 [ 2092.565038][T17275] ? rcu_read_unlock+0x9/0x60 [ 2092.569743][T17275] ? lock_downgrade+0x6e0/0x6e0 [ 2092.574623][T17275] mem_cgroup_out_of_memory+0x206/0x270 [ 2092.580213][T17275] ? mem_cgroup_margin+0x130/0x130 [ 2092.585447][T17275] ? lock_downgrade+0x6e0/0x6e0 [ 2092.589980][T17287] wg2 speed is unknown, defaulting to 1000 [ 2092.590313][T17275] try_charge_memcg+0xef8/0x12f0 [ 2092.590354][T17275] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2092.607057][T17275] ? lock_release+0x5cb/0x810 [ 2092.611774][T17275] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2092.617616][T17275] ? lock_downgrade+0x6e0/0x6e0 [ 2092.622497][T17275] ? lock_release+0x5cb/0x810 01:50:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 2092.627200][T17275] ? rcu_read_unlock+0x9/0x60 [ 2092.631966][T17275] ? lock_downgrade+0x6e0/0x6e0 [ 2092.636853][T17275] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2092.642964][T17275] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2092.648562][T17275] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2092.654846][T17275] copy_process+0x73e/0x7190 [ 2092.659473][T17275] ? rcu_read_lock_sched_held+0xd/0x70 [ 2092.665067][T17275] ? lock_acquire+0x4fc/0x630 [ 2092.669854][T17275] ? rcu_read_lock_sched_held+0xd/0x70 [ 2092.675440][T17275] ? lock_release+0x5cb/0x810 [ 2092.680143][T17275] ? psi_task_change+0x1bb/0x2f0 [ 2092.685116][T17275] ? lock_downgrade+0x6e0/0x6e0 [ 2092.689999][T17275] ? __cleanup_sighand+0xb0/0xb0 [ 2092.695064][T17275] ? psi_memstall_leave+0x170/0x250 [ 2092.700390][T17275] ? lock_downgrade+0x6e0/0x6e0 [ 2092.705265][T17275] kernel_clone+0xe7/0x980 [ 2092.709797][T17275] ? lock_acquire+0x4fc/0x630 [ 2092.714497][T17275] ? create_io_thread+0xe0/0xe0 [ 2092.719370][T17275] ? lock_release+0x810/0x810 [ 2092.724065][T17275] ? rcu_read_lock_sched_held+0xd/0x70 [ 2092.729572][T17275] ? lock_release+0x5cb/0x810 [ 2092.734277][T17275] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2092.740549][T17275] ? rcu_read_lock_sched_held+0xd/0x70 [ 2092.746133][T17275] ? lock_acquire+0x4fc/0x630 [ 2092.750841][T17275] ? rcu_read_lock_sched_held+0xd/0x70 [ 2092.756341][T17275] ? lock_release+0x5cb/0x810 [ 2092.761121][T17275] ? __ct_user_exit+0xff/0x150 [ 2092.765927][T17275] __do_sys_clone+0xba/0x100 [ 2092.770547][T17275] ? kernel_clone+0x980/0x980 [ 2092.775262][T17275] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2092.781182][T17275] ? trace_hardirqs_on+0x2d/0x160 [ 2092.786240][T17275] do_syscall_64+0x35/0xb0 [ 2092.790689][T17275] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2092.796704][T17275] RIP: 0033:0x7f5e99a8ca21 [ 2092.801133][T17275] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2092.820851][T17275] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2092.829466][T17275] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2092.837461][T17275] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2092.845459][T17275] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2092.853543][T17275] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2092.861545][T17275] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2092.869551][T17275] [ 2092.893019][T17275] memory: usage 307180kB, limit 307200kB, failcnt 9491 [ 2092.901615][T17275] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2092.909698][T17275] Memory cgroup stats for /syz1: [ 2092.909898][T17275] anon 90112 [ 2092.909898][T17275] file 274432 [ 2092.909898][T17275] kernel 314187776 [ 2092.909898][T17275] kernel_stack 32768 [ 2092.909898][T17275] pagetables 69632 [ 2092.909898][T17275] sec_pagetables 0 [ 2092.909898][T17275] percpu 5423904 [ 2092.909898][T17275] sock 0 [ 2092.909898][T17275] vmalloc 8192 [ 2092.909898][T17275] shmem 274432 [ 2092.909898][T17275] zswap 0 [ 2092.909898][T17275] zswapped 0 [ 2092.909898][T17275] file_mapped 258048 [ 2092.909898][T17275] file_dirty 0 [ 2092.909898][T17275] file_writeback 0 [ 2092.909898][T17275] swapcached 0 [ 2092.909898][T17275] anon_thp 0 [ 2092.909898][T17275] file_thp 0 [ 2092.909898][T17275] shmem_thp 0 [ 2092.909898][T17275] inactive_anon 98304 [ 2092.909898][T17275] active_anon 266240 [ 2092.909898][T17275] inactive_file 0 [ 2092.909898][T17275] active_file 0 01:50:42 executing program 1: r0 = epoll_create(0xffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xb0000002}) 01:50:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x4}]}}, &(0x7f0000000600)=""/149, 0x2a, 0x95, 0x1}, 0x20) 01:50:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x0, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:42 executing program 3: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) poll(&(0x7f0000000000)=[{}, {}], 0x64, 0x0) 01:50:42 executing program 2: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0xb) 01:50:42 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x10000]}, 0x8}) [ 2092.909898][T17275] unevictable 0 [ 2092.909898][T17275] slab_reclaimable 19640 [ 2092.909898][T17275] slab_unreclaimable 308563784 [ 2093.007726][T17275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17275,uid=0 [ 2093.024376][T17275] Memory cgroup out of memory: Killed process 17275 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:42 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) 01:50:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) 01:50:42 executing program 3: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) poll(&(0x7f0000000000)=[{}, {}], 0x64, 0x0) 01:50:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 01:50:42 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x42891) 01:50:42 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000480)="df", 0xffffff1f}], 0x2, &(0x7f0000000600)=[{0x28, 0x0, 0x0, "5513bbf65ca0d06d446f61ae9b89e23695"}], 0x28}, 0x0) [ 2093.122291][T17312] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2093.162147][T17310] wg2 speed is unknown, defaulting to 1000 [ 2093.178496][T17312] CPU: 1 PID: 17312 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2093.188973][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2093.199047][T17312] Call Trace: [ 2093.202326][T17312] [ 2093.205263][T17312] dump_stack_lvl+0xcd/0x134 [ 2093.209862][T17312] dump_header+0x10b/0x85f [ 2093.214286][T17312] oom_kill_process.cold+0x10/0x15 [ 2093.219400][T17312] out_of_memory+0x358/0x14a0 [ 2093.224080][T17312] ? rcu_read_lock_sched_held+0xd/0x70 [ 2093.229553][T17312] ? __mod_timer+0x83c/0xe30 [ 2093.234151][T17312] ? rcu_read_lock_sched_held+0xd/0x70 [ 2093.239622][T17312] ? lock_acquire+0x4fc/0x630 [ 2093.244302][T17312] ? oom_killer_disable+0x270/0x270 [ 2093.249596][T17312] ? rcu_read_lock_sched_held+0xd/0x70 [ 2093.255067][T17312] ? lock_release+0x5cb/0x810 [ 2093.259754][T17312] ? rcu_read_unlock+0x9/0x60 [ 2093.264440][T17312] ? lock_downgrade+0x6e0/0x6e0 [ 2093.269297][T17312] mem_cgroup_out_of_memory+0x206/0x270 [ 2093.276856][T17312] ? mem_cgroup_margin+0x130/0x130 [ 2093.281970][T17312] ? lock_downgrade+0x6e0/0x6e0 [ 2093.286829][T17312] try_charge_memcg+0xef8/0x12f0 [ 2093.291776][T17312] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2093.297767][T17312] ? lock_release+0x5cb/0x810 [ 2093.302455][T17312] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2093.308209][T17312] ? lock_downgrade+0x6e0/0x6e0 [ 2093.313073][T17312] ? lock_release+0x5cb/0x810 [ 2093.317750][T17312] ? rcu_read_unlock+0x9/0x60 [ 2093.322433][T17312] ? lock_downgrade+0x6e0/0x6e0 [ 2093.327549][T17312] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2093.333549][T17312] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2093.339109][T17312] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2093.345361][T17312] copy_process+0x73e/0x7190 [ 2093.349956][T17312] ? rcu_read_lock_sched_held+0xd/0x70 [ 2093.355425][T17312] ? lock_acquire+0x4fc/0x630 [ 2093.360102][T17312] ? rcu_read_lock_sched_held+0xd/0x70 [ 2093.365570][T17312] ? lock_release+0x5cb/0x810 [ 2093.370333][T17312] ? psi_task_change+0x1bb/0x2f0 [ 2093.375361][T17312] ? lock_downgrade+0x6e0/0x6e0 [ 2093.380220][T17312] ? __cleanup_sighand+0xb0/0xb0 [ 2093.385250][T17312] ? psi_memstall_leave+0x170/0x250 [ 2093.390449][T17312] ? lock_downgrade+0x6e0/0x6e0 [ 2093.395387][T17312] kernel_clone+0xe7/0x980 [ 2093.399811][T17312] ? lock_acquire+0x4fc/0x630 [ 2093.404486][T17312] ? create_io_thread+0xe0/0xe0 [ 2093.409340][T17312] ? lock_release+0x810/0x810 [ 2093.414028][T17312] ? rcu_read_lock_sched_held+0xd/0x70 [ 2093.419584][T17312] ? lock_release+0x5cb/0x810 [ 2093.424346][T17312] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2093.430607][T17312] ? rcu_read_lock_sched_held+0xd/0x70 [ 2093.436169][T17312] ? lock_acquire+0x4fc/0x630 [ 2093.440848][T17312] ? rcu_read_lock_sched_held+0xd/0x70 [ 2093.446320][T17312] ? lock_release+0x5cb/0x810 [ 2093.451091][T17312] ? __ct_user_exit+0xff/0x150 [ 2093.455858][T17312] __do_sys_clone+0xba/0x100 [ 2093.460464][T17312] ? kernel_clone+0x980/0x980 [ 2093.465328][T17312] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2093.471222][T17312] ? trace_hardirqs_on+0x2d/0x160 [ 2093.476246][T17312] do_syscall_64+0x35/0xb0 [ 2093.480688][T17312] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2093.486679][T17312] RIP: 0033:0x7f5e99a8ca21 [ 2093.491365][T17312] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2093.511850][T17312] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2093.520262][T17312] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2093.528318][T17312] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2093.536285][T17312] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2093.544340][T17312] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2093.552310][T17312] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2093.560386][T17312] [ 2093.622629][T17312] memory: usage 307168kB, limit 307200kB, failcnt 9570 [ 2093.630790][T17312] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2093.640268][T17320] wg2 speed is unknown, defaulting to 1000 [ 2093.646573][T17312] Memory cgroup stats for /syz1: [ 2093.646761][T17312] anon 90112 [ 2093.646761][T17312] file 274432 [ 2093.646761][T17312] kernel 314175488 [ 2093.646761][T17312] kernel_stack 32768 [ 2093.646761][T17312] pagetables 69632 [ 2093.646761][T17312] sec_pagetables 0 [ 2093.646761][T17312] percpu 5423904 [ 2093.646761][T17312] sock 0 [ 2093.646761][T17312] vmalloc 8192 [ 2093.646761][T17312] shmem 274432 [ 2093.646761][T17312] zswap 0 [ 2093.646761][T17312] zswapped 0 [ 2093.646761][T17312] file_mapped 258048 [ 2093.646761][T17312] file_dirty 0 [ 2093.646761][T17312] file_writeback 0 [ 2093.646761][T17312] swapcached 0 [ 2093.646761][T17312] anon_thp 0 [ 2093.646761][T17312] file_thp 0 [ 2093.646761][T17312] shmem_thp 0 [ 2093.646761][T17312] inactive_anon 98304 [ 2093.646761][T17312] active_anon 266240 [ 2093.646761][T17312] inactive_file 0 [ 2093.646761][T17312] active_file 0 [ 2093.646761][T17312] unevictable 0 [ 2093.646761][T17312] slab_reclaimable 19640 [ 2093.646761][T17312] slab_unreclaimable 308563480 [ 2093.743207][T17312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17312,uid=0 01:50:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x30}}, 0x0) 01:50:42 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000003640)={0x0, 0x0, 0x0}, 0x0) 01:50:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x0, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 01:50:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) 01:50:42 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="af", 0x1}, {&(0x7f0000000480)="df", 0x1}], 0x2, &(0x7f0000000600)=[{0x28, 0x0, 0x0, "5513bbf65ca0d06d446f61ae9b89e23695"}], 0x28}, 0x0) [ 2093.759194][T17312] Memory cgroup out of memory: Killed process 17312 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) 01:50:42 executing program 0: epoll_create(0x1f) pselect6(0x40, &(0x7f0000000080)={0x9}, 0x0, 0x0, &(0x7f0000000180), 0x0) 01:50:42 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x2}, {&(0x7f0000000480)="df", 0x1}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=']', 0x1}], 0x1}, 0x0) 01:50:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 01:50:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 01:50:42 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0x10) [ 2093.882176][T17338] wg2 speed is unknown, defaulting to 1000 [ 2093.927816][T17351] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 2093.949115][T17342] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2093.968359][T17342] CPU: 0 PID: 17342 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2093.975059][T17348] wg2 speed is unknown, defaulting to 1000 [ 2093.978831][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2093.978848][T17342] Call Trace: [ 2093.978856][T17342] [ 2093.978865][T17342] dump_stack_lvl+0xcd/0x134 [ 2094.005762][T17342] dump_header+0x10b/0x85f [ 2094.010210][T17342] oom_kill_process.cold+0x10/0x15 [ 2094.015356][T17342] out_of_memory+0x358/0x14a0 [ 2094.020069][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.025570][T17342] ? __mod_timer+0x83c/0xe30 [ 2094.030191][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.035681][T17342] ? lock_acquire+0x4fc/0x630 [ 2094.040382][T17342] ? oom_killer_disable+0x270/0x270 [ 2094.045603][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.051160][T17342] ? lock_release+0x5cb/0x810 [ 2094.055866][T17342] ? rcu_read_unlock+0x9/0x60 [ 2094.060578][T17342] ? lock_downgrade+0x6e0/0x6e0 [ 2094.065437][T17342] mem_cgroup_out_of_memory+0x206/0x270 [ 2094.071258][T17342] ? mem_cgroup_margin+0x130/0x130 [ 2094.076371][T17342] ? lock_downgrade+0x6e0/0x6e0 [ 2094.081243][T17342] try_charge_memcg+0xef8/0x12f0 [ 2094.086204][T17342] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2094.092314][T17342] ? lock_acquire+0x4fc/0x630 [ 2094.097089][T17342] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2094.102813][T17342] ? lock_downgrade+0x6e0/0x6e0 [ 2094.107656][T17342] ? lock_release+0x5cb/0x810 [ 2094.112336][T17342] ? obj_cgroup_charge+0x244/0x5e0 [ 2094.117470][T17342] ? lock_downgrade+0x6e0/0x6e0 [ 2094.122539][T17342] ? lock_release+0x5cb/0x810 [ 2094.127418][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.132928][T17342] ? rcu_read_unlock+0x9/0x60 [ 2094.137961][T17342] obj_cgroup_charge+0x2ab/0x5e0 [ 2094.144107][T17342] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2094.149665][T17342] ? copy_semundo+0x187/0x2f0 [ 2094.154392][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.159954][T17342] kmalloc_trace+0x22/0x60 [ 2094.164473][T17342] copy_semundo+0x187/0x2f0 [ 2094.168990][T17342] copy_process+0x23f4/0x7190 [ 2094.173691][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.179232][T17342] ? lock_acquire+0x4fc/0x630 [ 2094.183950][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.189540][T17342] ? __cleanup_sighand+0xb0/0xb0 [ 2094.194480][T17342] ? psi_memstall_leave+0x170/0x250 [ 2094.200557][T17342] ? lock_downgrade+0x6e0/0x6e0 [ 2094.205408][T17342] kernel_clone+0xe7/0x980 [ 2094.209819][T17342] ? lock_acquire+0x4fc/0x630 [ 2094.214485][T17342] ? create_io_thread+0xe0/0xe0 [ 2094.219323][T17342] ? lock_release+0x810/0x810 [ 2094.224003][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.229487][T17342] ? lock_release+0x5cb/0x810 [ 2094.234179][T17342] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2094.240683][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.246231][T17342] ? lock_acquire+0x4fc/0x630 [ 2094.250901][T17342] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.256366][T17342] ? lock_release+0x5cb/0x810 [ 2094.261125][T17342] ? __ct_user_exit+0xff/0x150 [ 2094.265898][T17342] __do_sys_clone+0xba/0x100 [ 2094.270493][T17342] ? kernel_clone+0x980/0x980 [ 2094.275277][T17342] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2094.281191][T17342] ? trace_hardirqs_on+0x2d/0x160 [ 2094.286294][T17342] do_syscall_64+0x35/0xb0 [ 2094.290710][T17342] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2094.296599][T17342] RIP: 0033:0x7f5e99a8ca21 [ 2094.301011][T17342] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2094.320622][T17342] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2094.329047][T17342] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2094.337128][T17342] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2094.345465][T17342] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2094.353434][T17342] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2094.361406][T17342] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2094.369381][T17342] [ 2094.382230][T17342] memory: usage 307200kB, limit 307200kB, failcnt 9684 [ 2094.389637][T17342] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2094.396778][T17342] Memory cgroup stats for /syz1: [ 2094.396947][T17342] anon 90112 [ 2094.396947][T17342] file 274432 [ 2094.396947][T17342] kernel 314191872 [ 2094.396947][T17342] kernel_stack 65536 [ 2094.396947][T17342] pagetables 69632 [ 2094.396947][T17342] sec_pagetables 0 [ 2094.396947][T17342] percpu 5423904 [ 2094.396947][T17342] sock 0 [ 2094.396947][T17342] vmalloc 8192 [ 2094.396947][T17342] shmem 274432 [ 2094.396947][T17342] zswap 0 [ 2094.396947][T17342] zswapped 0 [ 2094.396947][T17342] file_mapped 258048 [ 2094.396947][T17342] file_dirty 0 [ 2094.396947][T17342] file_writeback 0 [ 2094.396947][T17342] swapcached 0 [ 2094.396947][T17342] anon_thp 0 [ 2094.396947][T17342] file_thp 0 [ 2094.396947][T17342] shmem_thp 0 [ 2094.396947][T17342] inactive_anon 98304 [ 2094.396947][T17342] active_anon 266240 [ 2094.396947][T17342] inactive_file 0 [ 2094.396947][T17342] active_file 0 [ 2094.396947][T17342] unevictable 0 01:50:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x50a, 0x1}, 0x48) 01:50:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @loopback}}}}) 01:50:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x48) 01:50:43 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:50:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0xc}, 0x0) 01:50:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x0, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:43 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@vsock, 0x80, 0x0}, 0x0) [ 2094.396947][T17342] slab_reclaimable 19640 [ 2094.396947][T17342] slab_unreclaimable 308563784 [ 2094.493019][T17342] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17342,uid=0 [ 2094.508882][T17342] Memory cgroup out of memory: Killed process 17342 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x1, &(0x7f0000000340)=@raw=[@call], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:43 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000180)=@id, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="01", 0x1}], 0x1}, 0x0) 01:50:43 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0xfffeffff, 0x4) [ 2094.627968][T17366] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2094.664116][T17366] CPU: 1 PID: 17366 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2094.674589][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2094.675615][T17374] tipc: Trying to set illegal importance in message [ 2094.684646][T17366] Call Trace: [ 2094.684661][T17366] [ 2094.684669][T17366] dump_stack_lvl+0xcd/0x134 [ 2094.684701][T17366] dump_header+0x10b/0x85f [ 2094.684723][T17366] oom_kill_process.cold+0x10/0x15 [ 2094.684745][T17366] out_of_memory+0x358/0x14a0 [ 2094.684773][T17366] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.684813][T17366] ? __mod_timer+0x83c/0xe30 01:50:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x34}]}}, &(0x7f0000000100)=""/198, 0x2a, 0xc6, 0x1}, 0x20) 01:50:43 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001c80)={&(0x7f0000000200)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000004c0)='>', 0x1}], 0x1, &(0x7f0000001ac0)=[{0x10}, {0x10}], 0xf}, 0x0) [ 2094.684839][T17366] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.684869][T17366] ? lock_acquire+0x4fc/0x630 [ 2094.684890][T17366] ? oom_killer_disable+0x270/0x270 [ 2094.743150][T17366] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.748657][T17366] ? lock_release+0x5cb/0x810 [ 2094.753459][T17366] ? rcu_read_unlock+0x9/0x60 [ 2094.758175][T17366] ? lock_downgrade+0x6e0/0x6e0 [ 2094.763141][T17366] mem_cgroup_out_of_memory+0x206/0x270 [ 2094.768719][T17366] ? mem_cgroup_margin+0x130/0x130 [ 2094.773837][T17366] ? lock_downgrade+0x6e0/0x6e0 [ 2094.778970][T17366] try_charge_memcg+0xef8/0x12f0 [ 2094.783913][T17366] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2094.789981][T17366] ? lock_release+0x5cb/0x810 [ 2094.794673][T17366] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2094.800428][T17366] ? lock_downgrade+0x6e0/0x6e0 [ 2094.805294][T17366] ? lock_release+0x5cb/0x810 [ 2094.810008][T17366] ? rcu_read_unlock+0x9/0x60 [ 2094.814694][T17366] ? lock_downgrade+0x6e0/0x6e0 [ 2094.819564][T17366] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2094.825513][T17366] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2094.831071][T17366] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2094.837225][T17366] copy_process+0x73e/0x7190 [ 2094.841818][T17366] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.847282][T17366] ? lock_acquire+0x4fc/0x630 [ 2094.851970][T17366] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.857443][T17366] ? lock_release+0x5cb/0x810 [ 2094.862133][T17366] ? psi_task_change+0x1bb/0x2f0 [ 2094.867182][T17366] ? lock_downgrade+0x6e0/0x6e0 [ 2094.872134][T17366] ? __cleanup_sighand+0xb0/0xb0 [ 2094.877079][T17366] ? psi_memstall_leave+0x170/0x250 [ 2094.882279][T17366] ? lock_downgrade+0x6e0/0x6e0 [ 2094.887130][T17366] kernel_clone+0xe7/0x980 [ 2094.891547][T17366] ? lock_acquire+0x4fc/0x630 [ 2094.896236][T17366] ? create_io_thread+0xe0/0xe0 [ 2094.901107][T17366] ? lock_release+0x810/0x810 [ 2094.905861][T17366] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.911335][T17366] ? lock_release+0x5cb/0x810 [ 2094.916107][T17366] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2094.922349][T17366] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.927823][T17366] ? lock_acquire+0x4fc/0x630 [ 2094.932508][T17366] ? rcu_read_lock_sched_held+0xd/0x70 [ 2094.938001][T17366] ? lock_release+0x5cb/0x810 [ 2094.942779][T17366] ? __ct_user_exit+0xff/0x150 [ 2094.947547][T17366] __do_sys_clone+0xba/0x100 [ 2094.952166][T17366] ? kernel_clone+0x980/0x980 [ 2094.957124][T17366] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2094.963036][T17366] ? trace_hardirqs_on+0x2d/0x160 [ 2094.968077][T17366] do_syscall_64+0x35/0xb0 [ 2094.972509][T17366] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2094.978423][T17366] RIP: 0033:0x7f5e99a8ca21 [ 2094.982850][T17366] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2095.002688][T17366] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2095.011233][T17366] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2095.019205][T17366] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2095.027187][T17366] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2095.035254][T17366] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2095.043252][T17366] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2095.051244][T17366] [ 2095.056727][T17366] memory: usage 307200kB, limit 307200kB, failcnt 9778 [ 2095.063835][T17366] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2095.070936][T17366] Memory cgroup stats for /syz1: [ 2095.071119][T17366] anon 94208 [ 2095.071119][T17366] file 274432 [ 2095.071119][T17366] kernel 314191872 [ 2095.071119][T17366] kernel_stack 32768 [ 2095.071119][T17366] pagetables 77824 [ 2095.071119][T17366] sec_pagetables 0 [ 2095.071119][T17366] percpu 5423904 [ 2095.071119][T17366] sock 0 [ 2095.071119][T17366] vmalloc 8192 [ 2095.071119][T17366] shmem 274432 [ 2095.071119][T17366] zswap 0 [ 2095.071119][T17366] zswapped 0 [ 2095.071119][T17366] file_mapped 258048 [ 2095.071119][T17366] file_dirty 0 [ 2095.071119][T17366] file_writeback 0 [ 2095.071119][T17366] swapcached 0 [ 2095.071119][T17366] anon_thp 0 [ 2095.071119][T17366] file_thp 0 [ 2095.071119][T17366] shmem_thp 0 [ 2095.071119][T17366] inactive_anon 102400 [ 2095.071119][T17366] active_anon 266240 [ 2095.071119][T17366] inactive_file 0 [ 2095.071119][T17366] active_file 0 [ 2095.071119][T17366] unevictable 0 [ 2095.071119][T17366] slab_reclaimable 19640 [ 2095.071119][T17366] slab_unreclaimable 308564184 01:50:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_pktinfo(r0, 0x0, 0x2a, 0x0, 0x0) 01:50:44 executing program 3: bpf$MAP_CREATE(0x6, &(0x7f00000002c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:50:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000000100)=""/198, 0x2a, 0xc6, 0x1}, 0x20) 01:50:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x166fa41f2b0ae37}, 0x14}}, 0x0) 01:50:44 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1}, 0xe) [ 2095.168142][T17366] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17366,uid=0 [ 2095.184154][T17366] Memory cgroup out of memory: Killed process 17366 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2095.276817][T17363] wg2 speed is unknown, defaulting to 1000 [ 2095.287794][T17390] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2095.289450][T17369] wg2 speed is unknown, defaulting to 1000 [ 2095.298551][T17390] CPU: 1 PID: 17390 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2095.314531][T17390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2095.324601][T17390] Call Trace: [ 2095.327894][T17390] [ 2095.331363][T17390] dump_stack_lvl+0xcd/0x134 [ 2095.335985][T17390] dump_header+0x10b/0x85f [ 2095.340430][T17390] oom_kill_process.cold+0x10/0x15 [ 2095.345570][T17390] out_of_memory+0x358/0x14a0 [ 2095.350279][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.355854][T17390] ? __mod_timer+0x83c/0xe30 [ 2095.360473][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.365980][T17390] ? lock_acquire+0x4fc/0x630 [ 2095.370730][T17390] ? oom_killer_disable+0x270/0x270 [ 2095.375948][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.381529][T17390] ? lock_release+0x5cb/0x810 [ 2095.386236][T17390] ? rcu_read_unlock+0x9/0x60 [ 2095.390943][T17390] ? lock_downgrade+0x6e0/0x6e0 [ 2095.395821][T17390] mem_cgroup_out_of_memory+0x206/0x270 [ 2095.401401][T17390] ? mem_cgroup_margin+0x130/0x130 [ 2095.406542][T17390] ? lock_downgrade+0x6e0/0x6e0 [ 2095.411428][T17390] try_charge_memcg+0xef8/0x12f0 [ 2095.416507][T17390] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2095.422493][T17390] ? lock_acquire+0x4fc/0x630 [ 2095.427187][T17390] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2095.432932][T17390] ? lock_downgrade+0x6e0/0x6e0 [ 2095.437773][T17390] ? lock_release+0x5cb/0x810 [ 2095.442537][T17390] ? obj_cgroup_charge+0x244/0x5e0 [ 2095.447680][T17390] ? lock_downgrade+0x6e0/0x6e0 [ 2095.452548][T17390] ? lock_release+0x5cb/0x810 [ 2095.457229][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.462730][T17390] ? rcu_read_unlock+0x9/0x60 [ 2095.467440][T17390] obj_cgroup_charge+0x2ab/0x5e0 [ 2095.472587][T17390] kmem_cache_alloc_node+0xa1/0x400 [ 2095.477891][T17390] ? copy_process+0x5c2/0x7190 [ 2095.482725][T17390] copy_process+0x5c2/0x7190 [ 2095.487362][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.492930][T17390] ? lock_acquire+0x4fc/0x630 [ 2095.497723][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.503282][T17390] ? lock_release+0x5cb/0x810 [ 2095.507982][T17390] ? psi_task_change+0x1bb/0x2f0 [ 2095.512946][T17390] ? lock_downgrade+0x6e0/0x6e0 [ 2095.517849][T17390] ? __cleanup_sighand+0xb0/0xb0 [ 2095.522799][T17390] ? psi_memstall_leave+0x170/0x250 [ 2095.528027][T17390] ? lock_downgrade+0x6e0/0x6e0 [ 2095.532988][T17390] kernel_clone+0xe7/0x980 [ 2095.537412][T17390] ? lock_acquire+0x4fc/0x630 [ 2095.542086][T17390] ? create_io_thread+0xe0/0xe0 [ 2095.546946][T17390] ? lock_release+0x810/0x810 [ 2095.551641][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.557117][T17390] ? lock_release+0x5cb/0x810 [ 2095.561970][T17390] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2095.568227][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.573805][T17390] ? lock_acquire+0x4fc/0x630 [ 2095.578474][T17390] ? rcu_read_lock_sched_held+0xd/0x70 [ 2095.583943][T17390] ? lock_release+0x5cb/0x810 [ 2095.588644][T17390] ? __ct_user_exit+0xff/0x150 [ 2095.593434][T17390] __do_sys_clone+0xba/0x100 [ 2095.598041][T17390] ? kernel_clone+0x980/0x980 [ 2095.602876][T17390] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2095.608810][T17390] ? trace_hardirqs_on+0x2d/0x160 [ 2095.613939][T17390] do_syscall_64+0x35/0xb0 [ 2095.618477][T17390] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2095.624597][T17390] RIP: 0033:0x7f5e99a8ca21 [ 2095.629035][T17390] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2095.648935][T17390] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2095.657362][T17390] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2095.665336][T17390] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2095.673399][T17390] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2095.681369][T17390] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2095.689335][T17390] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2095.697672][T17390] [ 2095.709727][T17390] memory: usage 307160kB, limit 307200kB, failcnt 9869 [ 2095.726040][T17390] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2095.733322][T17390] Memory cgroup stats for /syz1: [ 2095.733490][T17390] anon 90112 [ 2095.733490][T17390] file 274432 [ 2095.733490][T17390] kernel 314167296 [ 2095.733490][T17390] kernel_stack 32768 [ 2095.733490][T17390] pagetables 69632 [ 2095.733490][T17390] sec_pagetables 0 [ 2095.733490][T17390] percpu 5423904 [ 2095.733490][T17390] sock 0 [ 2095.733490][T17390] vmalloc 8192 [ 2095.733490][T17390] shmem 274432 [ 2095.733490][T17390] zswap 0 [ 2095.733490][T17390] zswapped 0 [ 2095.733490][T17390] file_mapped 258048 [ 2095.733490][T17390] file_dirty 0 [ 2095.733490][T17390] file_writeback 0 [ 2095.733490][T17390] swapcached 0 [ 2095.733490][T17390] anon_thp 0 [ 2095.733490][T17390] file_thp 0 [ 2095.733490][T17390] shmem_thp 0 [ 2095.733490][T17390] inactive_anon 53248 [ 2095.733490][T17390] active_anon 266240 [ 2095.733490][T17390] inactive_file 0 [ 2095.733490][T17390] active_file 0 [ 2095.733490][T17390] unevictable 0 [ 2095.733490][T17390] slab_reclaimable 19640 [ 2095.733490][T17390] slab_unreclaimable 308567384 [ 2095.828766][T17390] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17390,uid=0 [ 2095.844994][T17390] Memory cgroup out of memory: Killed process 17390 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x0, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_pktinfo(r0, 0x0, 0x7, 0x0, 0x0) 01:50:45 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40}}, 0x10) 01:50:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x9}}}, 0x24}}, 0x0) 01:50:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000010"], 0x28}}, 0x0) 01:50:45 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000180)={&(0x7f0000000040)=@nameseq={0x1e, 0x0}, 0xffffffffffffffef, 0x0}, 0x0) 01:50:45 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x1, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x8}], &(0x7f00000012c0)='syzkaller\x00', 0x3, 0xf5, &(0x7f0000001300)=""/245, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x1e49, 0x40}, 0x48) 01:50:45 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001600)=[{0x0, 0xf0ff7f00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 2096.615839][T17400] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 01:50:45 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) 01:50:45 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 01:50:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) [ 2096.701747][T17401] syz-executor.1 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2096.755931][T17404] wg2 speed is unknown, defaulting to 1000 [ 2096.781335][T17401] CPU: 0 PID: 17401 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2096.791808][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2096.801893][T17401] Call Trace: [ 2096.805183][T17401] [ 2096.808139][T17401] dump_stack_lvl+0xcd/0x134 [ 2096.812760][T17401] dump_header+0x10b/0x85f [ 2096.817282][T17401] oom_kill_process.cold+0x10/0x15 [ 2096.822413][T17401] out_of_memory+0x358/0x14a0 [ 2096.827112][T17401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2096.832597][T17401] ? __mod_timer+0x83c/0xe30 [ 2096.837121][T17411] wg2 speed is unknown, defaulting to 1000 [ 2096.837211][T17401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2096.848494][T17401] ? lock_acquire+0x4fc/0x630 [ 2096.853203][T17401] ? oom_killer_disable+0x270/0x270 [ 2096.858432][T17401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2096.863932][T17401] ? lock_release+0x5cb/0x810 [ 2096.868726][T17401] ? rcu_read_unlock+0x9/0x60 [ 2096.873445][T17401] ? lock_downgrade+0x6e0/0x6e0 [ 2096.878319][T17401] mem_cgroup_out_of_memory+0x206/0x270 [ 2096.883978][T17401] ? mem_cgroup_margin+0x130/0x130 [ 2096.889126][T17401] ? lock_downgrade+0x6e0/0x6e0 [ 2096.894016][T17401] try_charge_memcg+0xef8/0x12f0 [ 2096.899167][T17401] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2096.905265][T17401] ? lock_acquire+0x4fc/0x630 [ 2096.910061][T17401] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2096.915824][T17401] ? lock_downgrade+0x6e0/0x6e0 [ 2096.920707][T17401] ? lock_release+0x5cb/0x810 [ 2096.925506][T17401] ? obj_cgroup_charge+0x244/0x5e0 [ 2096.930672][T17401] ? lock_downgrade+0x6e0/0x6e0 [ 2096.935557][T17401] ? lock_release+0x5cb/0x810 [ 2096.940262][T17401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2096.945753][T17401] ? rcu_read_unlock+0x9/0x60 [ 2096.950456][T17401] obj_cgroup_charge+0x2ab/0x5e0 [ 2096.955421][T17401] ? __alloc_file+0x21/0x270 [ 2096.960014][T17401] kmem_cache_alloc+0x9b/0x3c0 [ 2096.964786][T17401] ? d_instantiate+0x75/0x90 [ 2096.969392][T17401] __alloc_file+0x21/0x270 [ 2096.973922][T17401] alloc_empty_file+0x6d/0x170 [ 2096.978688][T17401] alloc_file+0x59/0x800 [ 2096.983044][T17401] alloc_file_pseudo+0x165/0x250 [ 2096.987986][T17401] ? alloc_file+0x800/0x800 [ 2096.992496][T17401] ? alloc_fd+0x2d8/0x6d0 [ 2096.996853][T17401] sock_alloc_file+0x4f/0x190 [ 2097.001538][T17401] __sys_socket+0x1a4/0x240 [ 2097.006051][T17401] ? __sys_socket_file+0x1f0/0x1f0 [ 2097.011263][T17401] __x64_sys_socket+0x6f/0xb0 [ 2097.015966][T17401] do_syscall_64+0x35/0xb0 [ 2097.020416][T17401] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2097.026336][T17401] RIP: 0033:0x7f5e99a8b5f9 [ 2097.030792][T17401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2097.050412][T17401] RSP: 002b:00007f5e991ff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2097.058827][T17401] RAX: ffffffffffffffda RBX: 00007f5e99babf80 RCX: 00007f5e99a8b5f9 [ 2097.066795][T17401] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 2097.074764][T17401] RBP: 00007f5e99ae67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2097.082734][T17401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2097.090790][T17401] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2097.098776][T17401] [ 2097.128841][T17401] memory: usage 307200kB, limit 307200kB, failcnt 9997 [ 2097.136385][T17401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2097.146456][T17401] Memory cgroup stats for /syz1: [ 2097.146619][T17401] anon 98304 [ 2097.146619][T17401] file 274432 [ 2097.146619][T17401] kernel 314200064 [ 2097.146619][T17401] kernel_stack 65536 [ 2097.146619][T17401] pagetables 73728 [ 2097.146619][T17401] sec_pagetables 0 [ 2097.146619][T17401] percpu 5423904 [ 2097.146619][T17401] sock 0 [ 2097.146619][T17401] vmalloc 8192 [ 2097.146619][T17401] shmem 274432 [ 2097.146619][T17401] zswap 0 [ 2097.146619][T17401] zswapped 0 [ 2097.146619][T17401] file_mapped 258048 [ 2097.146619][T17401] file_dirty 0 [ 2097.146619][T17401] file_writeback 0 [ 2097.146619][T17401] swapcached 0 [ 2097.146619][T17401] anon_thp 0 [ 2097.146619][T17401] file_thp 0 [ 2097.146619][T17401] shmem_thp 0 [ 2097.146619][T17401] inactive_anon 106496 [ 2097.146619][T17401] active_anon 266240 [ 2097.146619][T17401] inactive_file 0 [ 2097.146619][T17401] active_file 0 01:50:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x0, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:46 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, &(0x7f0000000040)) 01:50:46 executing program 2: socketpair(0x2b, 0x0, 0x1, &(0x7f0000000080)) 01:50:46 executing program 4: r0 = epoll_create(0xffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x2, r1, 0x0) 01:50:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) [ 2097.146619][T17401] unevictable 0 [ 2097.146619][T17401] slab_reclaimable 21568 [ 2097.146619][T17401] slab_unreclaimable 308565680 01:50:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000011c0)={0x14, 0x2, 0x9, 0x301}, 0x14}}, 0x0) 01:50:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(r0, &(0x7f0000000240), 0x20) 01:50:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000011c0)={0xc0}, 0x14}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000003c0)) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x18, 0x4, 0x7, 0x5, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x7}, [@generic='T']}, 0x18}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 01:50:46 executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000300)=""/162, 0x26, 0xa2, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x10) 01:50:46 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="67726574617030000000000000000000dd516662b2b33385a36dcc670d641315d38de52f6b235fe1386c"]}) [ 2097.287716][T17401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17394,uid=0 [ 2097.313600][T17401] Memory cgroup out of memory: Killed process 17394 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2097.317698][T17428] wg2 speed is unknown, defaulting to 1000 01:50:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={0x14, 0x1, 0x5, 0x301}, 0x14}}, 0x0) 01:50:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) [ 2097.365254][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2097.437308][T17437] wg2 speed is unknown, defaulting to 1000 01:50:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x0, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, 0x0) 01:50:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}}, 0x0) 01:50:46 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="af", 0x1}, {&(0x7f0000000480)="df", 0x7ffff000}], 0x2, &(0x7f0000000600)=[{0x28, 0x0, 0x0, "5513bbf65ca0d06d446f61ae9b89e23695"}], 0x28}, 0x0) 01:50:46 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="af", 0x1}, {&(0x7f0000000000)="df668230d4913e86849455147c8f3acaeac8c29d0206ed27c8fe64e5cb1f641e47d49ae2314692429fec5920767fe56c0e9c2897830e8722c9e9aa781e619ed7073dae8dc02ae3b085e820cce14d622d0d8dba354c9d48b11f300d6e00c0c0e0506fc2f6f113bcbda2435b138bf95a311264fb6582e2aee430ab79f858635bea75769e465df0bed74055840eaf1eced006cd40d5c7e7dcfe92ef95d7ff7a", 0x1}], 0x15, &(0x7f0000000600)=ANY=[@ANYBLOB="280000f65ca0d06d446f61ae9b89e2369500"/40], 0x28}, 0x40000) [ 2097.521534][T17443] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2097.532454][T17443] CPU: 0 PID: 17443 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2097.543088][T17443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2097.553173][T17443] Call Trace: [ 2097.556469][T17443] [ 2097.559413][T17443] dump_stack_lvl+0xcd/0x134 [ 2097.564114][T17443] dump_header+0x10b/0x85f [ 2097.568567][T17443] oom_kill_process.cold+0x10/0x15 [ 2097.573717][T17443] out_of_memory+0x358/0x14a0 [ 2097.578519][T17443] ? rcu_read_lock_sched_held+0xd/0x70 [ 2097.584030][T17443] ? __mod_timer+0x83c/0xe30 [ 2097.588649][T17443] ? rcu_read_lock_sched_held+0xd/0x70 [ 2097.594153][T17443] ? lock_acquire+0x4fc/0x630 [ 2097.598945][T17443] ? oom_killer_disable+0x270/0x270 [ 2097.602889][T17450] wg2 speed is unknown, defaulting to 1000 [ 2097.604158][T17443] ? rcu_read_lock_sched_held+0xd/0x70 [ 2097.604201][T17443] ? lock_release+0x5cb/0x810 [ 2097.620115][T17443] ? rcu_read_unlock+0x9/0x60 [ 2097.624811][T17443] ? lock_downgrade+0x6e0/0x6e0 [ 2097.629710][T17443] mem_cgroup_out_of_memory+0x206/0x270 [ 2097.635296][T17443] ? mem_cgroup_margin+0x130/0x130 [ 2097.640534][T17443] ? lock_downgrade+0x6e0/0x6e0 [ 2097.645393][T17443] try_charge_memcg+0xef8/0x12f0 [ 2097.650341][T17443] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2097.656330][T17443] ? lock_release+0x5cb/0x810 [ 2097.661005][T17443] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2097.666727][T17443] ? lock_downgrade+0x6e0/0x6e0 [ 2097.671577][T17443] ? lock_release+0x5cb/0x810 [ 2097.676251][T17443] ? rcu_read_unlock+0x9/0x60 [ 2097.680926][T17443] ? lock_downgrade+0x6e0/0x6e0 [ 2097.685777][T17443] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2097.691684][T17443] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2097.697241][T17443] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2097.703397][T17443] copy_process+0x73e/0x7190 [ 2097.707993][T17443] ? rcu_read_lock_sched_held+0xd/0x70 [ 2097.713460][T17443] ? lock_acquire+0x4fc/0x630 [ 2097.718139][T17443] ? rcu_read_lock_sched_held+0xd/0x70 [ 2097.723606][T17443] ? lock_release+0x5cb/0x810 [ 2097.728287][T17443] ? psi_task_change+0x1bb/0x2f0 [ 2097.733236][T17443] ? lock_downgrade+0x6e0/0x6e0 [ 2097.738089][T17443] ? __cleanup_sighand+0xb0/0xb0 [ 2097.743048][T17443] ? psi_memstall_leave+0x170/0x250 [ 2097.748271][T17443] ? lock_downgrade+0x6e0/0x6e0 [ 2097.753218][T17443] kernel_clone+0xe7/0x980 [ 2097.757683][T17443] ? lock_acquire+0x4fc/0x630 [ 2097.762363][T17443] ? create_io_thread+0xe0/0xe0 [ 2097.767313][T17443] ? lock_release+0x810/0x810 [ 2097.772001][T17443] ? rcu_read_lock_sched_held+0xd/0x70 [ 2097.777556][T17443] ? lock_release+0x5cb/0x810 [ 2097.782233][T17443] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2097.788568][T17443] ? rcu_read_lock_sched_held+0xd/0x70 [ 2097.794040][T17443] ? lock_acquire+0x4fc/0x630 [ 2097.798716][T17443] ? rcu_read_lock_sched_held+0xd/0x70 [ 2097.804190][T17443] ? lock_release+0x5cb/0x810 [ 2097.809388][T17443] ? __ct_user_exit+0xff/0x150 [ 2097.814154][T17443] __do_sys_clone+0xba/0x100 [ 2097.818749][T17443] ? kernel_clone+0x980/0x980 [ 2097.823436][T17443] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2097.829425][T17443] ? trace_hardirqs_on+0x2d/0x160 [ 2097.834449][T17443] do_syscall_64+0x35/0xb0 [ 2097.838906][T17443] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2097.844812][T17443] RIP: 0033:0x7f5e99a8ca21 [ 2097.849233][T17443] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2097.868843][T17443] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2097.877257][T17443] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2097.885227][T17443] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2097.893202][T17443] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2097.901186][T17443] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2097.909161][T17443] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2097.917140][T17443] [ 2097.921692][T17443] memory: usage 307176kB, limit 307200kB, failcnt 10076 [ 2097.963274][T17443] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2097.982695][T17443] Memory cgroup stats for /syz1: [ 2097.982887][T17443] anon 90112 [ 2097.982887][T17443] file 274432 [ 2097.982887][T17443] kernel 314171392 [ 2097.982887][T17443] kernel_stack 32768 [ 2097.982887][T17443] pagetables 69632 [ 2097.982887][T17443] sec_pagetables 0 [ 2097.982887][T17443] percpu 5423904 [ 2097.982887][T17443] sock 0 [ 2097.982887][T17443] vmalloc 8192 [ 2097.982887][T17443] shmem 274432 [ 2097.982887][T17443] zswap 0 [ 2097.982887][T17443] zswapped 0 [ 2097.982887][T17443] file_mapped 258048 [ 2097.982887][T17443] file_dirty 0 [ 2097.982887][T17443] file_writeback 0 [ 2097.982887][T17443] swapcached 0 [ 2097.982887][T17443] anon_thp 0 [ 2097.982887][T17443] file_thp 0 [ 2097.982887][T17443] shmem_thp 0 [ 2097.982887][T17443] inactive_anon 98304 [ 2097.982887][T17443] active_anon 266240 [ 2097.982887][T17443] inactive_file 0 [ 2097.982887][T17443] active_file 0 [ 2097.982887][T17443] unevictable 0 [ 2097.982887][T17443] slab_reclaimable 19640 [ 2097.982887][T17443] slab_unreclaimable 308552080 [ 2098.084847][T17443] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17443,uid=0 [ 2098.092392][T17455] wg2 speed is unknown, defaulting to 1000 01:50:47 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001240)) 01:50:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa24}]}]}, 0x20}}, 0x0) 01:50:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) 01:50:47 executing program 2: r0 = socket(0x28, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) [ 2098.119135][T17443] Memory cgroup out of memory: Killed process 17443 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000030601010000000000000000070000020500010007000000050001000700000005000100070000000900020073797a30000000010900020073797a31ef"], 0x4c}}, 0x0) 01:50:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', 0x0}) 01:50:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000002c0)={0x14, 0xf, 0x6, 0x301}, 0x14}}, 0x0) [ 2098.193851][T17459] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2098.206154][T17459] CPU: 0 PID: 17459 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2098.216609][T17459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2098.226770][T17459] Call Trace: [ 2098.230068][T17459] [ 2098.233026][T17459] dump_stack_lvl+0xcd/0x134 [ 2098.237828][T17459] dump_header+0x10b/0x85f [ 2098.242280][T17459] oom_kill_process.cold+0x10/0x15 [ 2098.247513][T17459] out_of_memory+0x358/0x14a0 [ 2098.252227][T17459] ? __mod_timer+0x83c/0xe30 [ 2098.256852][T17459] ? rcu_read_lock_sched_held+0xd/0x70 [ 2098.262358][T17459] ? lock_acquire+0x4fc/0x630 [ 2098.267079][T17459] ? oom_killer_disable+0x270/0x270 [ 2098.272309][T17459] ? rcu_read_lock_sched_held+0xd/0x70 [ 2098.277806][T17459] ? lock_release+0x5cb/0x810 [ 2098.282496][T17459] ? rcu_read_unlock+0x9/0x60 [ 2098.287184][T17459] ? lock_downgrade+0x6e0/0x6e0 [ 2098.292041][T17459] mem_cgroup_out_of_memory+0x206/0x270 [ 2098.298027][T17459] ? mem_cgroup_margin+0x130/0x130 [ 2098.303141][T17459] ? lock_downgrade+0x6e0/0x6e0 [ 2098.308026][T17459] try_charge_memcg+0xef8/0x12f0 [ 2098.312997][T17459] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2098.319018][T17459] ? lock_acquire+0x4fc/0x630 [ 2098.323712][T17459] ? rcu_read_lock_sched_held+0xd/0x70 [ 2098.329230][T17459] ? lock_release+0x5cb/0x810 [ 2098.333927][T17459] ? rcu_read_unlock+0x9/0x60 [ 2098.338618][T17459] ? lock_downgrade+0x6e0/0x6e0 [ 2098.343480][T17459] charge_memcg+0x99/0x3b0 [ 2098.347975][T17459] __mem_cgroup_charge+0x27/0x90 [ 2098.352958][T17459] wp_page_copy+0x2bf/0x1c90 [ 2098.357580][T17459] ? rcu_read_lock_sched_held+0xd/0x70 [ 2098.363757][T17459] ? lock_release+0x5cb/0x810 [ 2098.368443][T17459] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2098.375052][T17459] ? lock_downgrade+0x6e0/0x6e0 [ 2098.379932][T17459] ? vm_normal_page+0x146/0x2a0 [ 2098.384811][T17459] ? __pte_alloc_kernel+0x110/0x110 [ 2098.390453][T17459] ? lock_release+0x5cb/0x810 [ 2098.395135][T17459] do_wp_page+0x538/0x1930 [ 2098.399556][T17459] __handle_mm_fault+0x181b/0x3a40 [ 2098.404673][T17459] ? lock_acquire+0x4fc/0x630 [ 2098.409361][T17459] ? vm_iomap_memory+0x180/0x180 [ 2098.414301][T17459] ? lock_release+0x810/0x810 [ 2098.418987][T17459] handle_mm_fault+0x1c8/0x780 [ 2098.423759][T17459] do_user_addr_fault+0x475/0x1210 [ 2098.428904][T17459] ? rcu_read_lock_sched_held+0xd/0x70 [ 2098.434397][T17459] exc_page_fault+0x94/0x170 [ 2098.438990][T17459] asm_exc_page_fault+0x22/0x30 [ 2098.443858][T17459] RIP: 0033:0x7f5e99a3632e [ 2098.448281][T17459] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 47 5c 17 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2098.467894][T17459] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010246 [ 2098.473970][T17459] RAX: 00007f5e99babf80 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2098.481939][T17459] RDX: 0000000000000000 RSI: 00007f5e99babf88 RDI: 0000000000000000 [ 2098.489919][T17459] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2098.497941][T17459] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007f5e99babf8c [ 2098.505913][T17459] R13: 00007f5e99bb0060 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2098.513896][T17459] [ 2098.529704][T17459] memory: usage 307184kB, limit 307200kB, failcnt 10160 [ 2098.544990][T17459] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2098.560774][T17459] Memory cgroup stats for /syz1: [ 2098.560933][T17459] anon 90112 [ 2098.560933][T17459] file 274432 [ 2098.560933][T17459] kernel 314191872 [ 2098.560933][T17459] kernel_stack 65536 [ 2098.560933][T17459] pagetables 69632 [ 2098.560933][T17459] sec_pagetables 0 [ 2098.560933][T17459] percpu 5423904 [ 2098.560933][T17459] sock 0 [ 2098.560933][T17459] vmalloc 8192 [ 2098.560933][T17459] shmem 274432 [ 2098.560933][T17459] zswap 0 [ 2098.560933][T17459] zswapped 0 [ 2098.560933][T17459] file_mapped 258048 [ 2098.560933][T17459] file_dirty 0 [ 2098.560933][T17459] file_writeback 0 [ 2098.560933][T17459] swapcached 0 [ 2098.560933][T17459] anon_thp 0 [ 2098.560933][T17459] file_thp 0 [ 2098.560933][T17459] shmem_thp 0 [ 2098.560933][T17459] inactive_anon 98304 [ 2098.560933][T17459] active_anon 266240 [ 2098.560933][T17459] inactive_file 0 [ 2098.560933][T17459] active_file 0 01:50:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x0, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:47 executing program 2: socket$inet6(0xa, 0x1e, 0x0) 01:50:47 executing program 0: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) 01:50:47 executing program 3: poll(&(0x7f0000000140)=[{}], 0x1e, 0x81) 01:50:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f0000000080)) [ 2098.560933][T17459] unevictable 0 [ 2098.560933][T17459] slab_reclaimable 19640 [ 2098.560933][T17459] slab_unreclaimable 308563944 [ 2098.666125][T17459] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17459,uid=0 01:50:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 01:50:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0xc, &(0x7f0000003180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 01:50:47 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002240)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}}, {{@in=@private}, 0x0, @in6=@loopback}}, 0xe8) 01:50:47 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000200)) 01:50:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x15, 0x0, 0x0) [ 2098.735315][T17459] Memory cgroup out of memory: Killed process 17459 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2098.742321][T17481] wg2 speed is unknown, defaulting to 1000 [ 2098.760283][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 01:50:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0xa, 0x0, 0x0) 01:50:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private1}, 0x0, @in6=@dev, 0x0, 0x4}}, 0xe8) [ 2098.858381][T17488] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2098.884191][T17488] CPU: 0 PID: 17488 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2098.894870][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2098.905016][T17488] Call Trace: [ 2098.908354][T17488] [ 2098.911284][T17488] dump_stack_lvl+0xcd/0x134 [ 2098.915887][T17488] dump_header+0x10b/0x85f [ 2098.920410][T17488] oom_kill_process.cold+0x10/0x15 [ 2098.925523][T17488] out_of_memory+0x358/0x14a0 [ 2098.930295][T17488] ? rcu_read_lock_sched_held+0xd/0x70 [ 2098.935783][T17488] ? __mod_timer+0x83c/0xe30 [ 2098.940393][T17488] ? rcu_read_lock_sched_held+0xd/0x70 [ 2098.945873][T17488] ? lock_acquire+0x4fc/0x630 [ 2098.950733][T17488] ? oom_killer_disable+0x270/0x270 [ 2098.956027][T17488] ? rcu_read_lock_sched_held+0xd/0x70 [ 2098.961500][T17488] ? lock_release+0x5cb/0x810 [ 2098.966197][T17488] ? rcu_read_unlock+0x9/0x60 [ 2098.970906][T17488] ? lock_downgrade+0x6e0/0x6e0 [ 2098.975774][T17488] mem_cgroup_out_of_memory+0x206/0x270 [ 2098.981327][T17488] ? mem_cgroup_margin+0x130/0x130 [ 2098.986457][T17488] ? lock_downgrade+0x6e0/0x6e0 [ 2098.991348][T17488] try_charge_memcg+0xef8/0x12f0 [ 2098.996853][T17488] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2099.002866][T17488] ? lock_acquire+0x4fc/0x630 [ 2099.007556][T17488] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.013034][T17488] ? lock_release+0x5cb/0x810 [ 2099.018064][T17488] ? rcu_read_unlock+0x9/0x60 [ 2099.023290][T17488] ? lock_downgrade+0x6e0/0x6e0 [ 2099.028337][T17488] charge_memcg+0x99/0x3b0 [ 2099.032815][T17488] __mem_cgroup_charge+0x27/0x90 [ 2099.037785][T17488] wp_page_copy+0x2bf/0x1c90 [ 2099.042607][T17488] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.048167][T17488] ? lock_release+0x5cb/0x810 [ 2099.052936][T17488] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2099.059539][T17488] ? lock_downgrade+0x6e0/0x6e0 [ 2099.064479][T17488] ? vm_normal_page+0x146/0x2a0 [ 2099.069345][T17488] ? __pte_alloc_kernel+0x110/0x110 [ 2099.074548][T17488] ? lock_release+0x5cb/0x810 [ 2099.079232][T17488] do_wp_page+0x538/0x1930 [ 2099.083653][T17488] __handle_mm_fault+0x181b/0x3a40 [ 2099.088857][T17488] ? lock_acquire+0x4fc/0x630 [ 2099.093532][T17488] ? vm_iomap_memory+0x180/0x180 [ 2099.098470][T17488] ? lock_release+0x810/0x810 [ 2099.103156][T17488] handle_mm_fault+0x1c8/0x780 [ 2099.108102][T17488] do_user_addr_fault+0x475/0x1210 [ 2099.113223][T17488] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.118697][T17488] exc_page_fault+0x94/0x170 [ 2099.123376][T17488] asm_exc_page_fault+0x22/0x30 [ 2099.128325][T17488] RIP: 0033:0x7f5e99a3632e [ 2099.132740][T17488] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 47 5c 17 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2099.153823][T17488] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010246 [ 2099.159905][T17488] RAX: 00007f5e99babf80 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2099.168223][T17488] RDX: 0000000000000000 RSI: 00007f5e99babf88 RDI: 0000000000000000 [ 2099.176374][T17488] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2099.184413][T17488] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007f5e99babf8c [ 2099.192571][T17488] R13: 00007f5e99bb0060 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2099.200576][T17488] [ 2099.215641][T17488] memory: usage 307200kB, limit 307200kB, failcnt 10239 [ 2099.230541][T17488] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2099.240310][T17488] Memory cgroup stats for /syz1: [ 2099.240477][T17488] anon 90112 [ 2099.240477][T17488] file 274432 [ 2099.240477][T17488] kernel 314208256 [ 2099.240477][T17488] kernel_stack 65536 [ 2099.240477][T17488] pagetables 69632 [ 2099.240477][T17488] sec_pagetables 0 [ 2099.240477][T17488] percpu 5423904 [ 2099.240477][T17488] sock 0 [ 2099.240477][T17488] vmalloc 8192 [ 2099.240477][T17488] shmem 274432 [ 2099.240477][T17488] zswap 0 [ 2099.240477][T17488] zswapped 0 [ 2099.240477][T17488] file_mapped 258048 [ 2099.240477][T17488] file_dirty 0 [ 2099.240477][T17488] file_writeback 0 [ 2099.240477][T17488] swapcached 0 [ 2099.240477][T17488] anon_thp 0 [ 2099.240477][T17488] file_thp 0 [ 2099.240477][T17488] shmem_thp 0 [ 2099.240477][T17488] inactive_anon 98304 [ 2099.240477][T17488] active_anon 266240 [ 2099.240477][T17488] inactive_file 0 [ 2099.240477][T17488] active_file 0 [ 2099.240477][T17488] unevictable 0 [ 2099.240477][T17488] slab_reclaimable 19640 [ 2099.240477][T17488] slab_unreclaimable 308575344 [ 2099.257475][T17484] wg2 speed is unknown, defaulting to 1000 [ 2099.341940][T17488] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17488,uid=0 01:50:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x0, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:48 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002240)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}}, {{@in=@private}, 0x0, @in6=@loopback}}, 0xe8) 01:50:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x4f, 0x0, &(0x7f0000000080)) 01:50:48 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0xe07, {{0x2, 0x0, @empty}}}, 0x88) 01:50:48 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10) 01:50:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 2099.359210][T17488] Memory cgroup out of memory: Killed process 17488 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x32, 0x0, 0x0) 01:50:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth0_to_batadv\x00'}, 0x18) 01:50:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x6, 0x81, &(0x7f0000003180)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) 01:50:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 01:50:48 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) 01:50:48 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000140), 0x54, &(0x7f0000000240)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_CONN_ID, @L2TP_ATTR_COOKIE, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x40}}, 0x0) [ 2099.541104][T17509] wg2 speed is unknown, defaulting to 1000 [ 2099.564639][T17510] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2099.586843][T17510] CPU: 1 PID: 17510 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2099.597314][T17510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2099.607727][T17510] Call Trace: [ 2099.611116][T17510] [ 2099.614057][T17510] dump_stack_lvl+0xcd/0x134 [ 2099.618662][T17510] dump_header+0x10b/0x85f [ 2099.623079][T17510] oom_kill_process.cold+0x10/0x15 [ 2099.628201][T17510] out_of_memory+0x358/0x14a0 [ 2099.632884][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.638353][T17510] ? __mod_timer+0x83c/0xe30 [ 2099.642942][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.648411][T17510] ? lock_acquire+0x4fc/0x630 [ 2099.653098][T17510] ? oom_killer_disable+0x270/0x270 [ 2099.658306][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.663766][T17510] ? lock_release+0x5cb/0x810 [ 2099.668434][T17510] ? rcu_read_unlock+0x9/0x60 [ 2099.673109][T17510] ? lock_downgrade+0x6e0/0x6e0 [ 2099.677958][T17510] mem_cgroup_out_of_memory+0x206/0x270 [ 2099.683536][T17510] ? mem_cgroup_margin+0x130/0x130 [ 2099.688667][T17510] ? lock_downgrade+0x6e0/0x6e0 [ 2099.693526][T17510] try_charge_memcg+0xef8/0x12f0 [ 2099.698470][T17510] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2099.704469][T17510] ? lock_acquire+0x4fc/0x630 [ 2099.709148][T17510] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2099.714876][T17510] ? lock_downgrade+0x6e0/0x6e0 [ 2099.719731][T17510] ? lock_release+0x5cb/0x810 [ 2099.724504][T17510] ? obj_cgroup_charge+0x244/0x5e0 [ 2099.729621][T17510] ? lock_downgrade+0x6e0/0x6e0 [ 2099.734468][T17510] ? lock_release+0x5cb/0x810 [ 2099.739142][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.744602][T17510] ? rcu_read_unlock+0x9/0x60 [ 2099.749303][T17510] obj_cgroup_charge+0x2ab/0x5e0 [ 2099.754245][T17510] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2099.759748][T17510] ? copy_semundo+0x187/0x2f0 [ 2099.764513][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.770001][T17510] kmalloc_trace+0x22/0x60 [ 2099.775302][T17510] copy_semundo+0x187/0x2f0 [ 2099.779801][T17510] copy_process+0x23f4/0x7190 [ 2099.784476][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.789940][T17510] ? lock_acquire+0x4fc/0x630 [ 2099.794614][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.800075][T17510] ? __cleanup_sighand+0xb0/0xb0 [ 2099.805095][T17510] ? psi_memstall_leave+0x170/0x250 [ 2099.810383][T17510] ? lock_downgrade+0x6e0/0x6e0 [ 2099.815268][T17510] kernel_clone+0xe7/0x980 [ 2099.819695][T17510] ? lock_acquire+0x4fc/0x630 [ 2099.824459][T17510] ? create_io_thread+0xe0/0xe0 [ 2099.829313][T17510] ? lock_release+0x810/0x810 [ 2099.833997][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.839531][T17510] ? lock_release+0x5cb/0x810 [ 2099.844226][T17510] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2099.850468][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.855936][T17510] ? lock_acquire+0x4fc/0x630 [ 2099.860630][T17510] ? rcu_read_lock_sched_held+0xd/0x70 [ 2099.866195][T17510] ? lock_release+0x5cb/0x810 [ 2099.870974][T17510] ? __ct_user_exit+0xff/0x150 [ 2099.875742][T17510] __do_sys_clone+0xba/0x100 [ 2099.880336][T17510] ? kernel_clone+0x980/0x980 [ 2099.885015][T17510] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2099.890900][T17510] ? trace_hardirqs_on+0x2d/0x160 [ 2099.895921][T17510] do_syscall_64+0x35/0xb0 [ 2099.900346][T17510] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2099.906329][T17510] RIP: 0033:0x7f5e99a8ca21 [ 2099.910758][T17510] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2099.930367][T17510] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2099.938862][T17510] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2099.946837][T17510] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2099.954806][T17510] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2099.962780][T17510] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2099.970934][T17510] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2099.979036][T17510] [ 2099.988136][T17510] memory: usage 307200kB, limit 307200kB, failcnt 10336 [ 2099.995273][T17510] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2100.002158][T17510] Memory cgroup stats for /syz1: [ 2100.002331][T17510] anon 90112 [ 2100.002331][T17510] file 274432 [ 2100.002331][T17510] kernel 314208256 [ 2100.002331][T17510] kernel_stack 65536 [ 2100.002331][T17510] pagetables 69632 [ 2100.002331][T17510] sec_pagetables 0 [ 2100.002331][T17510] percpu 5423904 [ 2100.002331][T17510] sock 0 [ 2100.002331][T17510] vmalloc 8192 [ 2100.002331][T17510] shmem 274432 [ 2100.002331][T17510] zswap 0 [ 2100.002331][T17510] zswapped 0 [ 2100.002331][T17510] file_mapped 258048 [ 2100.002331][T17510] file_dirty 0 [ 2100.002331][T17510] file_writeback 0 [ 2100.002331][T17510] swapcached 0 [ 2100.002331][T17510] anon_thp 0 [ 2100.002331][T17510] file_thp 0 [ 2100.002331][T17510] shmem_thp 0 [ 2100.002331][T17510] inactive_anon 98304 [ 2100.002331][T17510] active_anon 266240 [ 2100.002331][T17510] inactive_file 0 [ 2100.002331][T17510] active_file 0 [ 2100.002331][T17510] unevictable 0 [ 2100.002331][T17510] slab_reclaimable 19640 [ 2100.002331][T17510] slab_unreclaimable 308574880 [ 2100.099054][T17510] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17510,uid=0 [ 2100.115125][T17510] Memory cgroup out of memory: Killed process 17510 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2100.148369][T17518] wg2 speed is unknown, defaulting to 1000 01:50:49 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000040)=0x1, 0x4) 01:50:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) 01:50:49 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$packet(r0, 0x0, 0x0) 01:50:49 executing program 4: r0 = socket(0x18, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:50:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200]}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:49 executing program 1: r0 = epoll_create1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) 01:50:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 01:50:49 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={0x0, 0x25f0}}, 0x4c0e0) 01:50:49 executing program 2: socketpair(0x23, 0x0, 0x6f, 0x0) 01:50:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) 01:50:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 01:50:49 executing program 4: epoll_create1(0xf9766056cbe3a5b5) 01:50:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) [ 2100.310207][T17526] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2100.347366][T17536] wg2 speed is unknown, defaulting to 1000 [ 2100.378464][T17526] CPU: 1 PID: 17526 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2100.388945][T17526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2100.399019][T17526] Call Trace: [ 2100.402314][T17526] [ 2100.405257][T17526] dump_stack_lvl+0xcd/0x134 [ 2100.409880][T17526] dump_header+0x10b/0x85f [ 2100.414328][T17526] oom_kill_process.cold+0x10/0x15 [ 2100.419471][T17526] out_of_memory+0x358/0x14a0 [ 2100.424186][T17526] ? rcu_read_lock_sched_held+0xd/0x70 [ 2100.429675][T17526] ? __mod_timer+0x83c/0xe30 [ 2100.434294][T17526] ? rcu_read_lock_sched_held+0xd/0x70 [ 2100.439790][T17526] ? lock_acquire+0x4fc/0x630 [ 2100.444493][T17526] ? oom_killer_disable+0x270/0x270 [ 2100.445571][T17556] x_tables: duplicate underflow at hook 2 [ 2100.449706][T17526] ? rcu_read_lock_sched_held+0xd/0x70 [ 2100.449751][T17526] ? lock_release+0x5cb/0x810 [ 2100.465807][T17526] ? rcu_read_unlock+0x9/0x60 [ 2100.470613][T17526] ? lock_downgrade+0x6e0/0x6e0 [ 2100.475549][T17526] mem_cgroup_out_of_memory+0x206/0x270 [ 2100.481220][T17526] ? mem_cgroup_margin+0x130/0x130 [ 2100.486367][T17526] ? lock_downgrade+0x6e0/0x6e0 [ 2100.491265][T17526] try_charge_memcg+0xef8/0x12f0 [ 2100.496242][T17526] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2100.502271][T17526] ? lock_acquire+0x4fc/0x630 [ 2100.506979][T17526] ? rcu_read_lock_sched_held+0xd/0x70 [ 2100.512478][T17526] ? lock_release+0x5cb/0x810 [ 2100.517184][T17526] ? rcu_read_unlock+0x9/0x60 [ 2100.521894][T17526] ? lock_downgrade+0x6e0/0x6e0 [ 2100.526777][T17526] charge_memcg+0x99/0x3b0 [ 2100.531233][T17526] __mem_cgroup_charge+0x27/0x90 [ 2100.536211][T17526] wp_page_copy+0x2bf/0x1c90 [ 2100.540835][T17526] ? rcu_read_lock_sched_held+0xd/0x70 [ 2100.546320][T17526] ? lock_release+0x5cb/0x810 [ 2100.551004][T17526] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2100.557604][T17526] ? lock_downgrade+0x6e0/0x6e0 [ 2100.562456][T17526] ? vm_normal_page+0x146/0x2a0 [ 2100.567314][T17526] ? __pte_alloc_kernel+0x110/0x110 [ 2100.572525][T17526] ? lock_release+0x5cb/0x810 [ 2100.577217][T17526] do_wp_page+0x538/0x1930 [ 2100.581639][T17526] __handle_mm_fault+0x181b/0x3a40 [ 2100.586769][T17526] ? lock_acquire+0x4fc/0x630 [ 2100.591460][T17526] ? vm_iomap_memory+0x180/0x180 [ 2100.596417][T17526] ? lock_release+0x810/0x810 [ 2100.601107][T17526] handle_mm_fault+0x1c8/0x780 [ 2100.605877][T17526] do_user_addr_fault+0x475/0x1210 [ 2100.610996][T17526] ? rcu_read_lock_sched_held+0xd/0x70 [ 2100.616470][T17526] exc_page_fault+0x94/0x170 [ 2100.622912][T17526] asm_exc_page_fault+0x22/0x30 [ 2100.627768][T17526] RIP: 0033:0x7f5e99a3632e [ 2100.632184][T17526] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 47 5c 17 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2100.651882][T17526] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010246 [ 2100.657947][T17526] RAX: 00007f5e99babf80 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2100.665925][T17526] RDX: 0000000000000000 RSI: 00007f5e99babf88 RDI: 0000000000000000 01:50:49 executing program 3: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 01:50:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x5b8, 0xffffffff, 0x0, 0x350, 0x350, 0xffffffff, 0xffffffff, 0x4e8, 0x4e8, 0x4e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, [0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x2c, 0x8, 0x0, 0x21}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "a608", 0x1}}, @common=@srh1={{0x90}, {0x2c, 0x5, 0x20, 0x3, 0x3, @mcast2, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 0x8, 0x975d4c58a9d83a61}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x188}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4, [0x0, 0x0, 0xff], @ipv6=@dev, [], @ipv6=@loopback, [], @ipv4=@private, [], 0x81}}}, @common=@srh={{0x30}, {0x0, 0x4}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0xffffffff, 0x2}}}, {{@uncond, 0x0, 0x158, 0x198, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8]}}, @common=@unspec=@rateest={{0x68}, {'syzkaller1\x00', 'pim6reg\x00'}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x10001, 0x0, 0x0, 0x0, 0x8, 0x0, 0xf8]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 01:50:49 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x45, 0x0, 0x0) [ 2100.673892][T17526] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2100.681860][T17526] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007f5e99babf8c [ 2100.689829][T17526] R13: 00007f5e99bb0030 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2100.697804][T17526] [ 2100.723257][T17547] wg2 speed is unknown, defaulting to 1000 [ 2100.821620][T17526] memory: usage 307192kB, limit 307200kB, failcnt 10450 [ 2100.858672][T17526] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2100.888747][T17526] Memory cgroup stats for /syz1: [ 2100.888960][T17526] anon 90112 [ 2100.888960][T17526] file 274432 [ 2100.888960][T17526] kernel 314191872 [ 2100.888960][T17526] kernel_stack 65536 [ 2100.888960][T17526] pagetables 69632 [ 2100.888960][T17526] sec_pagetables 0 [ 2100.888960][T17526] percpu 5423904 [ 2100.888960][T17526] sock 0 [ 2100.888960][T17526] vmalloc 8192 [ 2100.888960][T17526] shmem 274432 [ 2100.888960][T17526] zswap 0 [ 2100.888960][T17526] zswapped 0 [ 2100.888960][T17526] file_mapped 258048 [ 2100.888960][T17526] file_dirty 0 [ 2100.888960][T17526] file_writeback 0 [ 2100.888960][T17526] swapcached 0 [ 2100.888960][T17526] anon_thp 0 [ 2100.888960][T17526] file_thp 0 [ 2100.888960][T17526] shmem_thp 0 [ 2100.888960][T17526] inactive_anon 98304 [ 2100.888960][T17526] active_anon 266240 [ 2100.888960][T17526] inactive_file 0 [ 2100.888960][T17526] active_file 0 [ 2100.888960][T17526] unevictable 0 [ 2100.888960][T17526] slab_reclaimable 19640 [ 2100.888960][T17526] slab_unreclaimable 308563944 01:50:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200]}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:50 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 01:50:50 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:50:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) 01:50:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:50:50 executing program 1: socketpair(0x2, 0x0, 0xf0e9, 0x0) [ 2101.034436][T17526] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17526,uid=0 [ 2101.051480][T17526] Memory cgroup out of memory: Killed process 17526 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}}, 0x0) 01:50:50 executing program 0: socket(0x270701917eab52df, 0x0, 0x0) 01:50:50 executing program 4: r0 = socket(0x1e, 0x1, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 01:50:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x4c}}, 0x0) 01:50:50 executing program 4: socketpair(0xa, 0x0, 0x10001, 0x0) 01:50:50 executing program 0: r0 = socket(0xa, 0x3, 0x7) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 2101.189887][T17572] wg2 speed is unknown, defaulting to 1000 [ 2101.199003][T17582] IPVS: Unknown mcast interface: syzkaller0 [ 2101.258830][T17580] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2101.261922][T17587] wg2 speed is unknown, defaulting to 1000 [ 2101.276084][T17580] CPU: 1 PID: 17580 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2101.286537][T17580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2101.296696][T17580] Call Trace: [ 2101.299989][T17580] [ 2101.302923][T17580] dump_stack_lvl+0xcd/0x134 [ 2101.307542][T17580] dump_header+0x10b/0x85f [ 2101.311977][T17580] oom_kill_process.cold+0x10/0x15 [ 2101.317123][T17580] out_of_memory+0x358/0x14a0 [ 2101.321913][T17580] ? rcu_read_lock_sched_held+0xd/0x70 [ 2101.328520][T17580] ? __mod_timer+0x83c/0xe30 [ 2101.333119][T17580] ? rcu_read_lock_sched_held+0xd/0x70 [ 2101.338591][T17580] ? lock_acquire+0x4fc/0x630 [ 2101.343270][T17580] ? oom_killer_disable+0x270/0x270 [ 2101.348567][T17580] ? rcu_read_lock_sched_held+0xd/0x70 [ 2101.354035][T17580] ? lock_release+0x5cb/0x810 [ 2101.358891][T17580] ? rcu_read_unlock+0x9/0x60 [ 2101.363577][T17580] ? lock_downgrade+0x6e0/0x6e0 [ 2101.368437][T17580] mem_cgroup_out_of_memory+0x206/0x270 [ 2101.373989][T17580] ? mem_cgroup_margin+0x130/0x130 [ 2101.379123][T17580] ? lock_downgrade+0x6e0/0x6e0 [ 2101.383988][T17580] try_charge_memcg+0xef8/0x12f0 [ 2101.388937][T17580] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2101.394924][T17580] ? lock_release+0x5cb/0x810 [ 2101.399605][T17580] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2101.405422][T17580] ? lock_downgrade+0x6e0/0x6e0 [ 2101.410272][T17580] ? lock_release+0x5cb/0x810 [ 2101.414949][T17580] ? rcu_read_unlock+0x9/0x60 [ 2101.419629][T17580] ? lock_downgrade+0x6e0/0x6e0 [ 2101.425524][T17580] ? lock_release+0x5cb/0x810 [ 2101.432204][T17580] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2101.437949][T17580] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2101.444130][T17580] copy_process+0x15ed/0x7190 [ 2101.448815][T17580] ? rcu_read_lock_sched_held+0xd/0x70 [ 2101.454288][T17580] ? lock_acquire+0x4fc/0x630 [ 2101.458963][T17580] ? rcu_read_lock_sched_held+0xd/0x70 [ 2101.464517][T17580] ? lock_release+0x5cb/0x810 [ 2101.469204][T17580] ? psi_task_change+0x1bb/0x2f0 [ 2101.474147][T17580] ? lock_downgrade+0x6e0/0x6e0 [ 2101.479002][T17580] ? __cleanup_sighand+0xb0/0xb0 [ 2101.483950][T17580] ? psi_memstall_leave+0x170/0x250 [ 2101.489157][T17580] ? lock_downgrade+0x6e0/0x6e0 [ 2101.494012][T17580] kernel_clone+0xe7/0x980 [ 2101.498528][T17580] ? lock_acquire+0x4fc/0x630 [ 2101.503208][T17580] ? create_io_thread+0xe0/0xe0 [ 2101.508067][T17580] ? lock_release+0x810/0x810 [ 2101.512750][T17580] ? rcu_read_lock_sched_held+0xd/0x70 [ 2101.518226][T17580] ? lock_release+0x5cb/0x810 [ 2101.522916][T17580] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2101.529252][T17580] ? rcu_read_lock_sched_held+0xd/0x70 [ 2101.534721][T17580] ? lock_acquire+0x4fc/0x630 [ 2101.539498][T17580] ? rcu_read_lock_sched_held+0xd/0x70 [ 2101.544968][T17580] ? lock_release+0x5cb/0x810 [ 2101.549733][T17580] ? __ct_user_exit+0xff/0x150 [ 2101.554507][T17580] __do_sys_clone+0xba/0x100 [ 2101.559274][T17580] ? kernel_clone+0x980/0x980 [ 2101.564597][T17580] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2101.570502][T17580] ? trace_hardirqs_on+0x2d/0x160 [ 2101.575541][T17580] do_syscall_64+0x35/0xb0 [ 2101.579973][T17580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2101.585962][T17580] RIP: 0033:0x7f5e99a8ca21 [ 2101.590399][T17580] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2101.610009][T17580] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2101.618426][T17580] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2101.626743][T17580] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2101.634811][T17580] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2101.642958][T17580] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2101.651230][T17580] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2101.659297][T17580] [ 2101.674086][T17580] memory: usage 307180kB, limit 307200kB, failcnt 10555 [ 2101.681314][T17580] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2101.688948][T17580] Memory cgroup stats for /syz1: [ 2101.689141][T17580] anon 90112 [ 2101.689141][T17580] file 274432 [ 2101.689141][T17580] kernel 314187776 [ 2101.689141][T17580] kernel_stack 32768 [ 2101.689141][T17580] pagetables 69632 [ 2101.689141][T17580] sec_pagetables 0 [ 2101.689141][T17580] percpu 5423904 [ 2101.689141][T17580] sock 0 [ 2101.689141][T17580] vmalloc 8192 [ 2101.689141][T17580] shmem 274432 [ 2101.689141][T17580] zswap 0 [ 2101.689141][T17580] zswapped 0 [ 2101.689141][T17580] file_mapped 258048 [ 2101.689141][T17580] file_dirty 0 [ 2101.689141][T17580] file_writeback 0 [ 2101.689141][T17580] swapcached 0 [ 2101.689141][T17580] anon_thp 0 [ 2101.689141][T17580] file_thp 0 [ 2101.689141][T17580] shmem_thp 0 [ 2101.689141][T17580] inactive_anon 98304 [ 2101.689141][T17580] active_anon 266240 [ 2101.689141][T17580] inactive_file 0 [ 2101.689141][T17580] active_file 0 [ 2101.689141][T17580] unevictable 0 [ 2101.689141][T17580] slab_reclaimable 19640 [ 2101.689141][T17580] slab_unreclaimable 308563784 [ 2101.786015][T17580] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17580,uid=0 01:50:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200]}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:50 executing program 3: socketpair(0x11, 0x3, 0x901, 0x0) 01:50:50 executing program 2: sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 01:50:50 executing program 0: getsockopt$MRT6(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 01:50:50 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000300)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) [ 2101.802793][T17580] Memory cgroup out of memory: Killed process 17580 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:50 executing program 1: socketpair(0x15, 0x0, 0x0, 0x0) 01:50:50 executing program 2: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x2005}) 01:50:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan0\x00'}) 01:50:50 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 01:50:50 executing program 4: bpf$PROG_LOAD_XDP(0x5, 0xfffffffffffffffe, 0x0) 01:50:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) 01:50:50 executing program 2: clock_gettime(0x6, &(0x7f0000000000)) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) [ 2101.909181][T17599] wg2 speed is unknown, defaulting to 1000 [ 2101.970897][T17610] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2101.998076][T17610] CPU: 1 PID: 17610 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2102.008640][T17610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2102.008965][T17609] wg2 speed is unknown, defaulting to 1000 [ 2102.018691][T17610] Call Trace: [ 2102.018706][T17610] [ 2102.018716][T17610] dump_stack_lvl+0xcd/0x134 [ 2102.018750][T17610] dump_header+0x10b/0x85f [ 2102.018773][T17610] oom_kill_process.cold+0x10/0x15 [ 2102.018796][T17610] out_of_memory+0x358/0x14a0 [ 2102.018822][T17610] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.018859][T17610] ? __mod_timer+0x83c/0xe30 [ 2102.018882][T17610] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.018912][T17610] ? lock_acquire+0x4fc/0x630 [ 2102.018935][T17610] ? oom_killer_disable+0x270/0x270 [ 2102.018961][T17610] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.018997][T17610] ? lock_release+0x5cb/0x810 [ 2102.019019][T17610] ? rcu_read_unlock+0x9/0x60 [ 2102.019043][T17610] ? lock_downgrade+0x6e0/0x6e0 [ 2102.019067][T17610] mem_cgroup_out_of_memory+0x206/0x270 [ 2102.019095][T17610] ? mem_cgroup_margin+0x130/0x130 [ 2102.019120][T17610] ? lock_downgrade+0x6e0/0x6e0 [ 2102.019151][T17610] try_charge_memcg+0xef8/0x12f0 01:50:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:51 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25090000000800", @ANYBLOB="fc"], 0x3c}}, 0x0) 01:50:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000240)) 01:50:51 executing program 2: accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x180800) 01:50:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x8d, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "7222860227f3ef8d"}}]}, 0x3c}}, 0x0) [ 2102.019184][T17610] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2102.123109][T17610] ? lock_release+0x5cb/0x810 [ 2102.127823][T17610] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2102.133564][T17610] ? lock_downgrade+0x6e0/0x6e0 [ 2102.138708][T17610] ? lock_release+0x5cb/0x810 [ 2102.143413][T17610] ? rcu_read_unlock+0x9/0x60 [ 2102.148124][T17610] ? lock_downgrade+0x6e0/0x6e0 [ 2102.153018][T17610] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2102.158627][T17610] __alloc_pages+0x1ef/0x5a0 [ 2102.163251][T17610] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2102.170044][T17610] ? lock_acquire+0x4fc/0x630 [ 2102.171189][T17622] wg2 speed is unknown, defaulting to 1000 [ 2102.174731][T17610] ? __pmd_alloc+0x303/0x5c0 [ 2102.174761][T17610] ? lock_downgrade+0x6e0/0x6e0 [ 2102.174783][T17610] ? do_raw_spin_lock+0x120/0x2a0 [ 2102.174807][T17610] alloc_pages+0x1a6/0x270 [ 2102.174846][T17610] pte_alloc_one+0x16/0x230 [ 2102.174875][T17610] __do_fault+0x433/0x600 [ 2102.191841][T17624] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2102.195258][T17610] ? __pud_alloc+0xe0/0x180 [ 2102.195294][T17610] __handle_mm_fault+0x2200/0x3a40 [ 2102.195320][T17610] ? lock_acquire+0x4fc/0x630 [ 2102.195342][T17610] ? vm_iomap_memory+0x180/0x180 [ 2102.237907][T17610] handle_mm_fault+0x1c8/0x780 [ 2102.242797][T17610] do_user_addr_fault+0x475/0x1210 [ 2102.247955][T17610] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.253622][T17610] exc_page_fault+0x94/0x170 [ 2102.258263][T17610] asm_exc_page_fault+0x22/0x30 [ 2102.258930][T17625] wg2 speed is unknown, defaulting to 1000 [ 2102.263216][T17610] RIP: 0033:0x7f5e99a275f6 [ 2102.263238][T17610] Code: ff ff 66 90 48 8b 0d f9 dd 0b 01 4c 63 05 e2 dd 0b 01 48 8b 05 e3 dd 0b 01 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 c9 dd 0b 01 c3 52 48 8d 35 92 de 0b 00 48 89 c2 48 [ 2102.263258][T17610] RSP: 002b:00007ffdae1695a8 EFLAGS: 00010287 [ 2102.263275][T17610] RAX: 0000001b2e920000 RBX: 0000000000000003 RCX: 0000001b2e920000 [ 2102.263288][T17610] RDX: 0000001b2e920004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 2102.263300][T17610] RBP: 0000000000000000 R08: 0000001b2ed20000 R09: 0000000000040000 [ 2102.263313][T17610] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 2102.263324][T17610] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdae169850 [ 2102.263346][T17610] [ 2102.304415][T17610] memory: usage 307128kB, limit 307200kB, failcnt 10630 [ 2102.354079][T17610] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2102.361102][T17610] Memory cgroup stats for /syz1: [ 2102.361263][T17610] anon 77824 [ 2102.361263][T17610] file 274432 [ 2102.361263][T17610] kernel 314146816 [ 2102.361263][T17610] kernel_stack 32768 [ 2102.361263][T17610] pagetables 65536 [ 2102.361263][T17610] sec_pagetables 0 [ 2102.361263][T17610] percpu 5423904 [ 2102.361263][T17610] sock 0 [ 2102.361263][T17610] vmalloc 8192 [ 2102.361263][T17610] shmem 274432 [ 2102.361263][T17610] zswap 0 [ 2102.361263][T17610] zswapped 0 [ 2102.361263][T17610] file_mapped 258048 [ 2102.361263][T17610] file_dirty 0 [ 2102.361263][T17610] file_writeback 0 [ 2102.361263][T17610] swapcached 0 [ 2102.361263][T17610] anon_thp 0 [ 2102.361263][T17610] file_thp 0 [ 2102.361263][T17610] shmem_thp 0 [ 2102.361263][T17610] inactive_anon 86016 [ 2102.361263][T17610] active_anon 266240 [ 2102.361263][T17610] inactive_file 0 [ 2102.361263][T17610] active_file 0 [ 2102.361263][T17610] unevictable 0 [ 2102.361263][T17610] slab_reclaimable 19640 [ 2102.361263][T17610] slab_unreclaimable 308555440 [ 2102.456613][T17610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17610,uid=0 01:50:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 01:50:51 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0xcc45bb2005a8cb33, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 01:50:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000080)) 01:50:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000340)) 01:50:51 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x80) 01:50:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}}, 0x0) [ 2102.473505][T17610] Memory cgroup out of memory: Killed process 17610 (syz-executor.1) total-vm:54464kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 01:50:51 executing program 2: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) 01:50:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x0, 0x0, @loopback}], 0x3c) 01:50:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) 01:50:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 01:50:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250900000008"], 0x3c}}, 0x0) [ 2102.629146][T17640] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2102.659218][T17654] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2102.671701][T17640] CPU: 1 PID: 17640 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2102.682171][T17640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2102.692255][T17640] Call Trace: [ 2102.695640][T17640] [ 2102.698594][T17640] dump_stack_lvl+0xcd/0x134 [ 2102.703226][T17640] dump_header+0x10b/0x85f [ 2102.707680][T17640] oom_kill_process.cold+0x10/0x15 [ 2102.712826][T17640] out_of_memory+0x358/0x14a0 [ 2102.717522][T17640] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.723017][T17640] ? __mod_timer+0x83c/0xe30 [ 2102.728044][T17640] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.733864][T17640] ? lock_acquire+0x4fc/0x630 [ 2102.738737][T17640] ? oom_killer_disable+0x270/0x270 [ 2102.743954][T17640] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.749687][T17640] ? lock_release+0x5cb/0x810 [ 2102.754446][T17640] ? rcu_read_unlock+0x9/0x60 [ 2102.759207][T17640] ? lock_downgrade+0x6e0/0x6e0 [ 2102.764077][T17640] mem_cgroup_out_of_memory+0x206/0x270 [ 2102.769633][T17640] ? mem_cgroup_margin+0x130/0x130 [ 2102.774746][T17640] ? lock_downgrade+0x6e0/0x6e0 [ 2102.779594][T17640] try_charge_memcg+0xef8/0x12f0 [ 2102.784538][T17640] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2102.790535][T17640] ? lock_release+0x5cb/0x810 [ 2102.795223][T17640] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2102.800958][T17640] ? lock_downgrade+0x6e0/0x6e0 [ 2102.805831][T17640] ? lock_release+0x5cb/0x810 [ 2102.810523][T17640] ? rcu_read_unlock+0x9/0x60 [ 2102.815220][T17640] ? lock_downgrade+0x6e0/0x6e0 [ 2102.820072][T17640] ? lock_release+0x5cb/0x810 [ 2102.824759][T17640] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2102.830323][T17640] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2102.836506][T17640] copy_process+0x15ed/0x7190 [ 2102.841306][T17640] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.846886][T17640] ? lock_acquire+0x4fc/0x630 [ 2102.851684][T17640] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.857170][T17640] ? lock_release+0x5cb/0x810 [ 2102.861846][T17640] ? psi_task_change+0x1bb/0x2f0 [ 2102.867111][T17640] ? lock_downgrade+0x6e0/0x6e0 [ 2102.872001][T17640] ? __cleanup_sighand+0xb0/0xb0 [ 2102.876940][T17640] ? psi_memstall_leave+0x170/0x250 [ 2102.882148][T17640] ? lock_downgrade+0x6e0/0x6e0 [ 2102.887152][T17640] kernel_clone+0xe7/0x980 [ 2102.891574][T17640] ? lock_acquire+0x4fc/0x630 [ 2102.896253][T17640] ? create_io_thread+0xe0/0xe0 [ 2102.901100][T17640] ? lock_release+0x810/0x810 [ 2102.905777][T17640] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.911241][T17640] ? lock_release+0x5cb/0x810 [ 2102.915916][T17640] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2102.922170][T17640] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.927632][T17640] ? lock_acquire+0x4fc/0x630 [ 2102.932317][T17640] ? rcu_read_lock_sched_held+0xd/0x70 [ 2102.937813][T17640] ? lock_release+0x5cb/0x810 [ 2102.942596][T17640] ? __ct_user_exit+0xff/0x150 [ 2102.947404][T17640] __do_sys_clone+0xba/0x100 [ 2102.952024][T17640] ? kernel_clone+0x980/0x980 [ 2102.956712][T17640] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2102.962612][T17640] ? trace_hardirqs_on+0x2d/0x160 [ 2102.967670][T17640] do_syscall_64+0x35/0xb0 [ 2102.972120][T17640] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2102.978109][T17640] RIP: 0033:0x7f5e99a8ca21 [ 2102.982536][T17640] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2103.002331][T17640] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2103.010827][T17640] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2103.019056][T17640] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2103.027024][T17640] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2103.035008][T17640] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2103.043351][T17640] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2103.051327][T17640] [ 2103.059913][T17640] memory: usage 307192kB, limit 307200kB, failcnt 10717 [ 2103.068338][T17640] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2103.075580][T17640] Memory cgroup stats for /syz1: [ 2103.075762][T17640] anon 90112 [ 2103.075762][T17640] file 274432 [ 2103.075762][T17640] kernel 314200064 [ 2103.075762][T17640] kernel_stack 32768 [ 2103.075762][T17640] pagetables 69632 [ 2103.075762][T17640] sec_pagetables 0 [ 2103.075762][T17640] percpu 5423904 [ 2103.075762][T17640] sock 0 [ 2103.075762][T17640] vmalloc 8192 [ 2103.075762][T17640] shmem 274432 [ 2103.075762][T17640] zswap 0 [ 2103.075762][T17640] zswapped 0 [ 2103.075762][T17640] file_mapped 258048 [ 2103.075762][T17640] file_dirty 0 [ 2103.075762][T17640] file_writeback 0 [ 2103.075762][T17640] swapcached 0 [ 2103.075762][T17640] anon_thp 0 [ 2103.075762][T17640] file_thp 0 [ 2103.075762][T17640] shmem_thp 0 [ 2103.075762][T17640] inactive_anon 98304 [ 2103.075762][T17640] active_anon 266240 [ 2103.075762][T17640] inactive_file 0 [ 2103.075762][T17640] active_file 0 [ 2103.075762][T17640] unevictable 0 [ 2103.075762][T17640] slab_reclaimable 19640 [ 2103.075762][T17640] slab_unreclaimable 308574880 01:50:52 executing program 1: socketpair(0x2b, 0x1, 0x8001, 0x0) 01:50:52 executing program 3: socketpair(0x23, 0x0, 0xffff0001, 0x0) 01:50:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 01:50:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:50:52 executing program 2: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="b482861d123dc68f11ae17607beffa6333978e363aedd56d3cdd5e1d5468e444f655c472ddc0d6c021e048bcff8bc195fa87b7bc604e6726c568692b2eac0b8454e988382c1714cd072c588cedb0f6bdd3d62c84360f35f2e60732b15f0e7e9b76578474e369dd6bbbd98918d312a37693617f69004d0fe3acabdabe09698ba702a9f5db27551655c80aec79d13ae1ef89eaddd7b053c28d557a9b1118b1b49bdfc4ab05ac65221d5d64a116", 0xffffffffffffff3f) [ 2103.171060][T17640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17640,uid=0 [ 2103.188140][T17640] Memory cgroup out of memory: Killed process 17640 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2103.211280][T17638] wg2 speed is unknown, defaulting to 1000 [ 2103.295797][T17665] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2103.306450][T17665] CPU: 1 PID: 17665 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2103.317099][T17665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2103.327263][T17665] Call Trace: [ 2103.330546][T17665] [ 2103.333480][T17665] dump_stack_lvl+0xcd/0x134 [ 2103.338106][T17665] dump_header+0x10b/0x85f [ 2103.342613][T17665] oom_kill_process.cold+0x10/0x15 [ 2103.347728][T17665] out_of_memory+0x358/0x14a0 [ 2103.352427][T17665] ? rcu_read_lock_sched_held+0xd/0x70 [ 2103.357900][T17665] ? __mod_timer+0x83c/0xe30 [ 2103.362497][T17665] ? rcu_read_lock_sched_held+0xd/0x70 [ 2103.367968][T17665] ? lock_acquire+0x4fc/0x630 [ 2103.372648][T17665] ? oom_killer_disable+0x270/0x270 [ 2103.377852][T17665] ? rcu_read_lock_sched_held+0xd/0x70 [ 2103.383317][T17665] ? lock_release+0x5cb/0x810 [ 2103.388087][T17665] ? rcu_read_unlock+0x9/0x60 [ 2103.393739][T17665] ? lock_downgrade+0x6e0/0x6e0 [ 2103.398789][T17665] mem_cgroup_out_of_memory+0x206/0x270 [ 2103.404562][T17665] ? mem_cgroup_margin+0x130/0x130 [ 2103.409696][T17665] ? lock_downgrade+0x6e0/0x6e0 [ 2103.414566][T17665] try_charge_memcg+0xef8/0x12f0 [ 2103.419526][T17665] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2103.425512][T17665] ? lock_release+0x5cb/0x810 [ 2103.430187][T17665] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2103.435914][T17665] ? lock_downgrade+0x6e0/0x6e0 [ 2103.440772][T17665] ? lock_release+0x5cb/0x810 [ 2103.445446][T17665] ? rcu_read_unlock+0x9/0x60 [ 2103.450126][T17665] ? lock_downgrade+0x6e0/0x6e0 [ 2103.454974][T17665] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2103.460878][T17665] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2103.466435][T17665] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2103.472601][T17665] copy_process+0x73e/0x7190 [ 2103.477195][T17665] ? rcu_read_lock_sched_held+0xd/0x70 [ 2103.482663][T17665] ? lock_acquire+0x4fc/0x630 [ 2103.487346][T17665] ? rcu_read_lock_sched_held+0xd/0x70 [ 2103.492952][T17665] ? lock_release+0x5cb/0x810 [ 2103.497627][T17665] ? psi_task_change+0x1bb/0x2f0 [ 2103.502570][T17665] ? lock_downgrade+0x6e0/0x6e0 [ 2103.507438][T17665] ? __cleanup_sighand+0xb0/0xb0 [ 2103.512381][T17665] ? psi_memstall_leave+0x170/0x250 [ 2103.517585][T17665] ? lock_downgrade+0x6e0/0x6e0 [ 2103.522439][T17665] kernel_clone+0xe7/0x980 [ 2103.526863][T17665] ? lock_acquire+0x4fc/0x630 [ 2103.531539][T17665] ? create_io_thread+0xe0/0xe0 [ 2103.536393][T17665] ? lock_release+0x810/0x810 [ 2103.541076][T17665] ? rcu_read_lock_sched_held+0xd/0x70 [ 2103.546824][T17665] ? lock_release+0x5cb/0x810 [ 2103.551561][T17665] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2103.557909][T17665] ? rcu_read_lock_sched_held+0xd/0x70 [ 2103.563404][T17665] ? lock_acquire+0x4fc/0x630 [ 2103.568093][T17665] ? rcu_read_lock_sched_held+0xd/0x70 [ 2103.573568][T17665] ? lock_release+0x5cb/0x810 [ 2103.578333][T17665] ? __ct_user_exit+0xff/0x150 [ 2103.583102][T17665] __do_sys_clone+0xba/0x100 [ 2103.587701][T17665] ? kernel_clone+0x980/0x980 [ 2103.592395][T17665] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2103.598292][T17665] ? trace_hardirqs_on+0x2d/0x160 [ 2103.603320][T17665] do_syscall_64+0x35/0xb0 [ 2103.607761][T17665] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2103.613665][T17665] RIP: 0033:0x7f5e99a8ca21 [ 2103.618282][T17665] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2103.638305][T17665] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2103.646831][T17665] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2103.654891][T17665] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2103.662860][T17665] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2103.670835][T17665] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2103.678808][T17665] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2103.686880][T17665] [ 2103.696876][T17646] wg2 speed is unknown, defaulting to 1000 [ 2103.696942][T17665] memory: usage 307200kB, limit 307200kB, failcnt 10803 [ 2103.710230][T17665] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2103.719171][T17665] Memory cgroup stats for /syz1: [ 2103.719348][T17665] anon 90112 [ 2103.719348][T17665] file 274432 [ 2103.719348][T17665] kernel 314195968 [ 2103.719348][T17665] kernel_stack 32768 [ 2103.719348][T17665] pagetables 69632 [ 2103.719348][T17665] sec_pagetables 0 [ 2103.719348][T17665] percpu 5423904 [ 2103.719348][T17665] sock 0 [ 2103.719348][T17665] vmalloc 8192 [ 2103.719348][T17665] shmem 274432 [ 2103.719348][T17665] zswap 0 [ 2103.719348][T17665] zswapped 0 [ 2103.719348][T17665] file_mapped 258048 [ 2103.719348][T17665] file_dirty 0 [ 2103.719348][T17665] file_writeback 0 [ 2103.719348][T17665] swapcached 0 [ 2103.719348][T17665] anon_thp 0 [ 2103.719348][T17665] file_thp 0 [ 2103.719348][T17665] shmem_thp 0 [ 2103.719348][T17665] inactive_anon 65536 [ 2103.719348][T17665] active_anon 266240 [ 2103.719348][T17665] inactive_file 0 [ 2103.719348][T17665] active_file 0 [ 2103.719348][T17665] unevictable 0 [ 2103.719348][T17665] slab_reclaimable 19640 [ 2103.719348][T17665] slab_unreclaimable 308574880 [ 2103.814796][T17665] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17665,uid=0 [ 2103.830668][T17665] Memory cgroup out of memory: Killed process 17665 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x37fe0}}, 0x0) 01:50:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x6, 0x19, 0x0, &(0x7f00000002c0)) 01:50:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x3, 0x0, 0x0) 01:50:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 01:50:53 executing program 1: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x83dbc26b8a956426) 01:50:53 executing program 4: socketpair(0x28, 0x0, 0x1d, 0x0) 01:50:53 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/cgroup\x00') 01:50:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x6, 0x6, 0x0, &(0x7f00000002c0)) 01:50:53 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14}, 0x1afc8}, 0x8}, 0x0) 01:50:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) connect$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 2104.695981][T17668] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2104.742925][T17668] CPU: 0 PID: 17668 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2104.753393][T17668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2104.763553][T17668] Call Trace: [ 2104.766851][T17668] [ 2104.769797][T17668] dump_stack_lvl+0xcd/0x134 [ 2104.774469][T17668] dump_header+0x10b/0x85f [ 2104.779000][T17668] oom_kill_process.cold+0x10/0x15 [ 2104.784162][T17668] out_of_memory+0x358/0x14a0 [ 2104.788869][T17668] ? rcu_read_lock_sched_held+0xd/0x70 [ 2104.794370][T17668] ? __mod_timer+0x83c/0xe30 [ 2104.798993][T17668] ? rcu_read_lock_sched_held+0xd/0x70 [ 2104.804488][T17668] ? lock_acquire+0x4fc/0x630 [ 2104.809187][T17668] ? oom_killer_disable+0x270/0x270 [ 2104.814419][T17668] ? rcu_read_lock_sched_held+0xd/0x70 [ 2104.819917][T17668] ? lock_release+0x5cb/0x810 [ 2104.824618][T17668] ? rcu_read_unlock+0x9/0x60 [ 2104.829313][T17668] ? lock_downgrade+0x6e0/0x6e0 [ 2104.834169][T17668] mem_cgroup_out_of_memory+0x206/0x270 [ 2104.839719][T17668] ? mem_cgroup_margin+0x130/0x130 [ 2104.844838][T17668] ? lock_downgrade+0x6e0/0x6e0 [ 2104.849696][T17668] try_charge_memcg+0xef8/0x12f0 [ 2104.854729][T17668] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2104.860719][T17668] ? lock_acquire+0x4fc/0x630 [ 2104.865394][T17668] ? rcu_read_lock_sched_held+0xd/0x70 [ 2104.870866][T17668] ? lock_release+0x5cb/0x810 [ 2104.876322][T17668] ? rcu_read_unlock+0x9/0x60 [ 2104.881003][T17668] ? lock_downgrade+0x6e0/0x6e0 [ 2104.885946][T17668] charge_memcg+0x99/0x3b0 [ 2104.890374][T17668] __mem_cgroup_charge+0x27/0x90 [ 2104.895387][T17668] wp_page_copy+0x2bf/0x1c90 [ 2104.900007][T17668] ? rcu_read_lock_sched_held+0xd/0x70 [ 2104.905563][T17668] ? lock_release+0x5cb/0x810 [ 2104.910244][T17668] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2104.916904][T17668] ? lock_downgrade+0x6e0/0x6e0 [ 2104.921764][T17668] ? vm_normal_page+0x146/0x2a0 [ 2104.926610][T17668] ? __pte_alloc_kernel+0x110/0x110 [ 2104.931808][T17668] ? lock_release+0x5cb/0x810 [ 2104.936578][T17668] do_wp_page+0x538/0x1930 [ 2104.941000][T17668] __handle_mm_fault+0x181b/0x3a40 [ 2104.946119][T17668] ? lock_acquire+0x4fc/0x630 [ 2104.950886][T17668] ? vm_iomap_memory+0x180/0x180 [ 2104.955825][T17668] ? lock_release+0x810/0x810 [ 2104.960509][T17668] handle_mm_fault+0x1c8/0x780 [ 2104.965369][T17668] do_user_addr_fault+0x475/0x1210 [ 2104.970489][T17668] ? rcu_read_lock_sched_held+0xd/0x70 [ 2104.975968][T17668] exc_page_fault+0x94/0x170 [ 2104.980566][T17668] asm_exc_page_fault+0x22/0x30 [ 2104.985423][T17668] RIP: 0033:0x7f5e99a3632e [ 2104.989842][T17668] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 47 5c 17 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2105.009716][T17668] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010246 [ 2105.016054][T17668] RAX: 00007f5e99babf80 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2105.024690][T17668] RDX: 0000000000000000 RSI: 00007f5e99babf88 RDI: 0000000000000000 [ 2105.032750][T17668] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 00007f5e991ff700 01:50:53 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14}, 0x1afc8}, 0x8}, 0x0) [ 2105.040720][T17668] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007f5e99babf8c [ 2105.049994][T17668] R13: 00007f5e99bb0078 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2105.058066][T17668] [ 2105.066791][T17678] wg2 speed is unknown, defaulting to 1000 [ 2105.110461][T17668] memory: usage 307184kB, limit 307200kB, failcnt 10927 [ 2105.117908][T17668] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2105.125291][T17668] Memory cgroup stats for /syz1: [ 2105.125466][T17668] anon 90112 [ 2105.125466][T17668] file 274432 [ 2105.125466][T17668] kernel 314191872 [ 2105.125466][T17668] kernel_stack 65536 [ 2105.125466][T17668] pagetables 69632 [ 2105.125466][T17668] sec_pagetables 0 [ 2105.125466][T17668] percpu 5423904 [ 2105.125466][T17668] sock 0 [ 2105.125466][T17668] vmalloc 8192 [ 2105.125466][T17668] shmem 274432 [ 2105.125466][T17668] zswap 0 [ 2105.125466][T17668] zswapped 0 [ 2105.125466][T17668] file_mapped 258048 [ 2105.125466][T17668] file_dirty 0 [ 2105.125466][T17668] file_writeback 0 [ 2105.125466][T17668] swapcached 0 [ 2105.125466][T17668] anon_thp 0 [ 2105.125466][T17668] file_thp 0 [ 2105.125466][T17668] shmem_thp 0 [ 2105.125466][T17668] inactive_anon 98304 [ 2105.125466][T17668] active_anon 266240 [ 2105.125466][T17668] inactive_file 0 [ 2105.125466][T17668] active_file 0 [ 2105.125466][T17668] unevictable 0 [ 2105.125466][T17668] slab_reclaimable 19640 [ 2105.125466][T17668] slab_unreclaimable 308563944 [ 2105.129053][T17689] wg2 speed is unknown, defaulting to 1000 [ 2105.130560][T17668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17668,uid=0 [ 2105.259091][T17668] Memory cgroup out of memory: Killed process 17668 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) 01:50:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040), 0x4) 01:50:54 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14}, 0x1afc8}, 0x8}, 0x0) 01:50:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}, 0x1, 0x0, 0xa310}, 0x0) 01:50:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x6, 0x1e, 0x0, &(0x7f00000002c0)) 01:50:54 executing program 4: socketpair(0xa, 0x0, 0x96e, &(0x7f00000001c0)) 01:50:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000080)=0x48) 01:50:54 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14}, 0x1afc8}, 0x8}, 0x0) 01:50:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2, 0x0, 0x0) 01:50:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x12, 0x0, 0x0) 01:50:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @local}, {}, 0x0, {}, 'netpci0\x00'}) [ 2105.462776][T17694] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2105.477284][T17703] wg2 speed is unknown, defaulting to 1000 [ 2105.499267][T17694] CPU: 0 PID: 17694 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2105.509830][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2105.519995][T17694] Call Trace: [ 2105.523370][T17694] [ 2105.526316][T17694] dump_stack_lvl+0xcd/0x134 [ 2105.531130][T17694] dump_header+0x10b/0x85f [ 2105.535565][T17694] oom_kill_process.cold+0x10/0x15 [ 2105.540771][T17694] out_of_memory+0x358/0x14a0 [ 2105.545457][T17694] ? __mod_timer+0x83c/0xe30 [ 2105.550145][T17694] ? rcu_read_lock_sched_held+0xd/0x70 [ 2105.555614][T17694] ? lock_acquire+0x4fc/0x630 [ 2105.560291][T17694] ? oom_killer_disable+0x270/0x270 [ 2105.565579][T17694] ? rcu_read_lock_sched_held+0xd/0x70 [ 2105.571088][T17694] ? lock_release+0x5cb/0x810 [ 2105.575788][T17694] ? rcu_read_unlock+0x9/0x60 [ 2105.580479][T17694] ? lock_downgrade+0x6e0/0x6e0 [ 2105.585421][T17694] mem_cgroup_out_of_memory+0x206/0x270 [ 2105.591145][T17694] ? mem_cgroup_margin+0x130/0x130 [ 2105.596265][T17694] ? lock_downgrade+0x6e0/0x6e0 [ 2105.601129][T17694] try_charge_memcg+0xef8/0x12f0 [ 2105.606092][T17694] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2105.612083][T17694] ? lock_acquire+0x4fc/0x630 [ 2105.616763][T17694] ? rcu_read_lock_sched_held+0xd/0x70 [ 2105.622236][T17694] ? lock_release+0x5cb/0x810 [ 2105.626914][T17694] ? rcu_read_unlock+0x9/0x60 [ 2105.631593][T17694] ? lock_downgrade+0x6e0/0x6e0 [ 2105.636448][T17694] ? do_raw_spin_unlock+0x171/0x230 [ 2105.641745][T17694] charge_memcg+0x99/0x3b0 [ 2105.646179][T17694] __mem_cgroup_charge+0x27/0x90 [ 2105.651494][T17694] ? _compound_head+0x5d/0x150 [ 2105.656264][T17694] __handle_mm_fault+0x17e7/0x3a40 [ 2105.661385][T17694] ? lock_acquire+0x4fc/0x630 [ 2105.666066][T17694] ? vm_iomap_memory+0x180/0x180 [ 2105.671095][T17694] ? lock_release+0x810/0x810 [ 2105.675794][T17694] handle_mm_fault+0x1c8/0x780 [ 2105.680648][T17694] do_user_addr_fault+0x475/0x1210 [ 2105.685774][T17694] ? rcu_read_lock_sched_held+0xd/0x70 [ 2105.691246][T17694] exc_page_fault+0x94/0x170 [ 2105.695928][T17694] asm_exc_page_fault+0x22/0x30 [ 2105.700784][T17694] RIP: 0033:0x7f5e99a3638d [ 2105.705209][T17694] Code: e0 04 8b 44 02 08 85 c0 0f 85 d0 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 53 52 05 00 <83> 05 6c 9c 57 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 07 f0 0a 01 [ 2105.725080][T17694] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010207 [ 2105.731145][T17694] RAX: 0000000000000001 RBX: 00007f5e99babf8c RCX: 00007f5e99a8b5f9 [ 2105.739124][T17694] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5e99babf88 [ 2105.747354][T17694] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 0000000000000000 [ 2105.755324][T17694] R10: 00007f5e991ff700 R11: 0000000000000246 R12: 00007f5e99babf8c [ 2105.763293][T17694] R13: 00007f5e99bb0060 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2105.771443][T17694] [ 2105.786507][T17694] memory: usage 307200kB, limit 307200kB, failcnt 11041 [ 2105.787956][T17713] wg2 speed is unknown, defaulting to 1000 [ 2105.799811][T17694] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2105.810704][T17694] Memory cgroup stats for /syz1: [ 2105.810859][T17694] anon 94208 [ 2105.810859][T17694] file 274432 [ 2105.810859][T17694] kernel 314204160 [ 2105.810859][T17694] kernel_stack 65536 [ 2105.810859][T17694] pagetables 73728 [ 2105.810859][T17694] sec_pagetables 0 [ 2105.810859][T17694] percpu 5423904 [ 2105.810859][T17694] sock 0 [ 2105.810859][T17694] vmalloc 8192 [ 2105.810859][T17694] shmem 274432 [ 2105.810859][T17694] zswap 0 [ 2105.810859][T17694] zswapped 0 [ 2105.810859][T17694] file_mapped 258048 [ 2105.810859][T17694] file_dirty 0 01:50:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x78) 01:50:54 executing program 0: bpf$OBJ_GET_PROG(0x12, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x10) 01:50:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 01:50:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x300}, 0x0) [ 2105.810859][T17694] file_writeback 0 [ 2105.810859][T17694] swapcached 0 [ 2105.810859][T17694] anon_thp 0 [ 2105.810859][T17694] file_thp 0 [ 2105.810859][T17694] shmem_thp 0 [ 2105.810859][T17694] inactive_anon 102400 [ 2105.810859][T17694] active_anon 266240 [ 2105.810859][T17694] inactive_file 0 [ 2105.810859][T17694] active_file 0 [ 2105.810859][T17694] unevictable 0 [ 2105.810859][T17694] slab_reclaimable 21568 [ 2105.810859][T17694] slab_unreclaimable 308567672 [ 2105.906263][T17721] wg2 speed is unknown, defaulting to 1000 01:50:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8946, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:50:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) 01:50:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) 01:50:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8904, 0x0) 01:50:54 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0}, 0x20) 01:50:54 executing program 4: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0}, 0x20) [ 2105.936559][T17694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17694,uid=0 [ 2105.952779][T17694] Memory cgroup out of memory: Killed process 17694 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 01:50:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3d}, 0x0) [ 2106.054517][T17728] wg2 speed is unknown, defaulting to 1000 [ 2106.072123][T17743] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2106.088634][T17743] CPU: 1 PID: 17743 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2106.099198][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2106.109278][T17743] Call Trace: [ 2106.112604][T17743] [ 2106.115553][T17743] dump_stack_lvl+0xcd/0x134 [ 2106.120178][T17743] dump_header+0x10b/0x85f [ 2106.124979][T17743] oom_kill_process.cold+0x10/0x15 [ 2106.130228][T17743] out_of_memory+0x358/0x14a0 [ 2106.134948][T17743] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.140446][T17743] ? __mod_timer+0x83c/0xe30 [ 2106.145210][T17743] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.150676][T17743] ? lock_acquire+0x4fc/0x630 [ 2106.155358][T17743] ? oom_killer_disable+0x270/0x270 [ 2106.160565][T17743] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.166130][T17743] ? lock_release+0x5cb/0x810 [ 2106.170827][T17743] ? rcu_read_unlock+0x9/0x60 [ 2106.175510][T17743] ? lock_downgrade+0x6e0/0x6e0 [ 2106.180442][T17743] mem_cgroup_out_of_memory+0x206/0x270 [ 2106.186069][T17743] ? mem_cgroup_margin+0x130/0x130 [ 2106.191180][T17743] ? lock_downgrade+0x6e0/0x6e0 [ 2106.196038][T17743] try_charge_memcg+0xef8/0x12f0 [ 2106.200978][T17743] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2106.206959][T17743] ? lock_acquire+0x4fc/0x630 [ 2106.211629][T17743] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2106.217366][T17743] ? lock_downgrade+0x6e0/0x6e0 [ 2106.222212][T17743] ? lock_release+0x5cb/0x810 [ 2106.226912][T17743] ? obj_cgroup_charge+0x244/0x5e0 [ 2106.232115][T17743] ? lock_downgrade+0x6e0/0x6e0 [ 2106.236981][T17743] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.242443][T17743] obj_cgroup_charge+0x2ab/0x5e0 [ 2106.247578][T17743] kmem_cache_alloc_lru+0x13d/0x730 [ 2106.252972][T17743] ? sock_alloc_inode+0x23/0x1d0 [ 2106.257995][T17743] sock_alloc_inode+0x23/0x1d0 [ 2106.262794][T17743] ? sock_free_inode+0x20/0x20 [ 2106.267725][T17743] alloc_inode+0x61/0x230 [ 2106.272047][T17743] new_inode_pseudo+0x13/0x80 [ 2106.276718][T17743] sock_alloc+0x3c/0x260 [ 2106.281046][T17743] __sock_create+0xb9/0x790 [ 2106.285544][T17743] ? lock_downgrade+0x6e0/0x6e0 [ 2106.290391][T17743] __sys_socket+0x12f/0x240 [ 2106.294901][T17743] ? __sys_socket_file+0x1f0/0x1f0 [ 2106.300113][T17743] __x64_sys_socket+0x6f/0xb0 [ 2106.304797][T17743] do_syscall_64+0x35/0xb0 [ 2106.309392][T17743] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2106.315283][T17743] RIP: 0033:0x7f5e99a8b5f9 [ 2106.319693][T17743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2106.339385][T17743] RSP: 002b:00007f5e991ff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2106.347793][T17743] RAX: ffffffffffffffda RBX: 00007f5e99babf80 RCX: 00007f5e99a8b5f9 01:50:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:55 executing program 3: bpf$BPF_PROG_QUERY(0x7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) 01:50:55 executing program 2: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0}, 0x20) 01:50:55 executing program 4: bpf$BPF_PROG_QUERY(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffdb}, 0x20) 01:50:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8918, &(0x7f0000000340)={'batadv_slave_0\x00'}) [ 2106.355846][T17743] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 2106.363808][T17743] RBP: 00007f5e99ae67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2106.371772][T17743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2106.379732][T17743] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2106.388577][T17743] [ 2106.427036][T17743] memory: usage 307200kB, limit 307200kB, failcnt 11139 [ 2106.439015][T17743] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2106.450553][T17743] Memory cgroup stats for /syz1: [ 2106.450714][T17743] anon 98304 [ 2106.450714][T17743] file 274432 [ 2106.450714][T17743] kernel 314200064 [ 2106.450714][T17743] kernel_stack 65536 [ 2106.450714][T17743] pagetables 77824 [ 2106.450714][T17743] sec_pagetables 0 [ 2106.450714][T17743] percpu 5423904 [ 2106.450714][T17743] sock 0 [ 2106.450714][T17743] vmalloc 8192 [ 2106.450714][T17743] shmem 274432 [ 2106.450714][T17743] zswap 0 [ 2106.450714][T17743] zswapped 0 [ 2106.450714][T17743] file_mapped 258048 [ 2106.450714][T17743] file_dirty 0 [ 2106.450714][T17743] file_writeback 0 [ 2106.450714][T17743] swapcached 0 [ 2106.450714][T17743] anon_thp 0 [ 2106.450714][T17743] file_thp 0 [ 2106.450714][T17743] shmem_thp 0 [ 2106.450714][T17743] inactive_anon 106496 [ 2106.450714][T17743] active_anon 266240 [ 2106.450714][T17743] inactive_file 0 [ 2106.450714][T17743] active_file 0 [ 2106.450714][T17743] unevictable 0 [ 2106.450714][T17743] slab_reclaimable 19640 [ 2106.450714][T17743] slab_unreclaimable 308563944 [ 2106.559427][T17743] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17739,uid=0 01:50:55 executing program 1: bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 01:50:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}}, 0x0) 01:50:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8940, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:50:55 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00'}, 0x10) 01:50:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x6, &(0x7f0000000780)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2106.570475][T17754] wg2 speed is unknown, defaulting to 1000 [ 2106.581375][T17743] Memory cgroup out of memory: Killed process 17739 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2106.588168][T17752] wg2 speed is unknown, defaulting to 1000 [ 2106.610972][T17743] socket: no more sockets 01:50:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8947, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:50:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 2106.737782][T17765] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2106.749060][T17765] CPU: 0 PID: 17765 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2106.759649][T17765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2106.769821][T17765] Call Trace: [ 2106.773117][T17765] [ 2106.776060][T17765] dump_stack_lvl+0xcd/0x134 [ 2106.780668][T17765] dump_header+0x10b/0x85f [ 2106.785092][T17765] oom_kill_process.cold+0x10/0x15 [ 2106.790233][T17765] out_of_memory+0x358/0x14a0 [ 2106.794928][T17765] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.800388][T17765] ? __mod_timer+0x83c/0xe30 [ 2106.805090][T17765] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.810604][T17765] ? lock_acquire+0x4fc/0x630 [ 2106.815285][T17765] ? oom_killer_disable+0x270/0x270 [ 2106.820492][T17765] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.825984][T17765] ? lock_release+0x5cb/0x810 [ 2106.830674][T17765] ? rcu_read_unlock+0x9/0x60 [ 2106.835446][T17765] ? lock_downgrade+0x6e0/0x6e0 [ 2106.840309][T17765] mem_cgroup_out_of_memory+0x206/0x270 [ 2106.845861][T17765] ? mem_cgroup_margin+0x130/0x130 [ 2106.851011][T17765] ? lock_downgrade+0x6e0/0x6e0 [ 2106.856044][T17765] try_charge_memcg+0xef8/0x12f0 [ 2106.860991][T17765] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2106.866982][T17765] ? lock_release+0x5cb/0x810 [ 2106.871674][T17765] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2106.877504][T17765] ? lock_downgrade+0x6e0/0x6e0 [ 2106.882367][T17765] ? lock_release+0x5cb/0x810 [ 2106.887056][T17765] ? rcu_read_unlock+0x9/0x60 [ 2106.891744][T17765] ? lock_downgrade+0x6e0/0x6e0 [ 2106.896600][T17765] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2106.902245][T17765] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2106.908409][T17765] copy_process+0x73e/0x7190 [ 2106.913004][T17765] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.918478][T17765] ? lock_acquire+0x4fc/0x630 [ 2106.923159][T17765] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.928641][T17765] ? lock_release+0x5cb/0x810 [ 2106.933433][T17765] ? psi_task_change+0x1bb/0x2f0 [ 2106.938408][T17765] ? lock_downgrade+0x6e0/0x6e0 [ 2106.943392][T17765] ? __cleanup_sighand+0xb0/0xb0 [ 2106.948361][T17765] ? psi_memstall_leave+0x170/0x250 [ 2106.953571][T17765] ? lock_downgrade+0x6e0/0x6e0 [ 2106.958429][T17765] kernel_clone+0xe7/0x980 [ 2106.962941][T17765] ? lock_acquire+0x4fc/0x630 [ 2106.967621][T17765] ? create_io_thread+0xe0/0xe0 [ 2106.972476][T17765] ? lock_release+0x810/0x810 [ 2106.977164][T17765] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.982635][T17765] ? lock_release+0x5cb/0x810 [ 2106.987405][T17765] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2106.993665][T17765] ? rcu_read_lock_sched_held+0xd/0x70 [ 2106.999158][T17765] ? lock_acquire+0x4fc/0x630 [ 2107.003848][T17765] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.009327][T17765] ? lock_release+0x5cb/0x810 [ 2107.014010][T17765] ? __ct_user_exit+0xff/0x150 [ 2107.018780][T17765] __do_sys_clone+0xba/0x100 [ 2107.023378][T17765] ? kernel_clone+0x980/0x980 [ 2107.028088][T17765] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2107.034073][T17765] ? trace_hardirqs_on+0x2d/0x160 [ 2107.039102][T17765] do_syscall_64+0x35/0xb0 [ 2107.043548][T17765] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2107.049451][T17765] RIP: 0033:0x7f5e99a8ca21 [ 2107.053866][T17765] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2107.073478][T17765] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2107.081894][T17765] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2107.089867][T17765] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2107.097839][T17765] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2107.105826][T17765] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2107.113795][T17765] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2107.122037][T17765] [ 2107.137386][T17765] memory: usage 307200kB, limit 307200kB, failcnt 11271 [ 2107.144873][T17765] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2107.151886][T17765] Memory cgroup stats for /syz1: [ 2107.152104][T17765] anon 94208 [ 2107.152104][T17765] file 274432 [ 2107.152104][T17765] kernel 314204160 [ 2107.152104][T17765] kernel_stack 32768 [ 2107.152104][T17765] pagetables 77824 [ 2107.152104][T17765] sec_pagetables 0 [ 2107.152104][T17765] percpu 5423904 [ 2107.152104][T17765] sock 0 [ 2107.152104][T17765] vmalloc 8192 [ 2107.152104][T17765] shmem 274432 [ 2107.152104][T17765] zswap 0 [ 2107.152104][T17765] zswapped 0 [ 2107.152104][T17765] file_mapped 258048 [ 2107.152104][T17765] file_dirty 0 [ 2107.152104][T17765] file_writeback 0 [ 2107.152104][T17765] swapcached 0 [ 2107.152104][T17765] anon_thp 0 [ 2107.152104][T17765] file_thp 0 [ 2107.152104][T17765] shmem_thp 0 [ 2107.152104][T17765] inactive_anon 57344 [ 2107.152104][T17765] active_anon 266240 [ 2107.152104][T17765] inactive_file 0 [ 2107.152104][T17765] active_file 0 [ 2107.152104][T17765] unevictable 0 01:50:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8927, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:50:56 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0), 0x10) 01:50:56 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x1}, 0x10) 01:50:56 executing program 2: syz_emit_ethernet(0x62, &(0x7f0000000280)={@multicast, @link_local, @val={@void}, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x0, 0x6, "a3fe2d", 0x28, 0x6, 0x0, @remote, @private0, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}}, 0x0) [ 2107.152104][T17765] slab_reclaimable 19640 [ 2107.152104][T17765] slab_unreclaimable 308575280 01:50:56 executing program 1: socket(0xcb11661dfd5ce4fb, 0x0, 0x0) 01:50:56 executing program 4: socket(0xa, 0x0, 0x80008000) 01:50:56 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x31}, 0x14) 01:50:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) 01:50:56 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2107.275027][T17765] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17765,uid=0 [ 2107.301789][T17765] Memory cgroup out of memory: Killed process 17765 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 01:50:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x40, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) 01:50:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x1}, @func_proto]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000400)=""/210, 0x34, 0xd2, 0x1}, 0x20) [ 2107.341260][T17786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2107.419622][T17789] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2107.430486][T17789] CPU: 0 PID: 17789 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2107.440967][T17789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2107.451050][T17789] Call Trace: [ 2107.454327][T17789] [ 2107.457259][T17789] dump_stack_lvl+0xcd/0x134 [ 2107.461849][T17789] dump_header+0x10b/0x85f [ 2107.466260][T17789] oom_kill_process.cold+0x10/0x15 [ 2107.471367][T17789] out_of_memory+0x358/0x14a0 [ 2107.476047][T17789] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.481508][T17789] ? __mod_timer+0x83c/0xe30 [ 2107.486108][T17789] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.491605][T17789] ? lock_acquire+0x4fc/0x630 [ 2107.496382][T17789] ? oom_killer_disable+0x270/0x270 [ 2107.501675][T17789] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.507238][T17789] ? lock_release+0x5cb/0x810 [ 2107.511931][T17789] ? rcu_read_unlock+0x9/0x60 [ 2107.516606][T17789] ? lock_downgrade+0x6e0/0x6e0 [ 2107.521458][T17789] mem_cgroup_out_of_memory+0x206/0x270 [ 2107.527063][T17789] ? mem_cgroup_margin+0x130/0x130 [ 2107.532175][T17789] ? lock_downgrade+0x6e0/0x6e0 [ 2107.537040][T17789] try_charge_memcg+0xef8/0x12f0 [ 2107.542009][T17789] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2107.547995][T17789] ? lock_release+0x5cb/0x810 [ 2107.552669][T17789] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2107.558391][T17789] ? lock_downgrade+0x6e0/0x6e0 [ 2107.563264][T17789] ? lock_release+0x5cb/0x810 [ 2107.567934][T17789] ? rcu_read_unlock+0x9/0x60 [ 2107.572697][T17789] ? lock_downgrade+0x6e0/0x6e0 [ 2107.577628][T17789] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2107.583536][T17789] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2107.589118][T17789] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2107.595387][T17789] copy_process+0x73e/0x7190 [ 2107.599997][T17789] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.605467][T17789] ? lock_acquire+0x4fc/0x630 [ 2107.610153][T17789] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.615644][T17789] ? lock_release+0x5cb/0x810 [ 2107.620315][T17789] ? psi_task_change+0x1bb/0x2f0 [ 2107.625603][T17789] ? lock_downgrade+0x6e0/0x6e0 [ 2107.630448][T17789] ? __cleanup_sighand+0xb0/0xb0 [ 2107.635396][T17789] ? psi_memstall_leave+0x170/0x250 [ 2107.640658][T17789] ? lock_downgrade+0x6e0/0x6e0 [ 2107.645507][T17789] kernel_clone+0xe7/0x980 [ 2107.649928][T17789] ? lock_acquire+0x4fc/0x630 [ 2107.654605][T17789] ? create_io_thread+0xe0/0xe0 [ 2107.659462][T17789] ? lock_release+0x810/0x810 [ 2107.664144][T17789] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.669720][T17789] ? lock_release+0x5cb/0x810 [ 2107.674399][T17789] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2107.680705][T17789] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.686203][T17789] ? lock_acquire+0x4fc/0x630 [ 2107.690902][T17789] ? rcu_read_lock_sched_held+0xd/0x70 [ 2107.696396][T17789] ? lock_release+0x5cb/0x810 [ 2107.701160][T17789] ? __ct_user_exit+0xff/0x150 [ 2107.706009][T17789] __do_sys_clone+0xba/0x100 [ 2107.710683][T17789] ? kernel_clone+0x980/0x980 [ 2107.715376][T17789] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2107.721265][T17789] ? trace_hardirqs_on+0x2d/0x160 [ 2107.726285][T17789] do_syscall_64+0x35/0xb0 [ 2107.730725][T17789] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2107.736716][T17789] RIP: 0033:0x7f5e99a8ca21 [ 2107.741147][T17789] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2107.760903][T17789] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2107.769368][T17789] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2107.777332][T17789] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2107.785307][T17789] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2107.793291][T17789] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2107.801269][T17789] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2107.809333][T17789] [ 2107.821101][T17789] memory: usage 307188kB, limit 307200kB, failcnt 11371 [ 2107.828551][T17789] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2107.836008][T17789] Memory cgroup stats for /syz1: [ 2107.836186][T17789] anon 90112 [ 2107.836186][T17789] file 274432 [ 2107.836186][T17789] kernel 314195968 [ 2107.836186][T17789] kernel_stack 32768 [ 2107.836186][T17789] pagetables 69632 [ 2107.836186][T17789] sec_pagetables 0 [ 2107.836186][T17789] percpu 5423904 [ 2107.836186][T17789] sock 0 [ 2107.836186][T17789] vmalloc 8192 [ 2107.836186][T17789] shmem 274432 [ 2107.836186][T17789] zswap 0 [ 2107.836186][T17789] zswapped 0 [ 2107.836186][T17789] file_mapped 258048 [ 2107.836186][T17789] file_dirty 0 [ 2107.836186][T17789] file_writeback 0 [ 2107.836186][T17789] swapcached 0 [ 2107.836186][T17789] anon_thp 0 [ 2107.836186][T17789] file_thp 0 [ 2107.836186][T17789] shmem_thp 0 [ 2107.836186][T17789] inactive_anon 65536 [ 2107.836186][T17789] active_anon 266240 [ 2107.836186][T17789] inactive_file 0 [ 2107.836186][T17789] active_file 0 [ 2107.836186][T17789] unevictable 0 [ 2107.836186][T17789] slab_reclaimable 19640 [ 2107.836186][T17789] slab_unreclaimable 308574880 [ 2107.930436][T17778] wg2 speed is unknown, defaulting to 1000 [ 2107.933871][T17789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17789,uid=0 [ 2107.952324][T17789] Memory cgroup out of memory: Killed process 17789 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2107.986810][T17788] wg2 speed is unknown, defaulting to 1000 01:50:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[], 0xe0}}, 0x0) 01:50:57 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc020660b, 0x0) 01:50:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1e6c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 01:50:57 executing program 0: r0 = socket(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 01:50:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) 01:50:57 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000ac0)=@framed={{}, [@jmp, @map_idx]}, &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:57 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) 01:50:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 01:50:57 executing program 3: bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0}, 0x20) 01:50:57 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000180), 0x4) 01:50:57 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) [ 2108.172172][T17802] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2108.216106][T17802] CPU: 1 PID: 17802 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2108.226583][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2108.236660][T17802] Call Trace: [ 2108.239950][T17802] [ 2108.242895][T17802] dump_stack_lvl+0xcd/0x134 [ 2108.247530][T17802] dump_header+0x10b/0x85f [ 2108.248459][T17808] wg2 speed is unknown, defaulting to 1000 [ 2108.251960][T17802] oom_kill_process.cold+0x10/0x15 [ 2108.260296][T17819] wg2 speed is unknown, defaulting to 1000 [ 2108.262849][T17802] out_of_memory+0x358/0x14a0 [ 2108.262885][T17802] ? rcu_read_lock_sched_held+0xd/0x70 [ 2108.262917][T17802] ? __mod_timer+0x83c/0xe30 [ 2108.262944][T17802] ? rcu_read_lock_sched_held+0xd/0x70 [ 2108.262976][T17802] ? lock_acquire+0x4fc/0x630 [ 2108.262999][T17802] ? oom_killer_disable+0x270/0x270 [ 2108.263025][T17802] ? rcu_read_lock_sched_held+0xd/0x70 [ 2108.263062][T17802] ? lock_release+0x5cb/0x810 [ 2108.309058][T17802] ? rcu_read_unlock+0x9/0x60 [ 2108.313770][T17802] ? lock_downgrade+0x6e0/0x6e0 [ 2108.318690][T17802] mem_cgroup_out_of_memory+0x206/0x270 [ 2108.324274][T17802] ? mem_cgroup_margin+0x130/0x130 [ 2108.329419][T17802] ? lock_downgrade+0x6e0/0x6e0 [ 2108.334307][T17802] try_charge_memcg+0xef8/0x12f0 [ 2108.339285][T17802] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2108.345310][T17802] ? lock_acquire+0x4fc/0x630 [ 2108.350019][T17802] ? rcu_read_lock_sched_held+0xd/0x70 [ 2108.355520][T17802] ? lock_release+0x5cb/0x810 [ 2108.360395][T17802] ? rcu_read_unlock+0x9/0x60 01:50:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:57 executing program 3: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) 01:50:57 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00001c0000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 01:50:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) [ 2108.365124][T17802] ? lock_downgrade+0x6e0/0x6e0 [ 2108.370001][T17802] charge_memcg+0x99/0x3b0 [ 2108.374492][T17802] __mem_cgroup_charge+0x27/0x90 [ 2108.379559][T17802] wp_page_copy+0x2bf/0x1c90 [ 2108.384180][T17802] ? rcu_read_lock_sched_held+0xd/0x70 [ 2108.389680][T17802] ? lock_release+0x5cb/0x810 [ 2108.394382][T17802] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2108.397702][T17827] wg2 speed is unknown, defaulting to 1000 [ 2108.400984][T17802] ? lock_downgrade+0x6e0/0x6e0 [ 2108.401017][T17802] ? vm_normal_page+0x146/0x2a0 [ 2108.416521][T17802] ? __pte_alloc_kernel+0x110/0x110 [ 2108.421742][T17802] ? lock_release+0x5cb/0x810 [ 2108.426538][T17802] do_wp_page+0x538/0x1930 [ 2108.430978][T17802] __handle_mm_fault+0x181b/0x3a40 [ 2108.436123][T17802] ? lock_acquire+0x4fc/0x630 [ 2108.440830][T17802] ? vm_iomap_memory+0x180/0x180 [ 2108.445802][T17802] ? lock_release+0x810/0x810 [ 2108.450511][T17802] handle_mm_fault+0x1c8/0x780 [ 2108.455310][T17802] do_user_addr_fault+0x475/0x1210 [ 2108.460462][T17802] ? rcu_read_lock_sched_held+0xd/0x70 [ 2108.465963][T17802] exc_page_fault+0x94/0x170 [ 2108.469184][T17829] wg2 speed is unknown, defaulting to 1000 [ 2108.470563][T17802] asm_exc_page_fault+0x22/0x30 [ 2108.470601][T17802] RIP: 0033:0x7f5e99a3632e [ 2108.485699][T17802] Code: 4c 24 54 89 78 2c 48 8b 3c 24 89 48 78 0f b6 4c 24 53 c6 40 20 01 88 4c 3a 04 8b 7c 24 4c 4c 89 35 47 5c 17 00 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2108.505330][T17802] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010246 01:50:57 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) [ 2108.511425][T17802] RAX: 00007f5e99babf80 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2108.519419][T17802] RDX: 0000000000000000 RSI: 00007f5e99babf88 RDI: 0000000000000000 [ 2108.527500][T17802] RBP: 00007f5e99babf80 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2108.535493][T17802] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007f5e99babf8c [ 2108.543487][T17802] R13: 00007f5e99bb0060 R14: 00007f5e99babf80 R15: 0000000000000000 [ 2108.551493][T17802] [ 2108.592755][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2108.598746][T17802] memory: usage 307200kB, limit 307200kB, failcnt 11486 [ 2108.609420][T17831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2108.621398][T17802] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2108.629961][T17802] Memory cgroup stats for /syz1: [ 2108.630146][T17802] anon 90112 [ 2108.630146][T17802] file 274432 [ 2108.630146][T17802] kernel 314208256 [ 2108.630146][T17802] kernel_stack 65536 [ 2108.630146][T17802] pagetables 69632 [ 2108.630146][T17802] sec_pagetables 0 [ 2108.630146][T17802] percpu 5423904 [ 2108.630146][T17802] sock 0 [ 2108.630146][T17802] vmalloc 8192 [ 2108.630146][T17802] shmem 274432 [ 2108.630146][T17802] zswap 0 [ 2108.630146][T17802] zswapped 0 [ 2108.630146][T17802] file_mapped 258048 [ 2108.630146][T17802] file_dirty 0 [ 2108.630146][T17802] file_writeback 0 [ 2108.630146][T17802] swapcached 0 [ 2108.630146][T17802] anon_thp 0 [ 2108.630146][T17802] file_thp 0 [ 2108.630146][T17802] shmem_thp 0 [ 2108.630146][T17802] inactive_anon 98304 [ 2108.630146][T17802] active_anon 266240 [ 2108.630146][T17802] inactive_file 0 [ 2108.630146][T17802] active_file 0 [ 2108.630146][T17802] unevictable 0 [ 2108.630146][T17802] slab_reclaimable 19640 [ 2108.630146][T17802] slab_unreclaimable 308575344 [ 2108.728020][T17802] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17802,uid=0 01:50:57 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) 01:50:57 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00001c0000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000300)=0x6, 0x4) 01:50:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7}, 0x48) 01:50:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:57 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x80) 01:50:57 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:57 executing program 3: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0, 0x0) [ 2108.744022][T17802] Memory cgroup out of memory: Killed process 17802 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:57 executing program 2: setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 01:50:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 01:50:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000b80)={'security\x00', 0x4, "b5404ac8"}, &(0x7f0000000c00)=0x28) 01:50:57 executing program 2: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) 01:50:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000c00)) [ 2108.860469][T17841] wg2 speed is unknown, defaulting to 1000 [ 2108.916783][T17848] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2108.954650][T17851] wg2 speed is unknown, defaulting to 1000 [ 2108.954990][T17848] CPU: 1 PID: 17848 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2108.970919][T17848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2108.981060][T17848] Call Trace: [ 2108.984370][T17848] [ 2108.987301][T17848] dump_stack_lvl+0xcd/0x134 [ 2108.991904][T17848] dump_header+0x10b/0x85f [ 2108.996324][T17848] oom_kill_process.cold+0x10/0x15 [ 2109.001437][T17848] out_of_memory+0x358/0x14a0 [ 2109.006119][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.011591][T17848] ? __mod_timer+0x83c/0xe30 [ 2109.016185][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.021832][T17848] ? lock_acquire+0x4fc/0x630 [ 2109.026508][T17848] ? oom_killer_disable+0x270/0x270 [ 2109.031716][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.037184][T17848] ? lock_release+0x5cb/0x810 [ 2109.041864][T17848] ? rcu_read_unlock+0x9/0x60 [ 2109.046554][T17848] ? lock_downgrade+0x6e0/0x6e0 [ 2109.051499][T17848] mem_cgroup_out_of_memory+0x206/0x270 [ 2109.057051][T17848] ? mem_cgroup_margin+0x130/0x130 [ 2109.062165][T17848] ? lock_downgrade+0x6e0/0x6e0 [ 2109.067024][T17848] try_charge_memcg+0xef8/0x12f0 [ 2109.071976][T17848] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2109.077961][T17848] ? lock_acquire+0x4fc/0x630 [ 2109.082759][T17848] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2109.088485][T17848] ? lock_downgrade+0x6e0/0x6e0 [ 2109.093430][T17848] ? lock_release+0x5cb/0x810 [ 2109.098212][T17848] ? obj_cgroup_charge+0x244/0x5e0 [ 2109.103418][T17848] ? lock_downgrade+0x6e0/0x6e0 [ 2109.108269][T17848] ? lock_release+0x5cb/0x810 [ 2109.112945][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.118422][T17848] ? rcu_read_unlock+0x9/0x60 [ 2109.123278][T17848] obj_cgroup_charge+0x2ab/0x5e0 [ 2109.128319][T17848] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2109.133875][T17848] ? copy_semundo+0x187/0x2f0 [ 2109.138551][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.144109][T17848] kmalloc_trace+0x22/0x60 [ 2109.148616][T17848] copy_semundo+0x187/0x2f0 [ 2109.153119][T17848] copy_process+0x23f4/0x7190 [ 2109.157802][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.163270][T17848] ? lock_acquire+0x4fc/0x630 [ 2109.167974][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.173498][T17848] ? __cleanup_sighand+0xb0/0xb0 [ 2109.178477][T17848] ? psi_memstall_leave+0x170/0x250 [ 2109.183710][T17848] ? lock_downgrade+0x6e0/0x6e0 [ 2109.188913][T17848] kernel_clone+0xe7/0x980 [ 2109.193333][T17848] ? lock_acquire+0x4fc/0x630 [ 2109.198016][T17848] ? create_io_thread+0xe0/0xe0 [ 2109.205300][T17848] ? lock_release+0x810/0x810 [ 2109.210067][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.215556][T17848] ? lock_release+0x5cb/0x810 [ 2109.220264][T17848] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2109.226543][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.232117][T17848] ? lock_acquire+0x4fc/0x630 [ 2109.237253][T17848] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.242819][T17848] ? lock_release+0x5cb/0x810 [ 2109.247516][T17848] ? __ct_user_exit+0xff/0x150 [ 2109.252307][T17848] __do_sys_clone+0xba/0x100 [ 2109.257078][T17848] ? kernel_clone+0x980/0x980 [ 2109.261776][T17848] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2109.267674][T17848] ? trace_hardirqs_on+0x2d/0x160 [ 2109.272700][T17848] do_syscall_64+0x35/0xb0 [ 2109.277123][T17848] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2109.283018][T17848] RIP: 0033:0x7f5e99a8ca21 [ 2109.287432][T17848] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2109.307043][T17848] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2109.315458][T17848] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2109.323428][T17848] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2109.331397][T17848] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2109.339802][T17848] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2109.347859][T17848] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2109.355923][T17848] [ 2109.383613][T17848] memory: usage 307192kB, limit 307200kB, failcnt 11587 [ 2109.396533][T17848] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2109.412586][T17848] Memory cgroup stats for /syz1: [ 2109.412807][T17848] anon 90112 [ 2109.412807][T17848] file 274432 [ 2109.412807][T17848] kernel 314191872 [ 2109.412807][T17848] kernel_stack 65536 [ 2109.412807][T17848] pagetables 69632 [ 2109.412807][T17848] sec_pagetables 0 [ 2109.412807][T17848] percpu 5423904 [ 2109.412807][T17848] sock 0 [ 2109.412807][T17848] vmalloc 8192 [ 2109.412807][T17848] shmem 274432 [ 2109.412807][T17848] zswap 0 [ 2109.412807][T17848] zswapped 0 [ 2109.412807][T17848] file_mapped 258048 [ 2109.412807][T17848] file_dirty 0 [ 2109.412807][T17848] file_writeback 0 [ 2109.412807][T17848] swapcached 0 [ 2109.412807][T17848] anon_thp 0 [ 2109.412807][T17848] file_thp 0 [ 2109.412807][T17848] shmem_thp 0 [ 2109.412807][T17848] inactive_anon 98304 [ 2109.412807][T17848] active_anon 266240 [ 2109.412807][T17848] inactive_file 0 [ 2109.412807][T17848] active_file 0 [ 2109.412807][T17848] unevictable 0 [ 2109.412807][T17848] slab_reclaimable 19640 [ 2109.412807][T17848] slab_unreclaimable 308563784 [ 2109.580117][T17848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17848,uid=0 01:50:58 executing program 0: socket(0x1, 0x0, 0x4) 01:50:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000240)=@abs, 0x6e) 01:50:58 executing program 1: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x40, &(0x7f0000000040)={0x5}, 0x0, &(0x7f00000000c0)={0x66}, &(0x7f0000000140)={0x0, r0/1000+10000}) 01:50:58 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 01:50:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, &(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "1195112f683a2d6133671cf0a994024be4d53376d39f79fcfa0e47a93dca5618d7bad1161bf08fafd8ce4cf3e5c4455ba89eb5e8146006654d45053f8b44e2"}, 0x80) 01:50:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2109.614206][T17848] Memory cgroup out of memory: Killed process 17848 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:50:58 executing program 0: epoll_create(0x49) 01:50:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @empty}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xe5}, @noop, @ra={0x94, 0x4}]}}}], 0x40}, 0x8040) 01:50:58 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="696425740a590180c200000086dd60e4c1470014040000000000000000000000000006000000ff020000000000000000000000000001"], 0x0) 01:50:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x80000000) shutdown(r0, 0x0) 01:50:58 executing program 4: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRESDEC], 0x1) 01:50:58 executing program 0: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRESDEC], 0x1) [ 2109.761925][T17866] wg2 speed is unknown, defaulting to 1000 [ 2109.802947][T17874] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2109.821196][T17874] CPU: 0 PID: 17874 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2109.831709][T17874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2109.841878][T17874] Call Trace: [ 2109.845156][T17874] [ 2109.848086][T17874] dump_stack_lvl+0xcd/0x134 [ 2109.852703][T17874] dump_header+0x10b/0x85f [ 2109.857216][T17874] oom_kill_process.cold+0x10/0x15 [ 2109.862329][T17874] out_of_memory+0x358/0x14a0 [ 2109.867019][T17874] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.872508][T17874] ? __mod_timer+0x83c/0xe30 [ 2109.877107][T17874] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.882578][T17874] ? lock_acquire+0x4fc/0x630 [ 2109.887255][T17874] ? oom_killer_disable+0x270/0x270 [ 2109.892544][T17874] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.898017][T17874] ? lock_release+0x5cb/0x810 [ 2109.902866][T17874] ? rcu_read_unlock+0x9/0x60 [ 2109.907592][T17874] ? lock_downgrade+0x6e0/0x6e0 [ 2109.912535][T17874] mem_cgroup_out_of_memory+0x206/0x270 [ 2109.918259][T17874] ? mem_cgroup_margin+0x130/0x130 [ 2109.923373][T17874] ? lock_downgrade+0x6e0/0x6e0 [ 2109.928232][T17874] try_charge_memcg+0xef8/0x12f0 [ 2109.933181][T17874] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2109.939170][T17874] ? lock_release+0x5cb/0x810 [ 2109.943860][T17874] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2109.949599][T17874] ? lock_downgrade+0x6e0/0x6e0 [ 2109.954449][T17874] ? lock_release+0x5cb/0x810 [ 2109.959130][T17874] ? rcu_read_unlock+0x9/0x60 [ 2109.963807][T17874] ? lock_downgrade+0x6e0/0x6e0 [ 2109.968655][T17874] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2109.974648][T17874] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2109.980206][T17874] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2109.986367][T17874] copy_process+0x73e/0x7190 [ 2109.990966][T17874] ? rcu_read_lock_sched_held+0xd/0x70 [ 2109.996524][T17874] ? lock_acquire+0x4fc/0x630 [ 2110.001199][T17874] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.006776][T17874] ? lock_release+0x5cb/0x810 [ 2110.011504][T17874] ? psi_task_change+0x1bb/0x2f0 [ 2110.016542][T17874] ? lock_downgrade+0x6e0/0x6e0 [ 2110.021588][T17874] ? __cleanup_sighand+0xb0/0xb0 [ 2110.026589][T17874] ? psi_memstall_leave+0x170/0x250 [ 2110.031810][T17874] ? lock_downgrade+0x6e0/0x6e0 [ 2110.036691][T17874] kernel_clone+0xe7/0x980 [ 2110.041116][T17874] ? lock_acquire+0x4fc/0x630 [ 2110.045796][T17874] ? create_io_thread+0xe0/0xe0 [ 2110.050649][T17874] ? lock_release+0x810/0x810 [ 2110.056716][T17874] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.062822][T17874] ? lock_release+0x5cb/0x810 [ 2110.067788][T17874] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2110.074477][T17874] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.080034][T17874] ? lock_acquire+0x4fc/0x630 [ 2110.084722][T17874] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.090192][T17874] ? lock_release+0x5cb/0x810 [ 2110.094968][T17874] ? __ct_user_exit+0xff/0x150 [ 2110.099740][T17874] __do_sys_clone+0xba/0x100 [ 2110.104338][T17874] ? kernel_clone+0x980/0x980 [ 2110.109025][T17874] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2110.114921][T17874] ? trace_hardirqs_on+0x2d/0x160 [ 2110.120035][T17874] do_syscall_64+0x35/0xb0 [ 2110.124807][T17874] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2110.130709][T17874] RIP: 0033:0x7f5e99a8ca21 [ 2110.135135][T17874] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2110.154926][T17874] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2110.163341][T17874] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2110.171318][T17874] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2110.179287][T17874] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2110.187274][T17874] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2110.195251][T17874] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2110.203235][T17874] [ 2110.232707][T17874] memory: usage 307172kB, limit 307200kB, failcnt 11679 [ 2110.237846][T17873] wg2 speed is unknown, defaulting to 1000 [ 2110.239743][T17874] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2110.269138][T17874] Memory cgroup stats for /syz1: [ 2110.269340][T17874] anon 90112 [ 2110.269340][T17874] file 274432 [ 2110.269340][T17874] kernel 314179584 [ 2110.269340][T17874] kernel_stack 32768 [ 2110.269340][T17874] pagetables 69632 [ 2110.269340][T17874] sec_pagetables 0 [ 2110.269340][T17874] percpu 5423904 [ 2110.269340][T17874] sock 0 [ 2110.269340][T17874] vmalloc 8192 [ 2110.269340][T17874] shmem 274432 [ 2110.269340][T17874] zswap 0 [ 2110.269340][T17874] zswapped 0 [ 2110.269340][T17874] file_mapped 258048 [ 2110.269340][T17874] file_dirty 0 [ 2110.269340][T17874] file_writeback 0 [ 2110.269340][T17874] swapcached 0 [ 2110.269340][T17874] anon_thp 0 [ 2110.269340][T17874] file_thp 0 [ 2110.269340][T17874] shmem_thp 0 [ 2110.269340][T17874] inactive_anon 98304 [ 2110.269340][T17874] active_anon 266240 [ 2110.269340][T17874] inactive_file 0 [ 2110.269340][T17874] active_file 0 [ 2110.269340][T17874] unevictable 0 [ 2110.269340][T17874] slab_reclaimable 19640 [ 2110.269340][T17874] slab_unreclaimable 308563480 [ 2110.303892][T17882] wg2 speed is unknown, defaulting to 1000 01:50:59 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1}}) 01:50:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmsg(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002380)=""/4085, 0xff5}, {&(0x7f00000001c0)=""/287, 0x11f}, {&(0x7f0000000000)=""/23, 0x17}], 0x3}, 0x0) [ 2110.378730][T17874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17874,uid=0 [ 2110.400767][T17874] Memory cgroup out of memory: Killed process 17874 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2110.530024][T17891] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2110.553275][T17891] CPU: 1 PID: 17891 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2110.557667][T17884] wg2 speed is unknown, defaulting to 1000 [ 2110.563717][T17891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2110.563732][T17891] Call Trace: [ 2110.563738][T17891] [ 2110.563747][T17891] dump_stack_lvl+0xcd/0x134 [ 2110.563780][T17891] dump_header+0x10b/0x85f [ 2110.563804][T17891] oom_kill_process.cold+0x10/0x15 [ 2110.563829][T17891] out_of_memory+0x358/0x14a0 [ 2110.563858][T17891] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.563892][T17891] ? __mod_timer+0x83c/0xe30 [ 2110.563918][T17891] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.563951][T17891] ? lock_acquire+0x4fc/0x630 [ 2110.563974][T17891] ? oom_killer_disable+0x270/0x270 01:50:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:50:59 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x60, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xef}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x33}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008804}, 0x800) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x0, 'sit0\x00', {}, 0x6}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x7, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x0, 0x10}}) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e40000a0cffbff01f1eb00", @ANYRES32, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca020000b0"], 0x140}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 01:50:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, 0x1c) [ 2110.564000][T17891] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.564032][T17891] ? lock_release+0x5cb/0x810 [ 2110.564054][T17891] ? rcu_read_unlock+0x9/0x60 [ 2110.564077][T17891] ? lock_downgrade+0x6e0/0x6e0 [ 2110.564102][T17891] mem_cgroup_out_of_memory+0x206/0x270 [ 2110.564129][T17891] ? mem_cgroup_margin+0x130/0x130 [ 2110.564153][T17891] ? lock_downgrade+0x6e0/0x6e0 [ 2110.564181][T17891] try_charge_memcg+0xef8/0x12f0 [ 2110.564213][T17891] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2110.676448][T17891] ? lock_release+0x5cb/0x810 [ 2110.681154][T17891] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2110.686910][T17891] ? lock_downgrade+0x6e0/0x6e0 [ 2110.691792][T17891] ? lock_release+0x5cb/0x810 [ 2110.696502][T17891] ? rcu_read_unlock+0x9/0x60 [ 2110.701201][T17891] ? lock_downgrade+0x6e0/0x6e0 [ 2110.706107][T17891] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2110.712041][T17891] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2110.717633][T17891] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2110.723860][T17891] copy_process+0x73e/0x7190 [ 2110.728488][T17891] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.733984][T17891] ? lock_release+0x5cb/0x810 [ 2110.738688][T17891] ? lock_downgrade+0x6e0/0x6e0 [ 2110.743567][T17891] ? __cleanup_sighand+0xb0/0xb0 [ 2110.748533][T17891] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2110.754757][T17891] ? trace_hardirqs_on+0x2d/0x160 [ 2110.759804][T17891] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2110.765988][T17891] kernel_clone+0xe7/0x980 [ 2110.770433][T17891] ? lock_acquire+0x4fc/0x630 [ 2110.775140][T17891] ? create_io_thread+0xe0/0xe0 [ 2110.780015][T17891] ? lock_release+0x810/0x810 [ 2110.784714][T17891] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.790202][T17891] ? lock_release+0x5cb/0x810 [ 2110.794898][T17891] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2110.801165][T17891] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.806665][T17891] ? lock_acquire+0x4fc/0x630 [ 2110.811380][T17891] ? rcu_read_lock_sched_held+0xd/0x70 [ 2110.816870][T17891] ? lock_release+0x5cb/0x810 [ 2110.821566][T17891] ? __ct_user_exit+0xff/0x150 [ 2110.826356][T17891] __do_sys_clone+0xba/0x100 [ 2110.830967][T17891] ? kernel_clone+0x980/0x980 [ 2110.835679][T17891] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2110.841596][T17891] ? trace_hardirqs_on+0x2d/0x160 [ 2110.846655][T17891] do_syscall_64+0x35/0xb0 [ 2110.851105][T17891] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2110.857029][T17891] RIP: 0033:0x7f5e99a8ca21 [ 2110.861460][T17891] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2110.866924][T17896] wg2 speed is unknown, defaulting to 1000 [ 2110.881074][T17891] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2110.881101][T17891] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2110.881115][T17891] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2110.881129][T17891] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2110.881142][T17891] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2110.881154][T17891] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2110.881176][T17891] [ 2110.902892][T17891] memory: usage 307176kB, limit 307200kB, failcnt 11763 [ 2110.961423][T17891] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2110.981769][T17891] Memory cgroup stats for /syz1: [ 2110.981971][T17891] anon 90112 [ 2110.981971][T17891] file 274432 [ 2110.981971][T17891] kernel 314183680 [ 2110.981971][T17891] kernel_stack 32768 [ 2110.981971][T17891] pagetables 69632 [ 2110.981971][T17891] sec_pagetables 0 [ 2110.981971][T17891] percpu 5423904 [ 2110.981971][T17891] sock 0 [ 2110.981971][T17891] vmalloc 8192 [ 2110.981971][T17891] shmem 274432 [ 2110.981971][T17891] zswap 0 [ 2110.981971][T17891] zswapped 0 [ 2110.981971][T17891] file_mapped 258048 [ 2110.981971][T17891] file_dirty 0 [ 2110.981971][T17891] file_writeback 0 [ 2110.981971][T17891] swapcached 0 [ 2110.981971][T17891] anon_thp 0 [ 2110.981971][T17891] file_thp 0 [ 2110.981971][T17891] shmem_thp 0 [ 2110.981971][T17891] inactive_anon 98304 [ 2110.981971][T17891] active_anon 266240 [ 2110.981971][T17891] inactive_file 0 [ 2110.981971][T17891] active_file 0 [ 2110.981971][T17891] unevictable 0 [ 2110.981971][T17891] slab_reclaimable 19640 [ 2110.981971][T17891] slab_unreclaimable 308563784 [ 2111.050654][T17899] wg2 speed is unknown, defaulting to 1000 [ 2111.120007][T17897] wg2 speed is unknown, defaulting to 1000 01:51:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4100, 0x1004}, {&(0x7f0000000000)=""/287, 0x11f}], 0x2}, 0x0) 01:51:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:51:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2111.197854][T17891] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17891,uid=0 [ 2111.213983][T17891] Memory cgroup out of memory: Killed process 17891 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:00 executing program 4: unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x17b}, 0x14}}, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/139, 0x8b}], 0x1) [ 2111.266606][T17902] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2111.318805][T17909] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2111.331836][T17909] CPU: 0 PID: 17909 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2111.342320][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2111.345318][T17910] wg2 speed is unknown, defaulting to 1000 [ 2111.352378][T17909] Call Trace: [ 2111.352390][T17909] [ 2111.352398][T17909] dump_stack_lvl+0xcd/0x134 [ 2111.352434][T17909] dump_header+0x10b/0x85f [ 2111.373451][T17909] oom_kill_process.cold+0x10/0x15 [ 2111.379553][T17909] out_of_memory+0x358/0x14a0 [ 2111.384265][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.389842][T17909] ? __mod_timer+0x83c/0xe30 [ 2111.394457][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.399950][T17909] ? lock_acquire+0x4fc/0x630 [ 2111.404650][T17909] ? oom_killer_disable+0x270/0x270 [ 2111.409874][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.415375][T17909] ? lock_release+0x5cb/0x810 [ 2111.420175][T17909] ? rcu_read_unlock+0x9/0x60 [ 2111.425054][T17909] ? lock_downgrade+0x6e0/0x6e0 [ 2111.430022][T17909] mem_cgroup_out_of_memory+0x206/0x270 [ 2111.435608][T17909] ? mem_cgroup_margin+0x130/0x130 [ 2111.440744][T17909] ? lock_downgrade+0x6e0/0x6e0 [ 2111.445629][T17909] try_charge_memcg+0xef8/0x12f0 [ 2111.450610][T17909] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2111.456629][T17909] ? lock_acquire+0x4fc/0x630 [ 2111.461333][T17909] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2111.467086][T17909] ? lock_downgrade+0x6e0/0x6e0 [ 2111.471968][T17909] ? lock_release+0x5cb/0x810 [ 2111.476660][T17909] ? obj_cgroup_charge+0x244/0x5e0 [ 2111.481916][T17909] ? lock_downgrade+0x6e0/0x6e0 [ 2111.486882][T17909] ? lock_release+0x5cb/0x810 [ 2111.491588][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.492876][T17912] wg2 speed is unknown, defaulting to 1000 [ 2111.497064][T17909] ? rcu_read_unlock+0x9/0x60 [ 2111.497102][T17909] obj_cgroup_charge+0x2ab/0x5e0 [ 2111.512629][T17909] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2111.518035][T17909] ? copy_semundo+0x187/0x2f0 [ 2111.522725][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.528211][T17909] kmalloc_trace+0x22/0x60 [ 2111.532648][T17909] copy_semundo+0x187/0x2f0 [ 2111.537170][T17909] copy_process+0x23f4/0x7190 [ 2111.541872][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.547365][T17909] ? lock_acquire+0x4fc/0x630 [ 2111.552068][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.557572][T17909] ? __cleanup_sighand+0xb0/0xb0 [ 2111.562558][T17909] ? psi_memstall_leave+0x170/0x250 [ 2111.566623][T17910] wg2 speed is unknown, defaulting to 1000 [ 2111.567889][T17909] ? lock_downgrade+0x6e0/0x6e0 [ 2111.567925][T17909] kernel_clone+0xe7/0x980 [ 2111.582981][T17909] ? lock_acquire+0x4fc/0x630 [ 2111.587770][T17909] ? create_io_thread+0xe0/0xe0 [ 2111.592645][T17909] ? lock_release+0x810/0x810 [ 2111.597338][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.602837][T17909] ? lock_release+0x5cb/0x810 [ 2111.607549][T17909] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2111.613821][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.619317][T17909] ? lock_acquire+0x4fc/0x630 [ 2111.624104][T17909] ? rcu_read_lock_sched_held+0xd/0x70 [ 2111.629611][T17909] ? lock_release+0x5cb/0x810 [ 2111.634332][T17909] ? __ct_user_exit+0xff/0x150 [ 2111.639128][T17909] __do_sys_clone+0xba/0x100 [ 2111.643748][T17909] ? kernel_clone+0x980/0x980 [ 2111.648462][T17909] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2111.654386][T17909] ? trace_hardirqs_on+0x2d/0x160 [ 2111.659439][T17909] do_syscall_64+0x35/0xb0 [ 2111.663889][T17909] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2111.669809][T17909] RIP: 0033:0x7f5e99a8ca21 [ 2111.674326][T17909] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2111.694092][T17909] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2111.702629][T17909] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2111.710712][T17909] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 01:51:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 01:51:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2111.718885][T17909] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2111.726878][T17909] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2111.734869][T17909] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2111.742960][T17909] [ 2111.779311][T17918] wg2 speed is unknown, defaulting to 1000 [ 2111.837366][T17909] memory: usage 307184kB, limit 307200kB, failcnt 11869 [ 2111.844799][T17909] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2111.859294][T17920] wg2 speed is unknown, defaulting to 1000 [ 2111.865504][T17909] Memory cgroup stats for /syz1: [ 2111.865703][T17909] anon 90112 [ 2111.865703][T17909] file 274432 [ 2111.865703][T17909] kernel 314191872 [ 2111.865703][T17909] kernel_stack 65536 [ 2111.865703][T17909] pagetables 69632 [ 2111.865703][T17909] sec_pagetables 0 [ 2111.865703][T17909] percpu 5423904 [ 2111.865703][T17909] sock 0 [ 2111.865703][T17909] vmalloc 8192 [ 2111.865703][T17909] shmem 274432 [ 2111.865703][T17909] zswap 0 [ 2111.865703][T17909] zswapped 0 [ 2111.865703][T17909] file_mapped 258048 [ 2111.865703][T17909] file_dirty 0 [ 2111.865703][T17909] file_writeback 0 [ 2111.865703][T17909] swapcached 0 [ 2111.865703][T17909] anon_thp 0 [ 2111.865703][T17909] file_thp 0 [ 2111.865703][T17909] shmem_thp 0 [ 2111.865703][T17909] inactive_anon 98304 [ 2111.865703][T17909] active_anon 266240 [ 2111.865703][T17909] inactive_file 0 [ 2111.865703][T17909] active_file 0 [ 2111.865703][T17909] unevictable 0 [ 2111.865703][T17909] slab_reclaimable 19640 [ 2111.865703][T17909] slab_unreclaimable 308563480 [ 2111.983199][T17909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17909,uid=0 [ 2112.012912][T17909] Memory cgroup out of memory: Killed process 17909 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:01 executing program 0: r0 = socket(0x11, 0xa, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000000)) 01:51:01 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000015c0)={0xffffffffffffffff}, 0x4) 01:51:01 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 01:51:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 01:51:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) 01:51:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xfff}, 0x48) 01:51:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 01:51:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000070601"], 0x20}}, 0x0) 01:51:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x6, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 01:51:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @l2, @nl=@unspec, 0xfd}) [ 2112.618195][T17926] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2112.628598][T17932] wg2 speed is unknown, defaulting to 1000 01:51:01 executing program 3: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) 01:51:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x301}, 0x14}}, 0x0) [ 2112.662675][T17926] CPU: 1 PID: 17926 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2112.673158][T17926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2112.676357][T17940] wg2 speed is unknown, defaulting to 1000 [ 2112.683212][T17926] Call Trace: [ 2112.683224][T17926] [ 2112.683233][T17926] dump_stack_lvl+0xcd/0x134 [ 2112.683286][T17926] dump_header+0x10b/0x85f [ 2112.683309][T17926] oom_kill_process.cold+0x10/0x15 01:51:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="75ea464024b53316c384588a88f7", 0xe, 0x0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 01:51:01 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0xfffffffffffffffd) [ 2112.683332][T17926] out_of_memory+0x358/0x14a0 [ 2112.683358][T17926] ? rcu_read_lock_sched_held+0xd/0x70 [ 2112.683391][T17926] ? __mod_timer+0x83c/0xe30 [ 2112.683417][T17926] ? rcu_read_lock_sched_held+0xd/0x70 [ 2112.683447][T17926] ? lock_acquire+0x4fc/0x630 [ 2112.683470][T17926] ? oom_killer_disable+0x270/0x270 [ 2112.683495][T17926] ? rcu_read_lock_sched_held+0xd/0x70 [ 2112.683523][T17926] ? lock_release+0x5cb/0x810 [ 2112.683544][T17926] ? rcu_read_unlock+0x9/0x60 [ 2112.754942][T17926] ? lock_downgrade+0x6e0/0x6e0 [ 2112.759830][T17926] mem_cgroup_out_of_memory+0x206/0x270 [ 2112.765407][T17926] ? mem_cgroup_margin+0x130/0x130 [ 2112.770563][T17926] ? lock_downgrade+0x6e0/0x6e0 [ 2112.775532][T17926] try_charge_memcg+0xef8/0x12f0 [ 2112.780502][T17926] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2112.786516][T17926] ? lock_acquire+0x4fc/0x630 [ 2112.791197][T17926] ? rcu_read_lock_sched_held+0xd/0x70 [ 2112.796667][T17926] ? lock_release+0x5cb/0x810 [ 2112.802042][T17926] ? rcu_read_unlock+0x9/0x60 [ 2112.806747][T17926] ? lock_downgrade+0x6e0/0x6e0 [ 2112.811598][T17926] ? rcu_read_lock_sched_held+0xd/0x70 [ 2112.817065][T17926] ? lock_release+0x5cb/0x810 [ 2112.821741][T17926] ? debug_object_free+0x1c0/0x350 [ 2112.826865][T17926] charge_memcg+0x99/0x3b0 [ 2112.831290][T17926] __mem_cgroup_charge+0x27/0x90 [ 2112.836238][T17926] wp_page_copy+0x2bf/0x1c90 [ 2112.840917][T17926] ? rcu_read_lock_sched_held+0xd/0x70 [ 2112.846478][T17926] ? lock_release+0x5cb/0x810 [ 2112.851154][T17926] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2112.857745][T17926] ? lock_downgrade+0x6e0/0x6e0 [ 2112.862599][T17926] ? vm_normal_page+0x146/0x2a0 [ 2112.867482][T17926] ? __pte_alloc_kernel+0x110/0x110 [ 2112.872684][T17926] ? lock_release+0x5cb/0x810 [ 2112.877386][T17926] do_wp_page+0x538/0x1930 [ 2112.881809][T17926] __handle_mm_fault+0x181b/0x3a40 [ 2112.886927][T17926] ? lock_acquire+0x4fc/0x630 [ 2112.891605][T17926] ? vm_iomap_memory+0x180/0x180 [ 2112.897191][T17926] handle_mm_fault+0x1c8/0x780 [ 2112.901965][T17926] do_user_addr_fault+0x475/0x1210 [ 2112.907089][T17926] ? rcu_read_lock_sched_held+0xd/0x70 [ 2112.912563][T17926] exc_page_fault+0x94/0x170 [ 2112.917166][T17926] asm_exc_page_fault+0x22/0x30 [ 2112.922026][T17926] RIP: 0033:0x7f5e99a35a65 [ 2112.926615][T17926] Code: 5c 41 5d c3 90 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d 5e 26 17 00 48 01 ca 02 01 48 89 42 08 48 8b 53 10 4c 8d 2d 89 a5 57 00 4c 39 ea 0f [ 2112.947017][T17926] RSP: 002b:00007ffdae169570 EFLAGS: 00010206 [ 2112.953098][T17926] RAX: 0000000000000003 RBX: 00007f5e99babf80 RCX: 00007f5e99ba80c0 [ 2112.961267][T17926] RDX: 00007f5e99ba80c0 RSI: 0000000000000080 RDI: 00007f5e99babf80 [ 2112.969587][T17926] RBP: 00007f5e99babf80 R08: 00007ffdae1af080 R09: 0000000000000000 [ 2112.977623][T17926] R10: 00007ffdae169690 R11: 0000000000000246 R12: 0000000000203c53 [ 2112.985593][T17926] R13: 00007ffdae169690 R14: 00007f5e99babf80 R15: 0000000000000032 [ 2112.993608][T17926] [ 2113.002322][T17926] memory: usage 307200kB, limit 307200kB, failcnt 11980 [ 2113.021910][T17926] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2113.044287][T17926] Memory cgroup stats for /syz1: [ 2113.044488][T17926] anon 98304 [ 2113.044488][T17926] file 274432 [ 2113.044488][T17926] kernel 314200064 [ 2113.044488][T17926] kernel_stack 65536 [ 2113.044488][T17926] pagetables 73728 [ 2113.044488][T17926] sec_pagetables 0 [ 2113.044488][T17926] percpu 5423904 [ 2113.044488][T17926] sock 0 [ 2113.044488][T17926] vmalloc 8192 [ 2113.044488][T17926] shmem 274432 [ 2113.044488][T17926] zswap 0 [ 2113.044488][T17926] zswapped 0 [ 2113.044488][T17926] file_mapped 258048 [ 2113.044488][T17926] file_dirty 0 [ 2113.044488][T17926] file_writeback 0 [ 2113.044488][T17926] swapcached 0 [ 2113.044488][T17926] anon_thp 0 [ 2113.044488][T17926] file_thp 0 [ 2113.044488][T17926] shmem_thp 0 [ 2113.044488][T17926] inactive_anon 106496 [ 2113.044488][T17926] active_anon 266240 [ 2113.044488][T17926] inactive_file 0 [ 2113.044488][T17926] active_file 0 [ 2113.044488][T17926] unevictable 0 [ 2113.044488][T17926] slab_reclaimable 21568 [ 2113.044488][T17926] slab_unreclaimable 308564592 [ 2113.143270][T17926] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17926,uid=0 01:51:02 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000002c0)="f6", 0x1}], 0x2, &(0x7f0000000380)=[{0x10}], 0x10}}], 0x1, 0x0) 01:51:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) [ 2113.159733][T17926] Memory cgroup out of memory: Killed process 17926 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2113.213520][T17960] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2113.225950][T17960] CPU: 1 PID: 17960 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2113.236402][T17960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2113.246473][T17960] Call Trace: [ 2113.249752][T17960] [ 2113.252686][T17960] dump_stack_lvl+0xcd/0x134 [ 2113.257317][T17960] dump_header+0x10b/0x85f [ 2113.261736][T17960] oom_kill_process.cold+0x10/0x15 [ 2113.266940][T17960] out_of_memory+0x358/0x14a0 [ 2113.271624][T17960] ? rcu_read_lock_sched_held+0xd/0x70 [ 2113.277099][T17960] ? __mod_timer+0x83c/0xe30 [ 2113.281866][T17960] ? rcu_read_lock_sched_held+0xd/0x70 [ 2113.287336][T17960] ? lock_acquire+0x4fc/0x630 [ 2113.292016][T17960] ? oom_killer_disable+0x270/0x270 [ 2113.297236][T17960] ? rcu_read_lock_sched_held+0xd/0x70 [ 2113.302825][T17960] ? lock_release+0x5cb/0x810 [ 2113.307503][T17960] ? rcu_read_unlock+0x9/0x60 [ 2113.312183][T17960] ? lock_downgrade+0x6e0/0x6e0 [ 2113.317038][T17960] mem_cgroup_out_of_memory+0x206/0x270 [ 2113.322589][T17960] ? mem_cgroup_margin+0x130/0x130 [ 2113.327807][T17960] ? lock_downgrade+0x6e0/0x6e0 [ 2113.332734][T17960] try_charge_memcg+0xef8/0x12f0 [ 2113.338477][T17960] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2113.344472][T17960] ? lock_release+0x5cb/0x810 [ 2113.349156][T17960] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2113.354884][T17960] ? lock_downgrade+0x6e0/0x6e0 [ 2113.359733][T17960] ? lock_release+0x5cb/0x810 [ 2113.364417][T17960] ? rcu_read_unlock+0x9/0x60 [ 2113.369190][T17960] ? lock_downgrade+0x6e0/0x6e0 [ 2113.374049][T17960] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2113.379608][T17960] __alloc_pages+0x1ef/0x5a0 [ 2113.384199][T17960] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2113.391069][T17960] ? lock_acquire+0x4fc/0x630 [ 2113.395773][T17960] ? __pmd_alloc+0x303/0x5c0 [ 2113.400388][T17960] ? lock_downgrade+0x6e0/0x6e0 [ 2113.405496][T17960] ? do_raw_spin_lock+0x120/0x2a0 [ 2113.410539][T17960] alloc_pages+0x1a6/0x270 [ 2113.415403][T17960] pte_alloc_one+0x16/0x230 [ 2113.420222][T17960] __do_fault+0x433/0x600 [ 2113.424657][T17960] ? __pud_alloc+0xe0/0x180 [ 2113.429434][T17960] __handle_mm_fault+0x2200/0x3a40 [ 2113.434814][T17960] ? lock_acquire+0x4fc/0x630 [ 2113.439691][T17960] ? vm_iomap_memory+0x180/0x180 [ 2113.444840][T17960] handle_mm_fault+0x1c8/0x780 [ 2113.449980][T17960] do_user_addr_fault+0x475/0x1210 [ 2113.455111][T17960] ? rcu_read_lock_sched_held+0xd/0x70 [ 2113.461733][T17960] exc_page_fault+0x94/0x170 [ 2113.466598][T17960] asm_exc_page_fault+0x22/0x30 [ 2113.471631][T17960] RIP: 0033:0x7f5e99a275f6 [ 2113.476053][T17960] Code: ff ff 66 90 48 8b 0d f9 dd 0b 01 4c 63 05 e2 dd 0b 01 48 8b 05 e3 dd 0b 01 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 c9 dd 0b 01 c3 52 48 8d 35 92 de 0b 00 48 89 c2 48 [ 2113.495953][T17960] RSP: 002b:00007ffdae1695a8 EFLAGS: 00010287 [ 2113.502030][T17960] RAX: 0000001b2e920000 RBX: 0000000000000003 RCX: 0000001b2e920000 [ 2113.510002][T17960] RDX: 0000001b2e920004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 2113.517970][T17960] RBP: 0000000000000000 R08: 0000001b2ed20000 R09: 0000000000040000 [ 2113.526025][T17960] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 2113.533999][T17960] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdae169850 [ 2113.541978][T17960] [ 2113.547907][T17960] memory: usage 307152kB, limit 307200kB, failcnt 12052 [ 2113.555172][T17960] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2113.564014][T17960] Memory cgroup stats for /syz1: [ 2113.564193][T17960] anon 77824 [ 2113.564193][T17960] file 274432 [ 2113.564193][T17960] kernel 314150912 [ 2113.564193][T17960] kernel_stack 32768 [ 2113.564193][T17960] pagetables 65536 [ 2113.564193][T17960] sec_pagetables 0 [ 2113.564193][T17960] percpu 5423904 [ 2113.564193][T17960] sock 0 [ 2113.564193][T17960] vmalloc 8192 [ 2113.564193][T17960] shmem 274432 [ 2113.564193][T17960] zswap 0 [ 2113.564193][T17960] zswapped 0 [ 2113.564193][T17960] file_mapped 258048 [ 2113.564193][T17960] file_dirty 0 [ 2113.564193][T17960] file_writeback 0 [ 2113.564193][T17960] swapcached 0 [ 2113.564193][T17960] anon_thp 0 [ 2113.564193][T17960] file_thp 0 [ 2113.564193][T17960] shmem_thp 0 [ 2113.564193][T17960] inactive_anon 86016 [ 2113.564193][T17960] active_anon 266240 [ 2113.564193][T17960] inactive_file 0 [ 2113.564193][T17960] active_file 0 [ 2113.564193][T17960] unevictable 0 [ 2113.564193][T17960] slab_reclaimable 22216 [ 2113.564193][T17960] slab_unreclaimable 308556088 01:51:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0x0, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:02 executing program 2: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x4e70970d80fbc5ae}, 0x20) 01:51:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f00000007c0)=@proc={0x10, 0x0, 0x0, 0x8}, 0xc) 01:51:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 01:51:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:51:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r0) connect$netlink(r0, &(0x7f00000007c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) [ 2113.664267][T17960] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17960,uid=0 [ 2113.684943][T17960] Memory cgroup out of memory: Killed process 17960 (syz-executor.1) total-vm:54464kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 01:51:02 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private1, @remote, @mcast2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60000}) 01:51:02 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:02 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x11, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 01:51:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="89", 0x1}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)="d0", 0x1}], 0x1, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x2) [ 2113.796968][T17969] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2113.831365][T17969] CPU: 0 PID: 17969 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 01:51:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x4}, @CTA_LABELS={0x4}]}, 0x1c}}, 0x0) 01:51:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={0x0, 0x1fc}}, 0x0) [ 2113.841940][T17969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2113.852017][T17969] Call Trace: [ 2113.855315][T17969] [ 2113.858263][T17969] dump_stack_lvl+0xcd/0x134 [ 2113.862884][T17969] dump_header+0x10b/0x85f [ 2113.867334][T17969] oom_kill_process.cold+0x10/0x15 [ 2113.872487][T17969] out_of_memory+0x358/0x14a0 [ 2113.877208][T17969] ? rcu_read_lock_sched_held+0xd/0x70 [ 2113.882709][T17969] ? __mod_timer+0x83c/0xe30 [ 2113.887333][T17969] ? rcu_read_lock_sched_held+0xd/0x70 [ 2113.892829][T17969] ? lock_acquire+0x4fc/0x630 [ 2113.897627][T17969] ? oom_killer_disable+0x270/0x270 [ 2113.902858][T17969] ? rcu_read_lock_sched_held+0xd/0x70 [ 2113.908451][T17969] ? lock_release+0x5cb/0x810 [ 2113.913234][T17969] ? rcu_read_unlock+0x9/0x60 [ 2113.917922][T17969] ? lock_downgrade+0x6e0/0x6e0 [ 2113.922796][T17969] mem_cgroup_out_of_memory+0x206/0x270 [ 2113.928354][T17969] ? mem_cgroup_margin+0x130/0x130 [ 2113.933567][T17969] ? lock_downgrade+0x6e0/0x6e0 [ 2113.938546][T17969] try_charge_memcg+0xef8/0x12f0 [ 2113.943526][T17969] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2113.949539][T17969] ? lock_release+0x5cb/0x810 [ 2113.954230][T17969] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2113.959967][T17969] ? lock_downgrade+0x6e0/0x6e0 [ 2113.964829][T17969] ? lock_release+0x5cb/0x810 [ 2113.969515][T17969] ? rcu_read_unlock+0x9/0x60 [ 2113.974196][T17969] ? lock_downgrade+0x6e0/0x6e0 [ 2113.979136][T17969] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2113.985041][T17969] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2113.990601][T17969] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2113.996848][T17969] copy_process+0x73e/0x7190 [ 2114.001443][T17969] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.006920][T17969] ? lock_acquire+0x4fc/0x630 [ 2114.011598][T17969] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.017073][T17969] ? lock_release+0x5cb/0x810 [ 2114.022446][T17969] ? psi_task_change+0x1bb/0x2f0 [ 2114.027393][T17969] ? lock_downgrade+0x6e0/0x6e0 [ 2114.032266][T17969] ? __cleanup_sighand+0xb0/0xb0 [ 2114.037212][T17969] ? psi_memstall_leave+0x170/0x250 [ 2114.042420][T17969] ? lock_downgrade+0x6e0/0x6e0 [ 2114.047363][T17969] kernel_clone+0xe7/0x980 [ 2114.051786][T17969] ? lock_acquire+0x4fc/0x630 [ 2114.056499][T17969] ? create_io_thread+0xe0/0xe0 [ 2114.061352][T17969] ? lock_release+0x810/0x810 [ 2114.066034][T17969] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.071511][T17969] ? lock_release+0x5cb/0x810 [ 2114.076196][T17969] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2114.082499][T17969] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.087971][T17969] ? lock_acquire+0x4fc/0x630 [ 2114.092647][T17969] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.098122][T17969] ? lock_release+0x5cb/0x810 [ 2114.102799][T17969] ? __ct_user_exit+0xff/0x150 [ 2114.107569][T17969] __do_sys_clone+0xba/0x100 [ 2114.112170][T17969] ? kernel_clone+0x980/0x980 [ 2114.117291][T17969] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2114.123198][T17969] ? trace_hardirqs_on+0x2d/0x160 [ 2114.128225][T17969] do_syscall_64+0x35/0xb0 [ 2114.132742][T17969] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2114.138737][T17969] RIP: 0033:0x7f5e99a8ca21 [ 2114.143238][T17969] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2114.162847][T17969] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2114.171368][T17969] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2114.179433][T17969] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2114.187532][T17969] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2114.195591][T17969] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2114.203564][T17969] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2114.212153][T17969] [ 2114.220914][T17969] memory: usage 307188kB, limit 307200kB, failcnt 12136 [ 2114.235523][T17969] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2114.238394][T17976] wg2 speed is unknown, defaulting to 1000 [ 2114.246499][T17969] Memory cgroup stats for /syz1: [ 2114.248647][T17969] anon 90112 [ 2114.248647][T17969] file 274432 [ 2114.248647][T17969] kernel 314179584 [ 2114.248647][T17969] kernel_stack 32768 [ 2114.248647][T17969] pagetables 69632 [ 2114.248647][T17969] sec_pagetables 0 [ 2114.248647][T17969] percpu 5423904 [ 2114.248647][T17969] sock 0 [ 2114.248647][T17969] vmalloc 8192 [ 2114.248647][T17969] shmem 274432 [ 2114.248647][T17969] zswap 0 [ 2114.248647][T17969] zswapped 0 [ 2114.248647][T17969] file_mapped 258048 [ 2114.248647][T17969] file_dirty 0 [ 2114.248647][T17969] file_writeback 0 [ 2114.248647][T17969] swapcached 0 [ 2114.248647][T17969] anon_thp 0 [ 2114.248647][T17969] file_thp 0 [ 2114.248647][T17969] shmem_thp 0 [ 2114.248647][T17969] inactive_anon 98304 [ 2114.248647][T17969] active_anon 266240 [ 2114.248647][T17969] inactive_file 0 [ 2114.248647][T17969] active_file 0 [ 2114.248647][T17969] unevictable 0 [ 2114.248647][T17969] slab_reclaimable 19640 [ 2114.248647][T17969] slab_unreclaimable 308563784 [ 2114.272285][T17983] wg2 speed is unknown, defaulting to 1000 [ 2114.351087][T17969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17969,uid=0 [ 2114.377300][T17969] Memory cgroup out of memory: Killed process 17969 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x6, 0x4) 01:51:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x1, &(0x7f0000000580)=@raw=[@ldst={0x3}], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="89", 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/222, 0x7ffff000}, {&(0x7f00000003c0)=""/64, 0x40}, {&(0x7f0000000400)=""/125, 0x7d}, {&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000740)=""/114, 0x72}, {&(0x7f00000005c0)=""/63, 0x3f}], 0x7}, 0x0) 01:51:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 01:51:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0x0, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:03 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:51:03 executing program 2: pipe(&(0x7f0000000940)={0xffffffffffffffff}) syz_genetlink_get_family_id$team(&(0x7f0000000bc0), r0) 01:51:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) 01:51:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r0, 0x0, 0x0, 0x0) 01:51:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x3, 0x4, &(0x7f0000001200)=@framed={{}, [@generic={0x40, 0x0, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x1009, &(0x7f0000001d00)=""/4105, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffb0}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 01:51:03 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x7, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 01:51:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x3, 0x4, &(0x7f0000001200)=@framed={{}, [@generic={0x40, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x1009, &(0x7f0000001d00)=""/4105, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 2114.611439][T17997] wg2 speed is unknown, defaulting to 1000 [ 2114.626054][T17988] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2114.649940][T17988] CPU: 1 PID: 17988 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2114.660498][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2114.670641][T17988] Call Trace: [ 2114.673929][T17988] [ 2114.676872][T17988] dump_stack_lvl+0xcd/0x134 [ 2114.681519][T17988] dump_header+0x10b/0x85f [ 2114.685959][T17988] oom_kill_process.cold+0x10/0x15 [ 2114.691100][T17988] out_of_memory+0x358/0x14a0 [ 2114.695899][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.701395][T17988] ? __mod_timer+0x83c/0xe30 [ 2114.706010][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.711489][T17988] ? lock_acquire+0x4fc/0x630 [ 2114.716175][T17988] ? oom_killer_disable+0x270/0x270 [ 2114.721386][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.726856][T17988] ? lock_release+0x5cb/0x810 [ 2114.731535][T17988] ? rcu_read_unlock+0x9/0x60 [ 2114.736214][T17988] ? lock_downgrade+0x6e0/0x6e0 [ 2114.741073][T17988] mem_cgroup_out_of_memory+0x206/0x270 [ 2114.746630][T17988] ? mem_cgroup_margin+0x130/0x130 [ 2114.751756][T17988] ? lock_downgrade+0x6e0/0x6e0 [ 2114.756638][T17988] try_charge_memcg+0xef8/0x12f0 [ 2114.761586][T17988] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2114.767572][T17988] ? lock_acquire+0x4fc/0x630 [ 2114.772247][T17988] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2114.777971][T17988] ? lock_downgrade+0x6e0/0x6e0 [ 2114.782820][T17988] ? lock_release+0x5cb/0x810 [ 2114.787584][T17988] ? obj_cgroup_charge+0x244/0x5e0 [ 2114.792715][T17988] ? lock_downgrade+0x6e0/0x6e0 [ 2114.797670][T17988] ? lock_release+0x5cb/0x810 [ 2114.802345][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.807854][T17988] ? rcu_read_unlock+0x9/0x60 [ 2114.812545][T17988] obj_cgroup_charge+0x2ab/0x5e0 [ 2114.817542][T17988] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2114.822937][T17988] ? copy_semundo+0x187/0x2f0 [ 2114.827624][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.833096][T17988] kmalloc_trace+0x22/0x60 [ 2114.837516][T17988] copy_semundo+0x187/0x2f0 [ 2114.842020][T17988] copy_process+0x23f4/0x7190 [ 2114.846700][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.852165][T17988] ? lock_acquire+0x4fc/0x630 [ 2114.856839][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.862313][T17988] ? __cleanup_sighand+0xb0/0xb0 [ 2114.867265][T17988] ? psi_memstall_leave+0x170/0x250 [ 2114.872468][T17988] ? lock_downgrade+0x6e0/0x6e0 [ 2114.877323][T17988] kernel_clone+0xe7/0x980 [ 2114.881747][T17988] ? lock_acquire+0x4fc/0x630 [ 2114.886448][T17988] ? create_io_thread+0xe0/0xe0 [ 2114.891324][T17988] ? lock_release+0x810/0x810 [ 2114.896002][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.901476][T17988] ? lock_release+0x5cb/0x810 [ 2114.906170][T17988] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2114.912422][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.917894][T17988] ? lock_acquire+0x4fc/0x630 [ 2114.922577][T17988] ? rcu_read_lock_sched_held+0xd/0x70 [ 2114.928043][T17988] ? lock_release+0x5cb/0x810 [ 2114.932755][T17988] ? __ct_user_exit+0xff/0x150 [ 2114.937870][T17988] __do_sys_clone+0xba/0x100 [ 2114.942474][T17988] ? kernel_clone+0x980/0x980 [ 2114.947166][T17988] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2114.953162][T17988] ? trace_hardirqs_on+0x2d/0x160 [ 2114.958194][T17988] do_syscall_64+0x35/0xb0 [ 2114.962620][T17988] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2114.968519][T17988] RIP: 0033:0x7f5e99a8ca21 [ 2114.972967][T17988] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2114.992574][T17988] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2115.001010][T17988] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 01:51:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x7, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 01:51:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 2115.009003][T17988] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2115.016972][T17988] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2115.024938][T17988] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2115.032909][T17988] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2115.040987][T17988] [ 2115.090855][T18006] wg2 speed is unknown, defaulting to 1000 01:51:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0x0, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2115.183407][T17988] memory: usage 307200kB, limit 307200kB, failcnt 12243 [ 2115.203773][T17988] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2115.229142][T17988] Memory cgroup stats for /syz1: [ 2115.229343][T17988] anon 90112 [ 2115.229343][T17988] file 274432 [ 2115.229343][T17988] kernel 314191872 [ 2115.229343][T17988] kernel_stack 65536 [ 2115.229343][T17988] pagetables 69632 [ 2115.229343][T17988] sec_pagetables 0 [ 2115.229343][T17988] percpu 5423904 [ 2115.229343][T17988] sock 0 [ 2115.229343][T17988] vmalloc 8192 [ 2115.229343][T17988] shmem 274432 [ 2115.229343][T17988] zswap 0 [ 2115.229343][T17988] zswapped 0 [ 2115.229343][T17988] file_mapped 258048 [ 2115.229343][T17988] file_dirty 0 [ 2115.229343][T17988] file_writeback 0 [ 2115.229343][T17988] swapcached 0 [ 2115.229343][T17988] anon_thp 0 [ 2115.229343][T17988] file_thp 0 [ 2115.229343][T17988] shmem_thp 0 [ 2115.229343][T17988] inactive_anon 98304 [ 2115.229343][T17988] active_anon 266240 [ 2115.229343][T17988] inactive_file 0 [ 2115.229343][T17988] active_file 0 [ 2115.229343][T17988] unevictable 0 [ 2115.229343][T17988] slab_reclaimable 19640 [ 2115.229343][T17988] slab_unreclaimable 308563784 [ 2115.349255][T17988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=17988,uid=0 01:51:04 executing program 1: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x1c, 0x1c, 0x2}, 0x1c) 01:51:04 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x5, 0x0, 0x9}, 0x98) 01:51:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000000)="ea", 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 01:51:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@sndrcv={0x2c}], 0x2c}, 0x0) 01:51:04 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000028c0)) [ 2115.394085][T18021] wg2 speed is unknown, defaulting to 1000 [ 2115.407085][T17988] Memory cgroup out of memory: Killed process 17988 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:04 executing program 2: sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)=@file={0xa}, 0xa) 01:51:04 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@raw=[@map_idx_val, @generic, @ldst, @generic], &(0x7f0000000040)='GPL\x00', 0x40000000, 0x98, &(0x7f0000000080)=""/152, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:04 executing program 4: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 01:51:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000000), &(0x7f0000000100)=0x90) 01:51:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000028c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003940)={0x0, 0x0, 0x0}, 0x1) 01:51:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000080)='&', 0x1, 0x20188, &(0x7f0000000000)={0x10, 0x2}, 0x10) [ 2115.529337][T18022] wg2 speed is unknown, defaulting to 1000 [ 2115.551855][T18031] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2115.587295][T18031] CPU: 1 PID: 18031 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2115.597767][T18031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2115.607831][T18031] Call Trace: [ 2115.611110][T18031] [ 2115.614075][T18031] dump_stack_lvl+0xcd/0x134 [ 2115.618683][T18031] dump_header+0x10b/0x85f [ 2115.623101][T18031] oom_kill_process.cold+0x10/0x15 [ 2115.628222][T18031] out_of_memory+0x358/0x14a0 [ 2115.632909][T18031] ? rcu_read_lock_sched_held+0xd/0x70 [ 2115.638377][T18031] ? __mod_timer+0x83c/0xe30 [ 2115.642981][T18031] ? rcu_read_lock_sched_held+0xd/0x70 [ 2115.648468][T18031] ? lock_acquire+0x4fc/0x630 [ 2115.653156][T18031] ? oom_killer_disable+0x270/0x270 [ 2115.658371][T18031] ? rcu_read_lock_sched_held+0xd/0x70 [ 2115.663854][T18031] ? lock_release+0x5cb/0x810 [ 2115.668560][T18031] ? rcu_read_unlock+0x9/0x60 [ 2115.673248][T18031] ? lock_downgrade+0x6e0/0x6e0 [ 2115.678103][T18031] mem_cgroup_out_of_memory+0x206/0x270 [ 2115.683652][T18031] ? mem_cgroup_margin+0x130/0x130 [ 2115.688773][T18031] ? lock_downgrade+0x6e0/0x6e0 [ 2115.693633][T18031] try_charge_memcg+0xef8/0x12f0 [ 2115.698587][T18031] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2115.704573][T18031] ? lock_release+0x5cb/0x810 [ 2115.709262][T18031] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2115.714984][T18031] ? lock_downgrade+0x6e0/0x6e0 [ 2115.719834][T18031] ? lock_release+0x5cb/0x810 [ 2115.724508][T18031] ? rcu_read_unlock+0x9/0x60 [ 2115.729186][T18031] ? lock_downgrade+0x6e0/0x6e0 [ 2115.734032][T18031] ? lock_release+0x5cb/0x810 [ 2115.738715][T18031] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2115.744271][T18031] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2115.750460][T18031] copy_process+0x15ed/0x7190 [ 2115.755146][T18031] ? rcu_read_lock_sched_held+0xd/0x70 [ 2115.760614][T18031] ? lock_acquire+0x4fc/0x630 [ 2115.765297][T18031] ? rcu_read_lock_sched_held+0xd/0x70 [ 2115.770764][T18031] ? lock_release+0x5cb/0x810 [ 2115.775441][T18031] ? psi_task_change+0x1bb/0x2f0 [ 2115.780387][T18031] ? lock_downgrade+0x6e0/0x6e0 [ 2115.785254][T18031] ? __cleanup_sighand+0xb0/0xb0 [ 2115.790208][T18031] ? psi_memstall_leave+0x170/0x250 [ 2115.795413][T18031] ? lock_downgrade+0x6e0/0x6e0 [ 2115.800273][T18031] kernel_clone+0xe7/0x980 [ 2115.804778][T18031] ? lock_acquire+0x4fc/0x630 [ 2115.809455][T18031] ? create_io_thread+0xe0/0xe0 [ 2115.814307][T18031] ? lock_release+0x810/0x810 [ 2115.818984][T18031] ? rcu_read_lock_sched_held+0xd/0x70 [ 2115.824462][T18031] ? lock_release+0x5cb/0x810 [ 2115.829135][T18031] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2115.835383][T18031] ? rcu_read_lock_sched_held+0xd/0x70 [ 2115.840854][T18031] ? lock_acquire+0x4fc/0x630 [ 2115.845737][T18031] ? rcu_read_lock_sched_held+0xd/0x70 [ 2115.851204][T18031] ? lock_release+0x5cb/0x810 [ 2115.855881][T18031] ? __ct_user_exit+0xff/0x150 [ 2115.860646][T18031] __do_sys_clone+0xba/0x100 [ 2115.865242][T18031] ? kernel_clone+0x980/0x980 [ 2115.869928][T18031] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2115.875819][T18031] ? trace_hardirqs_on+0x2d/0x160 [ 2115.880843][T18031] do_syscall_64+0x35/0xb0 [ 2115.885272][T18031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2115.891170][T18031] RIP: 0033:0x7f5e99a8ca21 [ 2115.895580][T18031] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2115.915292][T18031] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2115.923791][T18031] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2115.931846][T18031] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2115.939816][T18031] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2115.947797][T18031] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2115.955873][T18031] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2115.963865][T18031] [ 2116.010957][T18031] memory: usage 307172kB, limit 307200kB, failcnt 12325 [ 2116.021601][T18031] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2116.029241][T18031] Memory cgroup stats for /syz1: [ 2116.029392][T18031] anon 94208 [ 2116.029392][T18031] file 274432 [ 2116.029392][T18031] kernel 314175488 [ 2116.029392][T18031] kernel_stack 32768 [ 2116.029392][T18031] pagetables 77824 [ 2116.029392][T18031] sec_pagetables 0 [ 2116.029392][T18031] percpu 5423904 [ 2116.029392][T18031] sock 0 01:51:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0x0, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:05 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x71, 0x1c, 0x2}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000080)) [ 2116.029392][T18031] vmalloc 8192 [ 2116.029392][T18031] shmem 274432 [ 2116.029392][T18031] zswap 0 [ 2116.029392][T18031] zswapped 0 [ 2116.029392][T18031] file_mapped 258048 [ 2116.029392][T18031] file_dirty 0 [ 2116.029392][T18031] file_writeback 0 [ 2116.029392][T18031] swapcached 0 [ 2116.029392][T18031] anon_thp 0 [ 2116.029392][T18031] file_thp 0 [ 2116.029392][T18031] shmem_thp 0 [ 2116.029392][T18031] inactive_anon 102400 [ 2116.029392][T18031] active_anon 266240 [ 2116.029392][T18031] inactive_file 0 [ 2116.029392][T18031] active_file 0 [ 2116.029392][T18031] unevictable 0 [ 2116.029392][T18031] slab_reclaimable 19640 [ 2116.029392][T18031] slab_unreclaimable 308563880 [ 2116.110732][T18047] wg2 speed is unknown, defaulting to 1000 [ 2116.127921][T18031] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18031,uid=0 [ 2116.145478][T18031] Memory cgroup out of memory: Killed process 18031 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 01:51:05 executing program 1: accept$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0) 01:51:05 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)='Z', 0x1, 0x0, &(0x7f0000000240)={0x1c, 0x1c, 0x2}, 0x1c) 01:51:05 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="81", 0x1, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 01:51:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) 01:51:05 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000000), 0xc) 01:51:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000002c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000040), &(0x7f0000000080)=0x8) 01:51:05 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x23, 0x2}, 0x10) [ 2116.258625][T18050] wg2 speed is unknown, defaulting to 1000 01:51:05 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 01:51:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000040)={r2}, &(0x7f0000000080)=0x8) 01:51:05 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)=ANY=[], 0xa) [ 2116.391929][T18067] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2116.466342][T18067] CPU: 0 PID: 18067 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2116.476902][T18067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2116.486986][T18067] Call Trace: [ 2116.490284][T18067] [ 2116.493228][T18067] dump_stack_lvl+0xcd/0x134 [ 2116.497857][T18067] dump_header+0x10b/0x85f [ 2116.502270][T18067] oom_kill_process.cold+0x10/0x15 [ 2116.507377][T18067] out_of_memory+0x358/0x14a0 [ 2116.512113][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.517569][T18067] ? __mod_timer+0x83c/0xe30 [ 2116.522152][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.527623][T18067] ? lock_acquire+0x4fc/0x630 [ 2116.532338][T18067] ? oom_killer_disable+0x270/0x270 [ 2116.537531][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.543003][T18067] ? lock_release+0x5cb/0x810 [ 2116.547671][T18067] ? rcu_read_unlock+0x9/0x60 [ 2116.552353][T18067] ? lock_downgrade+0x6e0/0x6e0 [ 2116.557189][T18067] mem_cgroup_out_of_memory+0x206/0x270 [ 2116.562732][T18067] ? mem_cgroup_margin+0x130/0x130 [ 2116.567835][T18067] ? lock_downgrade+0x6e0/0x6e0 [ 2116.572700][T18067] try_charge_memcg+0xef8/0x12f0 [ 2116.577679][T18067] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2116.583685][T18067] ? lock_acquire+0x4fc/0x630 [ 2116.588355][T18067] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2116.594071][T18067] ? lock_downgrade+0x6e0/0x6e0 [ 2116.598921][T18067] ? lock_release+0x5cb/0x810 [ 2116.603599][T18067] ? obj_cgroup_charge+0x244/0x5e0 [ 2116.608716][T18067] ? lock_downgrade+0x6e0/0x6e0 [ 2116.613570][T18067] ? lock_release+0x5cb/0x810 [ 2116.618333][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.623827][T18067] ? rcu_read_unlock+0x9/0x60 [ 2116.628567][T18067] obj_cgroup_charge+0x2ab/0x5e0 [ 2116.633565][T18067] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2116.638951][T18067] ? copy_semundo+0x187/0x2f0 [ 2116.643617][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.649073][T18067] kmalloc_trace+0x22/0x60 [ 2116.653481][T18067] copy_semundo+0x187/0x2f0 [ 2116.658064][T18067] copy_process+0x23f4/0x7190 [ 2116.662764][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.668232][T18067] ? lock_acquire+0x4fc/0x630 [ 2116.672905][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.678400][T18067] ? __cleanup_sighand+0xb0/0xb0 [ 2116.683367][T18067] ? psi_memstall_leave+0x170/0x250 [ 2116.688569][T18067] ? lock_downgrade+0x6e0/0x6e0 [ 2116.693418][T18067] kernel_clone+0xe7/0x980 [ 2116.697825][T18067] ? lock_acquire+0x4fc/0x630 [ 2116.702494][T18067] ? create_io_thread+0xe0/0xe0 [ 2116.707369][T18067] ? lock_release+0x810/0x810 [ 2116.712033][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.717488][T18067] ? lock_release+0x5cb/0x810 [ 2116.722153][T18067] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2116.728407][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.733890][T18067] ? lock_acquire+0x4fc/0x630 [ 2116.738557][T18067] ? rcu_read_lock_sched_held+0xd/0x70 [ 2116.744048][T18067] ? lock_release+0x5cb/0x810 [ 2116.748720][T18067] ? __ct_user_exit+0xff/0x150 [ 2116.753474][T18067] __do_sys_clone+0xba/0x100 [ 2116.758057][T18067] ? kernel_clone+0x980/0x980 [ 2116.762738][T18067] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2116.768651][T18067] ? trace_hardirqs_on+0x2d/0x160 [ 2116.773686][T18067] do_syscall_64+0x35/0xb0 [ 2116.778129][T18067] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2116.784132][T18067] RIP: 0033:0x7f5e99a8ca21 [ 2116.788540][T18067] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2116.808152][T18067] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2116.816570][T18067] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2116.824637][T18067] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2116.832636][T18067] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2116.840599][T18067] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2116.848570][T18067] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2116.856549][T18067] 01:51:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0x0, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:05 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x1) [ 2116.872021][T18067] memory: usage 307184kB, limit 307200kB, failcnt 12430 [ 2116.879187][T18067] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2116.886303][T18067] Memory cgroup stats for /syz1: [ 2116.886451][T18067] anon 90112 [ 2116.886451][T18067] file 274432 [ 2116.886451][T18067] kernel 314191872 [ 2116.886451][T18067] kernel_stack 65536 [ 2116.886451][T18067] pagetables 69632 [ 2116.886451][T18067] sec_pagetables 0 [ 2116.886451][T18067] percpu 5423904 [ 2116.886451][T18067] sock 0 [ 2116.886451][T18067] vmalloc 8192 [ 2116.886451][T18067] shmem 274432 [ 2116.886451][T18067] zswap 0 [ 2116.886451][T18067] zswapped 0 [ 2116.886451][T18067] file_mapped 258048 [ 2116.886451][T18067] file_dirty 0 [ 2116.886451][T18067] file_writeback 0 [ 2116.886451][T18067] swapcached 0 [ 2116.886451][T18067] anon_thp 0 [ 2116.886451][T18067] file_thp 0 [ 2116.886451][T18067] shmem_thp 0 [ 2116.886451][T18067] inactive_anon 98304 [ 2116.886451][T18067] active_anon 266240 [ 2116.886451][T18067] inactive_file 0 [ 2116.886451][T18067] active_file 0 [ 2116.886451][T18067] unevictable 0 [ 2116.886451][T18067] slab_reclaimable 19640 [ 2116.886451][T18067] slab_unreclaimable 308563480 [ 2117.011054][T18088] wg2 speed is unknown, defaulting to 1000 01:51:06 executing program 1: bind$unix(0xffffffffffffffff, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) 01:51:06 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 01:51:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000340)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14) 01:51:06 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9}, 0x14) 01:51:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000300), &(0x7f00000003c0)=0x98) 01:51:06 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0x1c, 0x1c, 0x3}, 0x1c) 01:51:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001400)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="c2", 0x1}], 0x1, &(0x7f0000000540)=[@sndinfo={0x1c}], 0x1c}, 0x0) [ 2117.013408][T18067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18067,uid=0 [ 2117.045515][T18067] Memory cgroup out of memory: Killed process 18067 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 01:51:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xc16) 01:51:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) close(r0) [ 2117.129395][T18089] wg2 speed is unknown, defaulting to 1000 [ 2117.226727][T18105] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2117.257185][T18105] CPU: 0 PID: 18105 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 01:51:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0x0, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:06 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, &(0x7f0000000240)=[@timestamping={{0x14}}], 0x18}, 0x0) [ 2117.267660][T18105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2117.277738][T18105] Call Trace: [ 2117.281035][T18105] [ 2117.283995][T18105] dump_stack_lvl+0xcd/0x134 [ 2117.288625][T18105] dump_header+0x10b/0x85f [ 2117.293073][T18105] oom_kill_process.cold+0x10/0x15 [ 2117.298217][T18105] out_of_memory+0x358/0x14a0 [ 2117.302969][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.307910][T18117] wg2 speed is unknown, defaulting to 1000 [ 2117.308446][T18105] ? __mod_timer+0x83c/0xe30 [ 2117.308482][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.324336][T18105] ? lock_acquire+0x4fc/0x630 [ 2117.329037][T18105] ? oom_killer_disable+0x270/0x270 [ 2117.334278][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.339780][T18105] ? lock_release+0x5cb/0x810 [ 2117.344486][T18105] ? rcu_read_unlock+0x9/0x60 [ 2117.349184][T18105] ? lock_downgrade+0x6e0/0x6e0 [ 2117.354055][T18105] mem_cgroup_out_of_memory+0x206/0x270 [ 2117.359635][T18105] ? mem_cgroup_margin+0x130/0x130 [ 2117.364861][T18105] ? lock_downgrade+0x6e0/0x6e0 [ 2117.369475][T18119] wg2 speed is unknown, defaulting to 1000 [ 2117.369714][T18105] try_charge_memcg+0xef8/0x12f0 [ 2117.380492][T18105] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2117.386497][T18105] ? lock_acquire+0x4fc/0x630 [ 2117.391202][T18105] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2117.396958][T18105] ? lock_downgrade+0x6e0/0x6e0 [ 2117.401843][T18105] ? lock_release+0x5cb/0x810 [ 2117.406633][T18105] ? obj_cgroup_charge+0x244/0x5e0 [ 2117.411804][T18105] ? lock_downgrade+0x6e0/0x6e0 [ 2117.416681][T18105] ? lock_release+0x5cb/0x810 [ 2117.421366][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.426838][T18105] ? rcu_read_unlock+0x9/0x60 [ 2117.431521][T18105] obj_cgroup_charge+0x2ab/0x5e0 [ 2117.436472][T18105] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2117.441852][T18105] ? copy_semundo+0x187/0x2f0 [ 2117.446527][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.452084][T18105] kmalloc_trace+0x22/0x60 [ 2117.456507][T18105] copy_semundo+0x187/0x2f0 [ 2117.461012][T18105] copy_process+0x23f4/0x7190 [ 2117.465699][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.471179][T18105] ? lock_acquire+0x4fc/0x630 [ 2117.475860][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.481342][T18105] ? __cleanup_sighand+0xb0/0xb0 [ 2117.486295][T18105] ? psi_memstall_leave+0x170/0x250 [ 2117.491517][T18105] ? lock_downgrade+0x6e0/0x6e0 [ 2117.496372][T18105] kernel_clone+0xe7/0x980 [ 2117.500796][T18105] ? lock_acquire+0x4fc/0x630 [ 2117.505477][T18105] ? create_io_thread+0xe0/0xe0 [ 2117.510354][T18105] ? lock_release+0x810/0x810 [ 2117.515031][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.520501][T18105] ? lock_release+0x5cb/0x810 [ 2117.525181][T18105] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2117.531431][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.536909][T18105] ? lock_acquire+0x4fc/0x630 [ 2117.541595][T18105] ? rcu_read_lock_sched_held+0xd/0x70 [ 2117.547064][T18105] ? lock_release+0x5cb/0x810 [ 2117.551740][T18105] ? __ct_user_exit+0xff/0x150 [ 2117.556511][T18105] __do_sys_clone+0xba/0x100 [ 2117.561109][T18105] ? kernel_clone+0x980/0x980 [ 2117.565803][T18105] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2117.571702][T18105] ? trace_hardirqs_on+0x2d/0x160 [ 2117.576732][T18105] do_syscall_64+0x35/0xb0 [ 2117.581155][T18105] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2117.587059][T18105] RIP: 0033:0x7f5e99a8ca21 [ 2117.591475][T18105] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2117.611091][T18105] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2117.619504][T18105] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2117.627474][T18105] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2117.635445][T18105] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2117.643418][T18105] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2117.651474][T18105] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2117.669561][T18105] [ 2117.673534][T21689] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2117.689167][T18105] memory: usage 307184kB, limit 307200kB, failcnt 12534 [ 2117.705962][T18105] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2117.714364][T18105] Memory cgroup stats for /syz1: [ 2117.714563][T18105] anon 90112 [ 2117.714563][T18105] file 274432 [ 2117.714563][T18105] kernel 314191872 [ 2117.714563][T18105] kernel_stack 65536 [ 2117.714563][T18105] pagetables 69632 [ 2117.714563][T18105] sec_pagetables 0 [ 2117.714563][T18105] percpu 5423904 [ 2117.714563][T18105] sock 0 [ 2117.714563][T18105] vmalloc 8192 [ 2117.714563][T18105] shmem 274432 [ 2117.714563][T18105] zswap 0 [ 2117.714563][T18105] zswapped 0 [ 2117.714563][T18105] file_mapped 258048 [ 2117.714563][T18105] file_dirty 0 [ 2117.714563][T18105] file_writeback 0 [ 2117.714563][T18105] swapcached 0 [ 2117.714563][T18105] anon_thp 0 [ 2117.714563][T18105] file_thp 0 [ 2117.714563][T18105] shmem_thp 0 [ 2117.714563][T18105] inactive_anon 98304 [ 2117.714563][T18105] active_anon 266240 [ 2117.714563][T18105] inactive_file 0 [ 2117.714563][T18105] active_file 0 [ 2117.714563][T18105] unevictable 0 [ 2117.714563][T18105] slab_reclaimable 19640 [ 2117.714563][T18105] slab_unreclaimable 308563784 [ 2117.809863][T18105] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18105,uid=0 01:51:06 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x4000845) 01:51:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7}, {}, {0x0, 0x4}]}]}}, &(0x7f0000001480)=""/185, 0x3e, 0xb9, 0x1}, 0x20) 01:51:06 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 01:51:06 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x9a, &(0x7f0000000040)=""/154, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x2}) ioctl$TUNGETVNETBE(r0, 0x400454d4, 0x0) 01:51:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNGETVNETBE(r0, 0xc0189436, 0x0) 01:51:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x68}]}}, &(0x7f0000000640)=""/233, 0x2a, 0xe9, 0x1}, 0x20) [ 2117.826503][T18105] Memory cgroup out of memory: Killed process 18105 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000001440)=""/4096, 0x2a, 0x1000, 0x1}, 0x7f) 01:51:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x45}]}}, &(0x7f0000000640)=""/233, 0x2a, 0xe9, 0x1}, 0x20) 01:51:06 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x9a, &(0x7f0000000040)=""/154, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2117.958926][T18131] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2117.978294][T18131] CPU: 1 PID: 18131 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2117.988770][T18131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2117.998850][T18131] Call Trace: [ 2118.002145][T18131] 01:51:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)) [ 2118.005092][T18131] dump_stack_lvl+0xcd/0x134 [ 2118.009714][T18131] dump_header+0x10b/0x85f [ 2118.014164][T18131] oom_kill_process.cold+0x10/0x15 [ 2118.019306][T18131] out_of_memory+0x358/0x14a0 [ 2118.024016][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.029501][T18131] ? __mod_timer+0x83c/0xe30 [ 2118.034092][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.039642][T18131] ? lock_acquire+0x4fc/0x630 [ 2118.044336][T18131] ? oom_killer_disable+0x270/0x270 [ 2118.049542][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.055031][T18131] ? lock_release+0x5cb/0x810 [ 2118.059717][T18131] ? rcu_read_unlock+0x9/0x60 [ 2118.064393][T18131] ? lock_downgrade+0x6e0/0x6e0 [ 2118.069286][T18131] mem_cgroup_out_of_memory+0x206/0x270 [ 2118.074919][T18131] ? mem_cgroup_margin+0x130/0x130 [ 2118.080041][T18131] ? lock_downgrade+0x6e0/0x6e0 [ 2118.084887][T18131] try_charge_memcg+0xef8/0x12f0 [ 2118.089826][T18131] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2118.095905][T18131] ? lock_acquire+0x4fc/0x630 [ 2118.100608][T18131] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2118.106345][T18131] ? lock_downgrade+0x6e0/0x6e0 [ 2118.111189][T18131] ? lock_release+0x5cb/0x810 [ 2118.115942][T18131] ? obj_cgroup_charge+0x244/0x5e0 [ 2118.121050][T18131] ? lock_downgrade+0x6e0/0x6e0 [ 2118.125894][T18131] ? lock_release+0x5cb/0x810 [ 2118.130751][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.136285][T18131] ? rcu_read_unlock+0x9/0x60 [ 2118.140975][T18131] obj_cgroup_charge+0x2ab/0x5e0 [ 2118.146018][T18131] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2118.151406][T18131] ? copy_semundo+0x187/0x2f0 [ 2118.156077][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.161649][T18131] kmalloc_trace+0x22/0x60 [ 2118.166315][T18131] copy_semundo+0x187/0x2f0 [ 2118.170861][T18131] copy_process+0x23f4/0x7190 [ 2118.175560][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.181055][T18131] ? lock_acquire+0x4fc/0x630 [ 2118.185754][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.191245][T18131] ? __cleanup_sighand+0xb0/0xb0 [ 2118.196216][T18131] ? psi_memstall_leave+0x170/0x250 [ 2118.201458][T18131] ? lock_downgrade+0x6e0/0x6e0 [ 2118.206596][T18131] kernel_clone+0xe7/0x980 [ 2118.211041][T18131] ? lock_acquire+0x4fc/0x630 [ 2118.215829][T18131] ? create_io_thread+0xe0/0xe0 [ 2118.220747][T18131] ? lock_release+0x810/0x810 [ 2118.225427][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.231142][T18131] ? lock_release+0x5cb/0x810 [ 2118.235831][T18131] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2118.242340][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.247830][T18131] ? lock_acquire+0x4fc/0x630 [ 2118.252692][T18131] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.258269][T18131] ? lock_release+0x5cb/0x810 [ 2118.263136][T18131] ? __ct_user_exit+0xff/0x150 [ 2118.267967][T18131] __do_sys_clone+0xba/0x100 [ 2118.272569][T18131] ? kernel_clone+0x980/0x980 [ 2118.277431][T18131] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2118.283357][T18131] ? trace_hardirqs_on+0x2d/0x160 [ 2118.288389][T18131] do_syscall_64+0x35/0xb0 [ 2118.292811][T18131] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2118.298714][T18131] RIP: 0033:0x7f5e99a8ca21 [ 2118.303148][T18131] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2118.322762][T18131] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2118.331193][T18131] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2118.339157][T18131] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2118.347122][T18131] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2118.355089][T18131] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2118.363058][T18131] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2118.371027][T18131] [ 2118.381816][T18131] memory: usage 307184kB, limit 307200kB, failcnt 12629 [ 2118.388899][T18131] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2118.396370][T18131] Memory cgroup stats for /syz1: [ 2118.396519][T18131] anon 90112 [ 2118.396519][T18131] file 274432 [ 2118.396519][T18131] kernel 314191872 [ 2118.396519][T18131] kernel_stack 65536 [ 2118.396519][T18131] pagetables 69632 [ 2118.396519][T18131] sec_pagetables 0 [ 2118.396519][T18131] percpu 5423904 [ 2118.396519][T18131] sock 0 [ 2118.396519][T18131] vmalloc 8192 [ 2118.396519][T18131] shmem 274432 [ 2118.396519][T18131] zswap 0 [ 2118.396519][T18131] zswapped 0 [ 2118.396519][T18131] file_mapped 258048 [ 2118.396519][T18131] file_dirty 0 [ 2118.396519][T18131] file_writeback 0 [ 2118.396519][T18131] swapcached 0 [ 2118.396519][T18131] anon_thp 0 [ 2118.396519][T18131] file_thp 0 [ 2118.396519][T18131] shmem_thp 0 [ 2118.396519][T18131] inactive_anon 98304 [ 2118.396519][T18131] active_anon 266240 [ 2118.396519][T18131] inactive_file 0 [ 2118.396519][T18131] active_file 0 [ 2118.396519][T18131] unevictable 0 [ 2118.396519][T18131] slab_reclaimable 19640 [ 2118.396519][T18131] slab_unreclaimable 308563784 [ 2118.492567][T18131] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18131,uid=0 01:51:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x5, 0x8}, 0x48) 01:51:07 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000000080)=""/188, 0x26, 0xbc, 0x1}, 0x20) 01:51:07 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000001440)=""/4096, 0x2a, 0x1000, 0x1}, 0x7f) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) [ 2118.511712][T18131] Memory cgroup out of memory: Killed process 18131 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:07 executing program 4: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000100)=@raw=[@initr0], &(0x7f0000000180)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNGETVNETBE(r0, 0x40049409, 0x0) [ 2118.572720][T18127] wg2 speed is unknown, defaulting to 1000 [ 2118.620785][T18148] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2118.635185][T18148] CPU: 1 PID: 18148 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2118.645960][T18148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2118.656120][T18148] Call Trace: [ 2118.659397][T18148] [ 2118.662318][T18148] dump_stack_lvl+0xcd/0x134 [ 2118.666911][T18148] dump_header+0x10b/0x85f [ 2118.671323][T18148] oom_kill_process.cold+0x10/0x15 [ 2118.676451][T18148] out_of_memory+0x358/0x14a0 [ 2118.681183][T18148] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.686647][T18148] ? __mod_timer+0x83c/0xe30 [ 2118.691239][T18148] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.696703][T18148] ? lock_acquire+0x4fc/0x630 [ 2118.701469][T18148] ? oom_killer_disable+0x270/0x270 [ 2118.706673][T18148] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.712149][T18148] ? lock_release+0x5cb/0x810 [ 2118.716826][T18148] ? rcu_read_unlock+0x9/0x60 [ 2118.721499][T18148] ? lock_downgrade+0x6e0/0x6e0 [ 2118.726353][T18148] mem_cgroup_out_of_memory+0x206/0x270 [ 2118.732009][T18148] ? mem_cgroup_margin+0x130/0x130 [ 2118.737353][T18148] ? lock_downgrade+0x6e0/0x6e0 [ 2118.742219][T18148] try_charge_memcg+0xef8/0x12f0 [ 2118.747165][T18148] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2118.753169][T18148] ? lock_release+0x5cb/0x810 [ 2118.757863][T18148] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2118.763586][T18148] ? lock_downgrade+0x6e0/0x6e0 [ 2118.768616][T18148] ? lock_release+0x5cb/0x810 [ 2118.773284][T18148] ? rcu_read_unlock+0x9/0x60 [ 2118.777955][T18148] ? lock_downgrade+0x6e0/0x6e0 [ 2118.782807][T18148] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2118.788369][T18148] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2118.794522][T18148] copy_process+0x73e/0x7190 [ 2118.799133][T18148] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.804679][T18148] ? lock_acquire+0x4fc/0x630 [ 2118.809440][T18148] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.814904][T18148] ? lock_release+0x5cb/0x810 [ 2118.819580][T18148] ? psi_task_change+0x1bb/0x2f0 [ 2118.824513][T18148] ? lock_downgrade+0x6e0/0x6e0 [ 2118.829354][T18148] ? __cleanup_sighand+0xb0/0xb0 [ 2118.834286][T18148] ? psi_memstall_leave+0x170/0x250 [ 2118.839477][T18148] ? lock_downgrade+0x6e0/0x6e0 [ 2118.844321][T18148] kernel_clone+0xe7/0x980 [ 2118.848735][T18148] ? lock_acquire+0x4fc/0x630 [ 2118.853402][T18148] ? create_io_thread+0xe0/0xe0 [ 2118.858250][T18148] ? lock_release+0x810/0x810 [ 2118.862934][T18148] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.868476][T18148] ? lock_release+0x5cb/0x810 [ 2118.873142][T18148] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2118.879379][T18148] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.885104][T18148] ? lock_acquire+0x4fc/0x630 [ 2118.889865][T18148] ? rcu_read_lock_sched_held+0xd/0x70 [ 2118.895326][T18148] ? lock_release+0x5cb/0x810 [ 2118.900007][T18148] ? __ct_user_exit+0xff/0x150 [ 2118.904797][T18148] __do_sys_clone+0xba/0x100 [ 2118.909400][T18148] ? kernel_clone+0x980/0x980 [ 2118.914086][T18148] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2118.919976][T18148] ? trace_hardirqs_on+0x2d/0x160 [ 2118.924997][T18148] do_syscall_64+0x35/0xb0 [ 2118.929418][T18148] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2118.935313][T18148] RIP: 0033:0x7f5e99a8ca21 [ 2118.939818][T18148] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2118.959506][T18148] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2118.967923][T18148] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2118.975889][T18148] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2118.983857][T18148] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2118.991823][T18148] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2118.999786][T18148] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2119.007772][T18148] [ 2119.017126][T18148] memory: usage 307200kB, limit 307200kB, failcnt 12733 [ 2119.025594][T18148] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2119.033413][T18148] Memory cgroup stats for /syz1: [ 2119.033588][T18148] anon 94208 [ 2119.033588][T18148] file 274432 [ 2119.033588][T18148] kernel 314204160 [ 2119.033588][T18148] kernel_stack 32768 [ 2119.033588][T18148] pagetables 77824 [ 2119.033588][T18148] sec_pagetables 0 [ 2119.033588][T18148] percpu 5423904 [ 2119.033588][T18148] sock 0 [ 2119.033588][T18148] vmalloc 8192 [ 2119.033588][T18148] shmem 274432 [ 2119.033588][T18148] zswap 0 [ 2119.033588][T18148] zswapped 0 [ 2119.033588][T18148] file_mapped 258048 [ 2119.033588][T18148] file_dirty 0 [ 2119.033588][T18148] file_writeback 0 [ 2119.033588][T18148] swapcached 0 [ 2119.033588][T18148] anon_thp 0 [ 2119.033588][T18148] file_thp 0 [ 2119.033588][T18148] shmem_thp 0 [ 2119.033588][T18148] inactive_anon 53248 [ 2119.033588][T18148] active_anon 266240 [ 2119.033588][T18148] inactive_file 0 [ 2119.033588][T18148] active_file 0 [ 2119.033588][T18148] unevictable 0 [ 2119.033588][T18148] slab_reclaimable 19640 [ 2119.033588][T18148] slab_unreclaimable 308575280 [ 2119.129324][T18148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18148,uid=0 [ 2119.147653][T18148] Memory cgroup out of memory: Killed process 18148 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2119.193575][T18132] wg2 speed is unknown, defaulting to 1000 01:51:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:09 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) 01:51:09 executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x10480, 0x0) 01:51:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)) 01:51:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@datasec={0x0, 0xa, 0x0, 0x6, 0x1, [{}], "e0"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "f07a02"}]}}, &(0x7f0000001480)=""/185, 0x42, 0xb9, 0x1}, 0x20) 01:51:09 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 01:51:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x48}}, &(0x7f0000000640)=""/233, 0x1a, 0xe9, 0x1}, 0x20) 01:51:09 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x7, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:09 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x40000000}]}}, &(0x7f0000000080)=""/188, 0x26, 0xbc, 0x1}, 0x20) 01:51:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x5, 0x8}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 01:51:09 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x9a, &(0x7f0000000040)=""/154, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2120.205327][T18161] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2120.269457][T18165] wg2 speed is unknown, defaulting to 1000 [ 2120.284832][T18161] CPU: 1 PID: 18161 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2120.295311][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2120.305556][T18161] Call Trace: [ 2120.308848][T18161] [ 2120.311789][T18161] dump_stack_lvl+0xcd/0x134 [ 2120.316420][T18161] dump_header+0x10b/0x85f [ 2120.320873][T18161] oom_kill_process.cold+0x10/0x15 [ 2120.326034][T18161] out_of_memory+0x358/0x14a0 [ 2120.330745][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.336241][T18161] ? __mod_timer+0x83c/0xe30 [ 2120.340864][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.346705][T18161] ? lock_acquire+0x4fc/0x630 [ 2120.351408][T18161] ? oom_killer_disable+0x270/0x270 [ 2120.356629][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.362208][T18161] ? lock_release+0x5cb/0x810 [ 2120.366908][T18161] ? rcu_read_unlock+0x9/0x60 [ 2120.371585][T18161] ? lock_downgrade+0x6e0/0x6e0 [ 2120.376444][T18161] mem_cgroup_out_of_memory+0x206/0x270 [ 2120.381999][T18161] ? mem_cgroup_margin+0x130/0x130 [ 2120.387120][T18161] ? lock_downgrade+0x6e0/0x6e0 [ 2120.392000][T18161] try_charge_memcg+0xef8/0x12f0 [ 2120.396966][T18161] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2120.403065][T18161] ? lock_acquire+0x4fc/0x630 [ 2120.407744][T18161] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2120.413471][T18161] ? lock_downgrade+0x6e0/0x6e0 [ 2120.418323][T18161] ? lock_release+0x5cb/0x810 [ 2120.423001][T18161] ? obj_cgroup_charge+0x244/0x5e0 [ 2120.428123][T18161] ? lock_downgrade+0x6e0/0x6e0 [ 2120.432997][T18161] ? lock_release+0x5cb/0x810 [ 2120.437673][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.443141][T18161] ? rcu_read_unlock+0x9/0x60 [ 2120.447828][T18161] obj_cgroup_charge+0x2ab/0x5e0 [ 2120.452781][T18161] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2120.458167][T18161] ? copy_semundo+0x187/0x2f0 [ 2120.462927][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.468398][T18161] kmalloc_trace+0x22/0x60 [ 2120.472816][T18161] copy_semundo+0x187/0x2f0 [ 2120.477319][T18161] copy_process+0x23f4/0x7190 [ 2120.481999][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.487471][T18161] ? lock_acquire+0x4fc/0x630 [ 2120.492147][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.497622][T18161] ? __cleanup_sighand+0xb0/0xb0 [ 2120.502567][T18161] ? psi_memstall_leave+0x170/0x250 [ 2120.507783][T18161] ? lock_downgrade+0x6e0/0x6e0 [ 2120.512727][T18161] kernel_clone+0xe7/0x980 [ 2120.517240][T18161] ? lock_acquire+0x4fc/0x630 [ 2120.521967][T18161] ? create_io_thread+0xe0/0xe0 [ 2120.526876][T18161] ? lock_release+0x810/0x810 [ 2120.531573][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.537049][T18161] ? lock_release+0x5cb/0x810 [ 2120.541812][T18161] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2120.548063][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.553528][T18161] ? lock_acquire+0x4fc/0x630 [ 2120.558205][T18161] ? rcu_read_lock_sched_held+0xd/0x70 [ 2120.563678][T18161] ? lock_release+0x5cb/0x810 [ 2120.568352][T18161] ? __ct_user_exit+0xff/0x150 [ 2120.573118][T18161] __do_sys_clone+0xba/0x100 [ 2120.577716][T18161] ? kernel_clone+0x980/0x980 [ 2120.582493][T18161] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2120.588389][T18161] ? trace_hardirqs_on+0x2d/0x160 [ 2120.593423][T18161] do_syscall_64+0x35/0xb0 [ 2120.597849][T18161] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2120.603749][T18161] RIP: 0033:0x7f5e99a8ca21 [ 2120.608164][T18161] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2120.627773][T18161] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2120.636193][T18161] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2120.644170][T18161] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2120.652142][T18161] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2120.660117][T18161] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2120.668087][T18161] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2120.676167][T18161] [ 2120.695406][T18173] wg2 speed is unknown, defaulting to 1000 [ 2120.701437][T18161] memory: usage 307188kB, limit 307200kB, failcnt 12859 [ 2120.712204][T18161] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2120.730019][T18161] Memory cgroup stats for /syz1: [ 2120.730183][T18161] anon 98304 [ 2120.730183][T18161] file 274432 [ 2120.730183][T18161] kernel 314187776 [ 2120.730183][T18161] kernel_stack 65536 [ 2120.730183][T18161] pagetables 77824 [ 2120.730183][T18161] sec_pagetables 0 [ 2120.730183][T18161] percpu 5423904 [ 2120.730183][T18161] sock 0 [ 2120.730183][T18161] vmalloc 8192 [ 2120.730183][T18161] shmem 274432 [ 2120.730183][T18161] zswap 0 [ 2120.730183][T18161] zswapped 0 [ 2120.730183][T18161] file_mapped 258048 01:51:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:09 executing program 3: bpf$OBJ_GET_PROG(0x11, &(0x7f0000000e80)={0x0, 0x0, 0x18}, 0x10) 01:51:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)) 01:51:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8940, &(0x7f0000000500)) [ 2120.730183][T18161] file_dirty 0 [ 2120.730183][T18161] file_writeback 0 [ 2120.730183][T18161] swapcached 0 [ 2120.730183][T18161] anon_thp 0 [ 2120.730183][T18161] file_thp 0 [ 2120.730183][T18161] shmem_thp 0 [ 2120.730183][T18161] inactive_anon 106496 [ 2120.730183][T18161] active_anon 266240 [ 2120.730183][T18161] inactive_file 0 [ 2120.730183][T18161] active_file 0 [ 2120.730183][T18161] unevictable 0 [ 2120.730183][T18161] slab_reclaimable 19640 [ 2120.730183][T18161] slab_unreclaimable 308552480 [ 2120.841942][T18161] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18161,uid=0 01:51:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x8902, &(0x7f0000000500)) 01:51:09 executing program 1: socketpair(0x0, 0x201bed3b6daf461e, 0x0, 0x0) 01:51:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0x1f, 0x4) 01:51:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x890c, &(0x7f0000000500)) 01:51:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x8940, &(0x7f0000000500)) 01:51:09 executing program 3: socket$inet6(0xa, 0x2, 0xfd) 01:51:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4}, 0x48) [ 2120.880104][T18161] Memory cgroup out of memory: Killed process 18161 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2120.890661][T18188] wg2 speed is unknown, defaulting to 1000 01:51:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0x2}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)) [ 2121.057622][T18201] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2121.081545][T18197] wg2 speed is unknown, defaulting to 1000 [ 2121.089842][T18201] CPU: 0 PID: 18201 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2121.100499][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2121.110576][T18201] Call Trace: [ 2121.113888][T18201] [ 2121.116840][T18201] dump_stack_lvl+0xcd/0x134 [ 2121.121452][T18201] dump_header+0x10b/0x85f [ 2121.125914][T18201] oom_kill_process.cold+0x10/0x15 [ 2121.131152][T18201] out_of_memory+0x358/0x14a0 [ 2121.135865][T18201] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.141892][T18201] ? __mod_timer+0x83c/0xe30 [ 2121.146505][T18201] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.151996][T18201] ? lock_acquire+0x4fc/0x630 [ 2121.156755][T18201] ? oom_killer_disable+0x270/0x270 [ 2121.162079][T18201] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.167661][T18201] ? lock_release+0x5cb/0x810 [ 2121.172454][T18201] ? rcu_read_unlock+0x9/0x60 [ 2121.177176][T18201] ? lock_downgrade+0x6e0/0x6e0 [ 2121.182060][T18201] mem_cgroup_out_of_memory+0x206/0x270 [ 2121.187825][T18201] ? mem_cgroup_margin+0x130/0x130 [ 2121.193123][T18201] ? lock_downgrade+0x6e0/0x6e0 [ 2121.198035][T18201] try_charge_memcg+0xef8/0x12f0 [ 2121.203044][T18201] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2121.209061][T18201] ? lock_acquire+0x4fc/0x630 [ 2121.213767][T18201] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.219307][T18201] ? lock_release+0x5cb/0x810 [ 2121.224090][T18201] ? rcu_read_unlock+0x9/0x60 [ 2121.228950][T18201] ? lock_downgrade+0x6e0/0x6e0 [ 2121.233977][T18201] ? lock_release+0x5cb/0x810 [ 2121.238656][T18201] ? wp_page_copy+0xde9/0x1c90 [ 2121.243428][T18201] ? lock_downgrade+0x6e0/0x6e0 [ 2121.248283][T18201] charge_memcg+0x99/0x3b0 [ 2121.252712][T18201] __mem_cgroup_charge+0x27/0x90 [ 2121.257669][T18201] wp_page_copy+0x2bf/0x1c90 [ 2121.262265][T18201] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.267758][T18201] ? lock_release+0x5cb/0x810 [ 2121.272453][T18201] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2121.279078][T18201] ? lock_downgrade+0x6e0/0x6e0 [ 2121.284028][T18201] ? vm_normal_page+0x146/0x2a0 [ 2121.288884][T18201] ? __pte_alloc_kernel+0x110/0x110 [ 2121.294095][T18201] ? lock_release+0x5cb/0x810 [ 2121.298780][T18201] do_wp_page+0x1d1/0x1930 [ 2121.303203][T18201] __handle_mm_fault+0x181b/0x3a40 [ 2121.308324][T18201] ? lock_acquire+0x4fc/0x630 [ 2121.313004][T18201] ? vm_iomap_memory+0x180/0x180 [ 2121.317947][T18201] ? lock_release+0x810/0x810 [ 2121.322647][T18201] handle_mm_fault+0x1c8/0x780 [ 2121.327422][T18201] do_user_addr_fault+0x475/0x1210 [ 2121.332543][T18201] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.338018][T18201] exc_page_fault+0x94/0x170 [ 2121.342617][T18201] asm_exc_page_fault+0x22/0x30 [ 2121.347584][T18201] RIP: 0033:0x7f5e99a389c0 [ 2121.352024][T18201] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2121.371820][T18201] RSP: 002b:00007ffdae1694c0 EFLAGS: 00010246 [ 2121.377940][T18201] RAX: 00000000a52dcfdd RBX: 00007f5e99bac018 RCX: 0000001b2e920000 [ 2121.386014][T18201] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000008ecce74 [ 2121.394072][T18201] RBP: 00000000a52dcfdd R08: 0000000000000fdd R09: 00000000a52dcfe1 [ 2121.402041][T18201] R10: 00007ffdae169690 R11: 0000000000000246 R12: 00007f5e99ba0000 [ 2121.410203][T18201] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff81a47cea [ 2121.418177][T18201] ? trace_user_exit.constprop.0+0x1a/0x2b0 [ 2121.424179][T18201] [ 2121.456178][T18201] memory: usage 307188kB, limit 307200kB, failcnt 12962 [ 2121.471562][T18201] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2121.481028][T18201] Memory cgroup stats for /syz1: [ 2121.481208][T18201] anon 102400 [ 2121.481208][T18201] file 274432 [ 2121.481208][T18201] kernel 314183680 [ 2121.481208][T18201] kernel_stack 65536 [ 2121.481208][T18201] pagetables 73728 [ 2121.481208][T18201] sec_pagetables 0 [ 2121.481208][T18201] percpu 5423904 [ 2121.481208][T18201] sock 0 [ 2121.481208][T18201] vmalloc 8192 [ 2121.481208][T18201] shmem 274432 [ 2121.481208][T18201] zswap 0 [ 2121.481208][T18201] zswapped 0 [ 2121.481208][T18201] file_mapped 258048 [ 2121.481208][T18201] file_dirty 0 [ 2121.481208][T18201] file_writeback 0 [ 2121.481208][T18201] swapcached 0 [ 2121.481208][T18201] anon_thp 0 [ 2121.481208][T18201] file_thp 0 [ 2121.481208][T18201] shmem_thp 0 [ 2121.481208][T18201] inactive_anon 110592 01:51:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2000024f}]}}, &(0x7f00000001c0)=""/170, 0x26, 0xaa, 0x1}, 0x20) 01:51:10 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x6, 0x2}]}}, &(0x7f00000001c0)=""/170, 0x26, 0xaa, 0x1}, 0x20) 01:51:10 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vxcan0\x00'}) [ 2121.481208][T18201] active_anon 266240 [ 2121.481208][T18201] inactive_file 0 [ 2121.481208][T18201] active_file 0 [ 2121.481208][T18201] unevictable 0 [ 2121.481208][T18201] slab_reclaimable 19640 [ 2121.481208][T18201] slab_unreclaimable 308552544 [ 2121.580737][T18201] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18201,uid=0 01:51:10 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)=ANY=[], 0x590) [ 2121.615321][T18201] Memory cgroup out of memory: Killed process 18201 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 01:51:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000011c0)={0x14}, 0xf}}, 0x0) 01:51:10 executing program 3: socket(0x0, 0x80d, 0x0) 01:51:10 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@private}}, 0xe8) 01:51:10 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@local}, 0x0, @in6=@loopback}}, 0xe8) [ 2121.667707][T18219] wg2 speed is unknown, defaulting to 1000 01:51:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x2b0, 0x2, 0x380, 0x20c, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'virt_wifi0\x00', {0x0, 0x0, 0x4, 0x0, 0x8000000, 0x10001, 0x4}}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @empty, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 01:51:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000440)={&(0x7f0000000140)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000008400000001000000700b00020400c5261400000084"], 0x58}, 0x0) 01:51:10 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000000), 0x0) [ 2121.736880][T18227] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2121.757113][T18232] xt_hashlimit: max too large, truncated to 1048576 [ 2121.772403][T18232] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 2121.785212][T18227] CPU: 1 PID: 18227 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2121.795684][T18227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2121.805761][T18227] Call Trace: [ 2121.809924][T18227] [ 2121.812866][T18227] dump_stack_lvl+0xcd/0x134 [ 2121.817492][T18227] dump_header+0x10b/0x85f [ 2121.821934][T18227] oom_kill_process.cold+0x10/0x15 [ 2121.827085][T18227] out_of_memory+0x358/0x14a0 [ 2121.829974][T18228] wg2 speed is unknown, defaulting to 1000 [ 2121.831791][T18227] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.843094][T18227] ? __mod_timer+0x83c/0xe30 [ 2121.847801][T18227] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.853299][T18227] ? lock_acquire+0x4fc/0x630 [ 2121.858006][T18227] ? oom_killer_disable+0x270/0x270 [ 2121.863238][T18227] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.868908][T18227] ? lock_release+0x5cb/0x810 [ 2121.873706][T18227] ? rcu_read_unlock+0x9/0x60 [ 2121.878415][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 2121.883302][T18227] mem_cgroup_out_of_memory+0x206/0x270 [ 2121.888896][T18227] ? mem_cgroup_margin+0x130/0x130 [ 2121.894036][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 2121.898922][T18227] try_charge_memcg+0xef8/0x12f0 [ 2121.903988][T18227] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2121.910013][T18227] ? lock_release+0x5cb/0x810 [ 2121.914757][T18227] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2121.920616][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 2121.925579][T18227] ? lock_release+0x5cb/0x810 [ 2121.930287][T18227] ? rcu_read_unlock+0x9/0x60 [ 2121.935002][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 2121.939882][T18227] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2121.945869][T18227] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2121.951635][T18227] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2121.957923][T18227] copy_process+0x73e/0x7190 [ 2121.962549][T18227] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.968153][T18227] ? lock_acquire+0x4fc/0x630 [ 2121.972833][T18227] ? rcu_read_lock_sched_held+0xd/0x70 [ 2121.978451][T18227] ? lock_release+0x5cb/0x810 [ 2121.983235][T18227] ? psi_task_change+0x1bb/0x2f0 [ 2121.988203][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 2121.993241][T18227] ? __cleanup_sighand+0xb0/0xb0 [ 2121.998752][T18227] ? psi_memstall_leave+0x170/0x250 [ 2122.003959][T18227] ? lock_downgrade+0x6e0/0x6e0 [ 2122.008826][T18227] kernel_clone+0xe7/0x980 [ 2122.013246][T18227] ? lock_acquire+0x4fc/0x630 [ 2122.018125][T18227] ? create_io_thread+0xe0/0xe0 [ 2122.022986][T18227] ? lock_release+0x810/0x810 [ 2122.027679][T18227] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.033147][T18227] ? lock_release+0x5cb/0x810 [ 2122.037864][T18227] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2122.044236][T18227] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.049757][T18227] ? lock_acquire+0x4fc/0x630 [ 2122.054447][T18227] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.059968][T18227] ? lock_release+0x5cb/0x810 [ 2122.064663][T18227] ? __ct_user_exit+0xff/0x150 [ 2122.069455][T18227] __do_sys_clone+0xba/0x100 [ 2122.074074][T18227] ? kernel_clone+0x980/0x980 [ 2122.078955][T18227] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2122.085222][T18227] ? trace_hardirqs_on+0x2d/0x160 [ 2122.090371][T18227] do_syscall_64+0x35/0xb0 [ 2122.094975][T18227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2122.100890][T18227] RIP: 0033:0x7f5e99a8ca21 [ 2122.105326][T18227] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2122.125229][T18227] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2122.133754][T18227] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2122.141745][T18227] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2122.149800][T18227] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2122.157857][T18227] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2122.166360][T18227] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2122.174459][T18227] 01:51:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:11 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)) 01:51:11 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x43, 0x0, &(0x7f0000000500)) 01:51:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_USERDATA={0x4}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x3, 0x0, 0x0, {0xc}}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301}], {0x14}}, 0x110}}, 0x0) 01:51:11 executing program 3: syz_emit_ethernet(0x86, &(0x7f00000000c0)={@broadcast, @local, @val, {@ipv4}}, 0x0) [ 2122.186927][T18227] memory: usage 307176kB, limit 307200kB, failcnt 13041 [ 2122.200177][T18227] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2122.241447][T18227] Memory cgroup stats for /syz1: [ 2122.241672][T18227] anon 90112 [ 2122.241672][T18227] file 274432 [ 2122.241672][T18227] kernel 314183680 [ 2122.241672][T18227] kernel_stack 32768 [ 2122.241672][T18227] pagetables 69632 [ 2122.241672][T18227] sec_pagetables 0 [ 2122.241672][T18227] percpu 5423904 [ 2122.241672][T18227] sock 0 [ 2122.241672][T18227] vmalloc 8192 [ 2122.241672][T18227] shmem 274432 [ 2122.241672][T18227] zswap 0 [ 2122.241672][T18227] zswapped 0 [ 2122.241672][T18227] file_mapped 258048 [ 2122.241672][T18227] file_dirty 0 [ 2122.241672][T18227] file_writeback 0 [ 2122.241672][T18227] swapcached 0 [ 2122.241672][T18227] anon_thp 0 [ 2122.241672][T18227] file_thp 0 [ 2122.241672][T18227] shmem_thp 0 [ 2122.241672][T18227] inactive_anon 98304 [ 2122.241672][T18227] active_anon 266240 [ 2122.241672][T18227] inactive_file 0 [ 2122.241672][T18227] active_file 0 [ 2122.241672][T18227] unevictable 0 [ 2122.241672][T18227] slab_reclaimable 19640 [ 2122.241672][T18227] slab_unreclaimable 308563480 [ 2122.256584][T18246] wg2 speed is unknown, defaulting to 1000 [ 2122.336688][T18227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18227,uid=0 01:51:11 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x8c, &(0x7f0000000100)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:11 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, 0xe8) 01:51:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000014c0)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@sndrcv={0x2c}], 0x2c}, 0x0) 01:51:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_DATA_LEN={0x8}]}, @NFT_MSG_NEWSETELEM={0x7264, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa48, 0x3, 0x0, 0x1, [{0x43c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "a0c76b9d7066a92bdbe9cb7408742b286dc8c3952fb2d8e17304e52b5d72c176a3a169732dd04cef555ee527095d51d138ebe207d5f5ced7e6655953ea986347bbcc6f5be6974eb187502ca23d4b847721ed29b06b87d9ef9378e764459170a2584a060a9e810b33a9120b0910f59e7341fafa73be717983051d0c01616b7bd94402d5dee8c0a55972b4bf71ffc5ba25d722e5b369a33ad0b2e2310a94cc13e70145b96189580574aaae45ec5b6c3cd88c052deed5bf772d7740065d87e10a66c2a22ea06edda3a4c2"}, @NFTA_SET_ELEM_KEY={0x260, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "22a5feee5a594f1147e911136091b41bd3a71282fcd45581799e510814752e84da72d248ddcf09e4aa0d9932c3ef87e854822db687794b72a01d2370bc73183adca948b66525680549fcb56a107787ca7e4f9ae8e3c8129cdd449f0388084fb3063e3aadc4e4e20841da94032c422eadb501dcc6729b5d2c685f8fe31f1bfd724ddd1cda9b769d03e12240fba690bd0c6800419c1aa909a550c5880780552a52a75af345ee55dbae245c71d61a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x35, 0x1, "16adf219045249cd794f7453ea1b405f09d61b4e37fe4357fc04159f710792e550d85240f0f770aa75ba74b8b170ce0963"}, @NFTA_DATA_VALUE={0xdd, 0x1, "7a0f0e84a442c5b4f3fdfe1e0bb3ade56a6937334e9ec1643b68d812eac2c835043240a375923792375697f6b5f229ac577cfdb5880a99edfdc450aab8d6f78a5b65c1438540f998c05fda87a1fa3ca22588bd53f628c913c1dc662d7b7de222d88cf7a40ec02073f06b7a25202b33aa19653f70b956784930a69085aa73de4bfbad571e1879290950f19b0826effd8f41bb008e0157793b8e9c121a3e6c5550104895e61bf28f0a9fedece2f487579b7ed6583c8fabfb458ca93610a81e80420824ccb3bed1c858e12c33ccc23463b950ec67e745520779a8"}, @NFTA_DATA_VALUE={0x6d, 0x1, "fa5ba8fdfd264a6fff758e9032f9b7166d7d98a48e149447bb532b84f3cc4f93355fce2a66303f08290d24b141a926317db4dfc066d54c5a8106e40064c415363d6fdee2e1938b1cd17740651718b19df47c60b8e47befbe7342bc5a99e493978afb21c0f73c4d9328"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xfc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}, {0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, ']{%-\'\x00'}, @NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "42cee6a909708c3e51"}, @NFTA_TARGET_REV={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '$-%}${(!):^\x00'}, @NFTA_LOG_LEVEL={0x8}]}}}]}]}, {0x384, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_DEV={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}, @NFTA_SET_ELEM_KEY={0xf4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "df07e5e638f60808ca6335be620b06e18095465df94c582cde2085df7de3678d20b4f3e340c164f6df63ba17164f9af636b230cdad31c66a6af392c9fe806585b05031b10503dafbeb32ae5efe7e2739fa"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x65, 0x1, "c749c32611b8c79c6b139419e00d598f9c9d38c0538e58206cb09cd7c6b0e138608681324b387c7bde10871b3c38267f1ad68facdb6d13c1cd0ac9adb6b38ca0c3f75e32ac482dead485fd554f38529aeea7793c28bad8f29653d1da61ab462fec"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "159382ddda6b360a9115366ac586fc06757e658aee2c7d377e56e5233ce0628d6ba594f3285042a5622cde312fa2ce5628400b8c7c3e16000f26eebf40dc986507dd0599735bc8be732ef4639ffcbbd7156797d2ddfeb283409d36266922316608d5a0356ef56fd3ff4bace294b886bbfc41057ef0390410aa7259abad01919cf47d4cf1a7a4239e5ad4c6270e223010ecedea0c4d29b3d47861ca28ebafc3d908f45689523a4555fa91d9ba1f1d45da37846583b846974a16e176bd4084f17a4ebe9487b4d09d90e5171b13fca130b4f6acc7d6ced29760868183d853520a9722dc198ff8"}, @NFTA_SET_ELEM_USERDATA={0xa5, 0x6, 0x1, 0x0, "8c23fcf0c6bafd5d7f6f7f692d98b4ce6c387c6b0b3df9bb0a459eb03e6e50cdb14270fc9cbffe2c45a225e06a8672380e5ff36480b566ee0f72ab4eb9927fb665a46f431154dcfd2258fd1b50f44905e75f1272f72524b402b6c1685b4e3127b7acc620884a3800b3c71a9d7a14da9b9605c4a1789c5534e9059403d5e3931fb67a5e45295b80b3525dfcf4b43e9023551c7c9a5ffc1c9540d3fb465da22759de"}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "711df17ea56c0fc5ee1f6075a6c39849d7ba5275d2543ed5c0db4fcc139d6707bc5769d7ab33ecd19ec15aa26525a337be592fd4e5d961989d7b4207038b82b22183eae8f920748243e603d91c83d0f5f7bf28d2e56d32f1ab44bda5eb785bab40e321351ce303f144cfd90d818371b9e67cd7420da675e8e9119293f07947bc4f918905a374ad03e95f09aee65a5400fab01b75995e2641700985164cbcce1b4c5d2a7abab80b9527f38452847f1252662412fb70ee8606329fd7669f66041ebc2b06843e"}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "c5cfa8aca66d95d72879e42f429b5d19a0926b465c9fc4b5471de8c08b02fbf86df19af45d703d7c68af8519f286f758b619a528f313101c1beb5491041e3be2caa07b116da93f7066449aafb764582446823739d384f7eb1da93c7aac8b8a2fe925624c5152666d99c22b28612e88642f99acb1fcee645a05bcb442bd0a688233e1fda11793bbcda1"}, @NFTA_DATA_VALUE={0x75, 0x1, "a81cfbb5ce18739d0082322fbd72afa932550b8ba8120f0f8d2707fb5f79a45dc1b443ee01fdb34f89664ebfdead74069ac5d4e4e09426aa13f33cfb283c93e256e29d2ef0f0aa3a20bbc831e74f402727c9389d317b1b64bf2791fb9d3eaf13dee5cbbeec27e3861cd18f3a4b8be6f77d"}, @NFTA_DATA_VALUE={0x9, 0x1, "1ce258c0d4"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x67fc, 0x3, 0x0, 0x1, [{0x15e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1248, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "e433921fd957591202a5ba0b124feee2e87874743852fc9e1b"}, @NFTA_DATA_VALUE={0x5d, 0x1, "c1156d53eb4f7f31a83869d681eaa3531639711106be4aeab9f5930258ddc57e41d9f6ef938dba6bd784d03b3b608d0d456e0e6407a5e8ff8fa47125c04ac737ad5f877bb054fb8e8d3e8438c9d7b0a404daa36b3d5c18d92e"}, @NFTA_DATA_VALUE={0x1001, 0x1, "e886e994c4c2aeecf76681e695914b87bd12768611aa45d3f85dbb655e639b5bd990f96fd4d52b694222e723ff5e9a4d313f3be7c14dacbca535bd06b02a61de3141535aa09886b54446e4f53f226f85eb38add61f406ad9b3860331ff0480fb3d90cae170193be9f91341cf3b8bd1b94ea4119f81070c4eede83211b617239544b62f95f1443f0e752ff71c7ecf6ec8652b9e79cf3d402196cf0d1d84f7af2ae1ab36541e6d6ea25e572bbfca31b38331d0134154e0b01e28de4ea5ffada964878258d5ce2ba750b630169557b89ffaae3fcddcf1e8007f546035f40db8a310132737f506bcbebe8e2783b78142dc351cc9b27ec35d7af477a0fae7c4a82f1c4b54bb3efc9083de4f13011390bf1586fc6333751ef3abd44f44b7d34d022a0eb2e574a50f75d9de80a95aaac9b968570f1b4e04d857080c67e3397adeccffade305d16ac255b52164c13072d4c99dffdfb473821812482fe79a51709e51317f131340a83598e5c79b68c9f133fcb7d085a4df8ac01d8d4284bee725afd0b27bcc41e10dc7be9befa4cf866002a7c25eb6ff7f617c408467353f68944ef9ebd2888cbc99170eed53007c9acc0aacda3646b33a71a0a95465205c089aeafb8b229f3aedf69a15b439569284206497ea80dec83c37579d894364b752ebaf739cd38dce19253504eaa63a607284e2f0a11b85885f8af1a4d80c200b0ac94064b336f63237056912ddac9caf0ad169ae4c833285c5cd45bada6d9845a6046c6d8494c8d6592208acae17abd314f20fae90385421f4d8adb45ed86e251a806a1380a0056fa3c9b42c52979aa5687243b57da4b2bea83da71e6e8f4ff35a046ab1888685c9483845c6ff40956981e601e9d9ef928a9952527b6cdd2556cd2854ce5890617f13b460eb87cf646be1e6834a1de3bb0728a25a747a402462d5368a6486f49f095a1ffa02f6c8ad1a34a8b7bd7fd70b3562dbda81e8a1da03ad99d08aa818c71195ab8bdb934e78612b4326bbb4d9c7b1d96efea763a22289a33a37872c2f370e5d2d7b96acff725cd3d1ba1d3c01fe2b47e86375258175477ef77c921b82c7bbdd7ef8604736644ccad5faf4e8e5060a748be51a30068aea54097e1312d3058a5a94f8ec0a909eafdafdbc0c6832d395b24b0a092b0377e1c722aab2bea35f8b17fa956b73ec00f1dc9cc346499c69b7ee66272e20c937958d2c1b73d2c8f96dfca5cd2afcbda25007ebc3803784eab93e662cf19b4e844c3dcee92bf88bd4062fa9c82b5aec87800197e1bd2667acaf84eb0b68f8eeb39ee6bfb383f800e88d72ebf81095de0255d5aa00286365a8138c72324232dd62fe8ad2fae83d93ea4cde9874c049830aa3f5e096885b2dbca69b55c8181e170d6086db13d837811ba8bea12c99960871a8eaa6e2fae5e22fb76fda6e00fde23edbf121cba6f0c58ebbc55ef650c925fe101488a456c86136012d7d284dc667926ce6b5d086178720f3000ea19a5487980e0bb9a06994f19c42c2b132822f6f48f09a8a7159dff501ecbae74ff5af6563ea66a9134bce432cbe16089f6d7893f80aba1d01767d3fcfa0bd587905dbbd784166f6db67f6044ebe3b425fa8989503495574584714ff5b44db4713da084721993f4c7d79634cacc8dfdc5e2604c812a2016bab625d2cd74f7938185d0092931c1029753028aabf91ca1a0966a0e5d25d593f5b88afe92ff14bd2393182c847e3e58bbcd3d8d01d849e3014e19d6edad8cc4aafee19bcadd05afb414fe88282ee470a2631bcf389434b1915a7dabb6a46df750a68ee85ec89d669dd64c9aafc7383a8df4a7dfcfbf097a0e0def1a329abaae5134c6f8f73ccadb859bb9b3fc9beb00d70855fde39fa62feb5043c76113b494241cd98cbfff9703e47de81a2cb1bc254a8ae5ade2048d41e5d757625ade2e2e23b2ece95ff093d0e69e7a4dce0c3e0b512e95c8349432ca273aa0b65a7cd4be40aee3bfc8fa852342e6a393644dd461180c17ae7940d90e6503edd8028e8bceaff3b1dc2d8c3c37447d11204b9ef3ec4b2f4ffc6e3c5b6a1673927372720492c9d47f92118bc36974406234236da481dbf920d9aa26d5877c3d480071584b2cfb6b55eacd64c2d665c6ece24efdb6fad07d556c56b31bc6564393e9c2169aefa8e1e32a480fc2e4329aa86dd113ff1df9d6ece979879fc09ac0f422ba986467d911dde6849d9890c602962fc471f8c406d6e7a2b360e2275d177d3a89f509ac4e5a8077a87f79b8f984c0cad1efbe22b3d26b0c7826fd4de3e45c0c07dbc3d8dfb9973e99ae6a7cb6e269b7436c16a8639049005972c87655c304f3648c778b03b29717c774a52cd3cc732a373b386ec4e9edfd73f525985b65dda8127de67b76a60b67bd34ff4e0dc00a3416b8f92cf35ce7e4981eecc62e1c0650a0f740c403b2f33ce67a01e30a642f6a0798d172594944c47df53fe963fdc9b268c8b4ea165d49268df7eb46b51cc1ba1a154d12f481a010b75b6298c8d6036e0c7f0471a0f65012e15e56ad4c364ccd1b93293242ab6c9f1364b1638a9ca8f583a6b7f4c684d57fd88e44b353a2fd8890f8f11035069edfbece70a9dedfe973cd4136a3c2f862b27fb910a63c5b9fa5697e65ac0f5a19c90bed210b036720877f4fe70ec932bac9c5159d9b14307efbd3401651dd878956fd9318687aa60cac520e0a67ed2a89403d144e4e021f76f18f5f9d4e9369b07ab77d94808d2793d43dfbcf5c7b9e76adfd1af91a1633800a59de9330f66c53fd7c4a86e5155522651234d71cefe04647d53bffd364a859c45cdef2a1f2a97b37d11934391dab2a79e6dc5722113cf91dcef32872c007913e004d29cce62dfbb27766f6405a92f4c448a5d3ed06b66dcdace382a715d9f65f0cf05b5f90f0e2be5f3cc86d10deb9cf4f2025e306c24d7e1ad6de25b3fcd0dc63382883fdf76e7fa6ae05b0e0aba36ed0ec25ec8b8af15c4481a4e670cbb23871743c07212854c9658b7f76e9d03561bbf46e0e9df27461c8ded153a5bbc4f1ab6e6dd0e5b61c345164d6285c0853399437a7ff63bb6e0de48633de7b00d5c11e4ad2114ec4cd3ca11f3bab557f5a00f6890bdb9913d158ea21269e154de275c3ec2e833ee69afed4ea58ed0e624f87e62da762ea8d9aed9be6c74dc78f0c75c128ed4aad38e09fca9da25596699bce50c46a066489c142ac7636180590d561b51f4b2c0c0f3a6d02f49b73e8adafa3abe6c8a072f195b8f766a4f40054d70b7d31d2c749ee9af5ec99b9b0c31c2aa7465dc46f02943dc938612fd2d14038b16810927f2c5b96cb735ab032237dbf499518124ed1371dec7781f4cadda265cd742dff2a7e2baba8b7a71a6dbc7439bea785e5ed0d713b3617cc38cbad269d50f4e526a0b9fa8187d68a325be05eb1589853633465bb25e4b2961839db4980e4328557ed05f28b1cdc653012ae5484930244ee9509a1774cf5b1b577f6f524b37f5c351b25b2dced361b3c39f535d551c5aaeaf7b5f9b0600472756d1d7d6e12c80c7f84ea73e49880b45f41f3d42b6e83cb80ca6536791db408eba4651d5b1b2dee02fd60150478b04106b33f9965035d846bc6ba72ad27780c0ea1b768a809723f27cf0cd6ef12037e4bca4932c9e930544ec2a780367021dc7d1e691cd0878638ffb7088ddc0ee27caa3d7dfbca1f8dbf42b3bc256965beabdd7049b4bbbf86bee5086cdce985436dd25f5dc276ae73481af5e0dbe9589c4a5e2047b2c346af02d586ddf02f9a72e029499a56f5dc712ac83d630778ac5ea4afe658b12b1480c0d7512bc43acc92c84708d58eb861d06871d377f75edf9e715ba0ee608d06174e5c0fbd6e7aecd87528af483c66e0a7ed6ac30daa14a5bc176ee1e5ca3770c0238bc0add22e01c4da9ad17560b6f25a7ffbd3304881d91ec482ca42c9a549a965dccf9f32731a3cefb44123bf1e41a429b9ac01416dfe99e6df1c01221f38ef8c07aabd55718211c0f90d1406f09e3729a2025ca7c47af8dacc135955b88b122d9efbfb982ff11dd4220387f4eb214be04f5440d9c078852884afce435d7f2ed8db5eb2e6827c5a5a2fb62df95857a64f6f57f9f295e0fbf851e2b434ddf3e0461f54e48bd1d5e2460b114c625a19946361d82b0bc9680ba2b2fa89d3185dfd0399f488f9c2fbf71ee6d36407fab02c930fa88849b0a25e978324bb3b5c2c8fcf92efff13a00686b8ef0825181f248c0d3b6970f8a492b90130d5d5d58d5bc5de8e24cd9f21eb2ffe635f30a712dfc42357f18bc3c6e097ed14761b0654f987a25cf1d5cb655e4e5ee7312ed75cb79e97fae671167f68cbf267bb3648729dadd934ef5eee2ea409d610d451e683d4e3da73cd946dc575f4973e068a7219c89ab6ae8c863130552f481cbff774b44c46a2e8043264b5d3f9f9789720d300091f5eddaf79454280c99bdbc4493356bb039a9f95d1601e0a88590be72ed602da96ce0e6c3ee904995f47c2ab257e2e0e483f08c6e51afc03a26f64643e1ce9e042942a7a65f71aabd4a5d030e643e2960d4fc74629f25f8197d49f30981fb7816f11ab7c8571cef41020e6e0e721e9cf749ac573cbe87c3c50d4d926baf85ece2751841959a0931772d24acb3ccbb1fe869e0be12c464b809fdfd4cc005bcb9390ab8483b5c69059a8eee5ea04c3682561f975d4f9249b03df9a0fc591abdd73f5eaa7b844ec0347ddf491afe79d392a7b18ac42897393eabb78c8069e895744086f9b11afb26f8a509f68b377416464488699ded5081a5f19b2026f799cbe6da223728746a57ee2c3be4aac564f24b432c90aeee0d743ec67a8b7ece6586c36371b354cfb42e22fcb71661fee2f6449f438d06b13f3640d641b6b1c00ddf9303be72af46f050c19d7d472ec59294e35c081f86b44267fafc46945ae8443c3117ee89e7a3cac6eb9dbc79abd39e0775dd0ce69957f1b52cafc7203ab25b525ca0593ffa9ff9dce6e725be625991501f3319939bf2513189eba35dcd4ae4519af02209294eaff42329f76a348c40b1bf836a0540ccd6668fef13c03a12550fff7f4f4e974e8993b21bcce9224ddb0d05971215428b0e97ebc591eca678564f8fef9093d79e1bb6eb3d92ec808bda1692b77505126e566930777651583b9dc4aec16a5886faa4a6658adf0f32146d6444d05ad09e39dc61e4ae52b6970f4c8ecd28d77b869cd1f8b5db2887d09c37a3d4010aad8d9bab0b8e6c70977f08207f7fef092c5569c4448934580db5290c52a4fe323fb5d5914e90613506b93cf69225d94ae3161b086b7493ba02d9ee1db0ec6bc0e8e7fea4aa6e712d7aec9833ccb0e2bef3aa88e83b4b212bf1d291953c37df91e5ad4c4fb9160cde6b02432830554875c039fb63fceed349a66b32890eb26eec976bc874a70da172eb73b688b9c8b09d22cd98e9c6a891fe82ceac30f106492ba68a56d54c59bf695e55d2d3c7f07bb053abdd943f0f18e93ea072337637f8d04fa69b02d3bfe93bdead864794509c6fbe416ed85c04be65d4f1a572201ace59c7a7194354e35e2bdb684dd144a3a37ad654edf911dfc3f86cb411e2de367eb39ba31dd50fa46c68a9f0b932abe35bfbbbc788c1a4b19862fbcff31f67c30858a71aa6eb6a3624557e054ff4f22dc6355ab3202d7f7acb45dfcb1e2f41d6526af9d2248f4632ee1f39d13e75e1135d1f15b79b2cc7a725878f78ce8e776bf46fc4a4eabe28128dd7ddb2e070293ff552412b9e9d105794530c3194d80b8d5e67fb757c63"}, @NFTA_DATA_VALUE={0xbd, 0x1, "25a1f8d43a358f5f45ca1a1dbe12bdfe96d5973779be4e15756fb238342aff8d92608826468432bc347e7ecbb7e723f2fa090f4b45fd0e1e2bb275b78884c4ce675a01f99e558f25fdb7546f6bed370618baa1b08a17d5674b187e9fe746b4729f691df01631adf56faf484e29435ad7dcb6b9bd616285e5d670b09fe50b6171cec6118a39bed3c14c3758e834cbcfc46359610d2a1ef2f11b27e9bb376cb7cd282d61dfa1be4c50f41633879273b339c38796d4939081112e"}, @NFTA_DATA_VALUE={0xfd, 0x1, "6aadcdf095a31c45225a75f0d508e149e21e0bacb062a7bb3317bd0697984e0e667520c52e692f475d6a9b8d06be32152771350816bdec2d718c9a0d482727fde5d7427e167de7d7f2b3374192ac605b26e589dfd2dee0fdd0734406b6f2df6ee055c841bf61f99a36a16085cac967366d24463572953e49c812ea800fdf17783b6fca4847a9f9fdf17559e1e91192763d54f16cc212fd9dc770a2c825f3a7ffb6b6dc6e4973dd7df94a9a4d4c1838bbbbca10a747ec7e06b5d90e9e20fc0b4a538c0a649af6a295fec0ae50121881996a9f15b8263b9293aa8716056e7b5f2060d217a27b027af7af80fcda60aa8dd19c81f508f8e51230af"}]}, @NFTA_SET_ELEM_KEY={0x18c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "aa07b4c5a5dddad3357206585396138dfab6ff1116bf1c3b6b19d3656bb2e9a0dcfbb160db5ccce828443c67f9b76b652b7769fd4f4fd014a2a6c419c511ed0980088e74b945fb417bffa687235802bcd544694a6250196d2b7d8a0b270e7e13663bf2a62b"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x9d, 0x6, 0x1, 0x0, "85d299501a1861c87b2fc13d1721772967443ce4d07c192082bdad81faa66a9bad94f3b3f29da115fb0a824f43b5ace74453ba50d2939d8fadb82531c0f44d314d99de8113ef627963ec6ac370c56fb5b3a59dbc2a751eab1ffa5ba60644a0556048674d243de4d85ac60a532800edc71c749aa4382eb770cc1597ce6310aa7b6dfc5ad1d8f74c61baf7b8ac905bee958f18ec7a8f2018fa95"}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "cbc727f74e6e98271daa7c0f6fb26e595055346990dcbe8161aac030995e63778083f92c76e44af1bf6b2937cf8ddd54dfad3a34204d2ec32981c7470b94731bb522686c3799e290fbb009729bb768bd89bd05b322ac0bba2b423159ce736098888c85add354d44e739200a08ce48bca9a914194cce05d70c9014dd8605e88e8b8141f645a660f7aab384dbb0a8e4ea2ff66d879861b0e9c639eebba0f9379f3b9a225ed1be8a38d34"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "752e6ed763b770322e"}, @NFTA_DATA_VALUE={0x15, 0x1, "b4bfda1c40bb3d7d8ec911578a1d3f1c5f"}]}]}, {0x2670, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf9, 0x6, 0x1, 0x0, "d26e3a647c9a76bf2f006b79a6e4b0d32597df45fe3972894e81ccfc4cc1fd680bd47d74e12e99b839cc733cd0d3da7607b5f8e19ea744c39c15d65eb363e85b2c5481e55160b4e68214693b820d57867d0793fb31294586b4b689a954fb51bee0dc8ec43638f4e214f02aa61c6af83231d8a69e0e9cd0030fb0aa2118b64ccf077f62beaded631b1e4bfcf442fc0b1ddb6c06bd056f611afdfa7c0267f2d2a15c50386b1615c9c6c2955fe00741e112d23bb5154f954c8ff8f71031a17ab35bb88f3167ed9d1763b7e4d204c43b0ffe14fb43eac0f257395ed84853ad9e9c059d2b6e372c9e3aecfb85d343d8bd305d9499e9ab0b"}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "f2ef8ff526a962c53cc422e65caa0de3bb42eec7ab27fd9a32dda74168cc66e613d0e74373d9e0ad875103b2dbb324b9224ea4ffe169c950623130c5f95cc355a11315451ea1f5ba568dd521c3057fe278b62a041d83598d906f39e879aff60a2c7d41b3820bdbb08c9de5920888b618c0"}, @NFTA_DATA_VALUE={0x61, 0x1, "ca076d18bad0af5b5e61035b1821d0f508f4ee2e5368d9699f58e9896a24e3bf22f8989d152d444eecf924fe474b0ee16505bd33624d23c81333609d51d06d0372ab9352e1fc409b6c76a4f5533b3b9e8be640e2d752b1ea00ba870594"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1118, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "0d509fdd87bc7c58c063f8dfb92deafd1adc539fe4fe2c11ba592b60769089274d3badf4220011f297e0f6ea2daf0ca3c5c71c29a646979bdd97523780ff2705e2bfc233a106201515df3c96c8d4400a679b6eb41354b0c2130b8f8f37ec263a940d04e5e6339b0a984b9b0a4245f6f8253a27f370cd1ab15362fc4bcd4eb8d1ecab662c2c61faff306d6bff3419f0660db3ea6afeeeaefb44b49e9deba4e2bb0b1d01fe33eac64724b8658325b5cfd79ae03ec202e710bb4d9ec87a49"}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VALUE={0x49, 0x1, "b7eb69a678dee50049338a41f96867d212152e0dc7f9588285cf8e132a257258ae16033db845213accbfdee2022e39c156d04fe7e635ed4f4290ee1e0966c3b60f58b08b05"}]}, @NFTA_SET_ELEM_KEY_END={0x12c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x81, 0x1, "052a70f4ce6563d4f8fc1a3223389ed45675aeb8458f175bac58e315df14e2c76cfd9e2fe53768d1cbec625cff024bbc648f89d205edd5aff7e059a120fa44d37f6334d098c1d922c5a9f810c3b2cef664cdabd59de3e6a3c8e0560317b4cde75438eb1c42f5f09354659c375e1c342251946ece32f9e11bc0c3766be2"}, @NFTA_DATA_VALUE={0x1001, 0x1, "53779cb0e0f71c833f9169ea4dcd1041be84ec894e74b17c753e81b583741f34569911230f19e6008b51054bec09b0ff98ce72587dffa2afd4856ed38f4b1d06426cf4255eedc39f88d1df060d28b6f9198d17dab0302d7bb86633dce7a542a296c245884d4d7cee8aed3224ac902ba1276a98a4f0aafe6186e9a20def7125a05ac8d79acd1778a5aa1f0d55e1beb9b089f6d4f82182611f6ea95298598452257a9f8b5b6030f59df3a3a0d36d7a8a5d39482f6e03ecbc429e807b800ebe083136f7c5a5edff6d4354e002114549eb0b4060bececa0ed1478d5dd99a9e3d5c98bf0d8dace9f86d2a617880800a1648788f1c51f4817570c358c94be571556ca61bff28fc1553c64793fe7045b94dc1113125a5d26311aed78bbf8ec8b02f341a0cf78749f1c315b58b6ee84e065335c8286038dfc673730ccfba718ed48c8bbf415ada00d4168973ddab6794d513b15b6c71275c55497724ead045cc91641799be387220ffb2745843fe1d1f468d1e2088960b78128e46e5565cff4752ba5824faaaf0683303d524d3de97b9112d2a6ac295959778b019a7df6b76dea4c9a4ee9dd93964e6408bc7e325b9ab48e5895228e47445b7995bc1b4e99ef30b3d5222b7f7a492a191eaf98551ed96a0c1951a2347c0e9219b7cf9c4590b730513ae4edf385cd800ed46701ce4d28853e3cc73f36b6670c1c80d50f2ce761eaff04eb14a5a08b4508077bb80bc59d4b87743415513e0829d364d0b1b1261a516520e9b34f6ce9de327c37ccef08d3a9d4e121bbed4d8dd4c0878e29cdfa7d46a4949265c7cc6d5162490a82e204edf5d06856cda011e516cb648863a7dad1a29881604d30822085471ccb7b554ba929aa2a5d61daac1c194b02eea96c5b3a09366c174ba99ba1b92f98fd2365ca8eb5003b9f1f36d036e67d6b3a9a942b226042f336cd6b6baf4853c50a178bf7183065ac3be7cb4b3e99414bb442d1702a0508b881f156d6cc2933488e5aee70d4a8436df7a8c509c943da0f270e2285fdd08c662efe3fbe28e009a412619d2aeed31bec33845b4307e5b620db51a6f7c2c0ca60847137ec7c6a1b76500f392a1e3993a4e87f979c90ba00cc2153cfc3d6792c0a97a391ab8ce820a7aa2eb1e23a6ee015d4efbf3c599abb56e51daa78a2b78fae6d1284b80c1d6ba33da5a1d60b2ebb3c2d842ae71474a86e8e8717a06bf35c9aca16c03fe33a433fedb84abc36768eb9a482a78db851902485876431c6bc2cebcb2cea5f3b385a965b9587f14baf4c92fe9d5f278808f05055e8ca7ea7c77dcc3fb4cce6dd784f049915411d6873ab58aa0defe130f3dfc603a71bd8b03e71ef381f7efd4b29b096cff434b36492d6eac10b621e67f51d919de42ad2e6004dd5bda257cb9d09812c4c64f7ae1700a3231258478925b3e194120918fb053b7d6ad61117e1917bee62af1dbd31ac51296f9312c87c37e60fd7819ea9186ac21eb5c067f9d0c6b9d8a0648672a92de2927dbccc2fa03da69ff043efcf79129ba9c503d8758cbc586f2258a35ad30dd0e456ed93d8ebc428ae30a25a8d03b10a33a640c334b62c1c7c24269a5ca4ebe37780b01b44d869b69f13e19eee550dab97786cf3ef815beacdc7e1648037ebab9d5ea7b86a68340bbfd8c029900537f043def8b669bc88fa51fae347fdb874782fd499efd6a1fda8ecc77840f022cff1051ba5ea80006678109b3158f2c5026a58df5112cb9b06963c9f402c5f6eccaafefe366aa703c7878e0ac4f3aea987f63bece4e4728ea20a74bbb6e0802a1e69f3e9f07db3f6c18978ebbb9e00313b7ae7a952916c467ae2b7a2b5808dd736a509ab60e9e984956b2e8e22701f8dc0be30166e8571c32490b8ffbe970c7089aa48b17bec7a4880474aa251d10abe5c3e77ed496f1b8d7262894a83ffab1d93d83178c815705555efaf0e3feb849b4d54af1c15e85fd5602ce8ad87f65e232e17ee0f2441c6d1b08a6e3942a38128c3edb16c682c20492c1731b2d58bed32ff6b49fa612c7076859fbefd7e71ff9b23f32c6163239d7e212168e071faf869bbd112f9fb6a1fb9dc30d8ca8fb30d36994eaab99e4d68385206aca622a59ac9712f4623fc3b7206c3513c9834d81d9b1e193ded9b85923f1cb7e7e3f38f72466105c26b91b1db5ff6e11f1dc107fdf8adb9c2adf7d06ee4fa914f7c82d766c07fbd5a2fb8d19eb7703b7977a6ea33e26a1d9fcaa6c2f85179b30ccc625d43058e0e83edb8b6410ecca5bd0564b63523713cdd5b19b375affc61db5cbb7acc0fe9c9a95e0e6140acf950d528583131476ebd37c48b8091b83b55b7209ce903ff6d6c0a6f741fb9168f48dd4d33faaf8c15b095aacb43e20478507aa219021c93b46db2c544dda8dc919b499a66305efb03d3b2379e4a18349f33c06157fb85b09557997d2497d9b98aad458f7adeafd44d2351c315303279607b54ba696e180ad230c707ad8ddec4232fce8e1aa2ed76651e8dedec66a3a612833a0cb1c4dd558b51e836a405421b296ea2cb3be137f6ce90ea5c5b6853c8f8e3b8875ec13acde9a2c5788877d0d56d0b3c80c5859c792ac88cab42846c955dbcdab9a40659009d691bc6254dd6bfd907bdc1c000f6dafbc9eb78d22b34e309415173e5e4d0538d7516cdd8cdba4729654d96facbbbf78ac162fbff6ab7cb8fa1039aa8d61877fc7858a8be7515372369d3e990bc66c4ad9d7278f4e5d2ddb748489be4306b29365e720197459c624bb302dc7313b078c23c5b0c24505b1b4f2ad5cd9a014df2c3455c8a4d0e9f6e143e32005cdc96c3054473bf55847d49e6735acd85d901ddfc3b228604dc11f303cea4975dea86dbf893ad2f23cdc6faeb64e2a41a07d5dcd1bf08ef1a5cdd3945c180a87eb1500148b7b35b6a3173734c824f24c6245ae3c7d18ad5c66b223009c1be484a5bf7d40c945c53b5f0b032dc09a15f36504f1da870fc88e6b48b3ff68a450f91b1917719cb56b75bc78ce377b0eba151325767e0ce358d2aad7b3bd4285f228bd3dd7e1d50230e9e37b2a4e878e1d06e519c2ba4d4e12bdd8e2228070928ba84ecc872858c330f6ba6c69eea20363636e3b1e4d3218b2b2f35f4af83644dad422953ec5603a98bc50ce598d4271fce473f239a327b8a597d750d447c24433e0ecb48bca00b19d80aeec6dab3db6edee950dbf43f1fa3f7cf0e9b0c82b3c08ec82565178e81d5fdd9f6e08a438e60cd997a8e4b49bb58e20cdcaa6896250f48e468f2e9b093e6973922816c6d0632d8a3f461f558e224e7f343fb0e108211ca03760898171994a015f8e482ab5e7c17a65266ca04d3ac09d194c4d362aa87cc0213d6b42c266ed8ef8a6a9dc3209706c46f172cc8f201fabc9dd2a6421a8c1792892915f8cb2a80e58e66742f9cbfade3b6a1c720d2c8bb866f0d1fb01509a755fadac6f4218023b04a137fd4d1c2ccb0eded55eba142685d42669f9697f1f6472dbebdbeceaa5d566428fde0d4e83392127ce1617cd182497f441efe11be0a8a0326ae6ba56779b425309cf58fceec041743352508a3d84d2015ea4487b50f8b50257991a18898eda1ec4254cb5fa4bf334e9b65f0936d3366692c4d465ad3e159e35077a4c77d4257f7f9836bf2995a225bc63f0d1e33a5c880a5aaaf168fb53ab76739cc917a6c608dd1817b5fa7a30543f4c339afa97c27ebf8515ff5da023d3e6f5db1f2dfc7989fb048455ea1c3e7e0a86325157925bcb3a06f43d905b824606fe48c4d6c3c30011f38914f424bed7cf0f78390e0fc07be6035ddd4fa09db8abe6b8d368eac46a1e92961743007a5087337f0ba76e83b8a1a0a29d1548e5254f7213258ae2fda25de50724943289e959f7bf44bd4fad1a00d26300764176f908a31848b7fca0c142c87eff21c6c162edb834cd144f7d64d47a61e3a43d8dc99c8c168181f7f13bef01a7acdebe33d4508ab1cdca7ded2417fb6927891ce131fa4af1f7c587a18ff3d535d04a21314e425cc01fe34e24fac741dc699f16492ef0bc158d529126ca34471197e0fe0813ef676edc46089076d1095420a27cd082cc286a92779905ca23f76c21d9f548078882aa693ffbc620125e5478e330ac6d1a14c49cc4eabb72920b6921c7cfa2a29c942096430a0274e21a15a6b42b84475941a8c23a6e9d09a69ceb1f57b5c70a59f8207871823711a0483b12d8643de592499a6d999f142c94d4a9120a5c3958f1de9233d053c028077f8dc99dbdc51b48e6a967531535145cf99d5ddfb2ab936c16cfa3001eed71bd4418197581736ed22fd1370818f1b56221968daeb31b632757a13c06561e5a345980c611519a1eaf3c7557a331c07d02244aed60ab43af4711170a1c5c7be27fd5f01679ea549b34fcb338bb25a22dc9203dcb2ae08a7d80414752122492856e7dc26190950160ad0980f86a2027559b1ebe4e6c95b1ba392c31a065aeff988ff85d1a60ee947d0f02ce223d657a46b8491d7d0d865668d10ae5a7d72173c5cd3cfcd11d1a7b1916395e383c0a13e08cfad01021e580c4948cdba25afced5c8fbb9c49bf7b89aeff34174e75eb0b3216249d252e17e3486cc59af1fff46b4f328911396e8da23f563aa369f69354d21c919482ed5b94942ac11fb87613911c18b9d6edfe7d6b567924e9388ec5880b03535c5c19efd1fba1513a78a68bd0935504bfacd593d86ad63b7c2b1f04f87b403c7d14f89b3bf4166e8132a6504bc04f6625c02ed7a54c535f59cf06bc1ebeabfdd412dc3b4d415469c9c788398a76a72a03e208b8aa270996c2c94a03608186152aa11fc36951ea5ed74a7657453e500545486a4dc7ab042b23f727073df26dc5c9a83b913dd6d9cf22b271625f428794b3bc9457b44725e6973739fdeba70cded4ddd0252e6a808415a441cc80e5eae01a728cf2674cecfe1f533c60c71054fbdd753f08831230aa9e57493c0b1e906a9d8056da85fd5c31625fdcbb67fd5a9cabd908102f3ed377d0e773f90837ed323748ae71a3eed6d3845a26141d38b904d82ea2c587c44e9a9d5abac5d628533e6535c157d564443cbed418bab86568fe17ca080febca49696e4d7fe02cfffbce061ad1beb684dac0d6d448dc65a7b9edc40473d96a116222035aedf32edb03c416499350a91f7026a1d1df7aeeed983eb8b296231cd17faad3c91f685e95db07db3bf3bae2198e5fb67a7c36d447639bf2a6f3aefd0ebd1c354054a3eabdc75edb42938f2c72d38c07ddd714902962c560de9d1fd535896d39aa5ccb835925cf3f6472d185db74017d7fc568211c03a92f86083eaca0791e9f85013bf95709b2153d64d3859214fecddcbcc482c368aee8ab06ad42560742d939804f813439566ec8f4842a467832b00cf187da9431bd42592e2e35387ab176df571371acf4554d98aa2c7387f966e81246c6f8ec4df063944ca4a0422adf2ebec88309eaee7a388557ab4e4204edd265e0d3b249908f50f3766653e145f9784de8d9f97d6190dac281de2fe4364c5b911f75fe322e60203039644b4b71ab9f475db00d43f257eb8e466e8ef20dfbd5f2cd18e49ed1581cd4d62eaef88810925ccac7f624ad885b217d99fa506e16eb3bfd726296ba9c70b77ee0d081db9c549016628b385466a868964747decb4c3683adbc4d0a6f4f715f28dc22703a4b4bf3d60aa7722249f199d4cfeab1cb9d15c68d3e2e661cd25a51cea1aa5f6137b13e3e1c070a581b6b7c03bbf4683d9f7a12376cf78e120d333eee22eeabca8dd7f1"}, @NFTA_DATA_VALUE={0x4d, 0x1, "957b22369a04b23f1e24c6a8d1cb8ca02d3ea43197bd324f51e58957ea71ba6ed1a2fd738c3f0a792f8064879953419687ea22b9d5d4465ee90a9f7bc8d8fe651a5429b5ca549f6206"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "5c737171d82f2b4e655ad1e60308280041a77c6e340a054f23770d183e8cb319c6899f1556eb0b5128114b8a64190af5b1d0f0c5c829ab520a0d15f0e547d1dea7cd01dd696a77fcf6c4f815eee1fb137dec69148853ce4669cfb8f9089cd8f07ed57649d6ddbac51d5d5272a60f74fd62ac480d9c5afb8f706ea4d2380df736f440d62005ee39762d78bd0f2f6026bf53a3fe747af7d1144d373f967767b128aa3f4dc5bf5afb64ba"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x89, 0x1, "2851f370b5ed483a0b0004f07b8f799fec743ec52ee129288542a86fbdcbe954e66ef88231accdb332add040eb340ead2acde0a8ce03914e2e5d7dc57b011f67537371ed46c4cbe41849427b629b5eac1aa526c25e92e26fd0aa23802d206193c7037ec1624c908f20cf009369366e7f42214dbeb93ddadccc0db69334b094cfb17def1a40"}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "ca0cf9f7922bc4356ccfb19a8232e437aef83be3a7016db1ba603da608f7a80291559cad441d9f9200d30fded10a86218a543db297fedb6c68a2bc99325b1a654ab95ffd2b518976c8ef335069b46b98ef2b5bbb393afef2878d8d6d9ca7bd896adfdee9cad79a5ad7d35c7396e7a0c134a19a363ec1d83ad6b48e97b32925c580afc06778bb70879d43bc2501890e2d1399743f123325be7148bc3103a91023c2d6d00ed3c5e42f0aff69bc1750a74cb44fe45a87ec80ce11"}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x149c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "94bf2f926c062a3168887937b8bccff3246c887404303b027ea7e7b5ad436aa93f5bdf62e502e353d681f734cba478e4b52873c0658ffa0c7bc6aa468577e69f76036ebe06254014648a16c1f0d9e488728b9fdd9081dd67ab2562ab587122daefdb948f3db7f16ee7c83a9543c4671617e1fcc8b5b6c9ab6c9759c69a64d39cfe5f8ae5cd2240051318e703bc9a553a43c0a81c9107530e0f7a6c2bf6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x81, 0x6, 0x1, 0x0, "e0434662c8e9906b9eedc2d1b6ad06d404a158c793a8f6a517750350855efa9fe4fd18c5c898335d3040499ad333f7a7993baa90a256d4a2b385cac86f8877372345f3fb3b28dfa4fbd58b22687c27dbb67ad41875a99fc40f1ce070b6247b65cdd5ffce920dd62d53fc382aebc1d306e627c5d4c72177c497fe5bb38f"}, @NFTA_SET_ELEM_KEY_END={0x12c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "63411d1e72429b6ceb533e1ab050f4355268dc8ef2b19a7c7783f7100800ec918bdfe4cb2e544b5b7ce1a2c05a51fffa5868212d4ed17b8281a6ae7732d1f10cd746a40371f62ff442689cc1c300197f34"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "b59c9dda10366346370270bf98471c48cd1b32b9534114c8d0ef2be24e69f73554aa05c81b377dd649bbeb337652529e5966c502c81f55470de364d34c54fac44f553f6dc0"}, @NFTA_DATA_VALUE={0xc5, 0x1, "ad4fc5059b8021d1f36660957b402a2889fb0471061f1fd8f33766e5683a845dbb8e05bc52a8d3ea467991595fc738d081706ac39f410f135a77b53284d99c12035d6bff265e1ca8189fb94f940263748edc90f78ee5da5d8e78812c521cb1aeaffa8ddbd21c78aff3155b4c6a49d957a8686327e31a51d6a365c02d893e6fb1fb768c608ffa89c317ec55359c29ca49dfd9ce9091201ba3281acde03c59ea728b580c6a6de59c4c45e7e86b97c92eb2e63cd77e925935b87bc6369497d06c2942"}, @NFTA_DATA_VALUE={0x7d, 0x1, "491cee248e245ad507c5b4a4ded5f39025c649f542db7105a2c91653280ca3332da2da6e731bb7ab2e3dbe89869ac9a590f0a34cb5525cc045b3321f660c14ef048893f9af8fb54ea348b36dfd7f0aba70fe96a176e7717f82a57581eee763653bbb21f6510728472f713b0c90574a2cb1d92287ff773c3c20"}, @NFTA_DATA_VALUE={0x29, 0x1, "d9220fe98fb41ae5add69063a7bf99c739baf68df148872e3dfd64082fb22acd59caa160d1"}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VALUE={0x1d, 0x1, "0aed86ddf00726c15b9684cabefd4a8a42a5c5203ddcb10991"}, @NFTA_DATA_VALUE={0x65, 0x1, "577ee31d5a39617016df4223d3af24cc1f7a5e1ae7e322dcb759d04e4ed806a5dedae348584296c9b82df9dfb49b78c6fbdee5c099adf27d7c5704148b163232db83cb482ee70bb3625dc14c3399e0c6e271a0c626e2654f361c01e38a6b9cf6e0"}]}]}, {0x1118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "98837e93b8abbb6a1180138d7b9782110cf32fabf5897d0ea6a349ac4a1ff6c55dbadc1ca06c31f28eee7c3716"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x1001, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}, {0x464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x160, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "4b0901dd60a00bcb9f5c21241542d54b6a301d0e2e2dfd42068a4c2a6eac30cb175025a9c992c900383ccca3eb126319f44f62e3e72f00dd48b556589979f48de438a90d4c3512947de8be1cd19a79c05eb6ac6a90d3d940332a78e7b23482f702c4c6579fddbb7df13e61a108099a3b5f6fae4b794354a6e0ac481d539793f711259a35de82dfcb5364f8d2568667cbeef4b52d2353ae160654b4e5f84463ed0cd6525f28d4843e861ee9e8b94a6126d31366a5ba19781aefb187456f944ba751537dafba27e74d9637bfb8726c7e4a81d6fffc374d8a5b09222cddb5c71caae2"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "7f85e666b394c6cf18914558f7c23c12a593944a4b6c046384"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "0e"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "40b39718c5dd42fc4ca81b229223b998ce07b201b5b85f8d4250cdb506a2bc5923129afc2ff1913ab8fe5277228266eecbfea44a5eb7ed25580642e2a2426c514fa0c3e49ff613ec6b9306ac380de25595b5ea6fd591fe32914bd4dd57de8256ab522b5b40eb3d2e221e27e4be609ccc9e2d9b807913dc017f870b7090a2dc58a6108f69a392a86129fc3573f681daf488bacf72436ac12979502be71e66e75d7bdd5321ddaad1c34779bd19b4c77d542e382e5fccfd795c3dcbd8aa9982f1d0aa481973821d1bc0ad28403d5edb9d29d2d51e99c7360df5678c83e4e6"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x39, 0x1, "ee2e1a98e8e4e24e38464ce46eb7a3f96bcf26a94a538adabb83244b0530d01e683a497eba20fd02961634686a830452eb1d34f27e"}]}, @NFTA_SET_ELEM_USERDATA={0x39, 0x6, 0x1, 0x0, "acbfaf828c09c95012c66bf5b2f1a0d2d6592de41608af839d8b35081604fb6010d1439edb824b9fa0fb9fd9a138fa54ada557acd8"}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x108, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0xd8, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc}]}, @NFT_MSG_DELCHAIN={0x154, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0x79, 0xc, "077b6c0fd1462072aedc1c196e7a0e13c40d4674526321c594c1e35d411522904c74fa7ad46a258f24b4f7d7396403007f82e1750e10109045fc72e06a1147fc48ee2f2df758570047e2b1f127cd261ae631c3fb89508824548f7f037282896679fea30287e1a9efb514028126759f63bdf467365e"}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0x97c, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x968, 0x3, 0x0, 0x1, [{0x964, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x8fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "ac4974f5008070e49254ec471fc933c5cea3abdfb548822093c3e4464205df17eed3951e54298b5d2a11d75a8ee9ac48e4bada38affb807781c619d29e066ec42878ad991ab66409d2e0d3e85d91298458612bed39e118b6778c2811b7350872f954c5929b8555959d1f430dbcb12def10f901547513f308f606e50fb5a9126a1be55697bce4c92d767093b753b5e883ec37b0e30820a8a8687b2e06f305cd6f0d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x809, 0x1, "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"}]}]}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7ec4}}, 0x0) 01:51:11 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@empty, 0x0, 0x0, 0x0, 0x0, 0xc0, 0xda20}, 0x20) 01:51:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f000000b080)=ANY=[], 0x357c}}, 0x0) [ 2122.377875][T18227] Memory cgroup out of memory: Killed process 18227 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2122.390436][T18247] wg2 speed is unknown, defaulting to 1000 01:51:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "c4679312c9ef6b4e2205f52dc85e7eb32835f4e785f875583e"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x130, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xf9, 0xc, "ede51e7e5bce53abadf5328216caf9f97f0efc3b6af533bed1ec47cd09949b9dec5338e19ff95c2d4f50d67b9026bf6cd2bd601e1e8d6597bd4f52d02daef0f7aff9296bff5ebe4d75e7403e8d472d89ee5dab98c19bccd94140c4a0fc60475dd302bd12798002e092932af04bab558a7824f7f0dde00e05aa3bdc58af5855f5374df4a35fb35de77fb039362fa7c3063554db22a62d4efc3cc45840eddaec060087f3ece654db6575e93db504f997d7338f9c6035e27facaa99184ca1136046aedb2d363d0fc536e6ba35e95951d6f04ec16186ffc5d8dfad66cb990debb998abe318fe7aef18bf26230367a46f411480787048ed"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x108, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xa1, 0x6, "a7df746cb08d89d7c28297b889965ba15d32b76ea1d66f38b6426aa3a8cd94679e7b8506789a4e7d361792ae1af8aafc6db288968c6d108907912e64cbe6145d90a7837d564ffb5fd3b3222f2fda435fd1946b9a26e5aaa2d19b3fa77514757367ca32be0885ef7ac5b97a3731c1d3c49147e460522d49abaf3422062294898d762e9c4373fa8add1123d8b64ac381a4a751ecae1a0fcaace922b114c8"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc}]}, @NFT_MSG_DELRULE={0x90, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc}, @NFTA_RULE_POSITION={0xc}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_DELSETELEM={0xae8, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xab4, 0x3, 0x0, 0x1, [{0xab0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xaac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa5, 0x1, "073021165726e182e3c4bf665777083a20c7b58f150eea24c0fe05ec87d346da8d0b22977460a19d38e4139bc871526fc6fee8a9f9e6ecf9cb39d3c8064bac1ad43bfd5b61bdad6cdf9f1d1c221716f82dd493285ca3c2a9ad7583e914351bf1ab1aa571931a7ea804d9f93b2715a0ac8e425431d1ccc5bb6e1f4201ef672d0464c03e6e0f8c7130a47f434328d14bd5653294bf116f5e075c326237ac790306287d8b34dc25f2f53b798849816093a9841f2f4edc0e265db8f5638f51c60457bd67286e8e51242e84a157ab060f01cfe4169cbda9f4a671b378a94f72616f01d6a793ed60dd6ad4ecc389ad2e30ebd4fdc0e67a408e43b013ab99e85e83e03ff5ab06244d7296f414755a67ce148461b29ebc8e26e12e72b0488fa67ab407afbd9e1d048b75e19d47ef2ee030e6a5db452831084117323ddddf5927103cd91da185076d9974aca674036b949ccaddf3fe358e2aa50c6de28fe5c1b2a5af8d449570488eb23ab5e68163bf476ab8dd6cdd5935b43c4003a05919a1a6b6b72f39c99e2e506532ec1b7538ab9e95491545fe597d8cda66eb99dd79b493204228f50e0a2f6489e40c749133184e677532b2b977f93513977d9555c6fff0a033e3e02f4aee5a7106e7ae2cac8292fd9ae2703b7fbb9f2710cb3a1b651b33ffa7b8da43c3a883ef8b7d073bb490bb06f4b2d4309ee57129daaddc50ace711a24720beeef56d1498de4fe85029e70251bec5c0fb3f527b1fe34da00e6336eedf7bf184a7652593a78cf5ad28d69d376e9d1742911c7523abdccaec9e5ec2bd6fd12df720eaf88795afc0392df8a97569d4ac7eac2c83fccd76f572e6e32683aa4bf4e423204ce551868f50a64e4c182aaee9ae0b4a005d9c9c5f76e48750471ab0936a7800f0aa15ddde3b856cb56a180827f637b2482836522cb7554901b1e94164ea80fcb4de4a88d2ca38fb95d6aa363a56caa2328c084c8db9ea141c2d848366decd5fe88c4f913f826e4e01260641df7222847cc02736c255cd6eae71f92b9e463079eeca2b99416fb95ea943054b7d1d0cd782b9f34d93d93a9eeb3c340afadb51bbd2c2971bcfe855d9f6697235f1a4de1d444a22bf3b08deb4b839c95516822723aee0cc4311d141650f3cfde04bd69b4423cf874efea826d2261099dd9feee92409d50116b0b7b0280bf0ed5ba62ab707653815d960d4e5c7e007f94a13a229b351d16f636a09e7414af5972fada782dfae72c67ff9409835f4c6cc315da64d294e8bd37d3aa7651268812ebf8bd892aa0932c2471abb1bde94c6a6f126c97b3f20e29ce3f8a1bac1dd9e7cc63463200f275aebb76a61b0faad3b85387bd0c61231e4c7be330f1da95c87e661f04437031424cd5232999c10f5b8de357aa91051d4e1f21352388e780d43bb0f709d9fad06c93116321fe96ef2c9862e418b283c3c0c9d00c2250d53ec53b167bdb3524bf0e55915b124af55c9969c561521efcd78b5510a6d67b56046b5d3abc65102e3c3d5f1977d2d375d990fe4b6bb8e9943c8125a0456395cb68d2d044bb1cf8cce9632afaef30163973aad380d1a9420241bfd1665c2b0fdccca31c6be0b0fe27c2e71b4bc03796d1d2f2a7189b3550da87356ffbb2d2217356d6364e474efc2c24dfa679d6ad80528d0d7535bb6acc38b319fe2838148b3c554fe9a5270d2f6ff3bee589255de84e14488e971ab58836df478e17a0711b0fc12d7e96fe6871ac770cd81263417966ef1763779cc684528ae2902ab8eb706517a0dc0062bb25c59790b331ecba781902af6851ffaf19a548c505104e16a1a7e449d00c0840b2e5bc844592bb9ad3a298071d718458a123bd83f7799972073b17bd0d87cc838a56c8da0eb13603bd663d240e172f2f7caf1adee6e3207378ce0a09e5a61d4c7651cfdbb60eede90d748f2c237fe27038b5e902d4e7f9748da5901ace329b1f8b2646f3ebc526ea065b6069387dd413232905dfbb4c68e45df7d5a2d0bbc5f4f993077fba5fd6454f53d46074003d25d14cc984f1017541a001118bd32f9866eb328c447794257660f93cc4d49aef4998647d0aa51c29c3d1fcfd7dcb797182e3832dfbbf8dbbb9f47a5c3df09461634b06852434bbbce992affef1f36c3525f134e5b70711d66a9969b1721ffe7cfa7f17c3b16ee2cbf86685f2ea6bdba831b00c1af7707bb659164c8bacad57b914b1e5f3f90028c3bd75696b067d2c75c7d8e2660a592aa33333168695a055325d98a794e7fb33d4ceeb4e3a78d50510f92a5d1badf05a151f0a57faa26cd9bedfd03a2299bbb2314ebe3c49ba42af5b27a4e7b44ea42ffa4469ea4f09d02f94aa1c52b19c0492ab92300ab6cd93f4d2e4416f6664e9332f4c5a3788c3ee3c64af8936143d200fb36c10a836a4a53f2d35e2caafe48fe0418b8b23abe50cb4c8ea693cf25dbad3bf35533d9c5930c54bdd716b4b88467553c095b4ff948656bec25d6ac88de7726fdd2d5b40827c37d35d8f6fe63bae1b693d3c2fad6427aed7015ea45ee3df3f265196eeb9ab2736fb9c6a62d6a93a8440a4467ade7181769130688f53a90f20fcc168d77a0a339bc02ab128e2dc0b636a4d245470ce8e09f30a2a63c50625120623a85ac752a60310681320384829e7fe5cd7ededa2cad4a43aae631210be3e60c6b6fea1cabe751a71b58cce682c775d04e15643573bd7080c5b526bbbc84da1f17f71974c919ca32ef0d53cb04d3a9659086d3eb4d4b3244f935c3e5d5809a6980a64317e79fb88db015901da4c1de8b0e09fd46a2497af65ebdbdd84cc7964df312b3e6a2797d45410a020ee22d1bdb580c396d4c704d86f06773b06d4bf59b1b87b57c0405c4ba86564da72edcdb7af30f1bbc492b96db49a58e4e74d136d194e4dab8093b015b233daf8c677f4b5875ad3b38e3616809400d76d8bc5644812a143f899faf30974b3868b1326cadae13bb5157a9ea4ff1b31464d2797b84d0cfd1356743ac33fe43f001adc17fb7caf9d59dcd751130d8f8fe6d1973ae5e054e2cad8598e73066436b96a929c74978713429b4f226789cc57b975ce90f024c27e4c5cb083a19ee0eec15cc4d66b80e517f61747a1d3fa4bc695bd37f421f9719732d603b9f5bc4e9caefa3ea76d28b0fff516ae4828cb591523e2cd8c7d5ca6ed2a5a27097fbf544da01a81b4c6bddeb970351e99cc41e0b6c23c2570de73edc037813ad999f929de7cdc1439f3fbb3e9413f460cb50bd4ee89920a729129d847679660f3bfef407f4a3d64c78eaef84cea32b8356caa7eef3638a39a273a08c4e72cf44371f3f1ff4c6fb4012924edd7a0d87ee0b9c566df7c14728586a7f84c8c4781b271f28e7b2771eb4300f5893caa777e2301c48e989df3ea0b3e5d139e46f4f41e4cbf67f256801c2b7b9a36dfb14c59d01fa36ef39a6279b38935f05e8d4cceeaf2924ae54a9581320b4d4926ff1aeaca76bbb944b3c781d6ec9f293fdf58bd4ac23c1d6c0eedd71fe27ed16f74e5a0d86e205ab1becfb86d1823efbf91cfc52352aa80d5e39c0f34d9823dfd308185fe118c1aa6b95bd2cf56c82d5040ccd6bb4ceb32b5e382896007277c5afefc55edfde99c761cca242de09bf6282abfa93195801d2df053de186b420a682bc1caf8a315db1c5ccf09ee2c5de0238b545a5019c0bb2f00146b8557ecbacc5bcbf4092be0fa792a5334635aeaed592f7128db3c623adbb9eef2304d35d8ea0840da4b10269ce7600ebf0eb01a33c6d82b1b3e38b4086981646beeb0c5a7f741c52b0a9ed0b04f5fe25570638e4b7ac84b475ce98466e57ead99349e6a71a56407db63ea0dd3813"}]}]}]}]}], {0x14}}, 0xec4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 01:51:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0x0, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2122.511903][T18261] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2122.522589][T18261] CPU: 1 PID: 18261 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2122.533041][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2122.543125][T18261] Call Trace: [ 2122.546426][T18261] [ 2122.549452][T18261] dump_stack_lvl+0xcd/0x134 [ 2122.554078][T18261] dump_header+0x10b/0x85f 01:51:11 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) 01:51:11 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 01:51:11 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@multicast2}, 0x0, @in=@remote}}, 0xe8) 01:51:11 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @remote, {[@timestamp_addr={0x44, 0x4}]}}}}}) [ 2122.558528][T18261] oom_kill_process.cold+0x10/0x15 [ 2122.563668][T18261] out_of_memory+0x358/0x14a0 [ 2122.568467][T18261] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.574053][T18261] ? __mod_timer+0x83c/0xe30 [ 2122.578675][T18261] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.584170][T18261] ? lock_acquire+0x4fc/0x630 [ 2122.588856][T18261] ? oom_killer_disable+0x270/0x270 [ 2122.594066][T18261] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.599540][T18261] ? lock_release+0x5cb/0x810 [ 2122.604659][T18261] ? rcu_read_unlock+0x9/0x60 [ 2122.609338][T18261] ? lock_downgrade+0x6e0/0x6e0 [ 2122.614195][T18261] mem_cgroup_out_of_memory+0x206/0x270 [ 2122.619849][T18261] ? mem_cgroup_margin+0x130/0x130 [ 2122.625012][T18261] ? lock_downgrade+0x6e0/0x6e0 [ 2122.630585][T18261] try_charge_memcg+0xef8/0x12f0 [ 2122.635661][T18261] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2122.641677][T18261] ? lock_release+0x5cb/0x810 [ 2122.646633][T18261] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2122.652390][T18261] ? lock_downgrade+0x6e0/0x6e0 [ 2122.657246][T18261] ? lock_release+0x5cb/0x810 [ 2122.661928][T18261] ? rcu_read_unlock+0x9/0x60 [ 2122.666608][T18261] ? lock_downgrade+0x6e0/0x6e0 [ 2122.671463][T18261] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2122.677369][T18261] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2122.682929][T18261] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2122.689181][T18261] copy_process+0x73e/0x7190 [ 2122.693774][T18261] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.699257][T18261] ? lock_acquire+0x4fc/0x630 [ 2122.703944][T18261] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.709416][T18261] ? lock_release+0x5cb/0x810 [ 2122.714102][T18261] ? psi_task_change+0x1bb/0x2f0 [ 2122.719068][T18261] ? lock_downgrade+0x6e0/0x6e0 [ 2122.723936][T18261] ? __cleanup_sighand+0xb0/0xb0 [ 2122.728886][T18261] ? psi_memstall_leave+0x170/0x250 [ 2122.734137][T18261] ? lock_downgrade+0x6e0/0x6e0 [ 2122.739024][T18261] kernel_clone+0xe7/0x980 [ 2122.743465][T18261] ? lock_acquire+0x4fc/0x630 [ 2122.748173][T18261] ? create_io_thread+0xe0/0xe0 [ 2122.753154][T18261] ? lock_release+0x810/0x810 [ 2122.757840][T18261] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.763322][T18261] ? lock_release+0x5cb/0x810 [ 2122.767998][T18261] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2122.774262][T18261] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.779754][T18261] ? lock_acquire+0x4fc/0x630 [ 2122.784465][T18261] ? rcu_read_lock_sched_held+0xd/0x70 [ 2122.789956][T18261] ? lock_release+0x5cb/0x810 [ 2122.794645][T18261] ? __ct_user_exit+0xff/0x150 [ 2122.799419][T18261] __do_sys_clone+0xba/0x100 [ 2122.804019][T18261] ? kernel_clone+0x980/0x980 [ 2122.808811][T18261] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2122.814842][T18261] ? trace_hardirqs_on+0x2d/0x160 [ 2122.819983][T18261] do_syscall_64+0x35/0xb0 [ 2122.824425][T18261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2122.830337][T18261] RIP: 0033:0x7f5e99a8ca21 [ 2122.834948][T18261] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2122.855185][T18261] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2122.863615][T18261] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2122.871616][T18261] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2122.879598][T18261] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2122.887992][T18261] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2122.896055][T18261] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2122.904045][T18261] [ 2122.933177][T18261] memory: usage 307188kB, limit 307200kB, failcnt 13128 [ 2122.940373][T18261] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2122.955857][T18261] Memory cgroup stats for /syz1: [ 2122.956048][T18261] anon 94208 [ 2122.956048][T18261] file 274432 [ 2122.956048][T18261] kernel 314191872 [ 2122.956048][T18261] kernel_stack 32768 [ 2122.956048][T18261] pagetables 77824 [ 2122.956048][T18261] sec_pagetables 0 [ 2122.956048][T18261] percpu 5423904 [ 2122.956048][T18261] sock 0 [ 2122.956048][T18261] vmalloc 8192 [ 2122.956048][T18261] shmem 274432 [ 2122.956048][T18261] zswap 0 [ 2122.956048][T18261] zswapped 0 [ 2122.956048][T18261] file_mapped 258048 [ 2122.956048][T18261] file_dirty 0 [ 2122.956048][T18261] file_writeback 0 [ 2122.956048][T18261] swapcached 0 [ 2122.956048][T18261] anon_thp 0 [ 2122.956048][T18261] file_thp 0 [ 2122.956048][T18261] shmem_thp 0 [ 2122.956048][T18261] inactive_anon 102400 [ 2122.956048][T18261] active_anon 266240 [ 2122.956048][T18261] inactive_file 0 [ 2122.956048][T18261] active_file 0 [ 2122.956048][T18261] unevictable 0 [ 2122.956048][T18261] slab_reclaimable 19640 [ 2122.956048][T18261] slab_unreclaimable 308575280 [ 2122.962448][T18267] wg2 speed is unknown, defaulting to 1000 01:51:12 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:51:12 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x0, 0x130, 0x268, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @private1, [], [], 'veth0_vlan\x00', 'team0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "9f960a965c13aa8431f2d28318e63051eb73bcec119ed40a71028e423fcc"}}}, {{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@srh={{0x30}}, @common=@hl={{0x28}}]}, @common=@inet=@SET3={0x38}}, {{@ipv6={@local, @private0, [], [], 'ip6gre0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 01:51:12 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000d7fe68ca0100000000000000", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg(r3, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 01:51:12 executing program 2: syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @link_local={0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fff81", 0x70, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x2}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "ffffffffa0f8ca1cc8000809"}]}}}}}}, 0x0) 01:51:12 executing program 3: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="1bf81bb9eb"], 0x20000600}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) recvmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 2123.080979][T18261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18261,uid=0 [ 2123.101171][T18261] Memory cgroup out of memory: Killed process 18261 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2123.125262][T18273] wg2 speed is unknown, defaulting to 1000 01:51:12 executing program 2: syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @link_local={0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fff81", 0x70, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x2}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffa0f8ca1cc8000809"}]}}}}}}, 0x0) 01:51:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="b7f2288d3aaea2bc0000def1260a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f00000039c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000eb00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="36619b90a2c18b674505c756d21390b121", 0x11}], 0x1}], 0x1, 0x0) [ 2123.222476][T18281] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2123.244036][T18281] CPU: 1 PID: 18281 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2123.255575][T18281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2123.265658][T18281] Call Trace: [ 2123.269044][T18281] 01:51:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0x0, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x48) [ 2123.271991][T18281] dump_stack_lvl+0xcd/0x134 [ 2123.276613][T18281] dump_header+0x10b/0x85f [ 2123.281063][T18281] oom_kill_process.cold+0x10/0x15 [ 2123.286210][T18281] out_of_memory+0x358/0x14a0 [ 2123.290918][T18281] ? rcu_read_lock_sched_held+0xd/0x70 [ 2123.296423][T18281] ? __mod_timer+0x83c/0xe30 [ 2123.301089][T18281] ? rcu_read_lock_sched_held+0xd/0x70 [ 2123.306674][T18281] ? lock_acquire+0x4fc/0x630 [ 2123.311380][T18281] ? oom_killer_disable+0x270/0x270 [ 2123.316612][T18281] ? rcu_read_lock_sched_held+0xd/0x70 [ 2123.322108][T18281] ? lock_release+0x5cb/0x810 [ 2123.326905][T18281] ? rcu_read_unlock+0x9/0x60 [ 2123.331663][T18281] ? lock_downgrade+0x6e0/0x6e0 [ 2123.336647][T18281] mem_cgroup_out_of_memory+0x206/0x270 [ 2123.342230][T18281] ? mem_cgroup_margin+0x130/0x130 [ 2123.347580][T18281] ? lock_downgrade+0x6e0/0x6e0 [ 2123.352449][T18281] try_charge_memcg+0xef8/0x12f0 [ 2123.357405][T18281] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2123.363401][T18281] ? lock_release+0x5cb/0x810 [ 2123.368080][T18281] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2123.373984][T18281] ? lock_downgrade+0x6e0/0x6e0 [ 2123.378837][T18281] ? lock_release+0x5cb/0x810 [ 2123.383609][T18281] ? rcu_read_unlock+0x9/0x60 [ 2123.388375][T18281] ? lock_downgrade+0x6e0/0x6e0 [ 2123.393314][T18281] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2123.399226][T18281] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2123.404979][T18281] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2123.411317][T18281] copy_process+0x73e/0x7190 [ 2123.415911][T18281] ? rcu_read_lock_sched_held+0xd/0x70 [ 2123.421568][T18281] ? lock_acquire+0x4fc/0x630 [ 2123.426252][T18281] ? rcu_read_lock_sched_held+0xd/0x70 [ 2123.431823][T18281] ? lock_release+0x5cb/0x810 [ 2123.436503][T18281] ? psi_task_change+0x1bb/0x2f0 [ 2123.441446][T18281] ? lock_downgrade+0x6e0/0x6e0 [ 2123.446302][T18281] ? __cleanup_sighand+0xb0/0xb0 [ 2123.451250][T18281] ? psi_memstall_leave+0x170/0x250 [ 2123.456721][T18281] ? lock_downgrade+0x6e0/0x6e0 [ 2123.461663][T18281] kernel_clone+0xe7/0x980 [ 2123.466083][T18281] ? lock_acquire+0x4fc/0x630 [ 2123.470848][T18281] ? create_io_thread+0xe0/0xe0 [ 2123.475813][T18281] ? lock_release+0x810/0x810 [ 2123.480501][T18281] ? rcu_read_lock_sched_held+0xd/0x70 [ 2123.485986][T18281] ? lock_release+0x5cb/0x810 [ 2123.490824][T18281] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2123.497594][T18281] ? rcu_read_lock_sched_held+0xd/0x70 [ 2123.503156][T18281] ? lock_acquire+0x4fc/0x630 [ 2123.508104][T18281] ? rcu_read_lock_sched_held+0xd/0x70 [ 2123.513589][T18281] ? lock_release+0x5cb/0x810 [ 2123.518276][T18281] ? __ct_user_exit+0xff/0x150 [ 2123.523044][T18281] __do_sys_clone+0xba/0x100 [ 2123.527764][T18281] ? kernel_clone+0x980/0x980 [ 2123.532537][T18281] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2123.538677][T18281] ? trace_hardirqs_on+0x2d/0x160 [ 2123.543717][T18281] do_syscall_64+0x35/0xb0 [ 2123.548162][T18281] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2123.554073][T18281] RIP: 0033:0x7f5e99a8ca21 [ 2123.558696][T18281] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2123.580402][T18281] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2123.589186][T18281] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2123.597168][T18281] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2123.605311][T18281] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2123.613279][T18281] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2123.621337][T18281] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2123.629839][T18281] [ 2123.635568][T18281] memory: usage 307184kB, limit 307200kB, failcnt 13232 [ 2123.671426][T18281] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2123.684566][T18281] Memory cgroup stats for /syz1: [ 2123.684762][T18281] anon 94208 [ 2123.684762][T18281] file 274432 [ 2123.684762][T18281] kernel 314187776 [ 2123.684762][T18281] kernel_stack 32768 [ 2123.684762][T18281] pagetables 77824 [ 2123.684762][T18281] sec_pagetables 0 [ 2123.684762][T18281] percpu 5423904 [ 2123.684762][T18281] sock 0 [ 2123.684762][T18281] vmalloc 8192 01:51:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 01:51:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, 0x34}}, 0x0) 01:51:12 executing program 2: bpf$PROG_LOAD(0x4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 2123.684762][T18281] shmem 274432 [ 2123.684762][T18281] zswap 0 [ 2123.684762][T18281] zswapped 0 [ 2123.684762][T18281] file_mapped 258048 [ 2123.684762][T18281] file_dirty 0 [ 2123.684762][T18281] file_writeback 0 [ 2123.684762][T18281] swapcached 0 [ 2123.684762][T18281] anon_thp 0 [ 2123.684762][T18281] file_thp 0 [ 2123.684762][T18281] shmem_thp 0 [ 2123.684762][T18281] inactive_anon 102400 [ 2123.684762][T18281] active_anon 266240 [ 2123.684762][T18281] inactive_file 0 [ 2123.684762][T18281] active_file 0 [ 2123.684762][T18281] unevictable 0 [ 2123.684762][T18281] slab_reclaimable 19640 [ 2123.684762][T18281] slab_unreclaimable 308575280 [ 2123.801861][T18281] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18281,uid=0 01:51:12 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000280)={0x0, 0xd, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x60ff}, 0x0) 01:51:12 executing program 3: bpf$PROG_LOAD(0x15, 0x0, 0x0) 01:51:12 executing program 0: syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @link_local={0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fff81", 0x70, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe000000, [{0x0, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "ffffffffa0f8ca1cc8000809"}]}}}}}}, 0x0) 01:51:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19}, 0x48) 01:51:12 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:51:12 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) [ 2123.824492][T18281] Memory cgroup out of memory: Killed process 18281 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 01:51:12 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) [ 2123.879509][T18290] wg2 speed is unknown, defaulting to 1000 [ 2123.932247][T18311] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2123.952584][T18311] CPU: 1 PID: 18311 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2123.963408][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2123.965703][T18294] wg2 speed is unknown, defaulting to 1000 [ 2123.973560][T18311] Call Trace: [ 2123.973572][T18311] [ 2123.973580][T18311] dump_stack_lvl+0xcd/0x134 [ 2123.973614][T18311] dump_header+0x10b/0x85f [ 2123.973637][T18311] oom_kill_process.cold+0x10/0x15 [ 2123.973658][T18311] out_of_memory+0x358/0x14a0 [ 2123.973686][T18311] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.010612][T18311] ? __mod_timer+0x83c/0xe30 [ 2124.015218][T18311] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.020693][T18311] ? lock_acquire+0x4fc/0x630 [ 2124.025368][T18311] ? oom_killer_disable+0x270/0x270 [ 2124.030567][T18311] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.036119][T18311] ? lock_release+0x5cb/0x810 [ 2124.040802][T18311] ? rcu_read_unlock+0x9/0x60 [ 2124.045569][T18311] ? lock_downgrade+0x6e0/0x6e0 [ 2124.050421][T18311] mem_cgroup_out_of_memory+0x206/0x270 [ 2124.056524][T18311] ? mem_cgroup_margin+0x130/0x130 [ 2124.061981][T18311] ? lock_downgrade+0x6e0/0x6e0 [ 2124.067014][T18311] try_charge_memcg+0xef8/0x12f0 [ 2124.072049][T18311] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2124.078036][T18311] ? lock_acquire+0x4fc/0x630 [ 2124.082715][T18311] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2124.088478][T18311] ? lock_downgrade+0x6e0/0x6e0 [ 2124.093335][T18311] ? lock_release+0x5cb/0x810 [ 2124.098188][T18311] ? obj_cgroup_charge+0x244/0x5e0 [ 2124.103457][T18311] ? lock_downgrade+0x6e0/0x6e0 [ 2124.108514][T18311] ? lock_release+0x5cb/0x810 [ 2124.113206][T18311] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.118788][T18311] ? rcu_read_unlock+0x9/0x60 [ 2124.123485][T18311] obj_cgroup_charge+0x2ab/0x5e0 [ 2124.128617][T18311] ? vm_area_alloc+0x1c/0xf0 [ 2124.133212][T18311] kmem_cache_alloc+0x9b/0x3c0 [ 2124.138014][T18311] vm_area_alloc+0x1c/0xf0 [ 2124.142446][T18311] mmap_region+0x448/0x1bf0 [ 2124.146984][T18311] ? lock_release+0x810/0x810 [ 2124.151687][T18311] ? futex_wake+0x155/0x490 [ 2124.156234][T18311] ? lock_downgrade+0x6e0/0x6e0 [ 2124.161126][T18311] ? do_munmap+0x100/0x100 [ 2124.165564][T18311] ? security_mmap_addr+0x73/0x90 [ 2124.170632][T18311] ? get_unmapped_area+0x1e4/0x3c0 [ 2124.175845][T18311] do_mmap+0x825/0xf50 [ 2124.180028][T18311] vm_mmap_pgoff+0x1ab/0x270 [ 2124.184654][T18311] ? randomize_page+0xb0/0xb0 [ 2124.189425][T18311] ? vtime_user_exit+0x218/0x6c0 [ 2124.194377][T18311] ksys_mmap_pgoff+0x79/0x5a0 [ 2124.199064][T18311] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2124.205140][T18311] ? trace_hardirqs_on+0x2d/0x160 [ 2124.210554][T18311] do_syscall_64+0x35/0xb0 [ 2124.215072][T18311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2124.221169][T18311] RIP: 0033:0x7f5e99a8b642 [ 2124.225590][T18311] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 b8 ff ff ff 64 [ 2124.245381][T18311] RSP: 002b:00007ffdae1694b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2124.253888][T18311] RAX: ffffffffffffffda RBX: 0000000000020022 RCX: 00007f5e99a8b642 [ 2124.262207][T18311] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2124.270610][T18311] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 2124.278599][T18311] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffdae1696c0 [ 2124.286666][T18311] R13: 00007f5e99000700 R14: 0000000000000000 R15: 0000000000022000 [ 2124.294747][T18311] [ 2124.304417][T18311] memory: usage 307152kB, limit 307200kB, failcnt 13311 [ 2124.314343][T18311] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2124.322650][T18311] Memory cgroup stats for /syz1: [ 2124.322881][T18311] anon 81920 [ 2124.322881][T18311] file 274432 [ 2124.322881][T18311] kernel 314167296 [ 2124.322881][T18311] kernel_stack 32768 [ 2124.322881][T18311] pagetables 69632 [ 2124.322881][T18311] sec_pagetables 0 [ 2124.322881][T18311] percpu 5423904 [ 2124.322881][T18311] sock 0 [ 2124.322881][T18311] vmalloc 8192 [ 2124.322881][T18311] shmem 274432 [ 2124.322881][T18311] zswap 0 [ 2124.322881][T18311] zswapped 0 [ 2124.322881][T18311] file_mapped 258048 [ 2124.322881][T18311] file_dirty 0 [ 2124.322881][T18311] file_writeback 0 [ 2124.322881][T18311] swapcached 0 [ 2124.322881][T18311] anon_thp 0 [ 2124.322881][T18311] file_thp 0 [ 2124.322881][T18311] shmem_thp 0 [ 2124.322881][T18311] inactive_anon 90112 [ 2124.322881][T18311] active_anon 266240 [ 2124.322881][T18311] inactive_file 0 [ 2124.322881][T18311] active_file 0 [ 2124.322881][T18311] unevictable 0 [ 2124.322881][T18311] slab_reclaimable 19640 [ 2124.322881][T18311] slab_unreclaimable 308566536 [ 2124.420117][T18311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18311,uid=0 [ 2124.436181][T18311] Memory cgroup out of memory: Killed process 18311 (syz-executor.1) total-vm:54464kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0x0, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:13 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000600)=r0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 01:51:13 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8930, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:51:13 executing program 2: bpf$PROG_LOAD(0xf, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 01:51:13 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:51:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x28}, 0x0) 01:51:13 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:51:13 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8947, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:51:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x60) [ 2124.578935][T18319] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2124.591600][T18319] CPU: 1 PID: 18319 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2124.602137][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2124.612218][T18319] Call Trace: [ 2124.615547][T18319] [ 2124.618491][T18319] dump_stack_lvl+0xcd/0x134 [ 2124.623204][T18319] dump_header+0x10b/0x85f 01:51:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x0, 0x7}, 0x4) [ 2124.627738][T18319] oom_kill_process.cold+0x10/0x15 [ 2124.632989][T18319] out_of_memory+0x358/0x14a0 [ 2124.637884][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.643390][T18319] ? __mod_timer+0x83c/0xe30 [ 2124.648023][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.653696][T18319] ? lock_acquire+0x4fc/0x630 [ 2124.658418][T18319] ? oom_killer_disable+0x270/0x270 [ 2124.663655][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.669297][T18319] ? lock_release+0x5cb/0x810 [ 2124.674075][T18319] ? rcu_read_unlock+0x9/0x60 [ 2124.678783][T18319] ? lock_downgrade+0x6e0/0x6e0 [ 2124.683658][T18319] mem_cgroup_out_of_memory+0x206/0x270 [ 2124.689221][T18319] ? mem_cgroup_margin+0x130/0x130 [ 2124.694338][T18319] ? lock_downgrade+0x6e0/0x6e0 [ 2124.699307][T18319] try_charge_memcg+0xef8/0x12f0 [ 2124.704269][T18319] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2124.710249][T18319] ? lock_acquire+0x4fc/0x630 [ 2124.714931][T18319] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2124.720866][T18319] ? lock_downgrade+0x6e0/0x6e0 [ 2124.725749][T18319] ? lock_release+0x5cb/0x810 [ 2124.730431][T18319] ? obj_cgroup_charge+0x244/0x5e0 [ 2124.735575][T18319] ? lock_downgrade+0x6e0/0x6e0 [ 2124.740463][T18319] ? lock_release+0x5cb/0x810 [ 2124.745167][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.750867][T18319] ? rcu_read_unlock+0x9/0x60 [ 2124.755812][T18319] obj_cgroup_charge+0x2ab/0x5e0 [ 2124.760808][T18319] __kmem_cache_alloc_node+0xa5/0x3e0 [ 2124.766825][T18319] ? copy_semundo+0x187/0x2f0 [ 2124.771620][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.777196][T18319] kmalloc_trace+0x22/0x60 [ 2124.781663][T18319] copy_semundo+0x187/0x2f0 [ 2124.786378][T18319] copy_process+0x23f4/0x7190 [ 2124.791286][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.796877][T18319] ? lock_acquire+0x4fc/0x630 [ 2124.801569][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.807404][T18319] ? __cleanup_sighand+0xb0/0xb0 [ 2124.812436][T18319] ? psi_memstall_leave+0x170/0x250 [ 2124.817742][T18319] ? lock_downgrade+0x6e0/0x6e0 [ 2124.822699][T18319] kernel_clone+0xe7/0x980 [ 2124.827144][T18319] ? lock_acquire+0x4fc/0x630 [ 2124.831898][T18319] ? create_io_thread+0xe0/0xe0 [ 2124.836967][T18319] ? lock_release+0x810/0x810 [ 2124.841911][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.847393][T18319] ? lock_release+0x5cb/0x810 [ 2124.852338][T18319] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2124.858665][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.864157][T18319] ? lock_acquire+0x4fc/0x630 [ 2124.868865][T18319] ? rcu_read_lock_sched_held+0xd/0x70 [ 2124.874357][T18319] ? lock_release+0x5cb/0x810 [ 2124.879138][T18319] ? __ct_user_exit+0xff/0x150 [ 2124.883922][T18319] __do_sys_clone+0xba/0x100 [ 2124.888641][T18319] ? kernel_clone+0x980/0x980 [ 2124.893452][T18319] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2124.899392][T18319] ? trace_hardirqs_on+0x2d/0x160 [ 2124.904436][T18319] do_syscall_64+0x35/0xb0 [ 2124.908887][T18319] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2124.914882][T18319] RIP: 0033:0x7f5e99a8ca21 [ 2124.919312][T18319] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2124.938923][T18319] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2124.947344][T18319] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2124.955343][T18319] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2124.963341][T18319] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2124.971410][T18319] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2124.979654][T18319] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2124.987771][T18319] [ 2124.993390][T18319] memory: usage 307200kB, limit 307200kB, failcnt 13403 [ 2125.005403][T18319] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2125.012370][T18326] wg2 speed is unknown, defaulting to 1000 [ 2125.012427][T18319] Memory cgroup stats for /syz1: [ 2125.018846][T18319] anon 90112 [ 2125.018846][T18319] file 274432 01:51:13 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x3, 0x300) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 01:51:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) [ 2125.018846][T18319] kernel 314208256 [ 2125.018846][T18319] kernel_stack 65536 [ 2125.018846][T18319] pagetables 69632 [ 2125.018846][T18319] sec_pagetables 0 [ 2125.018846][T18319] percpu 5423904 [ 2125.018846][T18319] sock 0 [ 2125.018846][T18319] vmalloc 8192 [ 2125.018846][T18319] shmem 274432 [ 2125.018846][T18319] zswap 0 [ 2125.018846][T18319] zswapped 0 [ 2125.018846][T18319] file_mapped 258048 [ 2125.018846][T18319] file_dirty 0 [ 2125.018846][T18319] file_writeback 0 [ 2125.018846][T18319] swapcached 0 [ 2125.018846][T18319] anon_thp 0 [ 2125.018846][T18319] file_thp 0 [ 2125.018846][T18319] shmem_thp 0 [ 2125.018846][T18319] inactive_anon 86016 [ 2125.018846][T18319] active_anon 266240 [ 2125.018846][T18319] inactive_file 0 [ 2125.018846][T18319] active_file 0 [ 2125.018846][T18319] unevictable 0 [ 2125.018846][T18319] slab_reclaimable 19640 [ 2125.018846][T18319] slab_unreclaimable 308574880 [ 2125.091280][T18331] wg2 speed is unknown, defaulting to 1000 [ 2125.127670][T18319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18319,uid=0 [ 2125.143896][T18319] Memory cgroup out of memory: Killed process 18319 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:14 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8907, 0x0) 01:51:14 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:51:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0x0, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000180)={0x80, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) 01:51:14 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8948, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:51:14 executing program 1: socket$inet(0x2, 0x5, 0x6) 01:51:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)) [ 2125.334939][T18346] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2125.349904][T18346] CPU: 1 PID: 18346 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2125.357205][T18352] wg2 speed is unknown, defaulting to 1000 [ 2125.360528][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2125.377181][T18346] Call Trace: [ 2125.380461][T18346] [ 2125.383563][T18346] dump_stack_lvl+0xcd/0x134 [ 2125.388169][T18346] dump_header+0x10b/0x85f [ 2125.392763][T18346] oom_kill_process.cold+0x10/0x15 [ 2125.397876][T18346] out_of_memory+0x358/0x14a0 [ 2125.402650][T18346] ? rcu_read_lock_sched_held+0xd/0x70 [ 2125.408162][T18346] ? __mod_timer+0x83c/0xe30 [ 2125.413018][T18346] ? rcu_read_lock_sched_held+0xd/0x70 [ 2125.418491][T18346] ? lock_acquire+0x4fc/0x630 [ 2125.423169][T18346] ? oom_killer_disable+0x270/0x270 [ 2125.428399][T18346] ? rcu_read_lock_sched_held+0xd/0x70 [ 2125.434045][T18346] ? lock_release+0x5cb/0x810 [ 2125.438730][T18346] ? rcu_read_unlock+0x9/0x60 [ 2125.443409][T18346] ? lock_downgrade+0x6e0/0x6e0 [ 2125.448264][T18346] mem_cgroup_out_of_memory+0x206/0x270 [ 2125.453816][T18346] ? mem_cgroup_margin+0x130/0x130 [ 2125.458931][T18346] ? lock_downgrade+0x6e0/0x6e0 [ 2125.464093][T18346] try_charge_memcg+0xef8/0x12f0 [ 2125.469131][T18346] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2125.475127][T18346] ? lock_release+0x5cb/0x810 [ 2125.479804][T18346] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2125.485536][T18346] ? lock_downgrade+0x6e0/0x6e0 [ 2125.490473][T18346] ? lock_release+0x5cb/0x810 [ 2125.495172][T18346] ? rcu_read_unlock+0x9/0x60 [ 2125.499857][T18346] ? lock_downgrade+0x6e0/0x6e0 [ 2125.504709][T18346] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2125.510621][T18346] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2125.516353][T18346] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2125.522601][T18346] copy_process+0x73e/0x7190 [ 2125.527199][T18346] ? rcu_read_lock_sched_held+0xd/0x70 [ 2125.532756][T18346] ? lock_acquire+0x4fc/0x630 [ 2125.537537][T18346] ? rcu_read_lock_sched_held+0xd/0x70 [ 2125.543092][T18346] ? lock_release+0x5cb/0x810 [ 2125.547968][T18346] ? psi_task_change+0x1bb/0x2f0 [ 2125.552951][T18346] ? lock_downgrade+0x6e0/0x6e0 [ 2125.557814][T18346] ? __cleanup_sighand+0xb0/0xb0 [ 2125.562768][T18346] ? psi_memstall_leave+0x170/0x250 [ 2125.567977][T18346] ? lock_downgrade+0x6e0/0x6e0 [ 2125.572922][T18346] kernel_clone+0xe7/0x980 [ 2125.577374][T18346] ? lock_acquire+0x4fc/0x630 [ 2125.582052][T18346] ? create_io_thread+0xe0/0xe0 [ 2125.586912][T18346] ? lock_release+0x810/0x810 [ 2125.591598][T18346] ? rcu_read_lock_sched_held+0xd/0x70 [ 2125.597072][T18346] ? lock_release+0x5cb/0x810 [ 2125.601750][T18346] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2125.608348][T18346] ? rcu_read_lock_sched_held+0xd/0x70 [ 2125.613820][T18346] ? lock_acquire+0x4fc/0x630 [ 2125.618589][T18346] ? rcu_read_lock_sched_held+0xd/0x70 [ 2125.624066][T18346] ? lock_release+0x5cb/0x810 [ 2125.628744][T18346] ? __ct_user_exit+0xff/0x150 [ 2125.634232][T18346] __do_sys_clone+0xba/0x100 [ 2125.638835][T18346] ? kernel_clone+0x980/0x980 [ 2125.643543][T18346] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2125.649447][T18346] ? trace_hardirqs_on+0x2d/0x160 [ 2125.654481][T18346] do_syscall_64+0x35/0xb0 [ 2125.658904][T18346] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2125.664810][T18346] RIP: 0033:0x7f5e99a8ca21 [ 2125.669232][T18346] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2125.689106][T18346] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2125.697554][T18346] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2125.705698][T18346] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2125.713671][T18346] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2125.721735][T18346] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e 01:51:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xa, &(0x7f0000000000), 0x4) 01:51:14 executing program 0: select(0x40, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)={0x3}, 0x0, 0x0) 01:51:14 executing program 3: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8921, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) [ 2125.729792][T18346] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2125.738066][T18346] 01:51:14 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f0000000840)={'ip6_vti0\x00', 0x0}) 01:51:14 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89e0, 0x0) [ 2125.826689][T18346] memory: usage 307188kB, limit 307200kB, failcnt 13478 [ 2125.840445][T18346] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2125.848840][T18346] Memory cgroup stats for /syz1: [ 2125.848993][T18346] anon 90112 [ 2125.848993][T18346] file 274432 [ 2125.848993][T18346] kernel 314195968 [ 2125.848993][T18346] kernel_stack 32768 [ 2125.848993][T18346] pagetables 69632 [ 2125.848993][T18346] sec_pagetables 0 [ 2125.848993][T18346] percpu 5423904 [ 2125.848993][T18346] sock 0 [ 2125.848993][T18346] vmalloc 8192 [ 2125.848993][T18346] shmem 274432 [ 2125.848993][T18346] zswap 0 [ 2125.848993][T18346] zswapped 0 [ 2125.848993][T18346] file_mapped 258048 [ 2125.848993][T18346] file_dirty 0 [ 2125.848993][T18346] file_writeback 0 [ 2125.848993][T18346] swapcached 0 [ 2125.848993][T18346] anon_thp 0 [ 2125.848993][T18346] file_thp 0 [ 2125.848993][T18346] shmem_thp 0 [ 2125.848993][T18346] inactive_anon 98304 [ 2125.848993][T18346] active_anon 266240 [ 2125.848993][T18346] inactive_file 0 [ 2125.848993][T18346] active_file 0 [ 2125.848993][T18346] unevictable 0 [ 2125.848993][T18346] slab_reclaimable 19640 [ 2125.848993][T18346] slab_unreclaimable 308574880 [ 2125.908509][T18355] wg2 speed is unknown, defaulting to 1000 [ 2125.951180][T18346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18346,uid=0 01:51:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0x0, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:14 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="af", 0x1}, {&(0x7f0000000480)="df", 0x1}], 0x2, &(0x7f0000000600)=[{0x28, 0x0, 0x0, "5513bbf65ca0d06d446f61ae9b89e23695"}], 0x5000}, 0x0) 01:51:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890b, &(0x7f0000000340)={'batadv_slave_0\x00'}) 01:51:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0xfdc1760ea3818999) 01:51:14 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000480)=@in={0x10, 0x2}, 0x10) 01:51:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) [ 2125.967549][T18346] Memory cgroup out of memory: Killed process 18346 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_DATA_LEN={0x8}]}, @NFT_MSG_NEWSETELEM={0x7264, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa48, 0x3, 0x0, 0x1, [{0x43c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xcd, 0x6, 0x1, 0x0, "a0c76b9d7066a92bdbe9cb7408742b286dc8c3952fb2d8e17304e52b5d72c176a3a169732dd04cef555ee527095d51d138ebe207d5f5ced7e6655953ea986347bbcc6f5be6974eb187502ca23d4b847721ed29b06b87d9ef9378e764459170a2584a060a9e810b33a9120b0910f59e7341fafa73be717983051d0c01616b7bd94402d5dee8c0a55972b4bf71ffc5ba25d722e5b369a33ad0b2e2310a94cc13e70145b96189580574aaae45ec5b6c3cd88c052deed5bf772d7740065d87e10a66c2a22ea06edda3a4c2"}, @NFTA_SET_ELEM_KEY={0x260, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "22a5feee5a594f1147e911136091b41bd3a71282fcd45581799e510814752e84da72d248ddcf09e4aa0d9932c3ef87e854822db687794b72a01d2370bc73183adca948b66525680549fcb56a107787ca7e4f9ae8e3c8129cdd449f0388084fb3063e3aadc4e4e20841da94032c422eadb501dcc6729b5d2c685f8fe31f1bfd724ddd1cda9b769d03e12240fba690bd0c6800419c1aa909a550c5880780552a52a75af345ee55dbae245c71d61a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x35, 0x1, "16adf219045249cd794f7453ea1b405f09d61b4e37fe4357fc04159f710792e550d85240f0f770aa75ba74b8b170ce0963"}, @NFTA_DATA_VALUE={0xdd, 0x1, "7a0f0e84a442c5b4f3fdfe1e0bb3ade56a6937334e9ec1643b68d812eac2c835043240a375923792375697f6b5f229ac577cfdb5880a99edfdc450aab8d6f78a5b65c1438540f998c05fda87a1fa3ca22588bd53f628c913c1dc662d7b7de222d88cf7a40ec02073f06b7a25202b33aa19653f70b956784930a69085aa73de4bfbad571e1879290950f19b0826effd8f41bb008e0157793b8e9c121a3e6c5550104895e61bf28f0a9fedece2f487579b7ed6583c8fabfb458ca93610a81e80420824ccb3bed1c858e12c33ccc23463b950ec67e745520779a8"}, @NFTA_DATA_VALUE={0x6d, 0x1, "fa5ba8fdfd264a6fff758e9032f9b7166d7d98a48e149447bb532b84f3cc4f93355fce2a66303f08290d24b141a926317db4dfc066d54c5a8106e40064c415363d6fdee2e1938b1cd17740651718b19df47c60b8e47befbe7342bc5a99e493978afb21c0f73c4d9328"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xfc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}, {0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, ']{%-\'\x00'}, @NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x5, 0x1, '\x00'}, @NFTA_TARGET_INFO={0xd, 0x3, "42cee6a909708c3e51"}, @NFTA_TARGET_REV={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x40, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_PREFIX={0x10, 0x2, 0x1, 0x0, '$-%}${(!):^\x00'}, @NFTA_LOG_LEVEL={0x8}]}}}]}]}, {0x384, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_DEV={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}, @NFTA_SET_ELEM_KEY={0xf4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "df07e5e638f60808ca6335be620b06e18095465df94c582cde2085df7de3678d20b4f3e340c164f6df63ba17164f9af636b230cdad31c66a6af392c9fe806585b05031b10503dafbeb32ae5efe7e2739fa"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x65, 0x1, "c749c32611b8c79c6b139419e00d598f9c9d38c0538e58206cb09cd7c6b0e138608681324b387c7bde10871b3c38267f1ad68facdb6d13c1cd0ac9adb6b38ca0c3f75e32ac482dead485fd554f38529aeea7793c28bad8f29653d1da61ab462fec"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "159382ddda6b360a9115366ac586fc06757e658aee2c7d377e56e5233ce0628d6ba594f3285042a5622cde312fa2ce5628400b8c7c3e16000f26eebf40dc986507dd0599735bc8be732ef4639ffcbbd7156797d2ddfeb283409d36266922316608d5a0356ef56fd3ff4bace294b886bbfc41057ef0390410aa7259abad01919cf47d4cf1a7a4239e5ad4c6270e223010ecedea0c4d29b3d47861ca28ebafc3d908f45689523a4555fa91d9ba1f1d45da37846583b846974a16e176bd4084f17a4ebe9487b4d09d90e5171b13fca130b4f6acc7d6ced29760868183d853520a9722dc198ff8"}, @NFTA_SET_ELEM_USERDATA={0xa5, 0x6, 0x1, 0x0, "8c23fcf0c6bafd5d7f6f7f692d98b4ce6c387c6b0b3df9bb0a459eb03e6e50cdb14270fc9cbffe2c45a225e06a8672380e5ff36480b566ee0f72ab4eb9927fb665a46f431154dcfd2258fd1b50f44905e75f1272f72524b402b6c1685b4e3127b7acc620884a3800b3c71a9d7a14da9b9605c4a1789c5534e9059403d5e3931fb67a5e45295b80b3525dfcf4b43e9023551c7c9a5ffc1c9540d3fb465da22759de"}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xc9, 0x6, 0x1, 0x0, "711df17ea56c0fc5ee1f6075a6c39849d7ba5275d2543ed5c0db4fcc139d6707bc5769d7ab33ecd19ec15aa26525a337be592fd4e5d961989d7b4207038b82b22183eae8f920748243e603d91c83d0f5f7bf28d2e56d32f1ab44bda5eb785bab40e321351ce303f144cfd90d818371b9e67cd7420da675e8e9119293f07947bc4f918905a374ad03e95f09aee65a5400fab01b75995e2641700985164cbcce1b4c5d2a7abab80b9527f38452847f1252662412fb70ee8606329fd7669f66041ebc2b06843e"}, @NFTA_SET_ELEM_DATA={0x180, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "c5cfa8aca66d95d72879e42f429b5d19a0926b465c9fc4b5471de8c08b02fbf86df19af45d703d7c68af8519f286f758b619a528f313101c1beb5491041e3be2caa07b116da93f7066449aafb764582446823739d384f7eb1da93c7aac8b8a2fe925624c5152666d99c22b28612e88642f99acb1fcee645a05bcb442bd0a688233e1fda11793bbcda1"}, @NFTA_DATA_VALUE={0x75, 0x1, "a81cfbb5ce18739d0082322fbd72afa932550b8ba8120f0f8d2707fb5f79a45dc1b443ee01fdb34f89664ebfdead74069ac5d4e4e09426aa13f33cfb283c93e256e29d2ef0f0aa3a20bbc831e74f402727c9389d317b1b64bf2791fb9d3eaf13dee5cbbeec27e3861cd18f3a4b8be6f77d"}, @NFTA_DATA_VALUE={0x9, 0x1, "1ce258c0d4"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x67fc, 0x3, 0x0, 0x1, [{0x15e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1248, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "e433921fd957591202a5ba0b124feee2e87874743852fc9e1b"}, @NFTA_DATA_VALUE={0x5d, 0x1, "c1156d53eb4f7f31a83869d681eaa3531639711106be4aeab9f5930258ddc57e41d9f6ef938dba6bd784d03b3b608d0d456e0e6407a5e8ff8fa47125c04ac737ad5f877bb054fb8e8d3e8438c9d7b0a404daa36b3d5c18d92e"}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VALUE={0xbd, 0x1, "25a1f8d43a358f5f45ca1a1dbe12bdfe96d5973779be4e15756fb238342aff8d92608826468432bc347e7ecbb7e723f2fa090f4b45fd0e1e2bb275b78884c4ce675a01f99e558f25fdb7546f6bed370618baa1b08a17d5674b187e9fe746b4729f691df01631adf56faf484e29435ad7dcb6b9bd616285e5d670b09fe50b6171cec6118a39bed3c14c3758e834cbcfc46359610d2a1ef2f11b27e9bb376cb7cd282d61dfa1be4c50f41633879273b339c38796d4939081112e"}, @NFTA_DATA_VALUE={0xfd, 0x1, "6aadcdf095a31c45225a75f0d508e149e21e0bacb062a7bb3317bd0697984e0e667520c52e692f475d6a9b8d06be32152771350816bdec2d718c9a0d482727fde5d7427e167de7d7f2b3374192ac605b26e589dfd2dee0fdd0734406b6f2df6ee055c841bf61f99a36a16085cac967366d24463572953e49c812ea800fdf17783b6fca4847a9f9fdf17559e1e91192763d54f16cc212fd9dc770a2c825f3a7ffb6b6dc6e4973dd7df94a9a4d4c1838bbbbca10a747ec7e06b5d90e9e20fc0b4a538c0a649af6a295fec0ae50121881996a9f15b8263b9293aa8716056e7b5f2060d217a27b027af7af80fcda60aa8dd19c81f508f8e51230af"}]}, @NFTA_SET_ELEM_KEY={0x18c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "aa07b4c5a5dddad3357206585396138dfab6ff1116bf1c3b6b19d3656bb2e9a0dcfbb160db5ccce828443c67f9b76b652b7769fd4f4fd014a2a6c419c511ed0980088e74b945fb417bffa687235802bcd544694a6250196d2b7d8a0b270e7e13663bf2a62b"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x9d, 0x6, 0x1, 0x0, "85d299501a1861c87b2fc13d1721772967443ce4d07c192082bdad81faa66a9bad94f3b3f29da115fb0a824f43b5ace74453ba50d2939d8fadb82531c0f44d314d99de8113ef627963ec6ac370c56fb5b3a59dbc2a751eab1ffa5ba60644a0556048674d243de4d85ac60a532800edc71c749aa4382eb770cc1597ce6310aa7b6dfc5ad1d8f74c61baf7b8ac905bee958f18ec7a8f2018fa95"}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "cbc727f74e6e98271daa7c0f6fb26e595055346990dcbe8161aac030995e63778083f92c76e44af1bf6b2937cf8ddd54dfad3a34204d2ec32981c7470b94731bb522686c3799e290fbb009729bb768bd89bd05b322ac0bba2b423159ce736098888c85add354d44e739200a08ce48bca9a914194cce05d70c9014dd8605e88e8b8141f645a660f7aab384dbb0a8e4ea2ff66d879861b0e9c639eebba0f9379f3b9a225ed1be8a38d34"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "752e6ed763b770322e"}, @NFTA_DATA_VALUE={0x15, 0x1, "b4bfda1c40bb3d7d8ec911578a1d3f1c5f"}]}]}, {0x2670, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf9, 0x6, 0x1, 0x0, "d26e3a647c9a76bf2f006b79a6e4b0d32597df45fe3972894e81ccfc4cc1fd680bd47d74e12e99b839cc733cd0d3da7607b5f8e19ea744c39c15d65eb363e85b2c5481e55160b4e68214693b820d57867d0793fb31294586b4b689a954fb51bee0dc8ec43638f4e214f02aa61c6af83231d8a69e0e9cd0030fb0aa2118b64ccf077f62beaded631b1e4bfcf442fc0b1ddb6c06bd056f611afdfa7c0267f2d2a15c50386b1615c9c6c2955fe00741e112d23bb5154f954c8ff8f71031a17ab35bb88f3167ed9d1763b7e4d204c43b0ffe14fb43eac0f257395ed84853ad9e9c059d2b6e372c9e3aecfb85d343d8bd305d9499e9ab0b"}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "f2ef8ff526a962c53cc422e65caa0de3bb42eec7ab27fd9a32dda74168cc66e613d0e74373d9e0ad875103b2dbb324b9224ea4ffe169c950623130c5f95cc355a11315451ea1f5ba568dd521c3057fe278b62a041d83598d906f39e879aff60a2c7d41b3820bdbb08c9de5920888b618c0"}, @NFTA_DATA_VALUE={0x61, 0x1, "ca076d18bad0af5b5e61035b1821d0f508f4ee2e5368d9699f58e9896a24e3bf22f8989d152d444eecf924fe474b0ee16505bd33624d23c81333609d51d06d0372ab9352e1fc409b6c76a4f5533b3b9e8be640e2d752b1ea00ba870594"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1118, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "0d509fdd87bc7c58c063f8dfb92deafd1adc539fe4fe2c11ba592b60769089274d3badf4220011f297e0f6ea2daf0ca3c5c71c29a646979bdd97523780ff2705e2bfc233a106201515df3c96c8d4400a679b6eb41354b0c2130b8f8f37ec263a940d04e5e6339b0a984b9b0a4245f6f8253a27f370cd1ab15362fc4bcd4eb8d1ecab662c2c61faff306d6bff3419f0660db3ea6afeeeaefb44b49e9deba4e2bb0b1d01fe33eac64724b8658325b5cfd79ae03ec202e710bb4d9ec87a49"}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VALUE={0x49, 0x1, "b7eb69a678dee50049338a41f96867d212152e0dc7f9588285cf8e132a257258ae16033db845213accbfdee2022e39c156d04fe7e635ed4f4290ee1e0966c3b60f58b08b05"}]}, @NFTA_SET_ELEM_KEY_END={0x12c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x81, 0x1, "052a70f4ce6563d4f8fc1a3223389ed45675aeb8458f175bac58e315df14e2c76cfd9e2fe53768d1cbec625cff024bbc648f89d205edd5aff7e059a120fa44d37f6334d098c1d922c5a9f810c3b2cef664cdabd59de3e6a3c8e0560317b4cde75438eb1c42f5f09354659c375e1c342251946ece32f9e11bc0c3766be2"}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VALUE={0x4d, 0x1, "957b22369a04b23f1e24c6a8d1cb8ca02d3ea43197bd324f51e58957ea71ba6ed1a2fd738c3f0a792f8064879953419687ea22b9d5d4465ee90a9f7bc8d8fe651a5429b5ca549f6206"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "5c737171d82f2b4e655ad1e60308280041a77c6e340a054f23770d183e8cb319c6899f1556eb0b5128114b8a64190af5b1d0f0c5c829ab520a0d15f0e547d1dea7cd01dd696a77fcf6c4f815eee1fb137dec69148853ce4669cfb8f9089cd8f07ed57649d6ddbac51d5d5272a60f74fd62ac480d9c5afb8f706ea4d2380df736f440d62005ee39762d78bd0f2f6026bf53a3fe747af7d1144d373f967767b128aa3f4dc5bf5afb64ba"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x89, 0x1, "2851f370b5ed483a0b0004f07b8f799fec743ec52ee129288542a86fbdcbe954e66ef88231accdb332add040eb340ead2acde0a8ce03914e2e5d7dc57b011f67537371ed46c4cbe41849427b629b5eac1aa526c25e92e26fd0aa23802d206193c7037ec1624c908f20cf009369366e7f42214dbeb93ddadccc0db69334b094cfb17def1a40"}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbd, 0x6, 0x1, 0x0, "ca0cf9f7922bc4356ccfb19a8232e437aef83be3a7016db1ba603da608f7a80291559cad441d9f9200d30fded10a86218a543db297fedb6c68a2bc99325b1a654ab95ffd2b518976c8ef335069b46b98ef2b5bbb393afef2878d8d6d9ca7bd896adfdee9cad79a5ad7d35c7396e7a0c134a19a363ec1d83ad6b48e97b32925c580afc06778bb70879d43bc2501890e2d1399743f123325be7148bc3103a91023c2d6d00ed3c5e42f0aff69bc1750a74cb44fe45a87ec80ce11"}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x149c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "94bf2f926c062a3168887937b8bccff3246c887404303b027ea7e7b5ad436aa93f5bdf62e502e353d681f734cba478e4b52873c0658ffa0c7bc6aa468577e69f76036ebe06254014648a16c1f0d9e488728b9fdd9081dd67ab2562ab587122daefdb948f3db7f16ee7c83a9543c4671617e1fcc8b5b6c9ab6c9759c69a64d39cfe5f8ae5cd2240051318e703bc9a553a43c0a81c9107530e0f7a6c2bf6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x81, 0x6, 0x1, 0x0, "e0434662c8e9906b9eedc2d1b6ad06d404a158c793a8f6a517750350855efa9fe4fd18c5c898335d3040499ad333f7a7993baa90a256d4a2b385cac86f8877372345f3fb3b28dfa4fbd58b22687c27dbb67ad41875a99fc40f1ce070b6247b65cdd5ffce920dd62d53fc382aebc1d306e627c5d4c72177c497fe5bb38f"}, @NFTA_SET_ELEM_KEY_END={0x12c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "63411d1e72429b6ceb533e1ab050f4355268dc8ef2b19a7c7783f7100800ec918bdfe4cb2e544b5b7ce1a2c05a51fffa5868212d4ed17b8281a6ae7732d1f10cd746a40371f62ff442689cc1c300197f34"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x49, 0x1, "b59c9dda10366346370270bf98471c48cd1b32b9534114c8d0ef2be24e69f73554aa05c81b377dd649bbeb337652529e5966c502c81f55470de364d34c54fac44f553f6dc0"}, @NFTA_DATA_VALUE={0xc5, 0x1, "ad4fc5059b8021d1f36660957b402a2889fb0471061f1fd8f33766e5683a845dbb8e05bc52a8d3ea467991595fc738d081706ac39f410f135a77b53284d99c12035d6bff265e1ca8189fb94f940263748edc90f78ee5da5d8e78812c521cb1aeaffa8ddbd21c78aff3155b4c6a49d957a8686327e31a51d6a365c02d893e6fb1fb768c608ffa89c317ec55359c29ca49dfd9ce9091201ba3281acde03c59ea728b580c6a6de59c4c45e7e86b97c92eb2e63cd77e925935b87bc6369497d06c2942"}, @NFTA_DATA_VALUE={0x7d, 0x1, "491cee248e245ad507c5b4a4ded5f39025c649f542db7105a2c91653280ca3332da2da6e731bb7ab2e3dbe89869ac9a590f0a34cb5525cc045b3321f660c14ef048893f9af8fb54ea348b36dfd7f0aba70fe96a176e7717f82a57581eee763653bbb21f6510728472f713b0c90574a2cb1d92287ff773c3c20"}, @NFTA_DATA_VALUE={0x29, 0x1, "d9220fe98fb41ae5add69063a7bf99c739baf68df148872e3dfd64082fb22acd59caa160d1"}, @NFTA_DATA_VALUE={0x1001, 0x1, "974dc869bffb117a66b9c75f8cde8db0ef50a53673965add3aa7dce7385f6676224f97de0dcdfa332725fd6fbc8e08445621027a7d0efe5acb2d0df7445fa88795ed407b39514726bce04d63b35b76a26236a40d51157863fec0759df6b0234af70a7a43745746bc722c508a475a535608c582319d909a464d6734970b7eefe9d0a44cacd70da6c4bf7bf23e4d9b2bef2cc285ab9c244d5e10f409fa4fd0f9774277363b8b03b847d7d1977063e52750c11e8241edc184c55168b4d6507b4a0a1ee03c85760d2ac8597ae688d7000e58769f73bfbd865b4ccb37016f5d0ed323a16d97c88a3cdc1c76c73573db2ce3c8908c2e994f72ce1c70112a416f6b284e8a1e04bfb0099b55abadcbd5d4c95d8a73ddc759c31ec24a4ae82a32222c209dc44ac85b68f76ff6f03e0448e75ebe831f3aee512da2cf5ea8b6018e664b73e2a1e59984a6d02ab0087b279ad3177b213789029cc7a49a207d6448b18a9775c778059c653ada54e714fa3702fd86aaad0e0ff7cf791180110652051e1ad97b6efa30df4f12dae984b8d8c0400278648c36158b35186ed7d577a6b7cabde0f460a7a888bc3f33f4b988526ed87bd96db2f18c9324601a27131cdf974b1542bb1ae1e6e5cb37309df5caf431ca297888ed3d4b8217f3e928e27388b8a4125e9bd7fd0790160c73d9b80d10ea338ec31be713a5f52bc139cc916a1a0fe8e0d8abee82018bc53bc659409bf3b79fc35d528bb4c6d926b60110c39ddb1e07e26420a7b625b7e9e1c395ff866beff99885b060c59d6dd745f8ac8adc9e1495ab8e1e574b58f4e4df1eea578ce5b4669795fd9eb0fbaf3ae5771d1cedd8939e4f8aa0136ffff2c298d91e00da45c3d58f184864171e3c0ffb95b88f8ff1e16f6264fcccfca6ed059d7344a83603c1c2ad231dd28ffcab5d5d1034b5b1c6d005a0aafff9797790c586609493b5c4096b25338256964cb5d9d1b796f37afdf064889f2465bc6ccf087ba7d69a3f6d69dfa66899c3df6318825bd176ea5cfe8b3d491962589289f85a249aaee85d66c6063f3d4dc89983b22d3b59d1e9ac160b3a04883b5e5e49e1812e7a81a363018a73ce07296d0d05437986c08baaa94fca071b0d67716bf04b5033e1c96a3e8364f608f0bd974729e575703d0f603687da4c086ba852cd5d65f714211422511111f0c18f57aee479f24456ad3b5b68b72723d2bfe488bcb5ba5f4480cdc9c9b9ae6768ac1414f03659b5e05a2369e80578e502b0b50caee079a4076b8ba8cd9439c8ce20e81b06ebf71aa76cd1ed5e3891280e2005bfb72980522d88c03d30d960a31c1ccc37837c145869208112f8fe7594029afafb5c33b1f0b4269fabedb100eeeb324c3274b33b4919fcb8dcec458c84b922d693f4bfb22a5c45562fc31c3f8eb5ada5986d1dbe11c8fb6f268e143083e6349df570223ff1603012593c1bee8714723a2deaf26e419b568d9e83fb4d9fb589220a53f2d17aa924b5559fdb19f380a3fba4bcee083f3a5bc33df2f7277654a3c7bb9fd840f1e849f51c7121bb69102353bbf8c3882731e1b37f3d61f9f2c96d7ddab06f3e2e0bb0eed64e1f56ea81244b984f96db716155436aa4e8c090cc8953ca39a8203b787559aad4d8fe106bb3107ba91bb8be9cb3f56747e229e557ec773374fbcfd63991c45ed2139e28be0cbfb5bb676465c94ba5ad16c478b02ebd2f3c36753eac3288215c57bcd405ac4bff12199942ac856db52f9ccf216253e7ff49d861b9d9bc5ea4eedfad0739a7d7f4658f9f1d103a91fa08f59421df39b5a71f10fee244715d8f25ea978056b6688b344126fc11a9f7238c572c7f772639d7f799bafbe9e872f0cd0cecdaf4074e4d026d6b742d4c200f12542b18620de2fb8d2eb5482cd9e84420a3b9fd67b3a26b613e51057b4bb932a2337d5bc0f14b82b205d944b7a1b3851781c7d4c7f9f2da8adff3e8c5ee965b9726182771f7e896b6899be60e522bbf81ed09dec8818a219bf31f1d907888d69032af24067c1305ddd80f13cce0b1d6467858d2ea74af9b5bad6640268475ec2c15f93671e8a2957b6b76c7a8e697146f66c52ce15c42d12073902b1e0655f10a61cfa2d7b66157aef2933d4917101683c3d697ef833b030634d07c60458e4b032771d6155aad96ab8f10f14a99fbce2be156383efc05ec2a9c24564c65f36f8824602c82f1b064e868f316b03749a2103e571a6aaa736b4cabd50314e5a04edc1298709316dde242c22096d172a250d32f93b9cd0fb37b69abecc61128480fd234d43ce49c5197dc847d4365ab5d136fbd220470332c796ca4731be00d2f510812ce668a511cfc2d7cb06e92eaa3ecfa723f0ca715f38d53a591da206a1568b278157f326c4845c173331005d96ea548b1ee18352acfcffea1613644ae943113a8724a9b57f2894bcbec954bd7724b3b4c6ce4b795333be41146e728fd2902b9572755f86ab00c0bc893cba4946000c6e25fe00d8ac7dc01caaa52dafc0c785d65ecbbefdcfb6f770204a6b6f209ec1e16c599942219635113f376bb963fa8e5ef5a0666fc2b4123a0dad088d5874fc644f966d8cdf0c27d81aaa09b1eed783fe05fba6d52a9bc44ae64aebf72898f2e8a1ad1186a0a4371e2df30d0636daa45675073f283b7d28b688e31386eb86efa6ab52af34d2786d902808fed5dcfea6a9c3d992aa90b2412269f5d0352fdfd5df4ecc36ed99f1e6999f1ddbab2f9b640268aa2198a1080bc08eebeb409ae360c6b767d33d5d7aa831378af5bbf0c10d8c50caf0a81ac81d5d8e519d8f733abb2da7d3a448e317c683fb3b183e2320a725474dedba02ceac580f8553a53bdabefc236efd6838c4bff2be523432d6bf0337507665c2190a5b510dd77338cd353f1b538d62f9e78561dde422a2a2bdf3601174d378137b795cec7da9c5c53abae0faa1b3b62a8ce4bb5b3ccf9d7dec791b096e6d01d3a259fb511bff4b8ac34703b15774f3da956aff0142ac5f44dbe8db69f602f2cc501b6d382d42acacb32988c9ca08f70f86fe16eafbfda972bdd40925a96381ba4b110efcd1931c636ffe028c2b6a8439e1457d0e82ab442a4a1d90ff66580d94bbbe1e0892fc3505d03cce5d4df58b2cc067a2ba8cfffe7fd18816be1a85a19856cb42e0156de5ab9d37bcefac97ce237fa192648f3c62608493bbd8141078b608a5ff919ae459b27ce2d7cb1601cf3ce2e7f8f575b19bf4fbc6f240542695c1fc84dbe333bebfdb1d2b3a1218e3c902cf08e4617472225c7bde6fc6300d42e2127c42209738e029d771a836efc05cdb5729ca714af029a86556406360014a613b5d914487f718e37df8d730f76f45ae41726695f639af1c52591d627d0672c3819ceb1f4bbe1b7fe3adca37c39f452462853c9c6f890c009741788e6a2068b9b3a9381498048af1e7ba4848bc16f060c672f91996db54fb4af3ec0877d24fbec5a59053497ea27cc34d06329c77debe38f2dc3c0ba0026bd0749343548d1db699f92e2bada086e9f6b13eb200b9ca7410c46b7ae90443b2aa33e170c93f425ed5b0d40c6a5f7192405a730aa44afe02a7ff4f8ebf768f895dd0f5307547aa6034fea877e150f236e86c9da9a82753e34ca4b6036e297ab09c2aa78aed098bd3daec5662c30201a58726fc0799e4462609e9003d5bbf77035a7e96ef74cd7a6f99f381d9f69e956573145273d26d797325eb404fa6bc39ef92812037a76d315eb89cd3747d69626c41816470efe0005a48f36acf41fe60d96353cf4f0b3bb2c09dbf71ba46355e36cb883c2a42205af59e7ef474d43572777af2b3a6b5cdeaa2bab1c40508d25618324eb5438d7bacd519c4b6e30fa8b37e559ea70c459f443ed9a62af97ea85cb585693e5d4c5b8ca4b4a0e41a19472344cdffe6d825827405851fb13d0df577b3a0acc00ceb4d7923a442bf56a7be89cbbfd159d952b1dfa9c0c607e28ae48c5fb62c2e433600647ac7e7b93577efc0c3ceff1aa83f59cfbabe8f94cb7153d517e8591a5422bb2cfb757d50e5af25728649430f1018029a5edbf98aab11b561e3f62249bcf133fa6d4782f8f78b9293913c7564a69a682f75f801de840e6697470acc93491b607ff0679d0e47f69fb5ee3aa157a48e22d222d68b13f2082228384b1b8aaf0f580709ea6820bcba6fddb38d1bfbac2b8c8186433fc37c6bed18e0604233bb05fb6c2c252147ba4ea7fea8615fa13249f03f3e7204e3f2911b18972c1fd67aab9ac3a6c416429a828aa8e4070df7a87db515404dfcc58c2e94490aff063892ff15e34a788e29581852f0b2a79ca547ef2b0c3ec944a608c54a2b4d08b613f651316018ac9cf203928d505cd4496f82c053c70e73e60356e5fec9b784fda11b61f9cde07f19fa8ddfb5067f5bc9c9d383651a02ac4979bb4510c7b2e0bc4db35b1615424e1b884a11a13ecfb4fb62bef49ba43f6bfffada488dc97bfdda1f0cddfe4b7c1abe054cad89172371b257804297444adcce0fc159f8354d1536b8e188c458dc0be6c87fa17f3572a6e20b0f6c89c7910d6c32275b4fd550d7ef8fce19950fb771938f6a38a5dcbb719079eb18374a24c8f8a5b523b1043039d5d091124a5a7821dcc425f101e48beaeb5ee1b66e5b615635c088cfe0b1647c432839c8d8aab3cf3271a9b1910bb40da2bcee60d9b89dfc4c83323a7e7b32f15ce032b38c0026037027a5a188c870ebbfc26995956049cec79670abef42e5c612a6bbde5cf88bbf58002cae093397b76bd5c69de5ff52f0305708834768b72c1bd6b520fc88be556ba02169cedc77944a95a0653acfd608560e132e9e00f4ebe33ea8bf69067c17152572ba1941886b08725e66ada8f9fbbf8986908290ff7c8c067a3b7f92b9c82da3aef6cc8e7e801456d0f4232324d59681ea2513533b94e09efc4366f70f13f663cdb9fed111c63c862a26491b07b940179dc0cffcd77804d9954b8837b1b1c7409c54d99f4ee1918a5ec3f46d210345dedc58193a3fa7758a6e49bd7845c986f27af8ad944e7067ff53c65a6eedf382beed96da817c06415dc2e9dd05ddcf43f6d1da2926ec82a29f2a22f2ca722ae772c8c0ba1ff490b23a6df4693c3450016218fb54d349e3bdcb1470f39d367884d42ec0e71422ade00ec4ec712077d129887f6b73fa1053d163b5d02d3b5202fb64757b951be53db840e6e1d5536c730a5990908efae54e5b660efc86778a622a7c1b6183d0c6761c13e448248e2813f63d593b96f1ecc9466f89df45724f0341e8e8bfbe7f6f3addc7b1e7097571406dd0a39b53e3182707af9397f796530f1ec0ac4b837adeebe549641871b525c5ce8cc526e7e36e89df952c3c9fd3147fc1889a849a26a4859a7313231cc07907cbb5704b9d8be111a284f6e8015e75b1fbae5dcade0e7c2e003608f8c611d08182ece7836385f30c802c660a23f1ded665091a82ee5960c26333b1747d6aec5eff1d73daa5460adfffa3e0cc4fca926a208a21f9bcc94f9d1bf793fd1ba75c78ea2e95cfdcab21d55ade6faea51f2cb4645bb2ede6a6eb7d34041741e0434ed23a9105fe4415f794f011e68c521f1234098af58fe364c0f7e517445bf50236d272571a14a51b88224be2b1ca47877e587afeb090a44e2e089ffb80866803c7aaa36352b79c3613b9c08e3cfca6ef7dc74e710f319c58cefb55a06f0cae63bd7834817ac58d0be5d76e33a001b16ba0e54f451d47c7e76ffa8049d09bcf499b4223608f670318a6c8dc7b67364631a61"}, @NFTA_DATA_VALUE={0x1d, 0x1, "0aed86ddf00726c15b9684cabefd4a8a42a5c5203ddcb10991"}, @NFTA_DATA_VALUE={0x65, 0x1, "577ee31d5a39617016df4223d3af24cc1f7a5e1ae7e322dcb759d04e4ed806a5dedae348584296c9b82df9dfb49b78c6fbdee5c099adf27d7c5704148b163232db83cb482ee70bb3625dc14c3399e0c6e271a0c626e2654f361c01e38a6b9cf6e0"}]}]}, {0x1118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x104, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "98837e93b8abbb6a1180138d7b9782110cf32fabf5897d0ea6a349ac4a1ff6c55dbadc1ca06c31f28eee7c3716"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x1001, 0x6, 0x1, 0x0, "6a3df45a464da5c60f4bc5aad144690bf64421773ccf393d840db8631d5f38397bbf100ac4164251732fdbb1663dde133c23162475c03166ef4f30d898c41a5a091f7bb0b483f0e54a81a1e85cdd4ad0cc35c1e31fa95d349250267bd4091daa09129e5c8f0408dc3bc63ea2c1402cd8b0950298ed084ff6eed9745b245e8e060e533a1aa3412a78781f79d5239fd922a0439b81ee2decaa60f7d0ad965277dae11515c8878d5ae189900c19f9f40dca63b461c8a4fffc231b5cc59d7b73eedcf24ff7f165d4930070230b2b2cd7449e75c61cb4d243e89c6cb74044c3b57078759c1d2197054e7d9eb417077d26ed963c452f32adf28b965d2ebf3b982f43b5e7eeb9e845d3b30a7aa2e5d5a46c4344552ad7a24dc4cafccb24d6dcdd0320ecd63e730882ef3297ffd0415144e342a9d942e6f370144c5e5256ba474d5c1e4210c58a085ed7e8960c2224b8c4c85c9dd99cd7266b1e9570f8d7fd386a6eea3dff782b4b612e4f007d3f9a45729966d88726b30a8d8293f65873dd7b626cb82dfcb1ca2a19fcf968dab6f3e7013aa85d5e51e09899e8415a61de5799f4d7c8966b9edc95f218b5f7eefb42da1237f4083cc2fae39b384f5ebff1b5446202da34d41f2d8207a6d3100b87cbc82590b75bdc356ff00431f4e2bbe7d0c7ca4d5b717ee85f554fa82761f61aa48d1e94da91f489017374821eaefe4b1f455ed3243edda3f093d127d3fbc9ed8e283cee44a1a5b29231e5c07918185b437a737dc2cc8357f3897e0eb97d8c2f6a29f5d7959eaebf7407411f4cc3da56299b1e60c26df128cdfcc7ada12dcfb5e844ad2860c3a3b67494043a58abc7464eca002938c6dbcdf71d7411e4a4bcbe82ce7dd47ae18221ef671a9b6cd30d35a2b8a4abd2e29897307720cfd30626342443b84180f45013d53fea4b63e8b70a8f8bab1b95b17cda01941c8acd8bdb03c6b4773fa894cb2c82fb3f4f4c4848147616e430e2fd1bda1e8ae7a3148b25fe9477858fdb8acad7b81a8b569dc2e97fe2f026b497c6ae175013322fa96d0135bdf367a370fbb51a694e833b538759c6c73adf956fbba60a528901cf63a83f0b6519396b9d88f33e6b9492cd4bee588e8a099c2bcb36f19ca4f70678c0ea3c23876f51b81b3792a00cc6cc66aa2634cc732edf654f0b3bcbe10b0d8f9ceb77f25da7c10bf6feb2215b7bee5244fe5b8ef08074f0de47b15c9eba67b744d34eac1bf237436d8df1b26f44e23e0dafc9929a5fd29dc0511ff52a71574c326ba44f87e79be755ab257f8aa08b6d2e265de07b729fd68490badb1c3316d3e16f0adbc2535408b96e4e53006cb2b1fac663d83c3122617da70cf777e42a8e4fca87e25ae9af4b086923cfe5ac0c7b9a6cfe0279f7e33dbdd83b9402d21684be7779dc66e42ace11f6178fb0eafc73890b4b58ceb2cb2f3adc9991af5c66393341829ba0da72d49eab7ea0ededc2502d2299f450c81c14a072a820c1723b66dd56752356b09a5387a76b608ca828fa5a7cd20dea51bdac2a9a20f2f55b6ef3c8a040d95992c2b9f644953c3f558d2b3d9b379737bc7be64ad3a2a2b42ca2c24e0deceab72d6fb89283f9448e837be1d05c2f91268f70f910f1e5e53cee539bbc99df33bc8f37683c6e1093fd6b91a40f0dc2ceeaa6485e5447d4f27b524e2c9afddb4524289aff9a27472e6f206e6f7ea8b559a6c27d8dcf943c4671757e9756b785e5a7ba059c4300c9fc5f927f96625d002a9aff94812ea1015447067bdf81c0a12245313864320eeb11d4ec1d796d7682086812ffbf808ed01823cc74caff650f110d46f173c406081b8deeabb3817b56f9b1850a55d2ba869d2ad591d7dc52202e6bd557f79e6a4a603b4cc9d828c7d558147d64311935bebb74bfd8d2675cb28f0051f52ea8dfb48a407996c17b22670814392731749d4ee7c64025f1d37ca69cb07127196f3d120e3747faedb0a69b76f453583aee831f9e3b94fc3ccb0c80b60177478c31a391f1ab0855fdc1f16553619bf58773773af19f0afa2e8f86ff1f76abb23e5c07682f6d6aa5922bf68bccc6981979474c84e5e9d7d7b242cc54d14cdd06ea1bc047ac8b53b48b471f491f457957c5ed62f5f36db7deb10207ac871236e6ea2d53208bf4d273a906dea01c94e408bcf5ece90745ebc0fee97852445bbc1ab82dcfe1d185d67e6f90623e4c422fa86f1bd1fd80ffb87dfb7d095eb0e361d013bef6896c4936502b44da549a254f1314cfdaff4c3251d18850a2a33c3c3e4b762831c56ea5703361deb2b48141cb812f0a417164e7a7b2ca03febd08e2870dc5ddf33d3cd5889152146c71f664cd85c88c175dd38172add74326caf1278fa6dfe15ae4ac47648e57b89d196a07bf2471265295874c1afc1e9e02cabfe52454eccb08b47a472c3638c9c61d36dbf192fc12ffaa1c5c102df39f17e043f93551acfc4190126964b8a70f715e7b60bcd717dc00a6839bdeee7024265306af7ce29434fef6f35eff5bedbec4d5972d5a943b3102459cde43ff0ea7e224c5452fe4a3e43c1b5927b45a3ea69ed1f807d84aea4d6a155346036ed4261647e50647cceb6fe4cd5c137f4fe0597d34f9af77e3feb4bf4ad072c516d2ece5fc9acb5eb44522bbecd4394fcb3effd3aa0b4f3cfdcc04f849e93a1a3b32c7eec3c2c7333f4535135dfe53935a34455af76f8deddcdf7f63906712675f6da5359bddccbcc52433d67898204a4bd69e197ede6f8bc1c015a015596b1f37f6b36b2c1abcfcedcc51dadcd601e3db7740060adff80c55c9891af07abb6c1d09b57062cea8030b0139250de16356fedd9a3b8ed59652703f301bdfcca666a084b48f2760f3a84808ba6df1518bf0dcb0618a7ab4a1a403550b6eef96fe592dea74bde44b43df99f1429931b30783d52b0433aeea5e5ea82bef68220430ff679d0bfb701dd60ec365ab9416a0a6fb8eb5f46f358c5f5e0cba4e65d73b13f13051e70505463096611051d44b3fa3e66f1cb08d01917fd41aa9310cc232bff94eb4b7511806c86af52b9ce6c9cebfb889cb95053a05f170a25a1632945db6d08ed83ea40bdad05e009ad609cfda9e6293a348facfc02ddfd095fe3323aaeaf1d39c784256bb1cbb01e9f1db0ebbca9f8015a868ec6ee63d2bf80ec23fc37db3addf75fd0eed6606d233bdc657c5034cbf32762667c79c2dcc971996f88e53112d4103652db5643d32529915c8263035bd5922cdfa2f1f171a6e5a50f53e6b880e7ab22c495fd8f690cf5ec0e837c23491f7b192f4c03dd5dcabf1ecb68ec334777543e576a820af0ba56c807a8c68e9a6770f6a76d0daad259f655118b27f956bb3dc4776e50941f341b84559363a6fdfef15bd9c33a0c4d1931397702982a3f516fed45246c16377fee64d66eae61a38f453884920de12544295b23910d22e8dafe2ddea414dbe5b123fe38fa7dc05b1e756729dbb52b45cb45a20d942a0b4347f8845949b1ee125f350eb075cfab630d26f224da5f71a8705e13bc449d505d147046c2ab4a12582600b6bc19256d8e8f33a6d6d9bda42e652964d2e692d63ba6467110434836151ff6e912f19d99fe7cc5b82449c4125fd48f2af6f3445682b71c44fe7b62b0de46b493726f62147004e81bd0b426c2ec019e94e3ba4a3e03d476813619cc348d715d0fecd1ae4c11111b0d2ba0cfb91ef3bc04c4c21f2096e5a0637ca6a7922b5e00d57a2a4a25b46cd3d56fc17890c97feafa8db578f685954adf908df133ab6132c454b78ad57cef949acbfb0a56a8f6666095197e94eb844f0c4a61f2ea277ffd7ac53e00c61e3821f186a4aa05a78a978171ea3980c5798ed5cb8ce51b4c5ae88a55f7d290fd0e50c8ad6136f398b5700121ec756486be7238728160fec4524ecab0a84025fd1674d3e721c24448099939fc97863e5b0269745483ef9dadcbc5b6628ccccc006025f36d1311454f65033923b1a0aad3b600fb13d6157420eef23016b3ad3c67ed4d9b1bdcdf45705f22e88fba4aacf26764c8faa71483e617de040143ef06212b36dd0dbfdca90e0f0acc98d212b11031577dd881e492de3885189727d56af6290280166ea829491103002960d2cb1d6f9f987b6d50e1adbf5bf98e09e8b215f0ae6a1b946b5efe5a700e3d30eac24cc11debf55e060b00ffce7e195ba808fc5c7ae669480cc5441dd50ef5ed2767714c0c995fd738c939b31eed14d591278fc6c558a8f59922347d846f9cfe2201e26ceba5fd09877e63871a466fc04e18e3dbf706da70728632edbd625bcdcb28f0eb4443780bfda7f56bf7c2246a57e14cd079835009af2568e37dd35a8c880013f8f47f4d1f0123948473c3aee36d13a7fab835c57347bdf48f02be84a4140a50e824004655ff377b8115eef1b527c92c261e3b92b85b32f91f8cb0eaa41a1abc77ac572045f5f1c904f81dce267c013de5f97bb79c9444776d638c0bdb8e5822127df10b892f766ffdb4856f9b8542c0057b605c92204ce34c544fa3c837ec968c71e483e7d8e8c04b6a6cdfdb7d0be367ce499cc50714fecd049330387c3efeaccff79d00ea382354e34f293012dbc455217c6ad877f23924bdaca29ddc16ccca9665e6aa2934937741d91717d3aef186f7b7a0f7602074d9f7af6fde6539ad22d83168cd6a99f6306872a06c83d96122dccae8220195329cfd79bc6dfb2d5acbb635103524fb70517dc3cb3d1d850e64c191e0840299d91485a5a01447f3c22a332ac726620c003349c356c4da0110c5bc1b32189a374104cb027677e382db85aa62bf7245f90eced5ef3da7601a8ae27b097a318b3566cc3e1bdf6ed14fc73ed10d41cd00c53379ad7a4fb907f6357fbd89dddaceafd592e6443faa3877ba24ce661761261654c140559392de6917dd698fa46090e6f7cb08033ef29c9d4d3ad5a6cb8157e54d73e59bbb05a37267f13cd656353a234936551ca00c0b204b53fd9cd9bbba15b1951e4ba68b5ff2177b34b20a41f9179f13757f09f1ea10601f62fd05a6f271104348010b07e76186180941896592beb7cb3f5e6fc7c405156dbc2c9210eb3b58518a025f5d857ae420245f2aa9675968f4b11ac1fd3f0fe1ea1abeab77f27610f35af575fe3d3bcfc9210dab39bca4f9cda5a58111eddafc551934173fb09fa338c6ff7cce5920534518fa6c6e97beec7c92207bc5a784138f61b8287b552fc9da9fdcff3c72894a7f64a670997af5543628222e53b368ee697ff3efcd123a30eb81d7f96773549dc860611e62a42f25e1722b09adad9ae0b42489c59a6259ebefd8c639ab03ca7336b69d335fc5df42a10ff177496dc584d5f2385f85bb9a210dbbc4a8255edb35b6c44a3f09f8ad5205e4b213ee67e67e895fb8a9d33ac962f970555a870dcd883e590fc21cbbf14e24d688397746e60e461f965273adc603ab1a689e72a3985a46ea27051a132450060e2c902b6452457a861af953de0ac0bacdc832959c2086e9a1bba61b98775008a2cac3db27da5e97fa89db05d3b2d55230460204eb4efdc92ff16618d4f33c90b2835d67fbb3fc098a293f815a08006a405d5d994aa5f8d521523c3b153e444f803ff1473044a37daa2bdce2958b289df97ee6f864c42eaa74b20c89f4533efbfdf85fdcea4eea383b1fe3646ba2ee0bc0afc279c8387d5bcd9ebb50dfc92619fba8350afacaf95443f85a34250948f02b4faa8f4f9335326fc0132e35913d0741fb6ed0ad18fff42cdbbb65105d6e926b7844e2578fc3e81904293aba22847"}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x70, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}, {0x464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x160, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "4b0901dd60a00bcb9f5c21241542d54b6a301d0e2e2dfd42068a4c2a6eac30cb175025a9c992c900383ccca3eb126319f44f62e3e72f00dd48b556589979f48de438a90d4c3512947de8be1cd19a79c05eb6ac6a90d3d940332a78e7b23482f702c4c6579fddbb7df13e61a108099a3b5f6fae4b794354a6e0ac481d539793f711259a35de82dfcb5364f8d2568667cbeef4b52d2353ae160654b4e5f84463ed0cd6525f28d4843e861ee9e8b94a6126d31366a5ba19781aefb187456f944ba751537dafba27e74d9637bfb8726c7e4a81d6fffc374d8a5b09222cddb5c71caae2"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "7f85e666b394c6cf18914558f7c23c12a593944a4b6c046384"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "0e"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "40b39718c5dd42fc4ca81b229223b998ce07b201b5b85f8d4250cdb506a2bc5923129afc2ff1913ab8fe5277228266eecbfea44a5eb7ed25580642e2a2426c514fa0c3e49ff613ec6b9306ac380de25595b5ea6fd591fe32914bd4dd57de8256ab522b5b40eb3d2e221e27e4be609ccc9e2d9b807913dc017f870b7090a2dc58a6108f69a392a86129fc3573f681daf488bacf72436ac12979502be71e66e75d7bdd5321ddaad1c34779bd19b4c77d542e382e5fccfd795c3dcbd8aa9982f1d0aa481973821d1bc0ad28403d5edb9d29d2d51e99c7360df5678c83e4e6"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x39, 0x1, "ee2e1a98e8e4e24e38464ce46eb7a3f96bcf26a94a538adabb83244b0530d01e683a497eba20fd02961634686a830452eb1d34f27e"}]}, @NFTA_SET_ELEM_USERDATA={0x39, 0x6, 0x1, 0x0, "acbfaf828c09c95012c66bf5b2f1a0d2d6592de41608af839d8b35081604fb6010d1439edb824b9fa0fb9fd9a138fa54ada557acd8"}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x108, 0x8, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0xd8, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_TYPE={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc}]}, @NFT_MSG_DELCHAIN={0x154, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0x79, 0xc, "077b6c0fd1462072aedc1c196e7a0e13c40d4674526321c594c1e35d411522904c74fa7ad46a258f24b4f7d7396403007f82e1750e10109045fc72e06a1147fc48ee2f2df758570047e2b1f127cd261ae631c3fb89508824548f7f037282896679fea30287e1a9efb514028126759f63bdf467365e"}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWSETELEM={0x97c, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x968, 0x3, 0x0, 0x1, [{0x964, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x8fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "ac4974f5008070e49254ec471fc933c5cea3abdfb548822093c3e4464205df17eed3951e54298b5d2a11d75a8ee9ac48e4bada38affb807781c619d29e066ec42878ad991ab66409d2e0d3e85d91298458612bed39e118b6778c2811b7350872f954c5929b8555959d1f430dbcb12def10f901547513f308f606e50fb5a9126a1be55697bce4c92d767093b753b5e883ec37b0e30820a8a8687b2e06f305cd6f0d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x809, 0x1, "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"}]}]}]}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7ec4}}, 0x0) 01:51:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2126.101491][T18373] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2126.118582][T18373] CPU: 1 PID: 18373 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2126.129431][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2126.139595][T18373] Call Trace: [ 2126.142892][T18373] [ 2126.145926][T18373] dump_stack_lvl+0xcd/0x134 [ 2126.150651][T18373] dump_header+0x10b/0x85f [ 2126.155098][T18373] oom_kill_process.cold+0x10/0x15 [ 2126.160244][T18373] out_of_memory+0x358/0x14a0 [ 2126.164960][T18373] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.170464][T18373] ? __mod_timer+0x83c/0xe30 [ 2126.175108][T18373] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.180616][T18373] ? lock_acquire+0x4fc/0x630 [ 2126.185435][T18373] ? oom_killer_disable+0x270/0x270 [ 2126.190678][T18373] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.196187][T18373] ? lock_release+0x5cb/0x810 [ 2126.200881][T18373] ? rcu_read_unlock+0x9/0x60 [ 2126.205569][T18373] ? lock_downgrade+0x6e0/0x6e0 [ 2126.210452][T18373] mem_cgroup_out_of_memory+0x206/0x270 [ 2126.216035][T18373] ? mem_cgroup_margin+0x130/0x130 [ 2126.221189][T18373] ? lock_downgrade+0x6e0/0x6e0 [ 2126.226082][T18373] try_charge_memcg+0xef8/0x12f0 [ 2126.231140][T18373] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2126.237138][T18373] ? lock_release+0x5cb/0x810 [ 2126.241935][T18373] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2126.247681][T18373] ? lock_downgrade+0x6e0/0x6e0 [ 2126.252547][T18373] ? lock_release+0x5cb/0x810 [ 2126.257266][T18373] ? rcu_read_unlock+0x9/0x60 [ 2126.262008][T18373] ? lock_downgrade+0x6e0/0x6e0 [ 2126.266976][T18373] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2126.272909][T18373] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2126.278503][T18373] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2126.284702][T18373] copy_process+0x73e/0x7190 [ 2126.289426][T18373] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.295190][T18373] ? lock_acquire+0x4fc/0x630 [ 2126.299990][T18373] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.305825][T18373] ? lock_release+0x5cb/0x810 [ 2126.310618][T18373] ? psi_task_change+0x1bb/0x2f0 [ 2126.315601][T18373] ? lock_downgrade+0x6e0/0x6e0 [ 2126.320937][T18373] ? __cleanup_sighand+0xb0/0xb0 [ 2126.325983][T18373] ? psi_memstall_leave+0x170/0x250 [ 2126.331324][T18373] ? lock_downgrade+0x6e0/0x6e0 [ 2126.336298][T18373] kernel_clone+0xe7/0x980 [ 2126.340717][T18373] ? lock_acquire+0x4fc/0x630 [ 2126.345884][T18373] ? create_io_thread+0xe0/0xe0 [ 2126.350776][T18373] ? lock_release+0x810/0x810 [ 2126.355481][T18373] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.361329][T18373] ? lock_release+0x5cb/0x810 [ 2126.366018][T18373] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2126.372458][T18373] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.378111][T18373] ? lock_acquire+0x4fc/0x630 [ 2126.382806][T18373] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.388604][T18373] ? lock_release+0x5cb/0x810 [ 2126.393407][T18373] ? __ct_user_exit+0xff/0x150 [ 2126.398289][T18373] __do_sys_clone+0xba/0x100 [ 2126.403073][T18373] ? kernel_clone+0x980/0x980 [ 2126.408136][T18373] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2126.414045][T18373] ? trace_hardirqs_on+0x2d/0x160 [ 2126.419093][T18373] do_syscall_64+0x35/0xb0 [ 2126.423533][T18373] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2126.429548][T18373] RIP: 0033:0x7f5e99a8ca21 [ 2126.434084][T18373] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2126.453858][T18373] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2126.462301][T18373] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2126.470363][T18373] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2126.478356][T18373] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2126.486368][T18373] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2126.494368][T18373] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2126.502367][T18373] [ 2126.515091][T18373] memory: usage 307180kB, limit 307200kB, failcnt 13560 [ 2126.523910][T18373] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2126.530914][T18373] Memory cgroup stats for /syz1: [ 2126.531097][T18373] anon 90112 [ 2126.531097][T18373] file 274432 [ 2126.531097][T18373] kernel 314187776 [ 2126.531097][T18373] kernel_stack 32768 [ 2126.531097][T18373] pagetables 69632 [ 2126.531097][T18373] sec_pagetables 0 [ 2126.531097][T18373] percpu 5423904 [ 2126.531097][T18373] sock 0 [ 2126.531097][T18373] vmalloc 8192 [ 2126.531097][T18373] shmem 274432 [ 2126.531097][T18373] zswap 0 [ 2126.531097][T18373] zswapped 0 [ 2126.531097][T18373] file_mapped 258048 [ 2126.531097][T18373] file_dirty 0 [ 2126.531097][T18373] file_writeback 0 [ 2126.531097][T18373] swapcached 0 [ 2126.531097][T18373] anon_thp 0 [ 2126.531097][T18373] file_thp 0 [ 2126.531097][T18373] shmem_thp 0 [ 2126.531097][T18373] inactive_anon 98304 [ 2126.531097][T18373] active_anon 266240 [ 2126.531097][T18373] inactive_file 0 [ 2126.531097][T18373] active_file 0 [ 2126.531097][T18373] unevictable 0 [ 2126.531097][T18373] slab_reclaimable 19640 [ 2126.531097][T18373] slab_unreclaimable 308563784 01:51:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2126.641313][T18373] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18373,uid=0 [ 2126.661660][T18373] Memory cgroup out of memory: Killed process 18373 (syz-executor.1) total-vm:54596kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2126.725369][T18376] wg2 speed is unknown, defaulting to 1000 [ 2126.747053][T18385] wg2 speed is unknown, defaulting to 1000 [ 2126.756785][T18401] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2126.774386][T18401] CPU: 1 PID: 18401 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2126.784943][T18401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2126.795017][T18401] Call Trace: [ 2126.798305][T18401] [ 2126.801252][T18401] dump_stack_lvl+0xcd/0x134 [ 2126.805881][T18401] dump_header+0x10b/0x85f [ 2126.810326][T18401] oom_kill_process.cold+0x10/0x15 [ 2126.815473][T18401] out_of_memory+0x358/0x14a0 [ 2126.820190][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.825692][T18401] ? __mod_timer+0x83c/0xe30 [ 2126.830409][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.835914][T18401] ? lock_acquire+0x4fc/0x630 [ 2126.840707][T18401] ? oom_killer_disable+0x270/0x270 [ 2126.845960][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.851569][T18401] ? lock_release+0x5cb/0x810 [ 2126.856312][T18401] ? rcu_read_unlock+0x9/0x60 [ 2126.861022][T18401] ? lock_downgrade+0x6e0/0x6e0 [ 2126.865915][T18401] mem_cgroup_out_of_memory+0x206/0x270 [ 2126.871498][T18401] ? mem_cgroup_margin+0x130/0x130 [ 2126.872946][T18392] wg2 speed is unknown, defaulting to 1000 [ 2126.876621][T18401] ? lock_downgrade+0x6e0/0x6e0 [ 2126.876659][T18401] try_charge_memcg+0xef8/0x12f0 [ 2126.876694][T18401] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2126.898261][T18401] ? lock_acquire+0x4fc/0x630 [ 2126.903581][T18401] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2126.909331][T18401] ? lock_downgrade+0x6e0/0x6e0 [ 2126.914216][T18401] ? lock_release+0x5cb/0x810 [ 2126.918372][T18390] wg2 speed is unknown, defaulting to 1000 [ 2126.918995][T18401] ? obj_cgroup_charge+0x244/0x5e0 [ 2126.930188][T18401] ? lock_downgrade+0x6e0/0x6e0 [ 2126.935161][T18401] ? lock_release+0x5cb/0x810 [ 2126.939859][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.945363][T18401] ? rcu_read_unlock+0x9/0x60 [ 2126.950165][T18401] obj_cgroup_charge+0x2ab/0x5e0 [ 2126.950315][T18394] wg2 speed is unknown, defaulting to 1000 [ 2126.955144][T18401] kmem_cache_alloc_node+0xa1/0x400 [ 2126.955178][T18401] ? copy_process+0x5c2/0x7190 [ 2126.955205][T18401] copy_process+0x5c2/0x7190 [ 2126.955229][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.955261][T18401] ? lock_acquire+0x4fc/0x630 [ 2126.985916][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2126.991432][T18401] ? lock_release+0x5cb/0x810 [ 2126.996172][T18401] ? psi_task_change+0x1bb/0x2f0 [ 2127.001159][T18401] ? lock_downgrade+0x6e0/0x6e0 [ 2127.006409][T18401] ? __cleanup_sighand+0xb0/0xb0 [ 2127.011397][T18401] ? psi_memstall_leave+0x170/0x250 [ 2127.016727][T18401] ? lock_downgrade+0x6e0/0x6e0 [ 2127.021706][T18401] kernel_clone+0xe7/0x980 [ 2127.026243][T18401] ? lock_acquire+0x4fc/0x630 [ 2127.031046][T18401] ? create_io_thread+0xe0/0xe0 [ 2127.036101][T18401] ? lock_release+0x810/0x810 [ 2127.040803][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.046567][T18401] ? lock_release+0x5cb/0x810 [ 2127.051461][T18401] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2127.057747][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.063686][T18401] ? lock_acquire+0x4fc/0x630 [ 2127.068393][T18401] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.073970][T18401] ? lock_release+0x5cb/0x810 [ 2127.078669][T18401] ? __ct_user_exit+0xff/0x150 [ 2127.083466][T18401] __do_sys_clone+0xba/0x100 [ 2127.087578][T18395] wg2 speed is unknown, defaulting to 1000 [ 2127.088072][T18401] ? kernel_clone+0x980/0x980 [ 2127.098601][T18401] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2127.104811][T18401] ? trace_hardirqs_on+0x2d/0x160 [ 2127.109874][T18401] do_syscall_64+0x35/0xb0 [ 2127.114377][T18401] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2127.120485][T18401] RIP: 0033:0x7f5e99a8ca21 [ 2127.124928][T18401] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2127.144918][T18401] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2127.145576][T18389] wg2 speed is unknown, defaulting to 1000 [ 2127.153604][T18401] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2127.153626][T18401] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2127.153639][T18401] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2127.153653][T18401] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2127.153666][T18401] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2127.153688][T18401] [ 2127.278608][T18401] memory: usage 307148kB, limit 307200kB, failcnt 13630 [ 2127.291933][T18401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2127.299369][T18401] Memory cgroup stats for /syz1: [ 2127.299532][T18401] anon 90112 [ 2127.299532][T18401] file 274432 [ 2127.299532][T18401] kernel 314155008 [ 2127.299532][T18401] kernel_stack 32768 [ 2127.299532][T18401] pagetables 69632 [ 2127.299532][T18401] sec_pagetables 0 [ 2127.299532][T18401] percpu 5423904 [ 2127.299532][T18401] sock 0 [ 2127.299532][T18401] vmalloc 8192 [ 2127.299532][T18401] shmem 274432 [ 2127.299532][T18401] zswap 0 [ 2127.299532][T18401] zswapped 0 [ 2127.299532][T18401] file_mapped 258048 [ 2127.299532][T18401] file_dirty 0 [ 2127.299532][T18401] file_writeback 0 [ 2127.299532][T18401] swapcached 0 [ 2127.299532][T18401] anon_thp 0 [ 2127.299532][T18401] file_thp 0 [ 2127.299532][T18401] shmem_thp 0 [ 2127.299532][T18401] inactive_anon 53248 [ 2127.299532][T18401] active_anon 266240 [ 2127.299532][T18401] inactive_file 0 [ 2127.299532][T18401] active_file 0 [ 2127.299532][T18401] unevictable 0 [ 2127.299532][T18401] slab_reclaimable 19640 [ 2127.299532][T18401] slab_unreclaimable 308555984 [ 2127.402443][T18401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18401,uid=0 01:51:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2127.425240][T18401] Memory cgroup out of memory: Killed process 18401 (syz-executor.1) total-vm:56644kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2127.448490][T18396] wg2 speed is unknown, defaulting to 1000 [ 2127.470136][T18384] wg2 speed is unknown, defaulting to 1000 [ 2127.498428][T18403] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2127.511514][T18397] wg2 speed is unknown, defaulting to 1000 [ 2127.518536][T18403] CPU: 1 PID: 18403 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2127.528990][T18403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2127.539471][T18403] Call Trace: [ 2127.542770][T18403] [ 2127.545715][T18403] dump_stack_lvl+0xcd/0x134 [ 2127.550309][T18403] dump_header+0x10b/0x85f [ 2127.554721][T18403] oom_kill_process.cold+0x10/0x15 [ 2127.559844][T18403] out_of_memory+0x358/0x14a0 [ 2127.564538][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.570121][T18403] ? __mod_timer+0x83c/0xe30 [ 2127.574708][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.580175][T18403] ? lock_acquire+0x4fc/0x630 [ 2127.584864][T18403] ? oom_killer_disable+0x270/0x270 [ 2127.590061][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.595543][T18403] ? lock_release+0x5cb/0x810 [ 2127.600241][T18403] ? rcu_read_unlock+0x9/0x60 [ 2127.605010][T18403] ? lock_downgrade+0x6e0/0x6e0 [ 2127.610138][T18403] mem_cgroup_out_of_memory+0x206/0x270 [ 2127.615721][T18403] ? mem_cgroup_margin+0x130/0x130 [ 2127.621021][T18403] ? lock_downgrade+0x6e0/0x6e0 [ 2127.625888][T18403] try_charge_memcg+0xef8/0x12f0 [ 2127.630932][T18403] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2127.636926][T18403] ? lock_acquire+0x4fc/0x630 [ 2127.641617][T18403] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2127.647426][T18403] ? lock_downgrade+0x6e0/0x6e0 [ 2127.652279][T18403] ? lock_release+0x5cb/0x810 [ 2127.656954][T18403] ? obj_cgroup_charge+0x244/0x5e0 [ 2127.662161][T18403] ? lock_downgrade+0x6e0/0x6e0 [ 2127.667023][T18403] ? lock_release+0x5cb/0x810 [ 2127.671700][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.677170][T18403] ? rcu_read_unlock+0x9/0x60 [ 2127.681945][T18403] obj_cgroup_charge+0x2ab/0x5e0 [ 2127.686898][T18403] kmem_cache_alloc_node+0xa1/0x400 [ 2127.692148][T18403] ? copy_process+0x5c2/0x7190 [ 2127.696921][T18403] copy_process+0x5c2/0x7190 [ 2127.701520][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.707189][T18403] ? lock_acquire+0x4fc/0x630 [ 2127.711869][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.717947][T18403] ? lock_release+0x5cb/0x810 [ 2127.722622][T18403] ? psi_task_change+0x1bb/0x2f0 [ 2127.727597][T18403] ? lock_downgrade+0x6e0/0x6e0 [ 2127.732668][T18403] ? __cleanup_sighand+0xb0/0xb0 [ 2127.738941][T18403] ? psi_memstall_leave+0x170/0x250 [ 2127.744151][T18403] ? lock_downgrade+0x6e0/0x6e0 [ 2127.749112][T18403] kernel_clone+0xe7/0x980 [ 2127.753538][T18403] ? lock_acquire+0x4fc/0x630 [ 2127.758230][T18403] ? create_io_thread+0xe0/0xe0 [ 2127.763097][T18403] ? lock_release+0x810/0x810 [ 2127.767967][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.773440][T18403] ? lock_release+0x5cb/0x810 [ 2127.778121][T18403] ? percpu_ref_put_many.constprop.0+0x6a/0x1a0 [ 2127.784372][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.789843][T18403] ? lock_acquire+0x4fc/0x630 [ 2127.794537][T18403] ? rcu_read_lock_sched_held+0xd/0x70 [ 2127.800035][T18403] ? lock_release+0x5cb/0x810 [ 2127.804803][T18403] ? __ct_user_exit+0xff/0x150 [ 2127.809572][T18403] __do_sys_clone+0xba/0x100 [ 2127.814953][T18403] ? kernel_clone+0x980/0x980 [ 2127.819728][T18403] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2127.825635][T18403] ? trace_hardirqs_on+0x2d/0x160 [ 2127.830668][T18403] do_syscall_64+0x35/0xb0 [ 2127.835094][T18403] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2127.841018][T18403] RIP: 0033:0x7f5e99a8ca21 [ 2127.845521][T18403] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2127.865166][T18403] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2127.873590][T18403] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2127.881561][T18403] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2127.889558][T18403] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2127.897531][T18403] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2127.905523][T18403] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2127.913511][T18403] [ 2127.927554][T18403] memory: usage 307160kB, limit 307200kB, failcnt 13702 [ 2127.937712][T18403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2127.948646][T18403] Memory cgroup stats for /syz1: [ 2127.948837][T18403] anon 90112 [ 2127.948837][T18403] file 274432 [ 2127.948837][T18403] kernel 314167296 [ 2127.948837][T18403] kernel_stack 32768 [ 2127.948837][T18403] pagetables 69632 [ 2127.948837][T18403] sec_pagetables 0 [ 2127.948837][T18403] percpu 5423904 [ 2127.948837][T18403] sock 0 [ 2127.948837][T18403] vmalloc 8192 [ 2127.948837][T18403] shmem 274432 [ 2127.948837][T18403] zswap 0 [ 2127.948837][T18403] zswapped 0 [ 2127.948837][T18403] file_mapped 258048 [ 2127.948837][T18403] file_dirty 0 [ 2127.948837][T18403] file_writeback 0 [ 2127.948837][T18403] swapcached 0 [ 2127.948837][T18403] anon_thp 0 [ 2127.948837][T18403] file_thp 0 [ 2127.948837][T18403] shmem_thp 0 [ 2127.948837][T18403] inactive_anon 53248 [ 2127.948837][T18403] active_anon 266240 [ 2127.948837][T18403] inactive_file 0 [ 2127.948837][T18403] active_file 0 [ 2127.948837][T18403] unevictable 0 [ 2127.948837][T18403] slab_reclaimable 19640 [ 2127.948837][T18403] slab_unreclaimable 308567384 [ 2128.051105][T18403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18403,uid=0 [ 2128.068356][T18403] Memory cgroup out of memory: Killed process 18403 (syz-executor.1) total-vm:56644kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0x0, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2130.400823][T18405] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2130.435206][T18405] CPU: 1 PID: 18405 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2130.446027][T18405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2130.456345][T18405] Call Trace: [ 2130.459632][T18405] [ 2130.462562][T18405] dump_stack_lvl+0xcd/0x134 [ 2130.467176][T18405] dump_header+0x10b/0x85f [ 2130.471587][T18405] oom_kill_process.cold+0x10/0x15 [ 2130.476693][T18405] out_of_memory+0x358/0x14a0 [ 2130.481667][T18405] ? __mod_timer+0x83c/0xe30 [ 2130.487647][T18405] ? rcu_read_lock_sched_held+0xd/0x70 [ 2130.493378][T18405] ? lock_acquire+0x4fc/0x630 [ 2130.498082][T18405] ? oom_killer_disable+0x270/0x270 [ 2130.503285][T18405] ? rcu_read_lock_sched_held+0xd/0x70 [ 2130.508859][T18405] ? lock_release+0x5cb/0x810 [ 2130.513536][T18405] ? rcu_read_unlock+0x9/0x60 [ 2130.518230][T18405] ? lock_downgrade+0x6e0/0x6e0 [ 2130.523081][T18405] mem_cgroup_out_of_memory+0x206/0x270 [ 2130.528641][T18405] ? mem_cgroup_margin+0x130/0x130 [ 2130.533752][T18405] ? lock_downgrade+0x6e0/0x6e0 [ 2130.538627][T18405] try_charge_memcg+0xef8/0x12f0 [ 2130.543577][T18405] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2130.549563][T18405] ? lock_acquire+0x4fc/0x630 [ 2130.554263][T18405] ? rcu_read_lock_sched_held+0xd/0x70 [ 2130.559735][T18405] ? lock_release+0x5cb/0x810 [ 2130.564410][T18405] ? rcu_read_unlock+0x9/0x60 [ 2130.569091][T18405] ? lock_downgrade+0x6e0/0x6e0 [ 2130.573949][T18405] charge_memcg+0x99/0x3b0 [ 2130.578490][T18405] __mem_cgroup_charge+0x27/0x90 [ 2130.583479][T18405] wp_page_copy+0x2bf/0x1c90 [ 2130.588076][T18405] ? rcu_read_lock_sched_held+0xd/0x70 [ 2130.593575][T18405] ? lock_release+0x5cb/0x810 [ 2130.598442][T18405] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2130.605032][T18405] ? lock_downgrade+0x6e0/0x6e0 [ 2130.609881][T18405] ? vm_normal_page+0x146/0x2a0 [ 2130.614732][T18405] ? __pte_alloc_kernel+0x110/0x110 [ 2130.620253][T18405] ? lock_release+0x5cb/0x810 [ 2130.625018][T18405] do_wp_page+0x1d1/0x1930 [ 2130.629452][T18405] __handle_mm_fault+0x181b/0x3a40 [ 2130.634584][T18405] ? lock_acquire+0x4fc/0x630 [ 2130.639261][T18405] ? vm_iomap_memory+0x180/0x180 [ 2130.644649][T18405] ? lock_release+0x810/0x810 [ 2130.649390][T18405] handle_mm_fault+0x1c8/0x780 [ 2130.654233][T18405] do_user_addr_fault+0x475/0x1210 [ 2130.659383][T18405] ? rcu_read_lock_sched_held+0xd/0x70 [ 2130.664870][T18405] exc_page_fault+0x94/0x170 [ 2130.669468][T18405] asm_exc_page_fault+0x22/0x30 [ 2130.674431][T18405] RIP: 0033:0x7f5e99a389c0 [ 2130.678857][T18405] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2130.698479][T18405] RSP: 002b:00007ffdae1694c0 EFLAGS: 00010246 [ 2130.704804][T18405] RAX: 0000000000fb40b7 RBX: 00007f5e99bac018 RCX: 0000001b2e920000 [ 2130.712776][T18405] RDX: 0000000000000000 RSI: 0000001b2e920018 RDI: 0000000008ecce90 [ 2130.720747][T18405] RBP: 0000000000fb40b7 R08: 00000000000000b7 R09: 0000000000fb40bb [ 2130.728800][T18405] R10: 00007ffdae169690 R11: 0000000000000246 R12: 00007f5e99ba0000 [ 2130.736768][T18405] R13: 0000000000000001 R14: 0000000000000002 R15: ffffffff81a47d34 [ 2130.744751][T18405] ? trace_user_exit.constprop.0+0x64/0x2b0 [ 2130.750687][T18405] [ 2130.771193][T18405] memory: usage 307184kB, limit 307200kB, failcnt 13801 [ 2130.779926][T18405] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2130.787303][T18405] Memory cgroup stats for /syz1: [ 2130.787505][T18405] anon 110592 [ 2130.787505][T18405] file 274432 [ 2130.787505][T18405] kernel 314171392 [ 2130.787505][T18405] kernel_stack 65536 [ 2130.787505][T18405] pagetables 73728 [ 2130.787505][T18405] sec_pagetables 0 [ 2130.787505][T18405] percpu 5423904 [ 2130.787505][T18405] sock 0 [ 2130.787505][T18405] vmalloc 8192 [ 2130.787505][T18405] shmem 274432 [ 2130.787505][T18405] zswap 0 [ 2130.787505][T18405] zswapped 0 [ 2130.787505][T18405] file_mapped 258048 [ 2130.787505][T18405] file_dirty 0 [ 2130.787505][T18405] file_writeback 0 [ 2130.787505][T18405] swapcached 0 [ 2130.787505][T18405] anon_thp 0 [ 2130.787505][T18405] file_thp 0 [ 2130.787505][T18405] shmem_thp 0 [ 2130.787505][T18405] inactive_anon 90112 [ 2130.787505][T18405] active_anon 266240 [ 2130.787505][T18405] inactive_file 0 [ 2130.787505][T18405] active_file 0 [ 2130.787505][T18405] unevictable 0 [ 2130.787505][T18405] slab_reclaimable 21568 [ 2130.787505][T18405] slab_unreclaimable 308545064 [ 2130.883576][T18405] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18405,uid=0 01:51:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0x0, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2130.899651][T18405] Memory cgroup out of memory: Killed process 18405 (syz-executor.1) total-vm:56644kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2130.952251][T18408] wg2 speed is unknown, defaulting to 1000 [ 2130.990046][T18409] wg2 speed is unknown, defaulting to 1000 01:51:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2130.995054][T18414] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2131.030503][T18414] CPU: 1 PID: 18414 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2131.040993][T18414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2131.051067][T18414] Call Trace: [ 2131.054456][T18414] [ 2131.057422][T18414] dump_stack_lvl+0xcd/0x134 [ 2131.062052][T18414] dump_header+0x10b/0x85f [ 2131.066643][T18414] oom_kill_process.cold+0x10/0x15 [ 2131.071772][T18414] out_of_memory+0x358/0x14a0 [ 2131.076477][T18414] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.081979][T18414] ? __mod_timer+0x83c/0xe30 [ 2131.086601][T18414] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.092097][T18414] ? lock_acquire+0x4fc/0x630 [ 2131.096804][T18414] ? oom_killer_disable+0x270/0x270 [ 2131.102135][T18414] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.107720][T18414] ? lock_release+0x5cb/0x810 [ 2131.112393][T18414] ? rcu_read_unlock+0x9/0x60 [ 2131.117077][T18414] ? lock_downgrade+0x6e0/0x6e0 [ 2131.121977][T18414] mem_cgroup_out_of_memory+0x206/0x270 [ 2131.127543][T18414] ? mem_cgroup_margin+0x130/0x130 [ 2131.132679][T18414] ? lock_downgrade+0x6e0/0x6e0 [ 2131.137664][T18414] try_charge_memcg+0xef8/0x12f0 [ 2131.142635][T18414] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2131.148631][T18414] ? lock_acquire+0x4fc/0x630 [ 2131.153323][T18414] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2131.159088][T18414] ? lock_downgrade+0x6e0/0x6e0 [ 2131.163940][T18414] ? lock_release+0x5cb/0x810 [ 2131.168623][T18414] ? obj_cgroup_charge+0x244/0x5e0 [ 2131.173776][T18414] ? lock_downgrade+0x6e0/0x6e0 [ 2131.178637][T18414] ? lock_release+0x5cb/0x810 [ 2131.183313][T18414] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.189137][T18414] ? rcu_read_unlock+0x9/0x60 [ 2131.193911][T18414] obj_cgroup_charge+0x2ab/0x5e0 [ 2131.198908][T18414] ? sk_prot_alloc+0x5f/0x290 [ 2131.203590][T18414] kmem_cache_alloc+0x9b/0x3c0 [ 2131.208382][T18414] ? inet6_create+0x2fc/0x1030 [ 2131.213174][T18414] sk_prot_alloc+0x5f/0x290 [ 2131.217709][T18414] sk_alloc+0x36/0x770 [ 2131.221818][T18414] inet6_create+0x36f/0x1030 [ 2131.226426][T18414] __sock_create+0x355/0x790 [ 2131.231040][T18414] __sys_socket+0x12f/0x240 [ 2131.235645][T18414] ? __sys_socket_file+0x1f0/0x1f0 [ 2131.240779][T18414] __x64_sys_socket+0x6f/0xb0 [ 2131.245473][T18414] do_syscall_64+0x35/0xb0 [ 2131.249924][T18414] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2131.255913][T18414] RIP: 0033:0x7f5e99a8b5f9 [ 2131.260329][T18414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2131.280125][T18414] RSP: 002b:00007f5e991ff168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2131.288544][T18414] RAX: ffffffffffffffda RBX: 00007f5e99babf80 RCX: 00007f5e99a8b5f9 [ 2131.296623][T18414] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 2131.304606][T18414] RBP: 00007f5e99ae67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2131.312581][T18414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2131.320643][T18414] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2131.328626][T18414] 01:51:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2131.357921][T18414] memory: usage 307200kB, limit 307200kB, failcnt 13915 [ 2131.366745][T18414] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2131.384602][T18414] Memory cgroup stats for /syz1: [ 2131.384767][T18414] anon 106496 [ 2131.384767][T18414] file 274432 [ 2131.384767][T18414] kernel 314191872 [ 2131.384767][T18414] kernel_stack 65536 [ 2131.384767][T18414] pagetables 81920 [ 2131.384767][T18414] sec_pagetables 0 [ 2131.384767][T18414] percpu 5423904 [ 2131.384767][T18414] sock 0 [ 2131.384767][T18414] vmalloc 8192 [ 2131.384767][T18414] shmem 274432 [ 2131.384767][T18414] zswap 0 [ 2131.384767][T18414] zswapped 0 [ 2131.384767][T18414] file_mapped 258048 [ 2131.384767][T18414] file_dirty 0 [ 2131.384767][T18414] file_writeback 0 [ 2131.384767][T18414] swapcached 0 [ 2131.384767][T18414] anon_thp 0 [ 2131.384767][T18414] file_thp 0 [ 2131.384767][T18414] shmem_thp 0 [ 2131.384767][T18414] inactive_anon 106496 [ 2131.384767][T18414] active_anon 266240 [ 2131.384767][T18414] inactive_file 0 [ 2131.384767][T18414] active_file 0 [ 2131.384767][T18414] unevictable 0 [ 2131.384767][T18414] slab_reclaimable 21184 [ 2131.384767][T18414] slab_unreclaimable 308553792 [ 2131.486251][T18414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18413,uid=0 01:51:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0x0, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2131.503338][T18414] Memory cgroup out of memory: Killed process 18413 (syz-executor.1) total-vm:56776kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2131.580708][T18431] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2131.591870][T18431] CPU: 0 PID: 18431 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2131.602342][T18431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2131.612573][T18431] Call Trace: [ 2131.615849][T18431] [ 2131.618871][T18431] dump_stack_lvl+0xcd/0x134 [ 2131.623475][T18431] dump_header+0x10b/0x85f [ 2131.628155][T18431] oom_kill_process.cold+0x10/0x15 [ 2131.633269][T18431] out_of_memory+0x358/0x14a0 [ 2131.638049][T18431] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.643603][T18431] ? __mod_timer+0x83c/0xe30 [ 2131.648197][T18431] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.653752][T18431] ? lock_acquire+0x4fc/0x630 [ 2131.658425][T18431] ? oom_killer_disable+0x270/0x270 [ 2131.663623][T18431] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.669094][T18431] ? lock_release+0x5cb/0x810 [ 2131.673769][T18431] ? rcu_read_unlock+0x9/0x60 [ 2131.678448][T18431] ? lock_downgrade+0x6e0/0x6e0 [ 2131.683352][T18431] mem_cgroup_out_of_memory+0x206/0x270 [ 2131.688901][T18431] ? mem_cgroup_margin+0x130/0x130 [ 2131.694015][T18431] ? lock_downgrade+0x6e0/0x6e0 [ 2131.698872][T18431] try_charge_memcg+0xef8/0x12f0 [ 2131.703820][T18431] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2131.709806][T18431] ? lock_acquire+0x4fc/0x630 [ 2131.714492][T18431] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.720050][T18431] ? lock_release+0x5cb/0x810 [ 2131.724730][T18431] ? rcu_read_unlock+0x9/0x60 [ 2131.729409][T18431] ? lock_downgrade+0x6e0/0x6e0 [ 2131.734262][T18431] ? __switch_to_asm+0x3a/0x60 [ 2131.739038][T18431] charge_memcg+0x99/0x3b0 [ 2131.743521][T18431] __mem_cgroup_charge+0x27/0x90 [ 2131.748497][T18431] wp_page_copy+0x2bf/0x1c90 [ 2131.753105][T18431] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.758585][T18431] ? lock_release+0x5cb/0x810 [ 2131.763264][T18431] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2131.769855][T18431] ? lock_downgrade+0x6e0/0x6e0 [ 2131.774708][T18431] ? vm_normal_page+0x146/0x2a0 [ 2131.779580][T18431] ? trace_hardirqs_off+0xe/0x150 [ 2131.784602][T18431] ? __pte_alloc_kernel+0x110/0x110 [ 2131.789800][T18431] ? trace_hardirqs_on+0x2d/0x160 [ 2131.794826][T18431] do_wp_page+0x538/0x1930 [ 2131.799259][T18431] __handle_mm_fault+0x181b/0x3a40 [ 2131.804378][T18431] ? lock_acquire+0x4fc/0x630 [ 2131.809068][T18431] ? vm_iomap_memory+0x180/0x180 [ 2131.814018][T18431] ? lock_release+0x810/0x810 [ 2131.818791][T18431] handle_mm_fault+0x1c8/0x780 [ 2131.823648][T18431] do_user_addr_fault+0x475/0x1210 [ 2131.828856][T18431] ? rcu_read_lock_sched_held+0xd/0x70 [ 2131.834414][T18431] exc_page_fault+0x94/0x170 [ 2131.839011][T18431] asm_exc_page_fault+0x22/0x30 [ 2131.843957][T18431] RIP: 0033:0x7f5e99a36110 [ 2131.848374][T18431] Code: 0f 84 b4 00 00 00 80 3d b9 f2 0a 01 00 75 1b 80 3d b1 f2 0a 01 00 75 12 80 3d a3 f2 0a 01 00 0f 84 95 00 00 00 0f 1f 44 00 00 <41> c6 44 24 f8 01 45 89 6c 24 f4 41 c6 44 24 14 00 8b 93 8c 00 00 [ 2131.868021][T18431] RSP: 002b:00007ffdae1695b0 EFLAGS: 00010202 [ 2131.874083][T18431] RAX: 0000000000000000 RBX: 00007f5e99babf8c RCX: 0000000000000000 [ 2131.882143][T18431] RDX: 00007ffdae169718 RSI: ffff80a166454074 RDI: 00007ffdae169748 [ 2131.890115][T18431] RBP: 00007ffdae169718 R08: 0000000000000000 R09: 0000000000000000 [ 2131.898100][T18431] R10: 00007ffdae1af090 R11: 0000000000064f02 R12: 00007f5e99babf8c [ 2131.906075][T18431] R13: 0000000000000000 R14: 00007f5e99babf80 R15: 00007ffdae169850 [ 2131.914055][T18431] [ 2131.918075][T18431] memory: usage 307200kB, limit 307200kB, failcnt 14006 [ 2131.925549][T18431] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2131.932590][T18431] Memory cgroup stats for /syz1: [ 2131.932771][T18431] anon 77824 [ 2131.932771][T18431] file 274432 [ 2131.932771][T18431] kernel 314179584 [ 2131.932771][T18431] kernel_stack 32768 [ 2131.932771][T18431] pagetables 69632 [ 2131.932771][T18431] sec_pagetables 0 [ 2131.932771][T18431] percpu 5423904 [ 2131.932771][T18431] sock 0 [ 2131.932771][T18431] vmalloc 8192 [ 2131.932771][T18431] shmem 274432 [ 2131.932771][T18431] zswap 0 [ 2131.932771][T18431] zswapped 0 [ 2131.932771][T18431] file_mapped 258048 [ 2131.932771][T18431] file_dirty 0 [ 2131.932771][T18431] file_writeback 0 [ 2131.932771][T18431] swapcached 0 [ 2131.932771][T18431] anon_thp 0 [ 2131.932771][T18431] file_thp 0 [ 2131.932771][T18431] shmem_thp 0 [ 2131.932771][T18431] inactive_anon 53248 [ 2131.932771][T18431] active_anon 266240 [ 2131.932771][T18431] inactive_file 0 [ 2131.932771][T18431] active_file 0 [ 2131.932771][T18431] unevictable 0 [ 2131.932771][T18431] slab_reclaimable 47304 [ 2131.932771][T18431] slab_unreclaimable 308560000 01:51:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0x0, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2132.029449][T18431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18431,uid=0 [ 2132.045536][T18431] Memory cgroup out of memory: Killed process 18431 (syz-executor.1) total-vm:56512kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2132.045766][T18418] wg2 speed is unknown, defaulting to 1000 [ 2132.148859][T18433] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2132.169648][T18415] wg2 speed is unknown, defaulting to 1000 [ 2132.195132][T18433] CPU: 1 PID: 18433 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2132.205604][T18433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2132.215867][T18433] Call Trace: [ 2132.219161][T18433] [ 2132.222101][T18433] dump_stack_lvl+0xcd/0x134 [ 2132.226732][T18433] dump_header+0x10b/0x85f [ 2132.231266][T18433] oom_kill_process.cold+0x10/0x15 [ 2132.236398][T18433] out_of_memory+0x358/0x14a0 [ 2132.241100][T18433] ? rcu_read_lock_sched_held+0xd/0x70 [ 2132.246585][T18433] ? __mod_timer+0x83c/0xe30 [ 2132.251187][T18433] ? rcu_read_lock_sched_held+0xd/0x70 [ 2132.256662][T18433] ? lock_acquire+0x4fc/0x630 [ 2132.261342][T18433] ? oom_killer_disable+0x270/0x270 [ 2132.266545][T18433] ? rcu_read_lock_sched_held+0xd/0x70 [ 2132.272017][T18433] ? lock_release+0x5cb/0x810 [ 2132.276804][T18433] ? rcu_read_unlock+0x9/0x60 [ 2132.281514][T18433] ? lock_downgrade+0x6e0/0x6e0 [ 2132.286382][T18433] mem_cgroup_out_of_memory+0x206/0x270 [ 2132.292030][T18433] ? mem_cgroup_margin+0x130/0x130 [ 2132.297150][T18433] ? lock_downgrade+0x6e0/0x6e0 [ 2132.302011][T18433] try_charge_memcg+0xef8/0x12f0 [ 2132.306960][T18433] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2132.312949][T18433] ? lock_release+0x5cb/0x810 [ 2132.317720][T18433] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2132.323450][T18433] ? lock_downgrade+0x6e0/0x6e0 [ 2132.328328][T18433] ? lock_release+0x5cb/0x810 [ 2132.333007][T18433] ? rcu_read_unlock+0x9/0x60 [ 2132.337688][T18433] ? lock_downgrade+0x6e0/0x6e0 [ 2132.342538][T18433] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2132.348442][T18433] __memcg_kmem_charge_page+0x16a/0x3b0 [ 2132.354001][T18433] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2132.360163][T18433] copy_process+0x73e/0x7190 [ 2132.364851][T18433] ? wp_page_copy+0x311/0x1c90 [ 2132.369621][T18433] ? lock_release+0x5cb/0x810 [ 2132.374303][T18433] ? __cleanup_sighand+0xb0/0xb0 [ 2132.379246][T18433] ? lock_release+0x5cb/0x810 [ 2132.383928][T18433] ? do_wp_page+0x1d9/0x1930 [ 2132.388607][T18433] kernel_clone+0xe7/0x980 [ 2132.393031][T18433] ? create_io_thread+0xe0/0xe0 [ 2132.397882][T18433] ? lock_acquire+0x4fc/0x630 [ 2132.402654][T18433] ? vm_iomap_memory+0x180/0x180 [ 2132.407599][T18433] ? lock_release+0x810/0x810 [ 2132.412293][T18433] ? rcu_read_lock_sched_held+0xd/0x70 [ 2132.417763][T18433] ? lock_acquire+0x4fc/0x630 [ 2132.422456][T18433] ? rcu_read_lock_sched_held+0xd/0x70 [ 2132.427947][T18433] ? lock_release+0x5cb/0x810 [ 2132.432635][T18433] ? __ct_user_exit+0xff/0x150 [ 2132.437409][T18433] __do_sys_clone+0xba/0x100 [ 2132.442112][T18433] ? kernel_clone+0x980/0x980 [ 2132.446801][T18433] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2132.452696][T18433] ? trace_hardirqs_on+0x2d/0x160 [ 2132.457728][T18433] do_syscall_64+0x35/0xb0 [ 2132.462155][T18433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2132.468066][T18433] RIP: 0033:0x7f5e99a8ca21 [ 2132.472485][T18433] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2132.492279][T18433] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2132.500695][T18433] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2132.508730][T18433] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2132.516726][T18433] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2132.524700][T18433] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2132.532673][T18433] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2132.540655][T18433] [ 2132.562947][T18433] memory: usage 307196kB, limit 307200kB, failcnt 14099 [ 2132.574453][T18433] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2132.595130][T18433] Memory cgroup stats for /syz1: [ 2132.595331][T18433] anon 90112 [ 2132.595331][T18433] file 274432 [ 2132.595331][T18433] kernel 314204160 [ 2132.595331][T18433] kernel_stack 32768 [ 2132.595331][T18433] pagetables 69632 [ 2132.595331][T18433] sec_pagetables 0 [ 2132.595331][T18433] percpu 5423904 [ 2132.595331][T18433] sock 0 [ 2132.595331][T18433] vmalloc 8192 [ 2132.595331][T18433] shmem 274432 [ 2132.595331][T18433] zswap 0 [ 2132.595331][T18433] zswapped 0 [ 2132.595331][T18433] file_mapped 258048 [ 2132.595331][T18433] file_dirty 0 [ 2132.595331][T18433] file_writeback 0 [ 2132.595331][T18433] swapcached 0 [ 2132.595331][T18433] anon_thp 0 [ 2132.595331][T18433] file_thp 0 [ 2132.595331][T18433] shmem_thp 0 [ 2132.595331][T18433] inactive_anon 98304 [ 2132.595331][T18433] active_anon 266240 [ 2132.595331][T18433] inactive_file 0 [ 2132.595331][T18433] active_file 0 [ 2132.595331][T18433] unevictable 0 [ 2132.595331][T18433] slab_reclaimable 19640 [ 2132.595331][T18433] slab_unreclaimable 308574880 01:51:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200]}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2132.705992][T18433] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18433,uid=0 [ 2132.715207][T18426] wg2 speed is unknown, defaulting to 1000 [ 2132.728131][T18433] Memory cgroup out of memory: Killed process 18433 (syz-executor.1) total-vm:56644kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 2132.778189][T18428] wg2 speed is unknown, defaulting to 1000 [ 2132.812711][T18429] wg2 speed is unknown, defaulting to 1000 [ 2132.831162][T18434] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 2132.847409][T18427] wg2 speed is unknown, defaulting to 1000 [ 2132.848991][T18434] CPU: 0 PID: 18434 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2132.863796][T18434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2132.873870][T18434] Call Trace: [ 2132.877159][T18434] [ 2132.880457][T18434] dump_stack_lvl+0xcd/0x134 [ 2132.885083][T18434] dump_header+0x10b/0x85f [ 2132.889538][T18434] oom_kill_process.cold+0x10/0x15 [ 2132.894680][T18434] out_of_memory+0x358/0x14a0 [ 2132.899394][T18434] ? rcu_read_lock_sched_held+0xd/0x70 [ 2132.904885][T18434] ? __mod_timer+0x83c/0xe30 [ 2132.909518][T18434] ? rcu_read_lock_sched_held+0xd/0x70 [ 2132.915011][T18434] ? lock_acquire+0x4fc/0x630 [ 2132.919717][T18434] ? oom_killer_disable+0x270/0x270 [ 2132.924946][T18434] ? rcu_read_lock_sched_held+0xd/0x70 [ 2132.930537][T18434] ? lock_release+0x5cb/0x810 [ 2132.935247][T18434] ? rcu_read_unlock+0x9/0x60 [ 2132.940039][T18434] ? lock_downgrade+0x6e0/0x6e0 [ 2132.944915][T18434] mem_cgroup_out_of_memory+0x206/0x270 [ 2132.950495][T18434] ? mem_cgroup_margin+0x130/0x130 [ 2132.955641][T18434] ? lock_downgrade+0x6e0/0x6e0 [ 2132.960522][T18434] try_charge_memcg+0xef8/0x12f0 [ 2132.965564][T18434] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2132.971660][T18434] ? lock_acquire+0x4fc/0x630 [ 2132.976357][T18434] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2132.982117][T18434] ? lock_downgrade+0x6e0/0x6e0 [ 2132.987001][T18434] ? lock_release+0x5cb/0x810 [ 2132.991702][T18434] ? obj_cgroup_charge+0x244/0x5e0 [ 2132.996933][T18434] ? lock_downgrade+0x6e0/0x6e0 [ 2133.001822][T18434] ? lock_release+0x5cb/0x810 [ 2133.006619][T18434] ? rcu_read_lock_sched_held+0xd/0x70 [ 2133.012121][T18434] ? rcu_read_unlock+0x9/0x60 [ 2133.017100][T18434] obj_cgroup_charge+0x2ab/0x5e0 [ 2133.022083][T18434] kmem_cache_alloc_node+0xa1/0x400 [ 2133.027751][T18434] ? copy_process+0x5c2/0x7190 [ 2133.032540][T18434] copy_process+0x5c2/0x7190 [ 2133.041847][T18434] ? wp_page_copy+0x311/0x1c90 [ 2133.046640][T18434] ? lock_release+0x5cb/0x810 [ 2133.051603][T18434] ? __cleanup_sighand+0xb0/0xb0 [ 2133.056571][T18434] ? lock_release+0x5cb/0x810 [ 2133.061291][T18434] ? do_wp_page+0x1d9/0x1930 [ 2133.065993][T18434] kernel_clone+0xe7/0x980 [ 2133.070437][T18434] ? create_io_thread+0xe0/0xe0 [ 2133.075311][T18434] ? lock_acquire+0x4fc/0x630 [ 2133.080004][T18434] ? vm_iomap_memory+0x180/0x180 [ 2133.085140][T18434] ? lock_release+0x810/0x810 [ 2133.089835][T18434] ? rcu_read_lock_sched_held+0xd/0x70 [ 2133.095430][T18434] ? lock_acquire+0x4fc/0x630 [ 2133.100227][T18434] ? rcu_read_lock_sched_held+0xd/0x70 [ 2133.105717][T18434] ? lock_release+0x5cb/0x810 [ 2133.110613][T18434] ? __ct_user_exit+0xff/0x150 [ 2133.115399][T18434] __do_sys_clone+0xba/0x100 [ 2133.120111][T18434] ? kernel_clone+0x980/0x980 [ 2133.124813][T18434] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2133.130731][T18434] ? trace_hardirqs_on+0x2d/0x160 [ 2133.135793][T18434] do_syscall_64+0x35/0xb0 [ 2133.140501][T18434] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2133.146426][T18434] RIP: 0033:0x7f5e99a8ca21 [ 2133.150877][T18434] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2133.170774][T18434] RSP: 002b:00007ffdae169478 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2133.179218][T18434] RAX: ffffffffffffffda RBX: 00007f5e991ff700 RCX: 00007f5e99a8ca21 [ 2133.187395][T18434] RDX: 00007f5e991ff9d0 RSI: 00007f5e991ff2f0 RDI: 00000000003d0f00 [ 2133.195395][T18434] RBP: 00007ffdae1696c0 R08: 00007f5e991ff700 R09: 00007f5e991ff700 [ 2133.203568][T18434] R10: 00007f5e991ff9d0 R11: 0000000000000206 R12: 00007ffdae16952e [ 2133.211747][T18434] R13: 00007ffdae16952f R14: 00007f5e991ff300 R15: 0000000000022000 [ 2133.219914][T18434] [ 2133.237389][T18434] memory: usage 307184kB, limit 307200kB, failcnt 14205 [ 2133.245214][T18434] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2133.255884][T18434] Memory cgroup stats for /syz1: [ 2133.256073][T18434] anon 90112 [ 2133.256073][T18434] file 274432 [ 2133.256073][T18434] kernel 314171392 [ 2133.256073][T18434] kernel_stack 32768 [ 2133.256073][T18434] pagetables 69632 [ 2133.256073][T18434] sec_pagetables 0 [ 2133.256073][T18434] percpu 5423904 [ 2133.256073][T18434] sock 0 [ 2133.256073][T18434] vmalloc 8192 [ 2133.256073][T18434] shmem 274432 [ 2133.256073][T18434] zswap 0 [ 2133.256073][T18434] zswapped 0 [ 2133.256073][T18434] file_mapped 258048 [ 2133.256073][T18434] file_dirty 0 [ 2133.256073][T18434] file_writeback 0 [ 2133.256073][T18434] swapcached 0 [ 2133.256073][T18434] anon_thp 0 [ 2133.256073][T18434] file_thp 0 [ 2133.256073][T18434] shmem_thp 0 [ 2133.256073][T18434] inactive_anon 53248 [ 2133.256073][T18434] active_anon 266240 [ 2133.256073][T18434] inactive_file 0 [ 2133.256073][T18434] active_file 0 [ 2133.256073][T18434] unevictable 0 [ 2133.256073][T18434] slab_reclaimable 19640 [ 2133.256073][T18434] slab_unreclaimable 308567688 [ 2133.354948][T18434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18434,uid=0 [ 2133.370945][T18434] Memory cgroup out of memory: Killed process 18434 (syz-executor.1) total-vm:56644kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 01:51:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200]}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2133.424511][T18436] syz-executor.1 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=1000 [ 2133.434955][T18436] CPU: 1 PID: 18436 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2133.445394][T18436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2133.455540][T18436] Call Trace: [ 2133.458834][T18436] [ 2133.461773][T18436] dump_stack_lvl+0xcd/0x134 [ 2133.466375][T18436] dump_header+0x10b/0x85f [ 2133.470970][T18436] oom_kill_process.cold+0x10/0x15 [ 2133.476086][T18436] out_of_memory+0x358/0x14a0 [ 2133.480783][T18436] ? rcu_read_lock_sched_held+0xd/0x70 [ 2133.486269][T18436] ? __mod_timer+0x83c/0xe30 [ 2133.490877][T18436] ? rcu_read_lock_sched_held+0xd/0x70 [ 2133.496354][T18436] ? lock_acquire+0x4fc/0x630 [ 2133.501201][T18436] ? oom_killer_disable+0x270/0x270 [ 2133.506536][T18436] ? rcu_read_lock_sched_held+0xd/0x70 [ 2133.512005][T18436] ? lock_release+0x5cb/0x810 [ 2133.516684][T18436] ? rcu_read_unlock+0x9/0x60 [ 2133.521978][T18436] ? lock_downgrade+0x6e0/0x6e0 [ 2133.526830][T18436] mem_cgroup_out_of_memory+0x206/0x270 [ 2133.532387][T18436] ? mem_cgroup_margin+0x130/0x130 [ 2133.537515][T18436] ? lock_downgrade+0x6e0/0x6e0 [ 2133.542488][T18436] try_charge_memcg+0xef8/0x12f0 [ 2133.547444][T18436] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2133.553803][T18436] ? lock_acquire+0x4fc/0x630 [ 2133.558492][T18436] ? get_mem_cgroup_from_objcg+0xa1/0x260 [ 2133.564219][T18436] ? lock_downgrade+0x6e0/0x6e0 [ 2133.569097][T18436] ? lock_release+0x5cb/0x810 [ 2133.573790][T18436] ? obj_cgroup_charge+0x244/0x5e0 [ 2133.579108][T18436] ? lock_downgrade+0x6e0/0x6e0 [ 2133.584071][T18436] ? rcu_read_lock_sched_held+0xd/0x70 [ 2133.589643][T18436] obj_cgroup_charge+0x2ab/0x5e0 [ 2133.594595][T18436] kmem_cache_alloc_lru+0x13d/0x730 [ 2133.599886][T18436] ? ext4_alloc_inode+0x24/0x650 [ 2133.604837][T18436] ? ext4_free_in_core_inode+0x70/0x70 [ 2133.610302][T18436] ext4_alloc_inode+0x24/0x650 [ 2133.615074][T18436] ? ext4_free_in_core_inode+0x70/0x70 [ 2133.620553][T18436] alloc_inode+0x61/0x230 [ 2133.624915][T18436] new_inode+0x27/0x270 [ 2133.629078][T18436] ? tomoyo_path_perm+0x255/0x400 [ 2133.634204][T18436] __ext4_new_inode+0x395/0x57d0 [ 2133.639169][T18436] ? __kmem_cache_free+0xab/0x3b0 [ 2133.644403][T18436] ? tomoyo_path_perm+0x169/0x400 [ 2133.649473][T18436] ? ext4_mark_inode_used+0x1490/0x1490 [ 2133.655056][T18436] ? ext4_lookup+0xc7/0x700 [ 2133.659588][T18436] ? lock_release+0x5cb/0x810 [ 2133.664274][T18436] ext4_symlink+0x5a8/0xa00 [ 2133.668801][T18436] ? d_alloc+0x1bc/0x230 [ 2133.673058][T18436] ? ext4_mknod+0x4e0/0x4e0 [ 2133.677658][T18436] ? from_kgid+0x87/0xc0 [ 2133.681910][T18436] ? from_kuid_munged+0x130/0x130 [ 2133.686952][T18436] ? generic_permission+0x38a/0x7a0 [ 2133.692375][T18436] ? bpf_lsm_inode_permission+0x5/0x10 [ 2133.697865][T18436] ? bpf_lsm_inode_symlink+0x5/0x10 [ 2133.703086][T18436] vfs_symlink+0x365/0x5b0 [ 2133.707515][T18436] do_symlinkat+0x261/0x2e0 [ 2133.712039][T18436] ? __ia32_sys_unlink+0x110/0x110 [ 2133.717214][T18436] ? getname_flags.part.0+0x1dd/0x4f0 [ 2133.722902][T18436] __x64_sys_symlinkat+0x93/0xc0 [ 2133.727979][T18436] do_syscall_64+0x35/0xb0 [ 2133.732419][T18436] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2133.738337][T18436] RIP: 0033:0x7f5e99a8af07 [ 2133.742943][T18436] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2133.762747][T18436] RSP: 002b:00007ffdae169788 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 2133.771164][T18436] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5e99a8af07 [ 2133.779417][T18436] RDX: 00007f5e99ae6851 RSI: 00000000ffffff9c RDI: 00007f5e99ae540b [ 2133.788364][T18436] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007ffdae169200 [ 2133.796516][T18436] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 2133.804580][T18436] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdae169850 [ 2133.812824][T18436] [ 2133.826975][T18436] memory: usage 307136kB, limit 307200kB, failcnt 14262 [ 2133.834459][T18436] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2133.841581][T18436] Memory cgroup stats for /syz1: [ 2133.841798][T18436] anon 77824 [ 2133.841798][T18436] file 274432 [ 2133.841798][T18436] kernel 314155008 [ 2133.841798][T18436] kernel_stack 32768 [ 2133.841798][T18436] pagetables 61440 [ 2133.841798][T18436] sec_pagetables 0 [ 2133.841798][T18436] percpu 5423904 [ 2133.841798][T18436] sock 0 [ 2133.841798][T18436] vmalloc 8192 [ 2133.841798][T18436] shmem 274432 [ 2133.841798][T18436] zswap 0 [ 2133.841798][T18436] zswapped 0 [ 2133.841798][T18436] file_mapped 258048 [ 2133.841798][T18436] file_dirty 0 [ 2133.841798][T18436] file_writeback 0 [ 2133.841798][T18436] swapcached 0 [ 2133.841798][T18436] anon_thp 0 [ 2133.841798][T18436] file_thp 0 [ 2133.841798][T18436] shmem_thp 0 [ 2133.841798][T18436] inactive_anon 53248 [ 2133.841798][T18436] active_anon 266240 [ 2133.841798][T18436] inactive_file 0 [ 2133.841798][T18436] active_file 0 [ 2133.841798][T18436] unevictable 0 [ 2133.841798][T18436] slab_reclaimable 20024 [ 2133.841798][T18436] slab_unreclaimable 308566840 [ 2133.944621][T18436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=18436,uid=0 01:51:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200]}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2133.960782][T18436] Memory cgroup out of memory: Killed process 18436 (syz-executor.1) total-vm:50624kB, anon-rss:460kB, file-rss:8192kB, shmem-rss:0kB, UID:0 pgtables:64kB oom_score_adj:1000 [ 2134.024451][ T3636] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2134.035423][ T3636] CPU: 0 PID: 3636 Comm: syz-executor.1 Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2134.046165][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2134.056221][ T3636] Call Trace: [ 2134.059632][ T3636] [ 2134.062656][ T3636] dump_stack_lvl+0xcd/0x134 [ 2134.067344][ T3636] dump_header+0x10b/0x85f [ 2134.071799][ T3636] oom_kill_process.cold+0x10/0x15 [ 2134.077015][ T3636] out_of_memory+0x358/0x14a0 [ 2134.081698][ T3636] ? rcu_read_lock_sched_held+0xd/0x70 [ 2134.087358][ T3636] ? __mod_timer+0x83c/0xe30 [ 2134.091964][ T3636] ? rcu_read_lock_sched_held+0xd/0x70 [ 2134.097617][ T3636] ? lock_acquire+0x4fc/0x630 [ 2134.102411][ T3636] ? oom_killer_disable+0x270/0x270 [ 2134.107631][ T3636] ? rcu_read_lock_sched_held+0xd/0x70 [ 2134.113200][ T3636] ? lock_release+0x5cb/0x810 [ 2134.117992][ T3636] ? rcu_read_unlock+0x9/0x60 [ 2134.122693][ T3636] ? lock_downgrade+0x6e0/0x6e0 [ 2134.127733][ T3636] mem_cgroup_out_of_memory+0x206/0x270 [ 2134.133387][ T3636] ? mem_cgroup_margin+0x130/0x130 [ 2134.138528][ T3636] ? lock_downgrade+0x6e0/0x6e0 [ 2134.143403][ T3636] try_charge_memcg+0xef8/0x12f0 [ 2134.148360][ T3636] ? mem_cgroup_handle_over_high+0x510/0x510 [ 2134.154434][ T3636] ? lock_acquire+0x4fc/0x630 [ 2134.159210][ T3636] ? rcu_read_lock_sched_held+0xd/0x70 [ 2134.165127][ T3636] ? lock_release+0x5cb/0x810 [ 2134.169811][ T3636] ? rcu_read_unlock+0x9/0x60 [ 2134.174584][ T3636] ? lock_downgrade+0x6e0/0x6e0 [ 2134.179453][ T3636] charge_memcg+0x99/0x3b0 [ 2134.184171][ T3636] __mem_cgroup_charge+0x27/0x90 [ 2134.189123][ T3636] wp_page_copy+0x2bf/0x1c90 [ 2134.193729][ T3636] ? rcu_read_lock_sched_held+0xd/0x70 [ 2134.199293][ T3636] ? lock_release+0x5cb/0x810 [ 2134.204007][ T3636] ? page_try_dup_anon_rmap.constprop.0+0xd10/0xd10 [ 2134.210776][ T3636] ? lock_downgrade+0x6e0/0x6e0 [ 2134.215663][ T3636] ? vm_normal_page+0x146/0x2a0 [ 2134.220605][ T3636] ? __pte_alloc_kernel+0x110/0x110 [ 2134.225809][ T3636] ? lock_release+0x5cb/0x810 [ 2134.230523][ T3636] do_wp_page+0x538/0x1930 [ 2134.235735][ T3636] __handle_mm_fault+0x181b/0x3a40 [ 2134.241118][ T3636] ? lock_acquire+0x4fc/0x630 [ 2134.245804][ T3636] ? vm_iomap_memory+0x180/0x180 [ 2134.251016][ T3636] ? lock_release+0x810/0x810 [ 2134.255710][ T3636] handle_mm_fault+0x1c8/0x780 [ 2134.261126][ T3636] do_user_addr_fault+0x475/0x1210 [ 2134.266256][ T3636] ? rcu_read_lock_sched_held+0xd/0x70 [ 2134.271733][ T3636] exc_page_fault+0x94/0x170 [ 2134.276546][ T3636] asm_exc_page_fault+0x22/0x30 [ 2134.281417][ T3636] RIP: 0033:0x7f5e99a5aa8a [ 2134.286018][ T3636] Code: 44 89 c8 87 07 83 f8 01 7e d5 45 31 d2 ba 01 00 00 00 be 81 00 00 00 89 d8 0f 05 eb c2 0f 1f 00 c3 0f 1f 80 00 00 00 00 31 c0 <87> 05 e8 00 09 01 83 f8 01 7e c9 45 31 d2 ba 01 00 00 00 be 81 00 [ 2134.305808][ T3636] RSP: 002b:00007ffdae169760 EFLAGS: 00010246 [ 2134.311923][ T3636] RAX: 0000000000000000 RBX: 00000000000000ca RCX: 00007f5e99a892fb [ 2134.320436][ T3636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f5e99b855e0 [ 2134.328505][ T3636] RBP: 0000000000000001 R08: 00007f5e99b855e0 R09: 0000000000000000 [ 2134.336492][ T3636] R10: 00005555557d66d0 R11: 0000000000000246 R12: 0000000000000001 [ 2134.344643][ T3636] R13: 0000000000004637 R14: 0000000000000001 R15: 00007ffdae169850 [ 2134.352698][ T3636] [ 2134.362768][ T3636] memory: usage 307156kB, limit 307200kB, failcnt 14351 [ 2134.382605][ T3636] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2134.390402][ T3636] Memory cgroup stats for /syz1: [ 2134.390568][ T3636] anon 73728 [ 2134.390568][ T3636] file 274432 [ 2134.390568][ T3636] kernel 314150912 [ 2134.390568][ T3636] kernel_stack 32768 [ 2134.390568][ T3636] pagetables 61440 [ 2134.390568][ T3636] sec_pagetables 0 [ 2134.390568][ T3636] percpu 5423904 [ 2134.390568][ T3636] sock 0 [ 2134.390568][ T3636] vmalloc 8192 [ 2134.390568][ T3636] shmem 274432 [ 2134.390568][ T3636] zswap 0 [ 2134.390568][ T3636] zswapped 0 [ 2134.390568][ T3636] file_mapped 258048 [ 2134.390568][ T3636] file_dirty 0 [ 2134.390568][ T3636] file_writeback 0 [ 2134.390568][ T3636] swapcached 0 [ 2134.390568][ T3636] anon_thp 0 [ 2134.390568][ T3636] file_thp 0 [ 2134.390568][ T3636] shmem_thp 0 [ 2134.390568][ T3636] inactive_anon 53248 [ 2134.390568][ T3636] active_anon 266240 [ 2134.390568][ T3636] inactive_file 0 [ 2134.390568][ T3636] active_file 0 [ 2134.390568][ T3636] unevictable 0 [ 2134.390568][ T3636] slab_reclaimable 16120 [ 2134.390568][ T3636] slab_unreclaimable 308566840 [ 2134.507066][ T3636] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3636,uid=0 [ 2134.522934][ T3636] Memory cgroup out of memory: Killed process 3636 (syz-executor.1) total-vm:50624kB, anon-rss:460kB, file-rss:9120kB, shmem-rss:4kB, UID:0 pgtables:76kB oom_score_adj:0 [ 2135.518622][T21637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2135.790012][T21637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2136.123056][T21637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 01:51:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x0, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2136.436369][T21637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2136.507585][T18441] wg2 speed is unknown, defaulting to 1000 [ 2136.546593][T18442] wg2 speed is unknown, defaulting to 1000 01:51:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2136.863165][T18449] wg2 speed is unknown, defaulting to 1000 01:51:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2136.979315][T18446] wg2 speed is unknown, defaulting to 1000 [ 2137.069967][T18455] wg2 speed is unknown, defaulting to 1000 [ 2137.191074][T18448] wg2 speed is unknown, defaulting to 1000 [ 2137.274101][T18457] wg2 speed is unknown, defaulting to 1000 [ 2137.362957][T18459] wg2 speed is unknown, defaulting to 1000 [ 2137.682404][T21637] smc: removing net device xfrm0 with user defined pnetid SYZ0 01:51:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0x0, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:51:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2137.951250][T18480] wg2 speed is unknown, defaulting to 1000 [ 2138.091341][T18485] wg2 speed is unknown, defaulting to 1000 [ 2138.138203][T18486] wg2 speed is unknown, defaulting to 1000 [ 2138.150852][T18489] wg2 speed is unknown, defaulting to 1000 [ 2138.171593][T18487] wg2 speed is unknown, defaulting to 1000 [ 2138.220546][T18491] wg2 speed is unknown, defaulting to 1000 [ 2138.255102][T18493] wg2 speed is unknown, defaulting to 1000 [ 2138.294642][T18490] wg2 speed is unknown, defaulting to 1000 01:51:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2140.189720][T18509] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2140.197337][T18509] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2140.208800][T18509] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2140.217197][T18509] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2140.225066][T18509] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2140.232446][T18509] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2140.240682][T18508] Bluetooth: hci0: HCI_REQ-0x0c1a [ 2140.740030][T21637] device hsr_slave_0 left promiscuous mode [ 2140.748363][T21637] device hsr_slave_1 left promiscuous mode [ 2140.755186][T21637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2140.763654][T21637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2140.772710][T21637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2140.780767][T21637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2140.790428][T21637] device bridge_slave_1 left promiscuous mode [ 2140.796797][T21637] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.804862][T21637] device bridge_slave_0 left promiscuous mode [ 2140.811136][T21637] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.847524][T21637] device veth1_macvtap left promiscuous mode [ 2140.853878][T21637] device veth0_macvtap left promiscuous mode [ 2140.860009][T21637] device veth1_vlan left promiscuous mode [ 2140.870031][T21637] device veth0_vlan left promiscuous mode [ 2142.252836][ T3649] Bluetooth: hci0: command 0x0409 tx timeout [ 2144.332971][ T3649] Bluetooth: hci0: command 0x041b tx timeout [ 2144.428334][T21637] bond24 (unregistering): Released all slaves [ 2144.535538][T21637] bond23 (unregistering): Released all slaves [ 2144.714664][T21637] bond22 (unregistering): Released all slaves [ 2145.704496][T21637] bond21 (unregistering): Released all slaves [ 2145.805633][T21637] bond20 (unregistering): Released all slaves [ 2145.865628][T21637] bond19 (unregistering): Released all slaves [ 2146.412930][ T3649] Bluetooth: hci0: command 0x040f tx timeout [ 2146.755712][T21637] bond18 (unregistering): Released all slaves [ 2146.816594][T21637] bond17 (unregistering): Released all slaves [ 2148.502773][ T3649] Bluetooth: hci0: command 0x0419 tx timeout [ 2149.933252][T27371] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2160.174187][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2181.292821][T21682] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) 01:52:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:52:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x0, 0x4, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 01:52:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22, 0x7fff, @loopback, 0x1000}, 0x1c) unshare(0x40000000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x25, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x718, 0x148, 0x0, 0xffffffff, 0x148, 0x4e0, 0x648, 0x648, 0xffffffff, 0x648, 0x648, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x7513, 0x8000], 0x1, 0x28}}, @common=@hl={{0x28}, {0x2, 0xff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010102, @port=0x4e21, @port=0x4e23}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff, 0xfffffe01], 'gretap0\x00', 'caif0\x00', {0x75dc44714dcc3de6}, {}, 0x67, 0x8, 0x5, 0x50}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x41}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0xfffffff8, 0x8, 0x3}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@private=0xa010100, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @private0, [0xff, 0xffffff00, 0xffff00], [0xff000000, 0xffffffff, 0xff000000, 0xff000000], 'vlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0x1, 0x9, 0x68}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x9, [0x81], 0x9, 0x1, 0x3, [@dev={0xfe, 0x80, '\x00', 0xd}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x18}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, @remote, @remote], 0xf9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0xfff7, @icmp_id=0x67}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'tunl0\x00', 'veth1_vlan\x00', {0xff}, {}, 0xff, 0x8d, 0x0, 0x2e}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0x3, 0x801, 0x1f, 0x0, 0xf06, 0x7, 0x7, 0x7f, 0x3, 0x9, 0x800, 0x2, 0x0, 0x80, 0x0, 0x200], 0x4}}, @common=@srh={{0x30}, {0x1, 0x80, 0x3, 0x2, 0x4, 0x200, 0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@empty, @ipv4=@multicast1, @icmp_id=0x65, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @loopback, @loopback}, &(0x7f0000000480)=0xc) sendmsg$inet(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000300100066000c43e000000100000005e00000010000ae78a46486daf9951d330818070017ac1414bbffffffff0a0101018600ffffffff0700b40400f4a0b040c1950eb7f162ac3a0000000000001c0000000000", @ANYRES32=r3, @ANYBLOB="0a010101ac14142500000000"], 0x1b}, 0x24004023) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0xa3, &(0x7f00000002c0)=""/163, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) unshare(0x40000000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) [ 2195.454710][T18519] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2195.462032][T18519] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2195.469915][T18519] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2195.477968][T18519] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2195.485754][T18519] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2195.493235][T18519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2195.500823][T18515] Bluetooth: hci7: HCI_REQ-0x0c1a [ 2196.412690][ T3649] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 2197.532852][ T3649] Bluetooth: hci7: command 0x0409 tx timeout [ 2197.772772][T18519] Bluetooth: hci8: Opcode 0x c03 failed: -110 [ 2199.612679][ T3649] Bluetooth: hci7: command 0x041b tx timeout [ 2200.972621][T18519] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 2201.692883][T18519] Bluetooth: hci7: command 0x040f tx timeout [ 2202.332581][ T3649] Bluetooth: hci8: Opcode 0x c03 failed: -110 [ 2203.782639][T18519] Bluetooth: hci7: command 0x0419 tx timeout [ 2205.532704][ T3649] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 2206.892878][T18519] Bluetooth: hci8: Opcode 0x c03 failed: -110 [ 2208.014334][T18509] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2208.021868][T18509] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2208.030103][T18509] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2208.037804][T18509] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2208.047964][T18509] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2208.055663][T18509] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2208.063636][T18531] Bluetooth: hci8: HCI_REQ-0x0c1a [ 2208.412775][ T3649] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 2210.092849][T18509] Bluetooth: hci8: command 0x0409 tx timeout [ 2211.452619][ T3649] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 2212.172646][ T3649] Bluetooth: hci8: command 0x041b tx timeout [ 2212.982720][T18509] Bluetooth: hci9: Opcode 0x c03 failed: -110 [ 2213.292957][T27371] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2214.252828][ T3649] Bluetooth: hci8: command 0x040f tx timeout [ 2216.015722][T18509] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 2216.332548][T18509] Bluetooth: hci8: command 0x0419 tx timeout [ 2217.532681][ T3649] Bluetooth: hci9: Opcode 0x c03 failed: -110 [ 2218.494333][T18519] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2218.501636][T18519] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2218.509586][T18519] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2218.517186][T18519] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2218.524813][T18519] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2218.532116][T18519] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2218.539850][T18543] Bluetooth: hci6: HCI_REQ-0x0c1a [ 2219.934517][T18519] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2219.941762][T18519] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2219.948986][T18519] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2219.959185][T18519] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2219.966610][T18519] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2219.973967][T18519] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2219.981589][T18546] Bluetooth: hci9: HCI_REQ-0x0c1a [ 2220.572643][ T3649] Bluetooth: hci6: command 0x0409 tx timeout [ 2221.623997][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.012826][T18519] Bluetooth: hci9: command 0x0409 tx timeout [ 2222.652626][ T3649] Bluetooth: hci6: command 0x041b tx timeout [ 2224.092804][T18519] Bluetooth: hci9: command 0x041b tx timeout [ 2224.732641][T18519] Bluetooth: hci6: command 0x040f tx timeout [ 2226.172815][T18519] Bluetooth: hci9: command 0x040f tx timeout [ 2226.822714][T18519] Bluetooth: hci6: command 0x0419 tx timeout [ 2228.252962][T18519] Bluetooth: hci9: command 0x0419 tx timeout [ 2244.662877][T21682] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2261.698720][ T3649] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2261.706776][ T3649] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2261.714153][ T3649] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2261.721980][ T3649] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2261.729836][ T3649] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2261.737328][ T3649] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2261.745773][T18549] Bluetooth: hci10: HCI_REQ-0x0c1a [ 2263.772643][ T3649] Bluetooth: hci10: command 0x0409 tx timeout [ 2264.652910][ T3649] Bluetooth: hci0: command 0x0406 tx timeout [ 2265.852634][ T3649] Bluetooth: hci10: command 0x041b tx timeout [ 2267.932664][ T3649] Bluetooth: hci10: command 0x040f tx timeout [ 2270.012667][ T3649] Bluetooth: hci10: command 0x0419 tx timeout [ 2276.012618][T21689] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2276.342606][T18519] Bluetooth: hci11: Opcode 0x c03 failed: -110 [ 2280.892828][T18519] Bluetooth: hci11: Opcode 0x c03 failed: -110 [ 2283.053777][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 2285.372755][T18519] Bluetooth: hci11: Opcode 0x c03 failed: -110 [ 2286.812717][ T3649] Bluetooth: hci12: Opcode 0x c03 failed: -110 [ 2288.252568][T18519] Bluetooth: hci11: Opcode 0x c03 failed: -110 [ 2289.854328][ T3649] Bluetooth: hci12: Opcode 0x c03 failed: -110 [ 2291.373117][T18519] Bluetooth: hci11: Opcode 0x c03 failed: -110 [ 2292.012912][ T28] INFO: task dhcpcd:3185 blocked for more than 143 seconds. [ 2292.020265][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2292.028177][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2292.037597][ T28] task:dhcpcd state:D stack:23664 pid:3185 ppid:3184 flags:0x00000000 [ 2292.046997][ T28] Call Trace: [ 2292.050293][ T28] [ 2292.053576][ T28] __schedule+0xae9/0x53f0 [ 2292.058045][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2292.063601][ T28] ? lock_acquire+0x4fc/0x630 [ 2292.068295][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2292.074468][ T28] ? lock_release+0x5cb/0x810 [ 2292.079189][ T28] ? io_schedule_timeout+0x140/0x140 [ 2292.084781][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2292.089721][ T28] ? kasan_set_track+0x21/0x30 [ 2292.095526][ T28] schedule+0xda/0x1b0 [ 2292.099637][ T28] schedule_preempt_disabled+0xf/0x20 [ 2292.107147][ T28] __mutex_lock+0xa44/0x1350 [ 2292.111760][ T28] ? debug_check_no_obj_freed+0x20c/0x420 [ 2292.117800][ T28] ? netlink_dump+0xbe/0xc50 [ 2292.122611][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2292.128229][ T28] ? lock_release+0x5cb/0x810 [ 2292.133007][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2292.137922][ T28] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2292.144085][ T28] ? debug_check_no_obj_freed+0x20c/0x420 [ 2292.150052][ T28] netlink_dump+0xbe/0xc50 [ 2292.154662][ T28] ? debug_check_no_obj_freed+0x20c/0x420 [ 2292.160510][ T28] ? netlink_deliver_tap+0xc40/0xc40 [ 2292.166007][ T28] ? trace_hardirqs_on+0x2d/0x160 [ 2292.171057][ T28] ? kfree_skbmem+0xef/0x1b0 [ 2292.175996][ T28] netlink_recvmsg+0xbdd/0xe50 [ 2292.180996][ T28] ? netlink_dump+0xc50/0xc50 [ 2292.185985][ T28] ? aa_af_perm+0x230/0x230 [ 2292.190671][ T28] ? _copy_from_user+0xf9/0x170 [ 2292.195605][ T28] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2292.201117][ T28] ? security_socket_recvmsg+0x8f/0xc0 [ 2292.206837][ T28] ? netlink_dump+0xc50/0xc50 [ 2292.211665][ T28] ____sys_recvmsg+0x2c7/0x610 [ 2292.220038][ T28] ? kernel_recvmsg+0x160/0x160 [ 2292.225104][ T28] ? copy_msghdr_from_user+0xfc/0x150 [ 2292.230490][ T28] ? __copy_msghdr+0x4a0/0x4a0 [ 2292.239035][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 2292.244311][ T28] ___sys_recvmsg+0xf2/0x180 [ 2292.248974][ T28] ? copy_msghdr_from_user+0x150/0x150 [ 2292.254505][ T28] ? __sys_sendto+0x25f/0x340 [ 2292.259250][ T28] ? __fget_light+0x20a/0x270 [ 2292.264360][ T28] __sys_recvmsg+0xf0/0x1c0 [ 2292.268900][ T28] ? __sys_recvmsg_sock+0x40/0x40 [ 2292.274237][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2292.279345][ T28] ? restore_fpregs_from_fpstate+0xbd/0x1c0 [ 2292.285374][ T28] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2292.291301][ T28] ? trace_hardirqs_on+0x2d/0x160 [ 2292.296597][ T28] do_syscall_64+0x35/0xb0 [ 2292.301062][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2292.307074][ T28] RIP: 0033:0x7f2224d3b003 [ 2292.311505][ T28] RSP: 002b:00007ffed636bf38 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2292.320271][ T28] RAX: ffffffffffffffda RBX: 00007ffed636d070 RCX: 00007f2224d3b003 [ 2292.332609][ T28] RDX: 0000000000000000 RSI: 00007ffed636cf90 RDI: 0000000000000012 [ 2292.340766][ T28] RBP: 00007ffed636d000 R08: 00007ffed636cf74 R09: 000000000000000c [ 2292.347699][T18509] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2292.348925][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed636cf90 [ 2292.362943][T18509] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2292.364338][ T28] R13: 00007ffed636cf74 R14: 00007ffed636cf80 R15: 00007ffed636bf40 [ 2292.371573][ T3653] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2292.379834][ T28] [ 2292.379920][ T28] INFO: task kworker/0:1:27217 blocked for more than 143 seconds. [ 2292.379939][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2292.379952][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2292.379959][ T28] task:kworker/0:1 state:D stack:26432 pid:27217 ppid:2 flags:0x00004000 [ 2292.379998][ T28] Workqueue: ipv6_addrconf addrconf_verify_work [ 2292.380027][ T28] Call Trace: [ 2292.380034][ T28] [ 2292.380045][ T28] __schedule+0xae9/0x53f0 [ 2292.380079][ T28] ? do_raw_spin_unlock+0x171/0x230 [ 2292.380109][ T28] ? wq_worker_sleeping+0x1e5/0x250 [ 2292.380139][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2292.380161][ T28] ? do_raw_spin_lock+0x120/0x2a0 [ 2292.380184][ T28] ? sched_core_balance+0x9d0/0xac0 [ 2292.380209][ T28] ? io_schedule_timeout+0x140/0x140 [ 2292.390669][ T3653] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2292.406043][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2292.430680][ T3653] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2292.431774][ T28] ? trace_hardirqs_on+0x2d/0x160 [ 2292.435022][ T3653] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2292.437399][ T28] schedule+0xda/0x1b0 [ 2292.442527][T18571] Bluetooth: hci11: HCI_REQ-0x0c1a [ 2292.447756][ T28] schedule_preempt_disabled+0xf/0x20 [ 2292.520815][ T28] __mutex_lock+0xa44/0x1350 [ 2292.525681][ T28] ? addrconf_verify_work+0xe/0x20 [ 2292.531168][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2292.537513][ T28] ? lock_release+0x810/0x810 [ 2292.543069][ T28] ? read_word_at_a_time+0xe/0x20 [ 2292.548228][ T28] ? strscpy+0xa1/0x2a0 [ 2292.552661][ T28] addrconf_verify_work+0xe/0x20 [ 2292.557703][ T28] process_one_work+0x9bf/0x1710 [ 2292.563078][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2292.568505][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2292.573955][ T28] worker_thread+0x665/0x1080 [ 2292.578831][ T28] ? __kthread_parkme+0x15f/0x220 [ 2292.584518][ T28] ? process_one_work+0x1710/0x1710 [ 2292.589759][ T28] kthread+0x2e4/0x3a0 [ 2292.593923][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2292.599658][ T28] ret_from_fork+0x1f/0x30 [ 2292.604227][ T28] [ 2292.607995][ T28] INFO: task kworker/1:8:10597 blocked for more than 143 seconds. [ 2292.616114][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2292.627180][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2292.636198][ T28] task:kworker/1:8 state:D stack:26520 pid:10597 ppid:2 flags:0x00004000 [ 2292.646721][ T28] Workqueue: events linkwatch_event [ 2292.652100][ T28] Call Trace: [ 2292.655995][ T28] [ 2292.659047][ T28] __schedule+0xae9/0x53f0 [ 2292.663657][ T28] ? do_raw_spin_unlock+0x171/0x230 [ 2292.668914][ T28] ? wq_worker_sleeping+0x1e5/0x250 [ 2292.674500][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2292.679413][ T28] ? do_raw_spin_lock+0x120/0x2a0 [ 2292.684642][ T28] ? sched_core_balance+0x9d0/0xac0 [ 2292.690364][ T28] ? io_schedule_timeout+0x140/0x140 [ 2292.695798][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2292.701116][ T28] ? trace_hardirqs_on+0x2d/0x160 [ 2292.706236][ T28] schedule+0xda/0x1b0 [ 2292.710354][ T28] schedule_preempt_disabled+0xf/0x20 [ 2292.715875][ T28] __mutex_lock+0xa44/0x1350 [ 2292.721196][ T28] ? linkwatch_event+0xb/0x60 [ 2292.725960][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2292.731524][ T28] ? lock_release+0x810/0x810 [ 2292.739623][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2292.744666][ T28] linkwatch_event+0xb/0x60 [ 2292.749198][ T28] process_one_work+0x9bf/0x1710 [ 2292.754276][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2292.759684][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2292.764680][ T28] ? kasan_check_range+0xc8/0x180 [ 2292.769744][ T28] worker_thread+0x665/0x1080 [ 2292.774950][ T28] ? process_one_work+0x1710/0x1710 [ 2292.780189][ T28] kthread+0x2e4/0x3a0 [ 2292.784485][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2292.790527][ T28] ret_from_fork+0x1f/0x30 [ 2292.795441][ T28] [ 2292.798577][ T28] INFO: task kworker/0:28:16933 blocked for more than 144 seconds. [ 2292.807237][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2292.815327][ T3649] Bluetooth: hci12: Opcode 0x c03 failed: -110 [ 2292.821678][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2292.830856][ T28] task:kworker/0:28 state:D stack:28840 pid:16933 ppid:2 flags:0x00004000 [ 2292.840456][ T28] Workqueue: events switchdev_deferred_process_work [ 2292.847387][ T28] Call Trace: [ 2292.850778][ T28] [ 2292.853974][ T28] __schedule+0xae9/0x53f0 [ 2292.858724][ T28] ? do_raw_spin_unlock+0x171/0x230 [ 2292.864270][ T28] ? wq_worker_sleeping+0x1e5/0x250 [ 2292.869687][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2292.874816][ T28] ? do_raw_spin_lock+0x120/0x2a0 [ 2292.879876][ T28] ? sched_core_balance+0x9d0/0xac0 [ 2292.885341][ T28] ? io_schedule_timeout+0x140/0x140 [ 2292.891000][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2292.896708][ T28] ? trace_hardirqs_on+0x2d/0x160 [ 2292.901767][ T28] schedule+0xda/0x1b0 [ 2292.906229][ T28] schedule_preempt_disabled+0xf/0x20 [ 2292.911645][ T28] __mutex_lock+0xa44/0x1350 [ 2292.916616][ T28] ? switchdev_deferred_process_work+0xa/0x20 [ 2292.923043][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2292.928711][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2292.933854][ T28] ? __switch_to_asm+0x3a/0x60 [ 2292.938668][ T28] switchdev_deferred_process_work+0xa/0x20 [ 2292.944838][ T28] process_one_work+0x9bf/0x1710 [ 2292.951402][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2292.957081][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2292.962076][ T28] worker_thread+0x665/0x1080 [ 2292.967069][ T28] ? process_one_work+0x1710/0x1710 [ 2292.972334][ T28] kthread+0x2e4/0x3a0 [ 2292.979528][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2292.985868][ T28] ret_from_fork+0x1f/0x30 [ 2292.990425][ T28] [ 2292.996799][ T28] INFO: task syz-executor.0:18446 blocked for more than 144 seconds. [ 2293.005337][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2293.013789][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2293.022651][ T28] task:syz-executor.0 state:D stack:27848 pid:18446 ppid:3637 flags:0x00004004 [ 2293.032165][ T28] Call Trace: [ 2293.036023][ T28] [ 2293.039206][ T28] __schedule+0xae9/0x53f0 [ 2293.043774][ T28] ? setup_net+0x7fb/0xc50 [ 2293.048476][ T28] ? copy_net_ns+0x318/0x760 [ 2293.053490][ T28] ? create_new_namespaces+0x3f6/0xb20 [ 2293.059110][ T28] ? unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2293.065550][ T28] ? ksys_unshare+0x445/0x920 [ 2293.070534][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2293.076217][ T28] ? lock_acquire+0x4fc/0x630 [ 2293.081229][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2293.087740][ T28] ? lock_release+0x5cb/0x810 [ 2293.092988][ T28] ? io_schedule_timeout+0x140/0x140 [ 2293.098705][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2293.107560][ T28] ? lock_release+0x5cb/0x810 [ 2293.114565][ T28] schedule+0xda/0x1b0 [ 2293.118804][ T28] schedule_preempt_disabled+0xf/0x20 [ 2293.128495][ T28] __mutex_lock+0xa44/0x1350 [ 2293.135204][ T28] ? ppp_exit_net+0x17f/0x590 [ 2293.140402][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2293.147031][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2293.153140][ T28] ? lock_release+0x5cb/0x810 [ 2293.158072][ T28] ? ppp_exit_net+0x149/0x590 [ 2293.163463][ T28] ? kmem_cache_free+0xea/0x5b0 [ 2293.168491][ T28] ppp_exit_net+0x17f/0x590 [ 2293.173615][ T28] ? remove_proc_entry+0x1e3/0x460 [ 2293.179035][ T28] ? ppp_dev_uninit+0x3e0/0x3e0 [ 2293.184346][ T28] ? proc_readdir+0x140/0x140 [ 2293.189197][ T28] ? ppp_dev_uninit+0x3e0/0x3e0 [ 2293.195139][ T28] ops_exit_list+0xb0/0x170 [ 2293.200040][ T28] setup_net+0x7fb/0xc50 [ 2293.209360][ T28] ? ops_init+0x470/0x470 [ 2293.227384][ T28] copy_net_ns+0x318/0x760 [ 2293.231887][ T28] create_new_namespaces+0x3f6/0xb20 [ 2293.253371][ T28] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2293.269628][ T28] ksys_unshare+0x445/0x920 [ 2293.274610][ T28] ? unshare_fd+0x1c0/0x1c0 [ 2293.279266][ T28] __x64_sys_unshare+0x2d/0x40 [ 2293.292592][ T28] do_syscall_64+0x35/0xb0 [ 2293.303157][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2293.319525][ T28] RIP: 0033:0x7f60d908b5f9 [ 2293.324079][ T28] RSP: 002b:00007f60da247168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2293.342484][ T28] RAX: ffffffffffffffda RBX: 00007f60d91abf80 RCX: 00007f60d908b5f9 [ 2293.359428][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2293.367656][ T28] RBP: 00007f60d90e67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2293.375952][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2293.384063][ T28] R13: 00007ffd144bb4ff R14: 00007f60da247300 R15: 0000000000022000 [ 2293.392340][ T28] [ 2293.395672][ T28] INFO: task syz-executor.0:18448 blocked for more than 144 seconds. [ 2293.404754][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2293.412375][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2293.422051][ T28] task:syz-executor.0 state:D stack:27904 pid:18448 ppid:3637 flags:0x00004004 [ 2293.432143][ T28] Call Trace: [ 2293.435532][ T28] [ 2293.438494][ T28] __schedule+0xae9/0x53f0 [ 2293.442982][ T28] ? slab_free_freelist_hook+0x8b/0x1c0 [ 2293.448542][ T28] ? __kmem_cache_free+0xab/0x3b0 [ 2293.453945][ T28] ? ops_exit_list+0xb0/0x170 [ 2293.458664][ T28] ? setup_net+0x7fb/0xc50 [ 2293.463219][ T28] ? copy_net_ns+0x318/0x760 [ 2293.467833][ T28] ? do_syscall_64+0x35/0xb0 [ 2293.472655][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2293.478240][ T28] ? lock_acquire+0x4fc/0x630 [ 2293.482991][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2293.488504][ T28] ? lock_release+0x5cb/0x810 [ 2293.493332][ T28] ? io_schedule_timeout+0x140/0x140 [ 2293.498657][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2293.503695][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 2293.508738][ T28] schedule+0xda/0x1b0 [ 2293.512944][ T28] schedule_preempt_disabled+0xf/0x20 [ 2293.518357][ T28] __mutex_lock+0xa44/0x1350 [ 2293.523662][ T28] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2293.529503][ T28] ? cangw_pernet_exit_batch+0x11/0xa0 [ 2293.535554][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2293.541181][ T28] ? trace_hardirqs_on+0x2d/0x160 [ 2293.546281][ T28] ? ops_exit_list+0xb0/0x170 [ 2293.550976][ T28] ? __kmem_cache_free+0xab/0x3b0 [ 2293.556136][ T28] ? cgw_remove_all_jobs+0x350/0x350 [ 2293.561452][ T28] cangw_pernet_exit_batch+0x11/0xa0 [ 2293.566802][ T28] ? cgw_remove_all_jobs+0x350/0x350 [ 2293.572110][ T28] ops_exit_list+0x125/0x170 [ 2293.576811][ T28] setup_net+0x7fb/0xc50 [ 2293.581081][ T28] ? ops_init+0x470/0x470 [ 2293.585489][ T28] copy_net_ns+0x318/0x760 [ 2293.589926][ T28] create_new_namespaces+0x3f6/0xb20 [ 2293.595317][ T28] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2293.600976][ T28] ksys_unshare+0x445/0x920 [ 2293.605540][ T28] ? unshare_fd+0x1c0/0x1c0 [ 2293.610351][ T28] __x64_sys_unshare+0x2d/0x40 [ 2293.615293][ T28] do_syscall_64+0x35/0xb0 [ 2293.619733][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2293.625721][ T28] RIP: 0033:0x7f60d908b5f9 [ 2293.630147][ T28] RSP: 002b:00007f60da226168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2293.639423][ T28] RAX: ffffffffffffffda RBX: 00007f60d91ac050 RCX: 00007f60d908b5f9 [ 2293.647581][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2293.655662][ T28] RBP: 00007f60d90e67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2293.663696][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2293.671686][ T28] R13: 00007ffd144bb4ff R14: 00007f60da226300 R15: 0000000000022000 [ 2293.679848][ T28] [ 2293.682968][ T28] INFO: task syz-executor.2:18491 blocked for more than 145 seconds. [ 2293.691135][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2293.698869][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2293.707615][ T28] task:syz-executor.2 state:D stack:27784 pid:18491 ppid:3640 flags:0x00004004 [ 2293.717117][ T28] Call Trace: [ 2293.720415][ T28] [ 2293.723394][ T28] __schedule+0xae9/0x53f0 [ 2293.727831][ T28] ? unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2293.733765][ T28] ? ksys_unshare+0x445/0x920 [ 2293.738547][ T28] ? __x64_sys_unshare+0x2d/0x40 [ 2293.744313][ T28] ? do_syscall_64+0x35/0xb0 [ 2293.749021][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2293.755215][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2293.760803][ T28] ? lock_acquire+0x4fc/0x630 [ 2293.765565][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2293.771149][ T28] ? lock_release+0x5cb/0x810 [ 2293.775993][ T28] ? io_schedule_timeout+0x140/0x140 [ 2293.781451][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2293.786433][ T28] schedule+0xda/0x1b0 [ 2293.790535][ T28] schedule_preempt_disabled+0xf/0x20 [ 2293.796137][ T28] __mutex_lock+0xa44/0x1350 [ 2293.800751][ T28] ? wg_netns_pre_exit+0x17/0x210 [ 2293.805909][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2293.811472][ T28] ? slab_free_freelist_hook+0x8b/0x1c0 [ 2293.817266][ T28] ? __kmem_cache_free+0xab/0x3b0 [ 2293.822351][ T28] ? ip6_tnl_create2+0x380/0x380 [ 2293.827442][ T28] ? wg_setup+0x400/0x400 [ 2293.831795][ T28] wg_netns_pre_exit+0x17/0x210 [ 2293.836784][ T28] ? wg_setup+0x400/0x400 [ 2293.841144][ T28] setup_net+0x749/0xc50 [ 2293.845467][ T28] ? ops_init+0x470/0x470 [ 2293.850035][ T28] copy_net_ns+0x318/0x760 [ 2293.855322][ T28] create_new_namespaces+0x3f6/0xb20 [ 2293.860653][ T28] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2293.866449][ T28] ksys_unshare+0x445/0x920 [ 2293.870993][ T28] ? unshare_fd+0x1c0/0x1c0 [ 2293.875629][ T28] __x64_sys_unshare+0x2d/0x40 [ 2293.880417][ T28] do_syscall_64+0x35/0xb0 [ 2293.884897][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2293.890821][ T28] RIP: 0033:0x7f08d6c8b5f9 [ 2293.895453][ T28] RSP: 002b:00007f08d7e89168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2293.904020][ T28] RAX: ffffffffffffffda RBX: 00007f08d6dac120 RCX: 00007f08d6c8b5f9 [ 2293.912027][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2293.920304][ T28] RBP: 00007f08d6ce67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2293.928476][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2293.936737][ T28] R13: 00007ffedd3436af R14: 00007f08d7e89300 R15: 0000000000022000 [ 2293.944803][ T28] [ 2293.947853][ T28] INFO: task syz-executor.4:18490 blocked for more than 145 seconds. [ 2293.956276][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2293.964907][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2293.973816][ T28] task:syz-executor.4 state:D stack:27984 pid:18490 ppid:3638 flags:0x00004004 [ 2293.983099][ T28] Call Trace: [ 2293.986396][ T28] [ 2293.989360][ T28] __schedule+0xae9/0x53f0 [ 2293.993931][ T28] ? unwind_get_return_address+0x51/0x90 [ 2293.999682][ T28] ? write_profile+0x410/0x410 [ 2294.004732][ T28] ? arch_stack_walk+0x93/0xe0 [ 2294.009631][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.024665][ T28] ? lock_acquire+0x4fc/0x630 [ 2294.029506][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.035201][ T28] ? lock_release+0x5cb/0x810 [ 2294.039917][ T28] ? io_schedule_timeout+0x140/0x140 [ 2294.045308][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2294.050279][ T28] schedule+0xda/0x1b0 [ 2294.054499][ T28] schedule_preempt_disabled+0xf/0x20 [ 2294.059954][ T28] __mutex_lock+0xa44/0x1350 [ 2294.065077][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2294.071714][ T28] ? ip_tunnel_init_net+0x2d9/0x9f0 [ 2294.077362][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2294.086488][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.091975][ T28] ? lock_release+0x5cb/0x810 [ 2294.096928][ T28] ? ip_tunnel_init_net+0x14e/0x9f0 [ 2294.102194][ T28] ? read_word_at_a_time+0xe/0x20 [ 2294.107342][ T28] ? strscpy+0xa1/0x2a0 [ 2294.111559][ T28] ip_tunnel_init_net+0x2d9/0x9f0 [ 2294.116734][ T28] ? ip_tunnel_newlink+0x990/0x990 [ 2294.122000][ T28] ? kasan_set_track+0x21/0x30 [ 2294.126869][ T28] ? __kasan_kmalloc+0xa1/0xb0 [ 2294.131744][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.137325][ T28] ? ipgre_tap_exit_batch_net+0x20/0x20 [ 2294.142992][ T28] ops_init+0xaf/0x470 [ 2294.147096][ T28] setup_net+0x5d1/0xc50 [ 2294.151371][ T28] ? down_read_killable+0x1a7/0x490 [ 2294.156690][ T28] ? ops_init+0x470/0x470 [ 2294.161058][ T28] copy_net_ns+0x318/0x760 [ 2294.165545][ T28] create_new_namespaces+0x3f6/0xb20 [ 2294.170992][ T28] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2294.176769][ T28] ksys_unshare+0x445/0x920 [ 2294.181405][ T28] ? unshare_fd+0x1c0/0x1c0 [ 2294.186252][ T28] __x64_sys_unshare+0x2d/0x40 [ 2294.191161][ T28] do_syscall_64+0x35/0xb0 [ 2294.199149][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2294.205366][ T28] RIP: 0033:0x7efd36a8b5f9 [ 2294.209806][ T28] RSP: 002b:00007efd37c07168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2294.222129][ T28] RAX: ffffffffffffffda RBX: 00007efd36bac120 RCX: 00007efd36a8b5f9 [ 2294.230402][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2294.241932][ T28] RBP: 00007efd36ae67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.250195][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2294.262069][ T28] R13: 00007fff13d650df R14: 00007efd37c07300 R15: 0000000000022000 [ 2294.270419][ T28] [ 2294.273583][ T28] INFO: task syz-executor.3:18493 blocked for more than 145 seconds. [ 2294.281786][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2294.289392][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2294.299015][ T28] task:syz-executor.3 state:D stack:28080 pid:18493 ppid:3635 flags:0x00004004 [ 2294.308410][ T28] Call Trace: [ 2294.311700][ T28] [ 2294.314727][ T28] __schedule+0xae9/0x53f0 [ 2294.319190][ T28] ? unwind_get_return_address+0x51/0x90 [ 2294.325020][ T28] ? write_profile+0x410/0x410 [ 2294.329824][ T28] ? arch_stack_walk+0x93/0xe0 [ 2294.334711][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.340206][ T28] ? lock_acquire+0x4fc/0x630 [ 2294.344972][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.350831][ T28] ? lock_release+0x5cb/0x810 [ 2294.355646][ T28] ? io_schedule_timeout+0x140/0x140 [ 2294.360965][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2294.366002][ T28] schedule+0xda/0x1b0 [ 2294.370261][ T28] schedule_preempt_disabled+0xf/0x20 [ 2294.375744][ T28] __mutex_lock+0xa44/0x1350 [ 2294.380364][ T28] ? ip_tunnel_init_net+0x2d9/0x9f0 [ 2294.385632][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2294.391189][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.396770][ T28] ? lock_release+0x5cb/0x810 [ 2294.401479][ T28] ? ip_tunnel_init_net+0x14e/0x9f0 [ 2294.407613][ T28] ? read_word_at_a_time+0xe/0x20 [ 2294.413139][ T28] ? strscpy+0xa1/0x2a0 [ 2294.418217][ T28] ip_tunnel_init_net+0x2d9/0x9f0 [ 2294.423619][ T28] ? ip_tunnel_newlink+0x990/0x990 [ 2294.428974][ T28] ? kasan_set_track+0x21/0x30 [ 2294.434126][ T28] ? __kasan_kmalloc+0xa1/0xb0 [ 2294.438930][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.444650][ T28] ? ipgre_tap_exit_batch_net+0x20/0x20 [ 2294.450424][ T28] ops_init+0xaf/0x470 [ 2294.454825][ T28] setup_net+0x5d1/0xc50 [ 2294.459096][ T28] ? down_read_killable+0x1a7/0x490 [ 2294.464511][ T28] ? ops_init+0x470/0x470 [ 2294.468872][ T28] copy_net_ns+0x318/0x760 [ 2294.473557][ T28] create_new_namespaces+0x3f6/0xb20 [ 2294.478879][ T28] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2294.484748][ T28] ksys_unshare+0x445/0x920 [ 2294.489361][ T28] ? unshare_fd+0x1c0/0x1c0 [ 2294.494365][ T28] __x64_sys_unshare+0x2d/0x40 [ 2294.499167][ T28] do_syscall_64+0x35/0xb0 [ 2294.502771][ T3653] Bluetooth: hci11: command 0x0409 tx timeout [ 2294.506260][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2294.517863][ T28] RIP: 0033:0x7ffbcd88b5f9 [ 2294.527680][ T28] RSP: 002b:00007ffbce97f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2294.538215][ T28] RAX: ffffffffffffffda RBX: 00007ffbcd9ac120 RCX: 00007ffbcd88b5f9 [ 2294.551397][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2294.560860][ T28] RBP: 00007ffbcd8e67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.577132][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2294.588436][ T28] R13: 00007ffeee0e635f R14: 00007ffbce97f300 R15: 0000000000022000 [ 2294.596915][ T28] [ 2294.600007][ T28] INFO: task syz-executor.5:18504 blocked for more than 145 seconds. [ 2294.608385][ T28] Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2294.616349][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2294.625343][ T28] task:syz-executor.5 state:D stack:26808 pid:18504 ppid:5059 flags:0x00004004 [ 2294.635935][ T28] Call Trace: [ 2294.639237][ T28] [ 2294.642166][ T28] __schedule+0xae9/0x53f0 [ 2294.646874][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.652662][ T28] ? lock_acquire+0x4fc/0x630 [ 2294.659367][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.665051][ T28] ? lock_release+0x5cb/0x810 [ 2294.669756][ T28] ? io_schedule_timeout+0x140/0x140 [ 2294.675112][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 2294.680153][ T28] ? __register_sysctl_table+0x729/0x10a0 [ 2294.685987][ T28] schedule+0xda/0x1b0 [ 2294.690090][ T28] schedule_preempt_disabled+0xf/0x20 [ 2294.695623][ T28] __mutex_lock+0xa44/0x1350 [ 2294.700231][ T28] ? smc_pnet_net_init+0x214/0x460 [ 2294.705535][ T28] ? mutex_lock_io_nested+0x1190/0x1190 [ 2294.711978][ T28] ? rcu_read_lock_sched_held+0xd/0x70 [ 2294.717596][ T28] ? lock_release+0x5cb/0x810 [ 2294.722326][ T28] ? smc_pnet_net_init+0x111/0x460 [ 2294.727544][ T28] ? lockdep_init_map_type+0x21a/0x7f0 [ 2294.733055][ T28] ? __raw_spin_lock_init+0x36/0x110 [ 2294.740216][ T28] smc_pnet_net_init+0x214/0x460 [ 2294.745296][ T28] ? smc_net_exit+0x20/0x20 [ 2294.749925][ T28] smc_net_init+0x31/0x40 [ 2294.754321][ T28] ops_init+0xaf/0x470 [ 2294.758505][ T28] setup_net+0x5d1/0xc50 [ 2294.762903][ T28] ? down_read_killable+0x1a7/0x490 [ 2294.768262][ T28] ? ops_init+0x470/0x470 [ 2294.772639][ T28] copy_net_ns+0x318/0x760 [ 2294.777092][ T28] create_new_namespaces+0x3f6/0xb20 [ 2294.782461][ T28] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 2294.788117][ T28] ksys_unshare+0x445/0x920 [ 2294.792817][ T28] ? unshare_fd+0x1c0/0x1c0 [ 2294.797451][ T28] __x64_sys_unshare+0x2d/0x40 [ 2294.802237][ T28] do_syscall_64+0x35/0xb0 [ 2294.806820][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2294.812838][ T28] RIP: 0033:0x7f682f88b5f9 [ 2294.817358][ T28] RSP: 002b:00007f68309b3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 2294.826177][ T28] RAX: ffffffffffffffda RBX: 00007f682f9abf80 RCX: 00007f682f88b5f9 [ 2294.834268][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 2294.842720][ T28] RBP: 00007f682f8e67b0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.850726][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2294.858804][ T28] R13: 00007fff7fd8ffcf R14: 00007f68309b3300 R15: 0000000000022000 [ 2294.866812][ T28] [ 2294.870600][ T28] INFO: lockdep is turned off. [ 2294.876530][ T28] NMI backtrace for cpu 1 [ 2294.880971][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2294.890786][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2294.900841][ T28] Call Trace: [ 2294.904146][ T28] [ 2294.907072][ T28] dump_stack_lvl+0xcd/0x134 [ 2294.911677][ T28] nmi_cpu_backtrace.cold+0x24/0x18a [ 2294.916974][ T28] nmi_trigger_cpumask_backtrace+0x32f/0x3c0 [ 2294.922981][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 2294.928176][ T28] watchdog+0xc71/0xfc0 [ 2294.932331][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 2294.938338][ T28] kthread+0x2e4/0x3a0 [ 2294.942451][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2294.948101][ T28] ret_from_fork+0x1f/0x30 [ 2294.952534][ T28] [ 2294.956241][ T28] Sending NMI from CPU 1 to CPUs 0: [ 2294.961480][ C0] NMI backtrace for cpu 0 [ 2294.961492][ C0] CPU: 0 PID: 2953 Comm: syslogd Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2294.961514][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2294.961524][ C0] RIP: 0010:unlock_page+0x7/0x130 [ 2294.961557][ C0] Code: ef ba 0e 02 00 00 5d 41 5c e9 35 fd ff ff e8 10 22 20 00 eb e0 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 54 55 48 89 fd 53 74 db d3 ff 48 8d 7d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa [ 2294.961577][ C0] RSP: 0018:ffffc90002f6fb58 EFLAGS: 00000293 [ 2294.961592][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 2294.961604][ C0] RDX: ffff88807d910000 RSI: ffffffff81a7c559 RDI: ffffea0001786880 [ 2294.961661][ C0] RBP: ffffea0001786880 R08: 0000000000000001 R09: 0000000000000000 [ 2294.961671][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffffea0001786880 [ 2294.961678][ C0] R13: 0000000000018679 R14: 0000000000018679 R15: 000000000000004c [ 2294.961686][ C0] FS: 00007f5b78344800(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 2294.961700][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2294.961708][ C0] CR2: 00007efc850a02b0 CR3: 00000000267d6000 CR4: 00000000003506f0 [ 2294.961715][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2294.961723][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2294.961733][ C0] Call Trace: [ 2294.961739][ C0] [ 2294.961749][ C0] shmem_write_end+0x304/0x770 [ 2294.961773][ C0] generic_perform_write+0x312/0x570 [ 2294.961796][ C0] ? folio_add_wait_queue+0x1b0/0x1b0 [ 2294.961814][ C0] ? new_inode+0x270/0x270 [ 2294.961835][ C0] ? generic_write_checks+0x2bc/0x3f0 [ 2294.961866][ C0] __generic_file_write_iter+0x2aa/0x4d0 [ 2294.961888][ C0] generic_file_write_iter+0xdf/0x350 [ 2294.961913][ C0] vfs_write+0x9e9/0xdd0 [ 2294.961939][ C0] ? kernel_write+0x630/0x630 [ 2294.961965][ C0] ? __ct_user_exit+0xff/0x150 [ 2294.961985][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2294.962007][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2294.962026][ C0] ? __fget_light+0x20a/0x270 [ 2294.962051][ C0] ksys_write+0x127/0x250 [ 2294.962076][ C0] ? __ia32_sys_read+0xb0/0xb0 [ 2294.962102][ C0] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2294.962122][ C0] ? trace_hardirqs_on+0x2d/0x160 [ 2294.962153][ C0] do_syscall_64+0x35/0xb0 [ 2294.962178][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2294.962204][ C0] RIP: 0033:0x7f5b784d09a3 [ 2294.962218][ C0] Code: 8b 15 d9 f4 0c 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18 [ 2294.962236][ C0] RSP: 002b:00007ffeeea99318 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2294.962254][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f5b784d09a3 [ 2294.962266][ C0] RDX: 000000000000004c RSI: 00005559399dfc50 RDI: 0000000000000003 [ 2294.962278][ C0] RBP: 00005559399dfc50 R08: 00007f5b78560040 R09: 00007f5b785600c0 [ 2294.962291][ C0] R10: 00007f5b7855ffc0 R11: 0000000000000246 R12: 000000000000004c [ 2294.962304][ C0] R13: 00007f5b78344788 R14: 0000000000000004 R15: 00005559399dfa60 [ 2294.962324][ C0] [ 2294.962740][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2294.962752][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.0-rc1-syzkaller-00183-g225480f040b6 #0 [ 2294.962777][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2294.962789][ T28] Call Trace: [ 2294.962796][ T28] [ 2294.962803][ T28] dump_stack_lvl+0xcd/0x134 [ 2294.962836][ T28] panic+0x2c8/0x622 [ 2294.962897][ T28] ? panic_print_sys_info.part.0+0x110/0x110 [ 2294.962932][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 2294.962966][ T28] ? watchdog.cold+0x130/0x158 [ 2294.963004][ T28] watchdog.cold+0x141/0x158 [ 2294.963034][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 2294.963069][ T28] kthread+0x2e4/0x3a0 [ 2294.963093][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2294.963120][ T28] ret_from_fork+0x1f/0x30 [ 2294.963154][ T28] [ 2294.967291][ T28] Kernel Offset: disabled [ 2295.365249][ T28] Rebooting in 86400 seconds..