[ 1010.304902][T19730] ? do_raw_spin_lock+0x12a/0x2e0 [ 1010.304915][T19730] ? rwlock_bug.part.0+0x90/0x90 [ 1010.304932][T19730] ? finish_mkwrite_fault+0x570/0x570 [ 1010.319283][T19730] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1010.319307][T19730] __handle_mm_fault+0x22f1/0x3f20 [ 1010.319326][T19730] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1010.341062][T19730] ? __kasan_check_read+0x11/0x20 [ 1010.341085][T19730] handle_mm_fault+0x1b5/0x6c0 [ 1010.350854][T19730] __do_page_fault+0x536/0xdd0 [ 1010.355638][T19730] do_page_fault+0x38/0x590 [ 1010.355657][T19730] page_fault+0x39/0x40 [ 1010.355667][T19730] RIP: 0033:0x40ea88 [ 1010.355681][T19730] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ce ee 4b 00 31 c0 e8 a3 32 ff ff 31 ff e8 ec 2e ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d de 19 66 00 22:32:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x900000000000000]}}]}, 0x40}}, 0x0) [ 1010.355689][T19730] RSP: 002b:00007ffcdbf518b0 EFLAGS: 00010246 [ 1010.355700][T19730] RAX: 00000000a448639c RBX: 00000000f7521892 RCX: 0000001b33720000 [ 1010.355707][T19730] RDX: 0000000000000000 RSI: 000000000000039c RDI: ffffffffa448639c [ 1010.355721][T19730] RBP: 0000000000000008 R08: 00000000a448639c R09: 00000000a44863a0 [ 1010.417813][T19730] R10: 00007ffcdbf51a50 R11: 0000000000000246 R12: 000000000075bfa8 [ 1010.425796][T19730] R13: 0000000080000000 R14: 00007f4726896008 R15: 0000000000000008 [ 1010.476569][T19730] memory: usage 307184kB, limit 307200kB, failcnt 10598 [ 1010.495140][T19730] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1010.511155][T19730] Memory cgroup stats for /syz3: [ 1010.511258][T19730] anon 226410496 [ 1010.511258][T19730] file 36864 22:32:15 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}}]}, 0x40}}, 0x0) [ 1010.511258][T19730] kernel_stack 12451840 [ 1010.511258][T19730] slab 19718144 [ 1010.511258][T19730] sock 0 [ 1010.511258][T19730] shmem 0 [ 1010.511258][T19730] file_mapped 0 [ 1010.511258][T19730] file_dirty 0 [ 1010.511258][T19730] file_writeback 0 [ 1010.511258][T19730] anon_thp 184549376 [ 1010.511258][T19730] inactive_anon 0 [ 1010.511258][T19730] active_anon 226410496 [ 1010.511258][T19730] inactive_file 0 [ 1010.511258][T19730] active_file 61440 [ 1010.511258][T19730] unevictable 0 [ 1010.511258][T19730] slab_reclaimable 3919872 [ 1010.511258][T19730] slab_unreclaimable 15798272 [ 1010.511258][T19730] pgfault 85107 [ 1010.511258][T19730] pgmajfault 0 [ 1010.511258][T19730] workingset_refault 462 [ 1010.511258][T19730] workingset_activate 297 [ 1010.511258][T19730] workingset_nodereclaim 0 [ 1010.511258][T19730] pgrefill 4135 [ 1010.511258][T19730] pgscan 4519 [ 1010.511258][T19730] pgsteal 781 [ 1010.636836][T19730] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19710,uid=0 [ 1010.662188][T19730] Memory cgroup out of memory: Killed process 19710 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000], 0x0, 0x0}, 0x10000}, 0x1c) 22:32:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xa00000000000000]}}]}, 0x40}}, 0x0) 22:32:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x14, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x65580000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}}]}, 0x40}}, 0x0) [ 1010.752351][T19731] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}}]}, 0x40}}, 0x0) 22:32:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x78000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x15, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xb00000000000000]}}]}, 0x40}}, 0x0) [ 1010.923224][T19778] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1010.968797][T19778] CPU: 0 PID: 19778 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1010.977965][T19778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1010.977971][T19778] Call Trace: [ 1010.977993][T19778] dump_stack+0x172/0x1f0 [ 1010.978013][T19778] dump_header+0x177/0x1152 [ 1010.978029][T19778] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1010.978039][T19778] ? ___ratelimit+0x2c8/0x595 [ 1010.978052][T19778] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:32:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x80010000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1010.978068][T19778] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1010.978083][T19778] ? trace_hardirqs_on+0x67/0x240 [ 1010.978099][T19778] ? pagefault_out_of_memory+0x11c/0x11c [ 1010.978113][T19778] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1010.978125][T19778] ? ___ratelimit+0x60/0x595 [ 1010.978137][T19778] ? do_raw_spin_unlock+0x57/0x270 [ 1010.978154][T19778] oom_kill_process.cold+0x10/0x15 [ 1010.978171][T19778] out_of_memory+0x334/0x1340 [ 1010.978185][T19778] ? lock_downgrade+0x920/0x920 [ 1010.978204][T19778] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1010.978220][T19778] ? oom_killer_disable+0x280/0x280 [ 1010.978245][T19778] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1010.978260][T19778] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1010.978278][T19778] ? do_raw_spin_unlock+0x57/0x270 [ 1010.978299][T19778] ? _raw_spin_unlock+0x2d/0x50 [ 1011.032864][T19778] try_charge+0xf4b/0x1440 [ 1011.032890][T19778] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1011.058113][T19778] ? percpu_ref_tryget_live+0x111/0x290 [ 1011.058135][T19778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1011.058152][T19778] ? __kasan_check_read+0x11/0x20 [ 1011.058170][T19778] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1011.058187][T19778] mem_cgroup_try_charge+0x136/0x590 [ 1011.074017][T19778] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1011.074036][T19778] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1011.074054][T19778] wp_page_copy+0x41e/0x1590 [ 1011.149060][T19778] ? find_held_lock+0x35/0x130 [ 1011.153846][T19778] ? pmd_pfn+0x1d0/0x1d0 [ 1011.158130][T19778] ? lock_downgrade+0x920/0x920 [ 1011.162997][T19778] ? swp_swapcount+0x540/0x540 [ 1011.167776][T19778] ? __kasan_check_read+0x11/0x20 [ 1011.172837][T19778] ? do_raw_spin_unlock+0x57/0x270 [ 1011.177955][T19778] do_wp_page+0x499/0x14d0 [ 1011.182390][T19778] ? finish_mkwrite_fault+0x570/0x570 [ 1011.187954][T19778] __handle_mm_fault+0x22f1/0x3f20 [ 1011.193089][T19778] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1011.198662][T19778] ? __kasan_check_read+0x11/0x20 [ 1011.203692][T19778] handle_mm_fault+0x1b5/0x6c0 [ 1011.208446][T19778] __do_page_fault+0x536/0xdd0 [ 1011.213198][T19778] do_page_fault+0x38/0x590 [ 1011.217691][T19778] page_fault+0x39/0x40 [ 1011.221833][T19778] RIP: 0033:0x40c298 [ 1011.225709][T19778] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 38 2c 00 00 8b 05 72 bd 32 00 48 8b 15 03 42 66 00 83 c0 01 <89> 05 62 bd 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 1011.245312][T19778] RSP: 002b:00007ffcdbf51910 EFLAGS: 00010202 [ 1011.251364][T19778] RAX: 0000000000000001 RBX: 0000001b32720014 RCX: 0000001b33720000 [ 1011.259315][T19778] RDX: 0000001b32720000 RSI: 00000000000005a2 RDI: ffffffff31a0e5a2 [ 1011.267270][T19778] RBP: 0000001b32720018 R08: 0000000031a0e5a2 R09: 0000000031a0e5a6 [ 1011.275223][T19778] R10: 00007ffcdbf51a50 R11: 0000000000000246 R12: 0000001b3272001c [ 1011.283178][T19778] R13: 00000000000f6c9a R14: 000000000075bf20 R15: 000000000075bf2c [ 1011.360452][T19778] memory: usage 307200kB, limit 307200kB, failcnt 10609 [ 1011.369661][T19778] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1011.381641][T19778] Memory cgroup stats for /syz3: [ 1011.381745][T19778] anon 226410496 [ 1011.381745][T19778] file 36864 [ 1011.381745][T19778] kernel_stack 12451840 [ 1011.381745][T19778] slab 19718144 [ 1011.381745][T19778] sock 0 [ 1011.381745][T19778] shmem 0 [ 1011.381745][T19778] file_mapped 0 [ 1011.381745][T19778] file_dirty 0 [ 1011.381745][T19778] file_writeback 0 [ 1011.381745][T19778] anon_thp 184549376 [ 1011.381745][T19778] inactive_anon 0 [ 1011.381745][T19778] active_anon 226410496 [ 1011.381745][T19778] inactive_file 0 [ 1011.381745][T19778] active_file 61440 [ 1011.381745][T19778] unevictable 0 [ 1011.381745][T19778] slab_reclaimable 3919872 [ 1011.381745][T19778] slab_unreclaimable 15798272 [ 1011.381745][T19778] pgfault 85206 [ 1011.381745][T19778] pgmajfault 0 [ 1011.381745][T19778] workingset_refault 462 [ 1011.381745][T19778] workingset_activate 297 [ 1011.381745][T19778] workingset_nodereclaim 0 [ 1011.381745][T19778] pgrefill 4135 [ 1011.381745][T19778] pgscan 4519 [ 1011.381745][T19778] pgsteal 781 22:32:16 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x81000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1011.505726][T19778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19766,uid=0 [ 1011.552603][T19778] Memory cgroup out of memory: Killed process 19766 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x0}, 0x10000}, 0x1c) 22:32:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x60, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}}]}, 0x40}}, 0x0) 22:32:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xf00000000000000]}}]}, 0x40}}, 0x0) 22:32:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x88a8ffff, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1011.625243][T19788] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x9effffff, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x1000000000000000]}}]}, 0x40}}, 0x0) 22:32:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}}]}, 0x40}}, 0x0) 22:32:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x78, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1011.839946][T19838] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 22:32:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x1100000000000000]}}]}, 0x40}}, 0x0) [ 1011.921284][T19838] CPU: 0 PID: 19838 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1011.930446][T19838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1011.940512][T19838] Call Trace: [ 1011.943818][T19838] dump_stack+0x172/0x1f0 [ 1011.948160][T19838] dump_header+0x177/0x1152 [ 1011.952671][T19838] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1011.958481][T19838] ? ___ratelimit+0x2c8/0x595 [ 1011.963162][T19838] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1011.968997][T19838] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1011.974294][T19838] ? trace_hardirqs_on+0x67/0x240 [ 1011.979320][T19838] ? pagefault_out_of_memory+0x11c/0x11c [ 1011.984947][T19838] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1011.984961][T19838] ? ___ratelimit+0x60/0x595 [ 1011.984975][T19838] ? do_raw_spin_unlock+0x57/0x270 [ 1011.984993][T19838] oom_kill_process.cold+0x10/0x15 [ 1012.005568][T19838] out_of_memory+0x334/0x1340 [ 1012.010263][T19838] ? lock_downgrade+0x920/0x920 [ 1012.015129][T19838] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1012.020956][T19838] ? oom_killer_disable+0x280/0x280 [ 1012.026180][T19838] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1012.031741][T19838] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1012.037385][T19838] ? do_raw_spin_unlock+0x57/0x270 [ 1012.042504][T19838] ? _raw_spin_unlock+0x2d/0x50 [ 1012.047395][T19838] try_charge+0xf4b/0x1440 [ 1012.051829][T19838] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1012.057378][T19838] ? find_held_lock+0x35/0x130 [ 1012.062145][T19838] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1012.067720][T19838] ? lock_downgrade+0x920/0x920 [ 1012.072573][T19838] ? percpu_ref_tryget_live+0x111/0x290 [ 1012.078139][T19838] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1012.083598][T19838] ? memcg_kmem_put_cache+0x50/0x50 [ 1012.088803][T19838] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1012.094370][T19838] __memcg_kmem_charge+0x13a/0x3a0 [ 1012.099487][T19838] __alloc_pages_nodemask+0x4f7/0x900 [ 1012.104867][T19838] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1012.110426][T19838] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1012.116156][T19838] ? percpu_ref_put_many+0xb6/0x190 [ 1012.121370][T19838] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1012.126667][T19838] ? trace_hardirqs_on+0x67/0x240 [ 1012.131694][T19838] ? __kasan_check_read+0x11/0x20 [ 1012.136731][T19838] copy_process+0x3f8/0x6830 [ 1012.141337][T19838] ? __kasan_check_read+0x11/0x20 [ 1012.146359][T19838] ? __lock_acquire+0x16f2/0x4a00 [ 1012.151370][T19838] ? __cleanup_sighand+0x60/0x60 [ 1012.156288][T19838] ? __might_fault+0x12b/0x1e0 [ 1012.161032][T19838] ? __might_fault+0x12b/0x1e0 [ 1012.165783][T19838] _do_fork+0x146/0xfa0 [ 1012.169920][T19838] ? copy_init_mm+0x20/0x20 [ 1012.174405][T19838] ? __kasan_check_read+0x11/0x20 [ 1012.179455][T19838] ? _copy_to_user+0x118/0x160 [ 1012.184219][T19838] __x64_sys_clone+0x1ab/0x270 [ 1012.188975][T19838] ? __ia32_sys_vfork+0xd0/0xd0 [ 1012.193823][T19838] ? do_syscall_64+0x26/0x760 [ 1012.198647][T19838] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1012.203975][T19838] ? trace_hardirqs_on+0x67/0x240 [ 1012.208997][T19838] do_syscall_64+0xfa/0x760 [ 1012.213494][T19838] entry_SYSCALL_64_after_hwframe+0x49/0xbe 22:32:17 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x1200000000000000]}}]}, 0x40}}, 0x0) [ 1012.219370][T19838] RIP: 0033:0x4598e9 [ 1012.223253][T19838] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1012.242942][T19838] RSP: 002b:00007f4724894c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1012.251372][T19838] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004598e9 [ 1012.259367][T19838] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 2000000002000100 [ 1012.267361][T19838] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 1012.267371][T19838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47248956d4 [ 1012.267380][T19838] R13: 00000000004bfd7f R14: 00000000004d1b78 R15: 00000000ffffffff [ 1012.315477][T19838] memory: usage 307184kB, limit 307200kB, failcnt 10640 [ 1012.333399][T19838] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1012.355425][T19838] Memory cgroup stats for /syz3: [ 1012.355531][T19838] anon 226410496 [ 1012.355531][T19838] file 36864 [ 1012.355531][T19838] kernel_stack 12451840 [ 1012.355531][T19838] slab 19718144 [ 1012.355531][T19838] sock 0 [ 1012.355531][T19838] shmem 0 [ 1012.355531][T19838] file_mapped 0 [ 1012.355531][T19838] file_dirty 0 [ 1012.355531][T19838] file_writeback 0 [ 1012.355531][T19838] anon_thp 184549376 [ 1012.355531][T19838] inactive_anon 0 [ 1012.355531][T19838] active_anon 226410496 [ 1012.355531][T19838] inactive_file 0 [ 1012.355531][T19838] active_file 61440 [ 1012.355531][T19838] unevictable 0 [ 1012.355531][T19838] slab_reclaimable 3919872 [ 1012.355531][T19838] slab_unreclaimable 15798272 [ 1012.355531][T19838] pgfault 85272 [ 1012.355531][T19838] pgmajfault 0 [ 1012.355531][T19838] workingset_refault 462 [ 1012.355531][T19838] workingset_activate 297 [ 1012.355531][T19838] workingset_nodereclaim 0 [ 1012.355531][T19838] pgrefill 4135 [ 1012.355531][T19838] pgscan 4552 [ 1012.355531][T19838] pgsteal 781 [ 1012.467012][T19838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19821,uid=0 [ 1012.498842][T19838] Memory cgroup out of memory: Killed process 19821 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1012.571202][T19836] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1012.584372][T19836] CPU: 0 PID: 19836 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1012.593495][T19836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1012.603532][T19836] Call Trace: [ 1012.606806][T19836] dump_stack+0x172/0x1f0 [ 1012.611124][T19836] dump_header+0x177/0x1152 [ 1012.615618][T19836] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1012.621400][T19836] ? ___ratelimit+0x2c8/0x595 [ 1012.626064][T19836] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1012.631848][T19836] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1012.637111][T19836] ? trace_hardirqs_on+0x67/0x240 [ 1012.642113][T19836] ? pagefault_out_of_memory+0x11c/0x11c [ 1012.647733][T19836] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1012.653532][T19836] ? ___ratelimit+0x60/0x595 [ 1012.658113][T19836] ? do_raw_spin_unlock+0x57/0x270 [ 1012.663225][T19836] oom_kill_process.cold+0x10/0x15 [ 1012.668329][T19836] out_of_memory+0x334/0x1340 [ 1012.672986][T19836] ? lock_downgrade+0x920/0x920 [ 1012.677819][T19836] ? oom_killer_disable+0x280/0x280 [ 1012.683006][T19836] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1012.688529][T19836] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1012.694143][T19836] ? do_raw_spin_unlock+0x57/0x270 [ 1012.699234][T19836] ? _raw_spin_unlock+0x2d/0x50 [ 1012.704063][T19836] try_charge+0xa2d/0x1440 [ 1012.708481][T19836] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1012.714010][T19836] ? find_held_lock+0x35/0x130 [ 1012.718750][T19836] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1012.724274][T19836] ? lock_downgrade+0x920/0x920 [ 1012.729100][T19836] ? percpu_ref_tryget_live+0x111/0x290 [ 1012.734636][T19836] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1012.740072][T19836] ? memcg_kmem_put_cache+0x50/0x50 [ 1012.745248][T19836] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1012.750772][T19836] __memcg_kmem_charge+0x13a/0x3a0 [ 1012.755861][T19836] __alloc_pages_nodemask+0x4f7/0x900 [ 1012.761211][T19836] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1012.766733][T19836] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1012.772452][T19836] ? percpu_ref_put_many+0xb6/0x190 [ 1012.777638][T19836] copy_process+0x3f8/0x6830 [ 1012.782214][T19836] ? psi_memstall_leave+0x12e/0x180 [ 1012.787396][T19836] ? __cleanup_sighand+0x60/0x60 [ 1012.792664][T19836] ? __kasan_check_read+0x11/0x20 [ 1012.797676][T19836] ? __lock_acquire+0x8a0/0x4a00 [ 1012.802609][T19836] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1012.807788][T19836] _do_fork+0x146/0xfa0 [ 1012.811923][T19836] ? copy_init_mm+0x20/0x20 [ 1012.816407][T19836] ? lock_downgrade+0x920/0x920 [ 1012.821235][T19836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1012.827466][T19836] __x64_sys_clone+0x1ab/0x270 [ 1012.832218][T19836] ? __ia32_sys_vfork+0xd0/0xd0 [ 1012.837065][T19836] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1012.843288][T19836] ? do_syscall_64+0x26/0x760 [ 1012.848079][T19836] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1012.853341][T19836] ? trace_hardirqs_on+0x67/0x240 [ 1012.858356][T19836] do_syscall_64+0xfa/0x760 [ 1012.862852][T19836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1012.868718][T19836] RIP: 0033:0x45c2b9 [ 1012.872610][T19836] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1012.892203][T19836] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1012.900601][T19836] RAX: ffffffffffffffda RBX: 00007f4724874700 RCX: 000000000045c2b9 [ 1012.908565][T19836] RDX: 00007f47248749d0 RSI: 00007f4724873db0 RDI: 00000000003d0f00 [ 1012.916533][T19836] RBP: 00007ffcdbf51a60 R08: 00007f4724874700 R09: 00007f4724874700 [ 1012.924499][T19836] R10: 00007f47248749d0 R11: 0000000000000202 R12: 0000000000000000 [ 1012.932454][T19836] R13: 00007ffcdbf518ff R14: 00007f47248749c0 R15: 000000000075bfd4 [ 1012.941729][T19836] memory: usage 304848kB, limit 307200kB, failcnt 10640 [ 1012.949017][T19836] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1012.956204][T19836] Memory cgroup stats for /syz3: [ 1012.956321][T19836] anon 224366592 [ 1012.956321][T19836] file 36864 [ 1012.956321][T19836] kernel_stack 12451840 [ 1012.956321][T19836] slab 19718144 [ 1012.956321][T19836] sock 0 [ 1012.956321][T19836] shmem 0 [ 1012.956321][T19836] file_mapped 0 [ 1012.956321][T19836] file_dirty 0 [ 1012.956321][T19836] file_writeback 0 [ 1012.956321][T19836] anon_thp 182452224 [ 1012.956321][T19836] inactive_anon 0 [ 1012.956321][T19836] active_anon 224366592 [ 1012.956321][T19836] inactive_file 0 [ 1012.956321][T19836] active_file 61440 [ 1012.956321][T19836] unevictable 0 [ 1012.956321][T19836] slab_reclaimable 3919872 [ 1012.956321][T19836] slab_unreclaimable 15798272 [ 1012.956321][T19836] pgfault 85272 [ 1012.956321][T19836] pgmajfault 0 [ 1012.956321][T19836] workingset_refault 462 [ 1012.956321][T19836] workingset_activate 297 [ 1012.956321][T19836] workingset_nodereclaim 0 [ 1012.956321][T19836] pgrefill 4135 [ 1012.956321][T19836] pgscan 4552 [ 1012.956321][T19836] pgsteal 781 [ 1013.051541][T19836] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19542,uid=0 22:32:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x0}, 0x10000}, 0x1c) 22:32:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}}]}, 0x40}}, 0x0) 22:32:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xc7, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x1300000000000000]}}]}, 0x40}}, 0x0) 22:32:18 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xd902000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1013.067617][T19836] Memory cgroup out of memory: Killed process 19542 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1013.104665][T19838] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x1400000000000000]}}]}, 0x40}}, 0x0) 22:32:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}}]}, 0x40}}, 0x0) 22:32:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xf5ffffff, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1013.301002][T19898] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x0}, 0x10000}, 0x1c) 22:32:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x300, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:18 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfcffffff, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x1500000000000000]}}]}, 0x40}}, 0x0) [ 1013.526305][T19918] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}}]}, 0x40}}, 0x0) 22:32:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x0}, 0x10000}, 0x1c) 22:32:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x500, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}]}, 0x40}}, 0x0) 22:32:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xffffa888, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x3f00000000000000]}}]}, 0x40}}, 0x0) [ 1013.849509][T19942] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1013.962442][T19939] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1013.996900][T19939] CPU: 0 PID: 19939 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 22:32:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x4000000000000000]}}]}, 0x40}}, 0x0) 22:32:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}]}, 0x40}}, 0x0) [ 1014.006143][T19939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1014.016198][T19939] Call Trace: [ 1014.019528][T19939] dump_stack+0x172/0x1f0 [ 1014.023865][T19939] dump_header+0x177/0x1152 [ 1014.028375][T19939] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1014.034179][T19939] ? ___ratelimit+0x2c8/0x595 [ 1014.038859][T19939] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1014.044941][T19939] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1014.050237][T19939] ? trace_hardirqs_on+0x67/0x240 [ 1014.055287][T19939] ? pagefault_out_of_memory+0x11c/0x11c 22:32:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000]}}]}, 0x40}}, 0x0) [ 1014.060944][T19939] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1014.066762][T19939] ? ___ratelimit+0x60/0x595 [ 1014.071449][T19939] ? do_raw_spin_unlock+0x57/0x270 [ 1014.076568][T19939] oom_kill_process.cold+0x10/0x15 [ 1014.081687][T19939] out_of_memory+0x334/0x1340 [ 1014.086372][T19939] ? lock_downgrade+0x920/0x920 [ 1014.091242][T19939] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1014.097211][T19939] ? oom_killer_disable+0x280/0x280 [ 1014.097235][T19939] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1014.097250][T19939] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1014.097267][T19939] ? do_raw_spin_unlock+0x57/0x270 [ 1014.097285][T19939] ? _raw_spin_unlock+0x2d/0x50 [ 1014.097302][T19939] try_charge+0xf4b/0x1440 [ 1014.097324][T19939] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1014.118745][T19939] ? percpu_ref_tryget_live+0x111/0x290 [ 1014.118767][T19939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1014.118783][T19939] ? __kasan_check_read+0x11/0x20 [ 1014.118802][T19939] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1014.118817][T19939] mem_cgroup_try_charge+0x136/0x590 [ 1014.118835][T19939] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1014.139150][T19939] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1014.139173][T19939] __handle_mm_fault+0x1e34/0x3f20 [ 1014.139191][T19939] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1014.139216][T19939] ? __kasan_check_read+0x11/0x20 [ 1014.167559][T19939] handle_mm_fault+0x1b5/0x6c0 [ 1014.167582][T19939] __do_page_fault+0x536/0xdd0 [ 1014.167606][T19939] do_page_fault+0x38/0x590 [ 1014.193809][T19939] page_fault+0x39/0x40 [ 1014.193821][T19939] RIP: 0033:0x41122f [ 1014.193839][T19939] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1014.193848][T19939] RSP: 002b:00007ffcdbf51890 EFLAGS: 00010206 [ 1014.193861][T19939] RAX: 00007f4724854000 RBX: 0000000000020000 RCX: 000000000045993a [ 1014.193875][T19939] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1014.236834][T19939] RBP: 00007ffcdbf51970 R08: ffffffffffffffff R09: 0000000000000000 [ 1014.236844][T19939] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbf51a60 [ 1014.236853][T19939] R13: 00007f4724874700 R14: 0000000000000001 R15: 000000000075bfd4 [ 1014.318364][T19939] memory: usage 307168kB, limit 307200kB, failcnt 10663 [ 1014.325844][T19939] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1014.333130][T19939] Memory cgroup stats for /syz3: [ 1014.333248][T19939] anon 226410496 [ 1014.333248][T19939] file 36864 [ 1014.333248][T19939] kernel_stack 12517376 [ 1014.333248][T19939] slab 19718144 [ 1014.333248][T19939] sock 0 [ 1014.333248][T19939] shmem 0 [ 1014.333248][T19939] file_mapped 0 [ 1014.333248][T19939] file_dirty 0 [ 1014.333248][T19939] file_writeback 0 [ 1014.333248][T19939] anon_thp 184549376 [ 1014.333248][T19939] inactive_anon 0 [ 1014.333248][T19939] active_anon 226410496 [ 1014.333248][T19939] inactive_file 0 [ 1014.333248][T19939] active_file 0 [ 1014.333248][T19939] unevictable 0 [ 1014.333248][T19939] slab_reclaimable 3919872 [ 1014.333248][T19939] slab_unreclaimable 15798272 [ 1014.333248][T19939] pgfault 85470 [ 1014.333248][T19939] pgmajfault 0 [ 1014.333248][T19939] workingset_refault 462 [ 1014.333248][T19939] workingset_activate 297 [ 1014.333248][T19939] workingset_nodereclaim 0 [ 1014.333248][T19939] pgrefill 4168 [ 1014.333248][T19939] pgscan 4552 [ 1014.333248][T19939] pgsteal 781 22:32:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffff000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff]}}]}, 0x40}}, 0x0) 22:32:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x600, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:19 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1014.623343][T19939] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19920,uid=0 [ 1014.653609][T19939] Memory cgroup out of memory: Killed process 19920 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000], 0x0, 0x0}, 0x10000}, 0x1c) 22:32:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x7800000000000000]}}]}, 0x40}}, 0x0) 22:32:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2010000]}}]}, 0x40}}, 0x0) 22:32:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x900, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x8000000000000000]}}]}, 0x40}}, 0x0) 22:32:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xa00, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea020000]}}]}, 0x40}}, 0x0) 22:32:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x2, 0x0}, 0x10000}, 0x1c) [ 1014.848698][T20005] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffffff0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1015.033178][T20021] RDS: rds_bind could not find a transport for fe88::204, load rds_tcp or rds_rdma? 22:32:20 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec020000]}}]}, 0x40}}, 0x0) 22:32:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x3, 0x0}, 0x10000}, 0x1c) 22:32:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x9600000000000000]}}]}, 0x40}}, 0x0) 22:32:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xab2, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffffff5, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x9effffff00000000]}}]}, 0x40}}, 0x0) [ 1015.315341][T20050] RDS: rds_bind could not find a transport for fe88::304, load rds_tcp or rds_rdma? 22:32:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4, 0x0}, 0x10000}, 0x1c) 22:32:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}}]}, 0x40}}, 0x0) 22:32:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xb00, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffffffc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x5, 0x0}, 0x10000}, 0x1c) [ 1015.513372][T20068] RDS: rds_bind could not find a transport for fe88::404, load rds_tcp or rds_rdma? 22:32:20 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xc405000000000000]}}]}, 0x40}}, 0x0) 22:32:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xc00, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}}]}, 0x40}}, 0x0) [ 1015.730051][T20084] RDS: rds_bind could not find a transport for fe88::504, load rds_tcp or rds_rdma? 22:32:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x4000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6, 0x0}, 0x10000}, 0x1c) 22:32:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff]}}]}, 0x40}}, 0x0) 22:32:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xe00, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xf0ffffff00000000]}}]}, 0x40}}, 0x0) 22:32:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xf0ffffffffffff, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1015.989982][T20109] RDS: rds_bind could not find a transport for fe88::604, load rds_tcp or rds_rdma? 22:32:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x7, 0x0}, 0x10000}, 0x1c) 22:32:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff00000000]}}]}, 0x40}}, 0x0) 22:32:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf00, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:21 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x100000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}}]}, 0x40}}, 0x0) 22:32:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x8, 0x0}, 0x10000}, 0x1c) 22:32:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xfa01000000000000]}}]}, 0x40}}, 0x0) 22:32:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x48, 0x0}, 0x10000}, 0x1c) 22:32:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xfcffffff00000000]}}]}, 0x40}}, 0x0) 22:32:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1100, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}]}, 0x40}}, 0x0) 22:32:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x111000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xffffff7f00000000]}}]}, 0x40}}, 0x0) 22:32:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4c, 0x0}, 0x10000}, 0x1c) 22:32:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e]}}]}, 0x40}}, 0x0) 22:32:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1200, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xffffffff00000000]}}]}, 0x40}}, 0x0) 22:32:22 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x200000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x60, 0x0}, 0x10000}, 0x1c) 22:32:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x68, 0x0}, 0x10000}, 0x1c) 22:32:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xfffffffffffff000]}}]}, 0x40}}, 0x0) 22:32:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1300, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x300000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0]}}]}, 0x40}}, 0x0) 22:32:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6c, 0x0}, 0x10000}, 0x1c) 22:32:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1400, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1018.241962][T20277] rds_bind: 12 callbacks suppressed [ 1018.241974][T20277] RDS: rds_bind could not find a transport for fe88::6c04, load rds_tcp or rds_rdma? 22:32:23 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}}]}, 0x40}}, 0x0) 22:32:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x400000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}}]}, 0x40}}, 0x0) 22:32:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1500, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x74, 0x0}, 0x10000}, 0x1c) 22:32:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}}]}, 0x40}}, 0x0) [ 1018.643016][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:32:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x500000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}]}, 0x40}}, 0x0) [ 1018.768512][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1018.777609][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.787661][ T8812] Call Trace: [ 1018.787685][ T8812] dump_stack+0x172/0x1f0 [ 1018.787708][ T8812] dump_header+0x177/0x1152 [ 1018.787728][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1018.787744][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1018.810409][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1018.816226][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1018.816242][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1018.816259][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1018.816276][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1018.816292][ T8812] ? ___ratelimit+0x60/0x595 [ 1018.842592][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1018.847724][ T8812] oom_kill_process.cold+0x10/0x15 [ 1018.852844][ T8812] out_of_memory+0x334/0x1340 [ 1018.857525][ T8812] ? lock_downgrade+0x920/0x920 [ 1018.862386][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1018.868202][ T8812] ? oom_killer_disable+0x280/0x280 [ 1018.873423][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1018.878984][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1018.884632][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1018.889758][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1018.894635][ T8812] try_charge+0xf4b/0x1440 [ 1018.899128][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1018.904687][ T8812] ? find_held_lock+0x35/0x130 [ 1018.909460][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1018.915016][ T8812] ? lock_downgrade+0x920/0x920 [ 1018.919871][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1018.925426][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1018.930905][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1018.936137][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1018.941707][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1018.946841][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1018.952236][ T8812] ? find_held_lock+0x35/0x130 [ 1018.957014][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1018.962746][ T8812] ? lock_downgrade+0x920/0x920 [ 1018.967604][ T8812] ? rwlock_bug.part.0+0x90/0x90 [ 1018.972551][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1018.978887][ T8812] alloc_pages_current+0x107/0x210 [ 1018.984001][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1018.989119][ T8812] __pmd_alloc+0x41/0x460 [ 1018.993466][ T8812] ? __pmd+0x60/0x60 [ 1018.997360][ T8812] pmd_alloc+0x10c/0x180 [ 1019.001611][ T8812] copy_page_range+0x610/0x1ed0 [ 1019.006478][ T8812] ? lock_downgrade+0x920/0x920 [ 1019.011356][ T8812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1019.017105][ T8812] ? pmd_alloc+0x180/0x180 [ 1019.021544][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1019.026239][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1019.031009][ T8812] ? anon_vma_fork+0xd4/0x4a0 [ 1019.035704][ T8812] dup_mm+0xa67/0x1430 [ 1019.039795][ T8812] ? vm_area_dup+0x170/0x170 [ 1019.044407][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1019.049277][ T8812] copy_process+0x2671/0x6830 [ 1019.053965][ T8812] ? __kasan_check_read+0x11/0x20 [ 1019.059020][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1019.063968][ T8812] ? __might_fault+0x12b/0x1e0 [ 1019.068763][ T8812] ? __might_fault+0x12b/0x1e0 [ 1019.073555][ T8812] _do_fork+0x146/0xfa0 [ 1019.077731][ T8812] ? copy_init_mm+0x20/0x20 [ 1019.082256][ T8812] ? __kasan_check_read+0x11/0x20 [ 1019.087385][ T8812] ? _copy_to_user+0x118/0x160 [ 1019.092179][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1019.097047][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1019.101917][ T8812] ? do_syscall_64+0x26/0x760 [ 1019.106607][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1019.111907][ T8812] ? trace_hardirqs_on+0x67/0x240 22:32:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x600000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}}]}, 0x40}}, 0x0) 22:32:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}}]}, 0x40}}, 0x0) [ 1019.116951][ T8812] do_syscall_64+0xfa/0x760 [ 1019.121479][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1019.127380][ T8812] RIP: 0033:0x457eba [ 1019.131282][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1019.151012][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1019.159436][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1019.167406][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1019.175374][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1019.183335][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1019.191296][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1019.209941][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 10703 [ 1019.224447][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1019.231456][ T8812] Memory cgroup stats for /syz3: [ 1019.231559][ T8812] anon 225026048 [ 1019.231559][ T8812] file 36864 [ 1019.231559][ T8812] kernel_stack 12648448 [ 1019.231559][ T8812] slab 19861504 [ 1019.231559][ T8812] sock 0 [ 1019.231559][ T8812] shmem 0 [ 1019.231559][ T8812] file_mapped 0 [ 1019.231559][ T8812] file_dirty 0 [ 1019.231559][ T8812] file_writeback 0 [ 1019.231559][ T8812] anon_thp 182452224 [ 1019.231559][ T8812] inactive_anon 0 [ 1019.231559][ T8812] active_anon 225026048 [ 1019.231559][ T8812] inactive_file 57344 [ 1019.231559][ T8812] active_file 0 [ 1019.231559][ T8812] unevictable 0 [ 1019.231559][ T8812] slab_reclaimable 3784704 [ 1019.231559][ T8812] slab_unreclaimable 16076800 [ 1019.231559][ T8812] pgfault 86328 [ 1019.231559][ T8812] pgmajfault 0 [ 1019.231559][ T8812] workingset_refault 462 [ 1019.231559][ T8812] workingset_activate 297 [ 1019.231559][ T8812] workingset_nodereclaim 0 [ 1019.231559][ T8812] pgrefill 4201 [ 1019.231559][ T8812] pgscan 4618 [ 1019.231559][ T8812] pgsteal 781 [ 1019.325275][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19900,uid=0 [ 1019.340956][ T8812] Memory cgroup out of memory: Killed process 19900 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1019.376577][T20334] RDS: rds_bind could not find a transport for fe88::7404, load rds_tcp or rds_rdma? 22:32:24 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d9}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x800000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5]}}]}, 0x40}}, 0x0) 22:32:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}}]}, 0x40}}, 0x0) 22:32:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x3f00, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x7a, 0x0}, 0x10000}, 0x1c) [ 1019.458875][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:32:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}]}, 0x40}}, 0x0) [ 1019.504973][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1019.514054][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.524130][ T8812] Call Trace: [ 1019.527431][ T8812] dump_stack+0x172/0x1f0 [ 1019.531783][ T8812] dump_header+0x177/0x1152 [ 1019.536305][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1019.542121][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1019.546898][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1019.552700][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1019.557989][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1019.563011][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1019.568656][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1019.574468][ T8812] ? ___ratelimit+0x60/0x595 [ 1019.579082][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1019.584212][ T8812] oom_kill_process.cold+0x10/0x15 [ 1019.589344][ T8812] out_of_memory+0x334/0x1340 [ 1019.594034][ T8812] ? lock_downgrade+0x920/0x920 [ 1019.598911][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:32:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}]}, 0x40}}, 0x0) [ 1019.604741][ T8812] ? oom_killer_disable+0x280/0x280 [ 1019.609967][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1019.615536][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1019.621196][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1019.626325][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1019.631190][ T8812] try_charge+0xf4b/0x1440 [ 1019.635634][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1019.641197][ T8812] ? find_held_lock+0x35/0x130 [ 1019.645976][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 22:32:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x900000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1019.651539][ T8812] ? lock_downgrade+0x920/0x920 [ 1019.656410][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1019.661966][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1019.667455][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1019.672673][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1019.678326][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1019.683661][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1019.689057][ T8812] ? __pmd_alloc+0x377/0x460 [ 1019.693662][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1019.699408][ T8812] ? rwlock_bug.part.0+0x90/0x90 [ 1019.704368][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1019.710623][ T8812] alloc_pages_current+0x107/0x210 [ 1019.715747][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1019.720255][ T8812] __pte_alloc+0x20/0x310 [ 1019.724579][ T8812] copy_page_range+0x14da/0x1ed0 [ 1019.730522][ T8812] ? find_held_lock+0x35/0x130 [ 1019.735331][ T8812] ? pmd_alloc+0x180/0x180 [ 1019.739758][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1019.745260][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1019.749955][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1019.754736][ T8812] dup_mm+0xa67/0x1430 [ 1019.758828][ T8812] ? vm_area_dup+0x170/0x170 [ 1019.763429][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1019.768898][ T8812] copy_process+0x2671/0x6830 [ 1019.773585][ T8812] ? __kasan_check_read+0x11/0x20 [ 1019.778630][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1019.783578][ T8812] ? __might_fault+0x12b/0x1e0 [ 1019.788356][ T8812] ? __might_fault+0x12b/0x1e0 [ 1019.793142][ T8812] _do_fork+0x146/0xfa0 [ 1019.797318][ T8812] ? copy_init_mm+0x20/0x20 22:32:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}]}, 0x40}}, 0x0) [ 1019.801850][ T8812] ? __kasan_check_read+0x11/0x20 [ 1019.806883][ T8812] ? _copy_to_user+0x118/0x160 [ 1019.811693][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1019.816470][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1019.821335][ T8812] ? do_syscall_64+0x26/0x760 [ 1019.826019][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1019.831318][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1019.836354][ T8812] do_syscall_64+0xfa/0x760 [ 1019.841126][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1019.847019][ T8812] RIP: 0033:0x457eba 22:32:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xa00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1019.853864][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1019.873468][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1019.881890][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1019.889872][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1019.897867][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 22:32:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x4000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1019.905830][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1019.905837][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1020.039497][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 10735 [ 1020.064861][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1020.074099][ T8812] Memory cgroup stats for /syz3: [ 1020.074210][ T8812] anon 225091584 [ 1020.074210][ T8812] file 36864 [ 1020.074210][ T8812] kernel_stack 12648448 [ 1020.074210][ T8812] slab 19861504 [ 1020.074210][ T8812] sock 0 [ 1020.074210][ T8812] shmem 0 [ 1020.074210][ T8812] file_mapped 0 [ 1020.074210][ T8812] file_dirty 0 [ 1020.074210][ T8812] file_writeback 0 [ 1020.074210][ T8812] anon_thp 182452224 [ 1020.074210][ T8812] inactive_anon 0 [ 1020.074210][ T8812] active_anon 225091584 [ 1020.074210][ T8812] inactive_file 57344 [ 1020.074210][ T8812] active_file 0 [ 1020.074210][ T8812] unevictable 0 [ 1020.074210][ T8812] slab_reclaimable 3784704 [ 1020.074210][ T8812] slab_unreclaimable 16076800 22:32:25 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6]}}]}, 0x40}}, 0x0) 22:32:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}]}, 0x40}}, 0x0) 22:32:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x5865, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xb00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1020.074210][ T8812] pgfault 86394 [ 1020.074210][ T8812] pgmajfault 0 [ 1020.074210][ T8812] workingset_refault 462 [ 1020.074210][ T8812] workingset_activate 297 [ 1020.074210][ T8812] workingset_nodereclaim 0 [ 1020.074210][ T8812] pgrefill 4201 [ 1020.074210][ T8812] pgscan 4618 [ 1020.074210][ T8812] pgsteal 781 [ 1020.259959][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20335,uid=0 [ 1020.324594][ T8812] Memory cgroup out of memory: Killed process 20335 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1020.422907][T20404] RDS: rds_bind could not find a transport for fe88::7a04, load rds_tcp or rds_rdma? [ 1020.439991][T20403] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1020.452838][T20403] CPU: 0 PID: 20403 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1020.461945][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.471984][T20403] Call Trace: [ 1020.475264][T20403] dump_stack+0x172/0x1f0 [ 1020.479592][T20403] dump_header+0x177/0x1152 [ 1020.484094][T20403] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1020.489884][T20403] ? ___ratelimit+0x2c8/0x595 [ 1020.494541][T20403] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1020.500342][T20403] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1020.505608][T20403] ? trace_hardirqs_on+0x67/0x240 [ 1020.510616][T20403] ? pagefault_out_of_memory+0x11c/0x11c [ 1020.516232][T20403] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1020.522013][T20403] ? ___ratelimit+0x60/0x595 [ 1020.526581][T20403] ? do_raw_spin_unlock+0x57/0x270 [ 1020.531678][T20403] oom_kill_process.cold+0x10/0x15 [ 1020.536770][T20403] out_of_memory+0x334/0x1340 [ 1020.541426][T20403] ? lock_downgrade+0x920/0x920 [ 1020.546255][T20403] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1020.552054][T20403] ? oom_killer_disable+0x280/0x280 [ 1020.557299][T20403] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1020.562912][T20403] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1020.568525][T20403] ? do_raw_spin_unlock+0x57/0x270 [ 1020.573630][T20403] ? _raw_spin_unlock+0x2d/0x50 [ 1020.578466][T20403] try_charge+0xf4b/0x1440 [ 1020.582878][T20403] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1020.588410][T20403] ? find_held_lock+0x35/0x130 [ 1020.593176][T20403] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1020.598720][T20403] ? lock_downgrade+0x920/0x920 [ 1020.603552][T20403] ? percpu_ref_tryget_live+0x111/0x290 [ 1020.609130][T20403] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1020.614581][T20403] ? memcg_kmem_put_cache+0x50/0x50 [ 1020.619762][T20403] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1020.625307][T20403] __memcg_kmem_charge+0x13a/0x3a0 [ 1020.630421][T20403] __alloc_pages_nodemask+0x4f7/0x900 [ 1020.635802][T20403] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1020.641441][T20403] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1020.647164][T20403] ? percpu_ref_put_many+0xb6/0x190 [ 1020.652376][T20403] copy_process+0x3f8/0x6830 [ 1020.656975][T20403] ? psi_memstall_leave+0x12e/0x180 [ 1020.662177][T20403] ? __cleanup_sighand+0x60/0x60 [ 1020.667119][T20403] ? __kasan_check_read+0x11/0x20 [ 1020.672152][T20403] ? __lock_acquire+0x8a0/0x4a00 [ 1020.677100][T20403] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1020.682310][T20403] _do_fork+0x146/0xfa0 [ 1020.686500][T20403] ? copy_init_mm+0x20/0x20 [ 1020.691003][T20403] ? lock_downgrade+0x920/0x920 [ 1020.695834][T20403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1020.702053][T20403] __x64_sys_clone+0x1ab/0x270 [ 1020.706801][T20403] ? __ia32_sys_vfork+0xd0/0xd0 [ 1020.711630][T20403] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1020.717857][T20403] ? do_syscall_64+0x26/0x760 [ 1020.722522][T20403] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1020.727902][T20403] ? trace_hardirqs_on+0x67/0x240 [ 1020.732904][T20403] do_syscall_64+0xfa/0x760 [ 1020.737391][T20403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1020.743264][T20403] RIP: 0033:0x45c2b9 [ 1020.747227][T20403] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1020.766902][T20403] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1020.775328][T20403] RAX: ffffffffffffffda RBX: 00007f4724874700 RCX: 000000000045c2b9 [ 1020.783285][T20403] RDX: 00007f47248749d0 RSI: 00007f4724873db0 RDI: 00000000003d0f00 [ 1020.791241][T20403] RBP: 00007ffcdbf51a60 R08: 00007f4724874700 R09: 00007f4724874700 [ 1020.799204][T20403] R10: 00007f47248749d0 R11: 0000000000000202 R12: 0000000000000000 [ 1020.807167][T20403] R13: 00007ffcdbf518ff R14: 00007f47248749c0 R15: 000000000075bfd4 [ 1020.816784][T20403] memory: usage 307152kB, limit 307200kB, failcnt 10747 [ 1020.824153][T20403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1020.831444][T20403] Memory cgroup stats for /syz3: [ 1020.831571][T20403] anon 225091584 [ 1020.831571][T20403] file 36864 [ 1020.831571][T20403] kernel_stack 12713984 [ 1020.831571][T20403] slab 19861504 [ 1020.831571][T20403] sock 0 [ 1020.831571][T20403] shmem 0 [ 1020.831571][T20403] file_mapped 0 [ 1020.831571][T20403] file_dirty 0 [ 1020.831571][T20403] file_writeback 0 [ 1020.831571][T20403] anon_thp 182452224 [ 1020.831571][T20403] inactive_anon 0 [ 1020.831571][T20403] active_anon 225091584 [ 1020.831571][T20403] inactive_file 57344 [ 1020.831571][T20403] active_file 0 [ 1020.831571][T20403] unevictable 0 [ 1020.831571][T20403] slab_reclaimable 3784704 [ 1020.831571][T20403] slab_unreclaimable 16076800 [ 1020.831571][T20403] pgfault 86427 [ 1020.831571][T20403] pgmajfault 0 [ 1020.831571][T20403] workingset_refault 462 [ 1020.831571][T20403] workingset_activate 297 [ 1020.831571][T20403] workingset_nodereclaim 0 [ 1020.831571][T20403] pgrefill 4201 [ 1020.831571][T20403] pgscan 4618 [ 1020.831571][T20403] pgsteal 781 22:32:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0xf0, 0x0}, 0x10000}, 0x1c) 22:32:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x6000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8]}}]}, 0x40}}, 0x0) 22:32:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}}]}, 0x40}}, 0x0) 22:32:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xc00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:25 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1020.925839][T20403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15339,uid=0 [ 1020.941634][T20403] Memory cgroup out of memory: Killed process 15339 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}}]}, 0x40}}, 0x0) 22:32:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9]}}]}, 0x40}}, 0x0) 22:32:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x6558, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x300, 0x0}, 0x10000}, 0x1c) 22:32:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xd00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1021.088709][T20427] RDS: rds_bind could not find a transport for fe88::f004, load rds_tcp or rds_rdma? 22:32:26 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1021.243902][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:32:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xe00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1021.321676][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1021.330754][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.340818][ T8812] Call Trace: [ 1021.344125][ T8812] dump_stack+0x172/0x1f0 [ 1021.348467][ T8812] dump_header+0x177/0x1152 [ 1021.352989][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1021.358812][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1021.363510][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:32:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xf00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1021.369428][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1021.374725][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1021.379771][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1021.385417][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1021.391235][ T8812] ? ___ratelimit+0x60/0x595 [ 1021.395869][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1021.401053][ T8812] oom_kill_process.cold+0x10/0x15 [ 1021.406188][ T8812] out_of_memory+0x334/0x1340 [ 1021.410868][ T8812] ? lock_downgrade+0x920/0x920 [ 1021.415730][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:32:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1000000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1021.421545][ T8812] ? oom_killer_disable+0x280/0x280 [ 1021.426760][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1021.432318][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1021.438064][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1021.443184][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1021.448043][ T8812] try_charge+0xf4b/0x1440 [ 1021.452474][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1021.458017][ T8812] ? find_held_lock+0x35/0x130 [ 1021.462775][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1021.468327][ T8812] ? lock_downgrade+0x920/0x920 [ 1021.473183][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1021.478742][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1021.484204][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1021.489412][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1021.494963][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1021.500090][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1021.505470][ T8812] ? find_held_lock+0x35/0x130 [ 1021.510244][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1021.516011][ T8812] ? lock_downgrade+0x920/0x920 22:32:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1100000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1021.520862][ T8812] ? rwlock_bug.part.0+0x90/0x90 [ 1021.525809][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1021.532054][ T8812] alloc_pages_current+0x107/0x210 [ 1021.537164][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1021.542283][ T8812] __pmd_alloc+0x41/0x460 [ 1021.546699][ T8812] ? __pmd+0x60/0x60 [ 1021.550608][ T8812] pmd_alloc+0x10c/0x180 [ 1021.554842][ T8812] copy_page_range+0x610/0x1ed0 [ 1021.554877][ T8812] ? lock_downgrade+0x920/0x920 [ 1021.554900][ T8812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1021.570274][ T8812] ? pmd_alloc+0x180/0x180 [ 1021.574697][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1021.579380][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1021.584149][ T8812] ? anon_vma_fork+0xd4/0x4a0 [ 1021.588835][ T8812] dup_mm+0xa67/0x1430 [ 1021.592927][ T8812] ? vm_area_dup+0x170/0x170 [ 1021.597532][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1021.602391][ T8812] copy_process+0x2671/0x6830 [ 1021.607071][ T8812] ? __kasan_check_read+0x11/0x20 [ 1021.612113][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1021.617050][ T8812] ? __might_fault+0x12b/0x1e0 22:32:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1200000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:26 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd902}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1021.621817][ T8812] ? __might_fault+0x12b/0x1e0 [ 1021.626597][ T8812] _do_fork+0x146/0xfa0 [ 1021.630758][ T8812] ? copy_init_mm+0x20/0x20 [ 1021.635272][ T8812] ? __kasan_check_read+0x11/0x20 [ 1021.640296][ T8812] ? _copy_to_user+0x118/0x160 [ 1021.645067][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1021.645083][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1021.645110][ T8812] ? do_syscall_64+0x26/0x760 [ 1021.654704][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1021.664617][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1021.669740][ T8812] do_syscall_64+0xfa/0x760 [ 1021.674251][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1021.680145][ T8812] RIP: 0033:0x457eba [ 1021.684043][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1021.703645][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1021.703659][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba 22:32:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}]}, 0x40}}, 0x0) 22:32:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x7800, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa]}}]}, 0x40}}, 0x0) [ 1021.703666][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1021.703673][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1021.703680][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1021.703687][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1021.746074][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 10769 [ 1021.835106][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1021.841996][ T8812] Memory cgroup stats for /syz3: [ 1021.842110][ T8812] anon 225099776 [ 1021.842110][ T8812] file 36864 [ 1021.842110][ T8812] kernel_stack 12648448 [ 1021.842110][ T8812] slab 19861504 [ 1021.842110][ T8812] sock 0 [ 1021.842110][ T8812] shmem 0 [ 1021.842110][ T8812] file_mapped 0 [ 1021.842110][ T8812] file_dirty 0 [ 1021.842110][ T8812] file_writeback 0 [ 1021.842110][ T8812] anon_thp 182452224 [ 1021.842110][ T8812] inactive_anon 0 [ 1021.842110][ T8812] active_anon 225099776 [ 1021.842110][ T8812] inactive_file 57344 [ 1021.842110][ T8812] active_file 61440 [ 1021.842110][ T8812] unevictable 0 [ 1021.842110][ T8812] slab_reclaimable 3784704 [ 1021.842110][ T8812] slab_unreclaimable 16076800 [ 1021.842110][ T8812] pgfault 86526 [ 1021.842110][ T8812] pgmajfault 0 [ 1021.842110][ T8812] workingset_refault 462 [ 1021.842110][ T8812] workingset_activate 297 [ 1021.842110][ T8812] workingset_nodereclaim 0 [ 1021.842110][ T8812] pgrefill 4201 [ 1021.842110][ T8812] pgscan 4618 [ 1021.842110][ T8812] pgsteal 781 [ 1021.953060][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20405,uid=0 [ 1022.042821][ T8812] Memory cgroup out of memory: Killed process 20405 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1022.100413][T20492] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1022.115407][T20491] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1022.126161][T20491] CPU: 0 PID: 20491 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1022.135269][T20491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.145337][T20491] Call Trace: [ 1022.148800][T20491] dump_stack+0x172/0x1f0 [ 1022.153129][T20491] dump_header+0x177/0x1152 [ 1022.157630][T20491] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1022.163423][T20491] ? ___ratelimit+0x2c8/0x595 [ 1022.168087][T20491] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1022.173884][T20491] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1022.179246][T20491] ? trace_hardirqs_on+0x67/0x240 [ 1022.184259][T20491] ? pagefault_out_of_memory+0x11c/0x11c [ 1022.190068][T20491] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1022.195966][T20491] ? ___ratelimit+0x60/0x595 [ 1022.200543][T20491] ? do_raw_spin_unlock+0x57/0x270 [ 1022.205650][T20491] oom_kill_process.cold+0x10/0x15 [ 1022.210839][T20491] out_of_memory+0x334/0x1340 [ 1022.215507][T20491] ? lock_downgrade+0x920/0x920 [ 1022.220362][T20491] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1022.226171][T20491] ? oom_killer_disable+0x280/0x280 [ 1022.231365][T20491] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1022.236898][T20491] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1022.242519][T20491] ? do_raw_spin_unlock+0x57/0x270 [ 1022.247619][T20491] ? _raw_spin_unlock+0x2d/0x50 [ 1022.252457][T20491] try_charge+0xf4b/0x1440 [ 1022.256865][T20491] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1022.262406][T20491] ? percpu_ref_tryget_live+0x111/0x290 [ 1022.267964][T20491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1022.274202][T20491] ? __kasan_check_read+0x11/0x20 [ 1022.279571][T20491] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1022.285106][T20491] mem_cgroup_try_charge+0x136/0x590 [ 1022.290376][T20491] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1022.296643][T20491] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1022.302357][T20491] __handle_mm_fault+0x1e34/0x3f20 [ 1022.307459][T20491] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1022.312997][T20491] ? __kasan_check_read+0x11/0x20 [ 1022.318009][T20491] handle_mm_fault+0x1b5/0x6c0 [ 1022.322766][T20491] __do_page_fault+0x536/0xdd0 [ 1022.327520][T20491] do_page_fault+0x38/0x590 [ 1022.332005][T20491] page_fault+0x39/0x40 [ 1022.336150][T20491] RIP: 0033:0x45c29d [ 1022.340035][T20491] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 30 8e fb ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 1022.359648][T20491] RSP: 002b:00007ffcdbf51848 EFLAGS: 00010202 [ 1022.365862][T20491] RAX: ffffffffffffffea RBX: 00007f4724874700 RCX: 00007f4724874700 [ 1022.373820][T20491] RDX: 00000000003d0f00 RSI: 00007f4724873db0 RDI: 0000000000410620 [ 1022.381841][T20491] RBP: 00007ffcdbf51a60 R08: 00007f47248749d0 R09: 00007f4724874700 [ 1022.389804][T20491] R10: 00007f4724873dc0 R11: 0000000000000246 R12: 0000000000000000 [ 1022.397760][T20491] R13: 00007ffcdbf518ff R14: 00007f47248749c0 R15: 000000000075bfd4 [ 1022.406437][T20491] memory: usage 307164kB, limit 307200kB, failcnt 10780 [ 1022.413635][T20491] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1022.420867][T20491] Memory cgroup stats for /syz3: [ 1022.420973][T20491] anon 225091584 [ 1022.420973][T20491] file 36864 [ 1022.420973][T20491] kernel_stack 12713984 [ 1022.420973][T20491] slab 19861504 [ 1022.420973][T20491] sock 0 [ 1022.420973][T20491] shmem 0 [ 1022.420973][T20491] file_mapped 0 [ 1022.420973][T20491] file_dirty 0 [ 1022.420973][T20491] file_writeback 0 [ 1022.420973][T20491] anon_thp 182452224 [ 1022.420973][T20491] inactive_anon 0 [ 1022.420973][T20491] active_anon 225091584 [ 1022.420973][T20491] inactive_file 57344 [ 1022.420973][T20491] active_file 61440 [ 1022.420973][T20491] unevictable 0 [ 1022.420973][T20491] slab_reclaimable 3784704 [ 1022.420973][T20491] slab_unreclaimable 16076800 [ 1022.420973][T20491] pgfault 86559 [ 1022.420973][T20491] pgmajfault 0 [ 1022.420973][T20491] workingset_refault 462 [ 1022.420973][T20491] workingset_activate 297 22:32:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x500, 0x0}, 0x10000}, 0x1c) 22:32:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xb]}}]}, 0x40}}, 0x0) 22:32:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}}]}, 0x40}}, 0x0) 22:32:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1300000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x8100, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1022.420973][T20491] workingset_nodereclaim 0 [ 1022.420973][T20491] pgrefill 4201 [ 1022.420973][T20491] pgscan 4618 [ 1022.420973][T20491] pgsteal 814 [ 1022.515184][T20491] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20428,uid=0 [ 1022.531005][T20491] Memory cgroup out of memory: Killed process 20428 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:27 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xb20a, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1022.670043][T20519] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1400000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}}]}, 0x40}}, 0x0) [ 1022.721403][T20507] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:32:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf]}}]}, 0x40}}, 0x0) [ 1022.763789][T20507] CPU: 0 PID: 20507 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1022.772931][T20507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.782977][T20507] Call Trace: [ 1022.782997][T20507] dump_stack+0x172/0x1f0 [ 1022.783015][T20507] dump_header+0x177/0x1152 [ 1022.783030][T20507] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1022.783041][T20507] ? ___ratelimit+0x2c8/0x595 [ 1022.783053][T20507] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1022.783071][T20507] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1022.816679][T20507] ? trace_hardirqs_on+0x67/0x240 [ 1022.821811][T20507] ? pagefault_out_of_memory+0x11c/0x11c [ 1022.827458][T20507] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1022.833268][T20507] ? ___ratelimit+0x60/0x595 [ 1022.837846][T20507] ? do_raw_spin_unlock+0x57/0x270 [ 1022.837865][T20507] oom_kill_process.cold+0x10/0x15 [ 1022.837880][T20507] out_of_memory+0x334/0x1340 [ 1022.837894][T20507] ? lock_downgrade+0x920/0x920 [ 1022.837913][T20507] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1022.863438][T20507] ? oom_killer_disable+0x280/0x280 [ 1022.868650][T20507] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1022.868667][T20507] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1022.868687][T20507] ? do_raw_spin_unlock+0x57/0x270 [ 1022.868704][T20507] ? _raw_spin_unlock+0x2d/0x50 [ 1022.868723][T20507] try_charge+0xf4b/0x1440 [ 1022.894245][T20507] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1022.894260][T20507] ? percpu_ref_tryget_live+0x111/0x290 [ 1022.894280][T20507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1022.911602][T20507] ? __kasan_check_read+0x11/0x20 [ 1022.916649][T20507] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1022.922212][T20507] mem_cgroup_try_charge+0x136/0x590 [ 1022.927511][T20507] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1022.933767][T20507] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1022.939416][T20507] __handle_mm_fault+0x1e34/0x3f20 [ 1022.944546][T20507] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1022.950110][T20507] ? __kasan_check_read+0x11/0x20 [ 1022.955150][T20507] handle_mm_fault+0x1b5/0x6c0 [ 1022.959923][T20507] __do_page_fault+0x536/0xdd0 22:32:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1500000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1022.964696][T20507] do_page_fault+0x38/0x590 [ 1022.969232][T20507] page_fault+0x39/0x40 [ 1022.973389][T20507] RIP: 0033:0x41122f [ 1022.977286][T20507] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1022.996972][T20507] RSP: 002b:00007ffcdbf51890 EFLAGS: 00010206 [ 1023.003041][T20507] RAX: 00007f4724854000 RBX: 0000000000020000 RCX: 000000000045993a [ 1023.003052][T20507] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1023.018986][T20507] RBP: 00007ffcdbf51970 R08: ffffffffffffffff R09: 0000000000000000 [ 1023.026958][T20507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbf51a60 [ 1023.034936][T20507] R13: 00007f4724874700 R14: 0000000000000001 R15: 000000000075bfd4 22:32:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xc700, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1023.260767][T20507] memory: usage 307168kB, limit 307200kB, failcnt 10791 [ 1023.281960][T20507] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1023.289646][T20507] Memory cgroup stats for /syz3: [ 1023.289736][T20507] anon 225099776 [ 1023.289736][T20507] file 36864 [ 1023.289736][T20507] kernel_stack 12713984 [ 1023.289736][T20507] slab 19861504 [ 1023.289736][T20507] sock 0 [ 1023.289736][T20507] shmem 0 [ 1023.289736][T20507] file_mapped 0 [ 1023.289736][T20507] file_dirty 0 [ 1023.289736][T20507] file_writeback 0 [ 1023.289736][T20507] anon_thp 182452224 [ 1023.289736][T20507] inactive_anon 0 [ 1023.289736][T20507] active_anon 225099776 [ 1023.289736][T20507] inactive_file 57344 [ 1023.289736][T20507] active_file 61440 [ 1023.289736][T20507] unevictable 0 [ 1023.289736][T20507] slab_reclaimable 3784704 [ 1023.289736][T20507] slab_unreclaimable 16076800 [ 1023.289736][T20507] pgfault 86625 [ 1023.289736][T20507] pgmajfault 0 [ 1023.289736][T20507] workingset_refault 462 [ 1023.289736][T20507] workingset_activate 297 [ 1023.289736][T20507] workingset_nodereclaim 0 [ 1023.289736][T20507] pgrefill 4201 [ 1023.289736][T20507] pgscan 4618 [ 1023.289736][T20507] pgsteal 814 [ 1023.384713][T20507] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20493,uid=0 22:32:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x600, 0x0}, 0x10000}, 0x1c) 22:32:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10]}}]}, 0x40}}, 0x0) 22:32:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}}]}, 0x40}}, 0x0) 22:32:28 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1600000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1023.400987][T20507] Memory cgroup out of memory: Killed process 20493 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1700000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf0ffff, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}}]}, 0x40}}, 0x0) 22:32:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x11]}}]}, 0x40}}, 0x0) [ 1023.571171][T20589] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1023.669995][T20582] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 22:32:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}}]}, 0x40}}, 0x0) [ 1023.740348][T20582] CPU: 0 PID: 20582 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1023.749626][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1023.759693][T20582] Call Trace: [ 1023.763033][T20582] dump_stack+0x172/0x1f0 [ 1023.767400][T20582] dump_header+0x177/0x1152 [ 1023.771917][T20582] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1023.777732][T20582] ? ___ratelimit+0x2c8/0x595 [ 1023.782423][T20582] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:32:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}}]}, 0x40}}, 0x0) [ 1023.789895][T20582] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1023.795196][T20582] ? trace_hardirqs_on+0x67/0x240 [ 1023.800268][T20582] ? pagefault_out_of_memory+0x11c/0x11c [ 1023.805918][T20582] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1023.811737][T20582] ? ___ratelimit+0x60/0x595 [ 1023.816335][T20582] ? do_raw_spin_unlock+0x57/0x270 [ 1023.821458][T20582] oom_kill_process.cold+0x10/0x15 [ 1023.826583][T20582] out_of_memory+0x334/0x1340 [ 1023.831278][T20582] ? lock_downgrade+0x920/0x920 [ 1023.836152][T20582] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1023.841971][T20582] ? oom_killer_disable+0x280/0x280 [ 1023.847201][T20582] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1023.852763][T20582] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1023.858410][T20582] ? do_raw_spin_unlock+0x57/0x270 [ 1023.863536][T20582] ? _raw_spin_unlock+0x2d/0x50 [ 1023.868403][T20582] try_charge+0xf4b/0x1440 [ 1023.872845][T20582] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1023.878405][T20582] ? find_held_lock+0x35/0x130 [ 1023.883183][T20582] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1023.888846][T20582] ? lock_downgrade+0x920/0x920 [ 1023.893705][T20582] ? percpu_ref_tryget_live+0x111/0x290 [ 1023.899279][T20582] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1023.904745][T20582] ? memcg_kmem_put_cache+0x50/0x50 [ 1023.909946][T20582] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1023.915505][T20582] __memcg_kmem_charge+0x13a/0x3a0 [ 1023.920634][T20582] __alloc_pages_nodemask+0x4f7/0x900 [ 1023.926020][T20582] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1023.931583][T20582] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1023.937420][T20582] ? percpu_ref_put_many+0xb6/0x190 [ 1023.942637][T20582] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1023.947934][T20582] ? trace_hardirqs_on+0x67/0x240 [ 1023.952964][T20582] ? __kasan_check_read+0x11/0x20 [ 1023.958001][T20582] copy_process+0x3f8/0x6830 [ 1023.962602][T20582] ? psi_memstall_leave+0x12e/0x180 [ 1023.967829][T20582] ? __cleanup_sighand+0x60/0x60 [ 1023.972790][T20582] ? __kasan_check_read+0x11/0x20 [ 1023.977829][T20582] ? __lock_acquire+0x8a0/0x4a00 [ 1023.982770][T20582] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1023.987995][T20582] _do_fork+0x146/0xfa0 [ 1023.988015][T20582] ? copy_init_mm+0x20/0x20 [ 1023.988038][T20582] ? lock_downgrade+0x920/0x920 [ 1024.001523][T20582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1024.007787][T20582] __x64_sys_clone+0x1ab/0x270 [ 1024.012563][T20582] ? __ia32_sys_vfork+0xd0/0xd0 [ 1024.017420][T20582] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 1024.023062][T20582] ? mem_cgroup_handle_over_high+0x21b/0x2a0 [ 1024.029044][T20582] ? do_syscall_64+0x26/0x760 [ 1024.029061][T20582] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1024.029083][T20582] ? trace_hardirqs_on+0x67/0x240 [ 1024.044065][T20582] do_syscall_64+0xfa/0x760 [ 1024.048595][T20582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1024.054497][T20582] RIP: 0033:0x45c2b9 [ 1024.058405][T20582] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1024.078019][T20582] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1024.086710][T20582] RAX: ffffffffffffffda RBX: 00007f4724874700 RCX: 000000000045c2b9 [ 1024.094847][T20582] RDX: 00007f47248749d0 RSI: 00007f4724873db0 RDI: 00000000003d0f00 [ 1024.102818][T20582] RBP: 00007ffcdbf51a60 R08: 00007f4724874700 R09: 00007f4724874700 [ 1024.110862][T20582] R10: 00007f47248749d0 R11: 0000000000000202 R12: 0000000000000000 [ 1024.118818][T20582] R13: 00007ffcdbf518ff R14: 00007f47248749c0 R15: 000000000075bfd4 [ 1024.154137][T20582] memory: usage 307172kB, limit 307200kB, failcnt 10803 [ 1024.161520][T20582] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1024.168816][T20582] Memory cgroup stats for /syz3: [ 1024.168929][T20582] anon 225095680 [ 1024.168929][T20582] file 36864 [ 1024.168929][T20582] kernel_stack 12713984 [ 1024.168929][T20582] slab 19861504 [ 1024.168929][T20582] sock 0 [ 1024.168929][T20582] shmem 0 [ 1024.168929][T20582] file_mapped 0 [ 1024.168929][T20582] file_dirty 0 [ 1024.168929][T20582] file_writeback 0 [ 1024.168929][T20582] anon_thp 182452224 [ 1024.168929][T20582] inactive_anon 0 [ 1024.168929][T20582] active_anon 225095680 [ 1024.168929][T20582] inactive_file 57344 [ 1024.168929][T20582] active_file 61440 [ 1024.168929][T20582] unevictable 0 [ 1024.168929][T20582] slab_reclaimable 3784704 [ 1024.168929][T20582] slab_unreclaimable 16076800 [ 1024.168929][T20582] pgfault 86724 [ 1024.168929][T20582] pgmajfault 0 [ 1024.168929][T20582] workingset_refault 462 [ 1024.168929][T20582] workingset_activate 297 [ 1024.168929][T20582] workingset_nodereclaim 0 [ 1024.168929][T20582] pgrefill 4201 [ 1024.168929][T20582] pgscan 4618 [ 1024.168929][T20582] pgsteal 814 [ 1024.263189][T20582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20520,uid=0 [ 1024.279387][T20582] Memory cgroup out of memory: Killed process 20520 (syz-executor.3) total-vm:72708kB, anon-rss:2200kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x700, 0x0}, 0x10000}, 0x1c) 22:32:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}}]}, 0x40}}, 0x0) 22:32:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1800000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x12]}}]}, 0x40}}, 0x0) 22:32:29 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1024.314296][T20625] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x1a00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x13]}}]}, 0x40}}, 0x0) 22:32:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x2000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x2000, 0x0}, 0x10000}, 0x1c) [ 1024.452620][T20644] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}}]}, 0x40}}, 0x0) 22:32:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x2900000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x14]}}]}, 0x40}}, 0x0) [ 1024.654276][T20664] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x3f00, 0x0}, 0x10000}, 0x1c) 22:32:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x3000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:29 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}}]}, 0x40}}, 0x0) 22:32:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x2a00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1024.866433][T20680] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4000, 0x0}, 0x10000}, 0x1c) 22:32:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x15]}}]}, 0x40}}, 0x0) 22:32:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x4000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:30 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}}]}, 0x40}}, 0x0) [ 1025.067687][T20698] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4800, 0x0}, 0x10000}, 0x1c) 22:32:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x2b00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x78]}}]}, 0x40}}, 0x0) 22:32:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x5000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x3500000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4c00, 0x0}, 0x10000}, 0x1c) 22:32:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}]}, 0x40}}, 0x0) [ 1025.308974][T20722] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x96]}}]}, 0x40}}, 0x0) 22:32:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x6000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:30 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9020000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x3900000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1025.586662][T20742] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6000, 0x0}, 0x10000}, 0x1c) 22:32:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}]}, 0x40}}, 0x0) 22:32:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800000000000000]}}]}, 0x40}}, 0x0) 22:32:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf0]}}]}, 0x40}}, 0x0) 22:32:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x8000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1025.855836][T20773] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6800, 0x0}, 0x10000}, 0x1c) 22:32:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x3a00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}}]}, 0x40}}, 0x0) 22:32:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1fa]}}]}, 0x40}}, 0x0) 22:32:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x9000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1026.189068][T20796] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1026.240826][T20796] CPU: 0 PID: 20796 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1026.249979][T20796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.260051][T20796] Call Trace: [ 1026.263362][T20796] dump_stack+0x172/0x1f0 [ 1026.267711][T20796] dump_header+0x177/0x1152 [ 1026.272229][T20796] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1026.278053][T20796] ? ___ratelimit+0x2c8/0x595 [ 1026.282751][T20796] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1026.288575][T20796] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1026.293880][T20796] ? trace_hardirqs_on+0x67/0x240 [ 1026.298919][T20796] ? pagefault_out_of_memory+0x11c/0x11c [ 1026.304567][T20796] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1026.310373][T20796] ? ___ratelimit+0x60/0x595 [ 1026.315090][T20796] ? do_raw_spin_unlock+0x57/0x270 [ 1026.320193][T20796] oom_kill_process.cold+0x10/0x15 [ 1026.325301][T20796] out_of_memory+0x334/0x1340 [ 1026.329967][T20796] ? lock_downgrade+0x920/0x920 [ 1026.334826][T20796] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1026.340622][T20796] ? oom_killer_disable+0x280/0x280 [ 1026.345813][T20796] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1026.351353][T20796] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1026.357079][T20796] ? do_raw_spin_unlock+0x57/0x270 [ 1026.362180][T20796] ? _raw_spin_unlock+0x2d/0x50 [ 1026.367016][T20796] try_charge+0xf4b/0x1440 [ 1026.371492][T20796] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1026.377027][T20796] ? find_held_lock+0x35/0x130 [ 1026.381870][T20796] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1026.387408][T20796] ? lock_downgrade+0x920/0x920 [ 1026.392245][T20796] ? percpu_ref_tryget_live+0x111/0x290 [ 1026.397780][T20796] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1026.403229][T20796] ? memcg_kmem_put_cache+0x50/0x50 [ 1026.408436][T20796] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1026.413968][T20796] __memcg_kmem_charge+0x13a/0x3a0 [ 1026.419077][T20796] __alloc_pages_nodemask+0x4f7/0x900 [ 1026.424445][T20796] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1026.430008][T20796] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1026.435739][T20796] ? percpu_ref_put_many+0xb6/0x190 [ 1026.440927][T20796] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1026.446213][T20796] ? trace_hardirqs_on+0x67/0x240 [ 1026.451226][T20796] ? __kasan_check_read+0x11/0x20 [ 1026.456247][T20796] copy_process+0x3f8/0x6830 [ 1026.460831][T20796] ? psi_memstall_leave+0x12e/0x180 [ 1026.466036][T20796] ? __cleanup_sighand+0x60/0x60 [ 1026.470969][T20796] ? __kasan_check_read+0x11/0x20 [ 1026.475996][T20796] ? __lock_acquire+0x8a0/0x4a00 [ 1026.480924][T20796] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1026.486122][T20796] _do_fork+0x146/0xfa0 [ 1026.490273][T20796] ? copy_init_mm+0x20/0x20 [ 1026.494779][T20796] ? lock_downgrade+0x920/0x920 [ 1026.499617][T20796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1026.505842][T20796] __x64_sys_clone+0x1ab/0x270 [ 1026.510609][T20796] ? __ia32_sys_vfork+0xd0/0xd0 [ 1026.515447][T20796] ? __blkcg_punt_bio_submit+0x1e0/0x1e0 [ 1026.521066][T20796] ? mem_cgroup_handle_over_high+0x21b/0x2a0 [ 1026.527033][T20796] ? do_syscall_64+0x26/0x760 [ 1026.531723][T20796] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1026.536989][T20796] ? trace_hardirqs_on+0x67/0x240 22:32:31 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x204]}}]}, 0x40}}, 0x0) [ 1026.542003][T20796] do_syscall_64+0xfa/0x760 [ 1026.546497][T20796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1026.552386][T20796] RIP: 0033:0x45c2b9 [ 1026.556277][T20796] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1026.575877][T20796] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1026.584302][T20796] RAX: ffffffffffffffda RBX: 00007f4724895700 RCX: 000000000045c2b9 22:32:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000]}}]}, 0x40}}, 0x0) 22:32:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x3b00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1026.592284][T20796] RDX: 00007f47248959d0 RSI: 00007f4724894db0 RDI: 00000000003d0f00 [ 1026.600288][T20796] RBP: 00007ffcdbf51a60 R08: 00007f4724895700 R09: 00007f4724895700 [ 1026.608257][T20796] R10: 00007f47248959d0 R11: 0000000000000202 R12: 0000000000000000 [ 1026.608265][T20796] R13: 00007ffcdbf518ff R14: 00007f47248959c0 R15: 000000000075bf2c 22:32:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x206]}}]}, 0x40}}, 0x0) 22:32:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xa000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x3c00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1026.984660][T20796] memory: usage 307200kB, limit 307200kB, failcnt 10846 [ 1026.992104][T20796] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1026.999682][T20796] Memory cgroup stats for /syz3: [ 1026.999783][T20796] anon 223612928 [ 1026.999783][T20796] file 36864 [ 1026.999783][T20796] kernel_stack 12845056 [ 1026.999783][T20796] slab 19996672 [ 1026.999783][T20796] sock 0 [ 1026.999783][T20796] shmem 0 [ 1026.999783][T20796] file_mapped 0 [ 1026.999783][T20796] file_dirty 0 [ 1026.999783][T20796] file_writeback 0 [ 1026.999783][T20796] anon_thp 180355072 [ 1026.999783][T20796] inactive_anon 0 [ 1026.999783][T20796] active_anon 223612928 [ 1026.999783][T20796] inactive_file 57344 [ 1026.999783][T20796] active_file 61440 [ 1026.999783][T20796] unevictable 0 [ 1026.999783][T20796] slab_reclaimable 3784704 [ 1026.999783][T20796] slab_unreclaimable 16211968 [ 1026.999783][T20796] pgfault 87186 [ 1026.999783][T20796] pgmajfault 0 [ 1026.999783][T20796] workingset_refault 462 [ 1026.999783][T20796] workingset_activate 297 [ 1026.999783][T20796] workingset_nodereclaim 0 [ 1026.999783][T20796] pgrefill 4234 [ 1026.999783][T20796] pgscan 4651 [ 1026.999783][T20796] pgsteal 814 [ 1027.098694][T20796] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20626,uid=0 22:32:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6c00, 0x0}, 0x10000}, 0x1c) 22:32:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe201000000000000]}}]}, 0x40}}, 0x0) 22:32:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x300]}}]}, 0x40}}, 0x0) 22:32:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xb000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x3d00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1027.127764][T20796] Memory cgroup out of memory: Killed process 20626 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1027.172716][T20853] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1027.291911][T20864] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1027.342075][T20864] CPU: 0 PID: 20864 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1027.351233][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.361384][T20864] Call Trace: [ 1027.364689][T20864] dump_stack+0x172/0x1f0 [ 1027.369028][T20864] dump_header+0x177/0x1152 [ 1027.373541][T20864] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1027.379351][T20864] ? ___ratelimit+0x2c8/0x595 [ 1027.384044][T20864] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1027.389870][T20864] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1027.395176][T20864] ? trace_hardirqs_on+0x67/0x240 [ 1027.400229][T20864] ? pagefault_out_of_memory+0x11c/0x11c [ 1027.405877][T20864] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1027.411698][T20864] ? ___ratelimit+0x60/0x595 [ 1027.418392][T20864] ? do_raw_spin_unlock+0x57/0x270 [ 1027.423524][T20864] oom_kill_process.cold+0x10/0x15 [ 1027.428630][T20864] out_of_memory+0x334/0x1340 [ 1027.433295][T20864] ? lock_downgrade+0x920/0x920 22:32:32 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x3e00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea02000000000000]}}]}, 0x40}}, 0x0) 22:32:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x402]}}]}, 0x40}}, 0x0) [ 1027.438294][T20864] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1027.444099][T20864] ? oom_killer_disable+0x280/0x280 [ 1027.449346][T20864] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1027.455279][T20864] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1027.460936][T20864] ? do_raw_spin_unlock+0x57/0x270 [ 1027.466065][T20864] ? _raw_spin_unlock+0x2d/0x50 [ 1027.470938][T20864] try_charge+0xf4b/0x1440 [ 1027.475390][T20864] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1027.480946][T20864] ? percpu_ref_tryget_live+0x111/0x290 [ 1027.486514][T20864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1027.492777][T20864] ? __kasan_check_read+0x11/0x20 [ 1027.497828][T20864] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1027.503393][T20864] mem_cgroup_try_charge+0x136/0x590 [ 1027.508698][T20864] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1027.514952][T20864] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1027.514972][T20864] wp_page_copy+0x41e/0x1590 [ 1027.514992][T20864] ? find_held_lock+0x35/0x130 [ 1027.529959][T20864] ? pmd_pfn+0x1d0/0x1d0 [ 1027.529981][T20864] ? lock_downgrade+0x920/0x920 [ 1027.539075][T20864] ? swp_swapcount+0x540/0x540 [ 1027.543860][T20864] ? __kasan_check_read+0x11/0x20 [ 1027.548900][T20864] ? do_raw_spin_unlock+0x57/0x270 [ 1027.554038][T20864] do_wp_page+0x499/0x14d0 [ 1027.558490][T20864] ? finish_mkwrite_fault+0x570/0x570 [ 1027.563901][T20864] __handle_mm_fault+0x22f1/0x3f20 [ 1027.569044][T20864] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1027.574631][T20864] ? __kasan_check_read+0x11/0x20 [ 1027.579704][T20864] handle_mm_fault+0x1b5/0x6c0 [ 1027.584492][T20864] __do_page_fault+0x536/0xdd0 22:32:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec02000000000000]}}]}, 0x40}}, 0x0) [ 1027.589286][T20864] do_page_fault+0x38/0x590 [ 1027.593809][T20864] page_fault+0x39/0x40 [ 1027.597972][T20864] RIP: 0033:0x40fa48 [ 1027.601885][T20864] Code: 48 8b 05 73 54 30 00 48 89 08 48 8b 15 71 54 30 00 48 89 42 08 48 8b 05 56 54 30 00 48 89 05 5f 54 30 00 49 8d 81 c0 02 00 00 <48> 89 05 61 0a 66 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 1027.621490][T20864] RSP: 002b:00007ffcdbf51ad8 EFLAGS: 00010246 [ 1027.621504][T20864] RAX: 0000555556cc5c00 RBX: 00007ffcdbf51ae0 RCX: 0000000000714ea0 22:32:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xc000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1027.621512][T20864] RDX: 000000000040f880 RSI: 0000000000714e90 RDI: 0000555556cc5c20 [ 1027.621520][T20864] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1027.621529][T20864] R10: 0000555556cc5c10 R11: 0000000000000202 R12: 0000000000000001 [ 1027.621537][T20864] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:32:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x3f00000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1027.892821][T20864] memory: usage 307200kB, limit 307200kB, failcnt 10870 [ 1027.900262][T20864] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1027.908335][T20864] Memory cgroup stats for /syz3: [ 1027.908444][T20864] anon 223662080 [ 1027.908444][T20864] file 36864 [ 1027.908444][T20864] kernel_stack 12910592 [ 1027.908444][T20864] slab 19996672 [ 1027.908444][T20864] sock 0 [ 1027.908444][T20864] shmem 0 [ 1027.908444][T20864] file_mapped 0 [ 1027.908444][T20864] file_dirty 0 [ 1027.908444][T20864] file_writeback 0 [ 1027.908444][T20864] anon_thp 180355072 [ 1027.908444][T20864] inactive_anon 0 [ 1027.908444][T20864] active_anon 223662080 [ 1027.908444][T20864] inactive_file 57344 [ 1027.908444][T20864] active_file 61440 [ 1027.908444][T20864] unevictable 0 [ 1027.908444][T20864] slab_reclaimable 3784704 [ 1027.908444][T20864] slab_unreclaimable 16211968 [ 1027.908444][T20864] pgfault 87252 [ 1027.908444][T20864] pgmajfault 0 [ 1027.908444][T20864] workingset_refault 462 [ 1027.908444][T20864] workingset_activate 297 [ 1027.908444][T20864] workingset_nodereclaim 0 [ 1027.908444][T20864] pgrefill 4234 [ 1027.908444][T20864] pgscan 4651 [ 1027.908444][T20864] pgsteal 814 22:32:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xe000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x500]}}]}, 0x40}}, 0x0) 22:32:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000]}}]}, 0x40}}, 0x0) 22:32:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x7400, 0x0}, 0x10000}, 0x1c) 22:32:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x4000000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1028.031935][T20864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20856,uid=0 [ 1028.056606][T20864] Memory cgroup out of memory: Killed process 20856 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:33 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}}]}, 0x40}}, 0x0) 22:32:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5c4]}}]}, 0x40}}, 0x0) 22:32:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x7a00, 0x0}, 0x10000}, 0x1c) 22:32:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x4100000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x10000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0xf000, 0x0}, 0x10000}, 0x1c) 22:32:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000]}}]}, 0x40}}, 0x0) 22:32:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x600]}}]}, 0x40}}, 0x0) 22:32:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x4200000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x11000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1028.709620][T20977] rds_bind: 6 callbacks suppressed [ 1028.709633][T20977] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:33 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}}]}, 0x40}}, 0x0) 22:32:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x40000, 0x0}, 0x10000}, 0x1c) 22:32:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x602]}}]}, 0x40}}, 0x0) 22:32:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x4300000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x12000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1029.017121][T21002] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1029.080599][T21002] CPU: 0 PID: 21002 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1029.089750][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1029.099821][T21002] Call Trace: [ 1029.103156][T21002] dump_stack+0x172/0x1f0 [ 1029.107508][T21002] dump_header+0x177/0x1152 [ 1029.112021][T21002] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1029.118382][T21002] ? ___ratelimit+0x2c8/0x595 [ 1029.123070][T21002] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:32:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x900]}}]}, 0x40}}, 0x0) [ 1029.128900][T21002] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1029.134192][T21002] ? trace_hardirqs_on+0x67/0x240 [ 1029.139228][T21002] ? pagefault_out_of_memory+0x11c/0x11c [ 1029.144886][T21002] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1029.150714][T21002] ? ___ratelimit+0x60/0x595 [ 1029.150728][T21002] ? do_raw_spin_unlock+0x57/0x270 [ 1029.150747][T21002] oom_kill_process.cold+0x10/0x15 [ 1029.165533][T21002] out_of_memory+0x334/0x1340 [ 1029.170233][T21002] ? lock_downgrade+0x920/0x920 [ 1029.170254][T21002] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1029.170270][T21002] ? oom_killer_disable+0x280/0x280 [ 1029.170293][T21002] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1029.191680][T21002] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1029.197331][T21002] ? do_raw_spin_unlock+0x57/0x270 [ 1029.202463][T21002] ? _raw_spin_unlock+0x2d/0x50 [ 1029.207335][T21002] try_charge+0xf4b/0x1440 [ 1029.213779][T21002] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1029.219344][T21002] ? percpu_ref_tryget_live+0x111/0x290 [ 1029.224904][T21002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1029.231157][T21002] ? __kasan_check_read+0x11/0x20 [ 1029.236198][T21002] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1029.241758][T21002] mem_cgroup_try_charge+0x136/0x590 [ 1029.247054][T21002] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1029.253305][T21002] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1029.258956][T21002] wp_page_copy+0x41e/0x1590 [ 1029.263556][T21002] ? find_held_lock+0x35/0x130 [ 1029.268343][T21002] ? pmd_pfn+0x1d0/0x1d0 [ 1029.272595][T21002] ? lock_downgrade+0x920/0x920 [ 1029.277458][T21002] ? swp_swapcount+0x540/0x540 [ 1029.282253][T21002] ? __kasan_check_read+0x11/0x20 [ 1029.287317][T21002] ? do_raw_spin_unlock+0x57/0x270 [ 1029.292442][T21002] do_wp_page+0x499/0x14d0 [ 1029.296882][T21002] ? finish_mkwrite_fault+0x570/0x570 [ 1029.302273][T21002] __handle_mm_fault+0x22f1/0x3f20 [ 1029.307405][T21002] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1029.312980][T21002] ? __kasan_check_read+0x11/0x20 [ 1029.318024][T21002] handle_mm_fault+0x1b5/0x6c0 [ 1029.322805][T21002] __do_page_fault+0x536/0xdd0 [ 1029.327591][T21002] do_page_fault+0x38/0x590 [ 1029.332104][T21002] page_fault+0x39/0x40 [ 1029.336260][T21002] RIP: 0033:0x457eee [ 1029.340159][T21002] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1029.359786][T21002] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1029.365864][T21002] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1029.373843][T21002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 22:32:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}}]}, 0x40}}, 0x0) [ 1029.381844][T21002] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1029.389825][T21002] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1029.397804][T21002] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:32:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x13000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x6000000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1029.451410][T21002] memory: usage 307200kB, limit 307200kB, failcnt 10900 [ 1029.482165][T21002] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1029.498691][T21002] Memory cgroup stats for /syz3: [ 1029.498800][T21002] anon 223662080 [ 1029.498800][T21002] file 36864 [ 1029.498800][T21002] kernel_stack 12845056 [ 1029.498800][T21002] slab 19996672 [ 1029.498800][T21002] sock 0 [ 1029.498800][T21002] shmem 0 [ 1029.498800][T21002] file_mapped 0 [ 1029.498800][T21002] file_dirty 0 [ 1029.498800][T21002] file_writeback 0 [ 1029.498800][T21002] anon_thp 180355072 [ 1029.498800][T21002] inactive_anon 0 [ 1029.498800][T21002] active_anon 223662080 [ 1029.498800][T21002] inactive_file 57344 [ 1029.498800][T21002] active_file 61440 [ 1029.498800][T21002] unevictable 0 [ 1029.498800][T21002] slab_reclaimable 3784704 [ 1029.498800][T21002] slab_unreclaimable 16211968 [ 1029.498800][T21002] pgfault 87516 [ 1029.498800][T21002] pgmajfault 0 [ 1029.498800][T21002] workingset_refault 495 [ 1029.498800][T21002] workingset_activate 297 [ 1029.498800][T21002] workingset_nodereclaim 0 [ 1029.498800][T21002] pgrefill 4234 [ 1029.498800][T21002] pgscan 4651 [ 1029.498800][T21002] pgsteal 814 22:32:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x14000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa00]}}]}, 0x40}}, 0x0) [ 1029.512559][T21002] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20981,uid=0 [ 1029.778128][T21002] Memory cgroup out of memory: Killed process 20981 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:34 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x6558000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x800000, 0x0}, 0x10000}, 0x1c) [ 1030.108294][T21049] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x15000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}}]}, 0x40}}, 0x0) 22:32:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xb00]}}]}, 0x40}}, 0x0) 22:32:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x7800000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:35 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, 0x40}}, 0x0) [ 1030.284256][T21067] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1030.311636][T21067] CPU: 0 PID: 21067 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1030.320791][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1030.330849][T21067] Call Trace: 22:32:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x8001000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1030.334255][T21067] dump_stack+0x172/0x1f0 [ 1030.338617][T21067] dump_header+0x177/0x1152 [ 1030.343130][T21067] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1030.348944][T21067] ? ___ratelimit+0x2c8/0x595 [ 1030.353623][T21067] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1030.359443][T21067] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1030.359458][T21067] ? trace_hardirqs_on+0x67/0x240 [ 1030.359473][T21067] ? pagefault_out_of_memory+0x11c/0x11c [ 1030.359488][T21067] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1030.359504][T21067] ? ___ratelimit+0x60/0x595 [ 1030.385774][T21067] ? do_raw_spin_unlock+0x57/0x270 [ 1030.390891][T21067] oom_kill_process.cold+0x10/0x15 [ 1030.395992][T21067] out_of_memory+0x334/0x1340 [ 1030.396008][T21067] ? lock_downgrade+0x920/0x920 [ 1030.396032][T21067] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1030.411346][T21067] ? oom_killer_disable+0x280/0x280 [ 1030.416564][T21067] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1030.422119][T21067] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1030.427765][T21067] ? do_raw_spin_unlock+0x57/0x270 [ 1030.432887][T21067] ? _raw_spin_unlock+0x2d/0x50 [ 1030.437749][T21067] try_charge+0xf4b/0x1440 [ 1030.442186][T21067] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1030.447737][T21067] ? percpu_ref_tryget_live+0x111/0x290 [ 1030.453300][T21067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1030.459548][T21067] ? __kasan_check_read+0x11/0x20 [ 1030.464593][T21067] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1030.470150][T21067] mem_cgroup_try_charge+0x136/0x590 [ 1030.475441][T21067] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 22:32:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, 0x40}}, 0x0) [ 1030.481692][T21067] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1030.487338][T21067] wp_page_copy+0x41e/0x1590 [ 1030.491937][T21067] ? find_held_lock+0x35/0x130 [ 1030.496743][T21067] ? pmd_pfn+0x1d0/0x1d0 [ 1030.496761][T21067] ? lock_downgrade+0x920/0x920 [ 1030.496783][T21067] ? swp_swapcount+0x540/0x540 [ 1030.505854][T21067] ? __kasan_check_read+0x11/0x20 [ 1030.505868][T21067] ? do_raw_spin_unlock+0x57/0x270 [ 1030.505886][T21067] do_wp_page+0x499/0x14d0 [ 1030.505905][T21067] ? finish_mkwrite_fault+0x570/0x570 22:32:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, 0x40}}, 0x0) [ 1030.505934][T21067] __handle_mm_fault+0x22f1/0x3f20 [ 1030.539408][T21067] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1030.544975][T21067] ? __kasan_check_read+0x11/0x20 [ 1030.550020][T21067] handle_mm_fault+0x1b5/0x6c0 [ 1030.554800][T21067] __do_page_fault+0x536/0xdd0 [ 1030.559582][T21067] do_page_fault+0x38/0x590 [ 1030.564095][T21067] page_fault+0x39/0x40 [ 1030.568251][T21067] RIP: 0033:0x457eee 22:32:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf00]}}]}, 0x40}}, 0x0) 22:32:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x3f000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1030.572142][T21067] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1030.591732][T21067] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1030.591744][T21067] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1030.591750][T21067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1030.591758][T21067] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1030.591765][T21067] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1030.591772][T21067] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1030.619757][T21067] memory: usage 307200kB, limit 307200kB, failcnt 10919 [ 1030.770455][T21067] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1030.812487][T21067] Memory cgroup stats for /syz3: [ 1030.812594][T21067] anon 223662080 [ 1030.812594][T21067] file 36864 [ 1030.812594][T21067] kernel_stack 12845056 [ 1030.812594][T21067] slab 19996672 [ 1030.812594][T21067] sock 0 [ 1030.812594][T21067] shmem 0 [ 1030.812594][T21067] file_mapped 0 [ 1030.812594][T21067] file_dirty 135168 [ 1030.812594][T21067] file_writeback 0 [ 1030.812594][T21067] anon_thp 180355072 [ 1030.812594][T21067] inactive_anon 0 [ 1030.812594][T21067] active_anon 223662080 [ 1030.812594][T21067] inactive_file 57344 [ 1030.812594][T21067] active_file 61440 [ 1030.812594][T21067] unevictable 0 [ 1030.812594][T21067] slab_reclaimable 3784704 [ 1030.812594][T21067] slab_unreclaimable 16211968 [ 1030.812594][T21067] pgfault 87582 [ 1030.812594][T21067] pgmajfault 0 [ 1030.812594][T21067] workingset_refault 495 [ 1030.812594][T21067] workingset_activate 297 [ 1030.812594][T21067] workingset_nodereclaim 0 [ 1030.812594][T21067] pgrefill 4234 [ 1030.812594][T21067] pgscan 4651 [ 1030.812594][T21067] pgsteal 814 [ 1030.913086][T21067] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21050,uid=0 [ 1030.929645][T21067] Memory cgroup out of memory: Killed process 21050 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0xf0ffff, 0x0}, 0x10000}, 0x1c) 22:32:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x8100000000000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x40000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}]}, 0x40}}, 0x0) 22:32:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1100]}}]}, 0x40}}, 0x0) [ 1030.971368][T21099] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:36 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1200]}}]}, 0x40}}, 0x0) 22:32:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x60000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x88a8ffff00000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}]}, 0x40}}, 0x0) [ 1031.152338][T21120] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1031.253015][T21120] CPU: 0 PID: 21120 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1031.262168][T21120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1031.272224][T21120] Call Trace: [ 1031.275524][T21120] dump_stack+0x172/0x1f0 [ 1031.279864][T21120] dump_header+0x177/0x1152 [ 1031.284379][T21120] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1031.290296][T21120] ? ___ratelimit+0x2c8/0x595 [ 1031.294984][T21120] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:32:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1300]}}]}, 0x40}}, 0x0) [ 1031.300809][T21120] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1031.306225][T21120] ? trace_hardirqs_on+0x67/0x240 [ 1031.311264][T21120] ? pagefault_out_of_memory+0x11c/0x11c [ 1031.316917][T21120] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1031.322738][T21120] ? ___ratelimit+0x60/0x595 [ 1031.327340][T21120] ? do_raw_spin_unlock+0x57/0x270 [ 1031.332473][T21120] oom_kill_process.cold+0x10/0x15 [ 1031.337600][T21120] out_of_memory+0x334/0x1340 [ 1031.342291][T21120] ? lock_downgrade+0x920/0x920 [ 1031.347160][T21120] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:32:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, 0x40}}, 0x0) [ 1031.353081][T21120] ? oom_killer_disable+0x280/0x280 [ 1031.358301][T21120] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1031.363846][T21120] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1031.369489][T21120] ? do_raw_spin_unlock+0x57/0x270 [ 1031.374611][T21120] ? _raw_spin_unlock+0x2d/0x50 [ 1031.379475][T21120] try_charge+0xf4b/0x1440 [ 1031.383912][T21120] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1031.389468][T21120] ? percpu_ref_tryget_live+0x111/0x290 [ 1031.395050][T21120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1031.401303][T21120] ? __kasan_check_read+0x11/0x20 [ 1031.406357][T21120] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1031.411916][T21120] mem_cgroup_try_charge+0x136/0x590 [ 1031.417357][T21120] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1031.423604][T21120] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1031.429264][T21120] wp_page_copy+0x41e/0x1590 [ 1031.433863][T21120] ? find_held_lock+0x35/0x130 [ 1031.438648][T21120] ? pmd_pfn+0x1d0/0x1d0 [ 1031.442909][T21120] ? lock_downgrade+0x920/0x920 [ 1031.447777][T21120] ? swp_swapcount+0x540/0x540 [ 1031.452552][T21120] ? __kasan_check_read+0x11/0x20 [ 1031.457581][T21120] ? do_raw_spin_unlock+0x57/0x270 [ 1031.462717][T21120] do_wp_page+0x499/0x14d0 [ 1031.467149][T21120] ? finish_mkwrite_fault+0x570/0x570 [ 1031.472540][T21120] __handle_mm_fault+0x22f1/0x3f20 [ 1031.477667][T21120] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1031.483301][T21120] ? __kasan_check_read+0x11/0x20 [ 1031.488344][T21120] handle_mm_fault+0x1b5/0x6c0 [ 1031.493128][T21120] __do_page_fault+0x536/0xdd0 [ 1031.497915][T21120] do_page_fault+0x38/0x590 [ 1031.502452][T21120] page_fault+0x39/0x40 [ 1031.506613][T21120] RIP: 0033:0x457f3b [ 1031.510513][T21120] Code: 25 20 06 00 00 b8 b0 43 41 00 48 89 15 8e e8 61 00 48 85 c0 74 08 4c 89 cf e8 81 c4 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 4a e0 2b 00 00 00 00 00 48 c7 05 2f e0 2b 00 00 00 00 00 [ 1031.530140][T21120] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010202 [ 1031.530152][T21120] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 00000000004143c3 [ 1031.530160][T21120] RDX: 0000022a181ee3ea RSI: 0000000000000018 RDI: 0000555556cc5c20 [ 1031.530166][T21120] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1031.530174][T21120] R10: 0000555556cc5c10 R11: 0000000000000202 R12: 0000000000000001 [ 1031.530181][T21120] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1031.645020][T21120] memory: usage 307200kB, limit 307200kB, failcnt 10939 [ 1031.652322][T21120] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1031.697767][T21120] Memory cgroup stats for /syz3: [ 1031.697876][T21120] anon 223662080 [ 1031.697876][T21120] file 36864 [ 1031.697876][T21120] kernel_stack 12845056 [ 1031.697876][T21120] slab 19996672 [ 1031.697876][T21120] sock 0 [ 1031.697876][T21120] shmem 0 [ 1031.697876][T21120] file_mapped 0 [ 1031.697876][T21120] file_dirty 0 [ 1031.697876][T21120] file_writeback 0 [ 1031.697876][T21120] anon_thp 180355072 [ 1031.697876][T21120] inactive_anon 0 [ 1031.697876][T21120] active_anon 223662080 [ 1031.697876][T21120] inactive_file 57344 [ 1031.697876][T21120] active_file 61440 [ 1031.697876][T21120] unevictable 0 [ 1031.697876][T21120] slab_reclaimable 3784704 [ 1031.697876][T21120] slab_unreclaimable 16211968 [ 1031.697876][T21120] pgfault 87648 [ 1031.697876][T21120] pgmajfault 0 [ 1031.697876][T21120] workingset_refault 495 [ 1031.697876][T21120] workingset_activate 297 [ 1031.697876][T21120] workingset_nodereclaim 0 [ 1031.697876][T21120] pgrefill 4267 [ 1031.697876][T21120] pgscan 4651 [ 1031.697876][T21120] pgsteal 814 [ 1031.703149][T21120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21100,uid=0 [ 1031.833933][T21120] Memory cgroup out of memory: Killed process 21100 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1000000, 0x0}, 0x10000}, 0x1c) 22:32:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1400]}}]}, 0x40}}, 0x0) 22:32:36 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}, 0x40}}, 0x0) 22:32:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x65580000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x9effffff00000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1031.885250][T21158] RDS: rds_bind could not find a transport for fe88::ff04, load rds_tcp or rds_rdma? 22:32:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xf0ffffff00000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1500]}}]}, 0x40}}, 0x0) [ 1032.023691][T21171] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1032.063438][T21171] CPU: 0 PID: 21171 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1032.072586][T21171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.082639][T21171] Call Trace: [ 1032.085937][T21171] dump_stack+0x172/0x1f0 [ 1032.090315][T21171] dump_header+0x177/0x1152 [ 1032.094828][T21171] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1032.100647][T21171] ? ___ratelimit+0x2c8/0x595 [ 1032.105329][T21171] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1032.105346][T21171] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1032.105372][T21171] ? trace_hardirqs_on+0x67/0x240 [ 1032.121584][T21171] ? pagefault_out_of_memory+0x11c/0x11c [ 1032.127223][T21171] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1032.127237][T21171] ? ___ratelimit+0x60/0x595 [ 1032.127249][T21171] ? do_raw_spin_unlock+0x57/0x270 [ 1032.127272][T21171] oom_kill_process.cold+0x10/0x15 [ 1032.147841][T21171] out_of_memory+0x334/0x1340 [ 1032.152525][T21171] ? lock_downgrade+0x920/0x920 [ 1032.157377][T21171] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1032.157393][T21171] ? oom_killer_disable+0x280/0x280 [ 1032.157416][T21171] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1032.173942][T21171] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1032.179582][T21171] ? do_raw_spin_unlock+0x57/0x270 [ 1032.179602][T21171] ? _raw_spin_unlock+0x2d/0x50 [ 1032.189547][T21171] try_charge+0xf4b/0x1440 [ 1032.194169][T21171] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1032.199721][T21171] ? percpu_ref_tryget_live+0x111/0x290 [ 1032.205279][T21171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1032.211528][T21171] ? __kasan_check_read+0x11/0x20 [ 1032.216565][T21171] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1032.222120][T21171] mem_cgroup_try_charge+0x136/0x590 [ 1032.227411][T21171] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1032.233664][T21171] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1032.239304][T21171] wp_page_copy+0x41e/0x1590 [ 1032.243913][T21171] ? find_held_lock+0x35/0x130 [ 1032.248693][T21171] ? pmd_pfn+0x1d0/0x1d0 [ 1032.252959][T21171] ? lock_downgrade+0x920/0x920 [ 1032.257805][T21171] ? swp_swapcount+0x540/0x540 [ 1032.257821][T21171] ? __kasan_check_read+0x11/0x20 [ 1032.257832][T21171] ? do_raw_spin_unlock+0x57/0x270 22:32:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}, 0x40}}, 0x0) 22:32:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00]}}]}, 0x40}}, 0x0) 22:32:37 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1032.257853][T21171] do_wp_page+0x499/0x14d0 [ 1032.277134][T21171] ? finish_mkwrite_fault+0x570/0x570 [ 1032.282523][T21171] __handle_mm_fault+0x22f1/0x3f20 [ 1032.287657][T21171] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1032.293218][T21171] ? __kasan_check_read+0x11/0x20 [ 1032.298260][T21171] handle_mm_fault+0x1b5/0x6c0 [ 1032.303059][T21171] __do_page_fault+0x536/0xdd0 [ 1032.307843][T21171] do_page_fault+0x38/0x590 [ 1032.312350][T21171] page_fault+0x39/0x40 [ 1032.316509][T21171] RIP: 0033:0x40fa48 22:32:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000]}}]}, 0x40}}, 0x0) [ 1032.320409][T21171] Code: 48 8b 05 73 54 30 00 48 89 08 48 8b 15 71 54 30 00 48 89 42 08 48 8b 05 56 54 30 00 48 89 05 5f 54 30 00 49 8d 81 c0 02 00 00 <48> 89 05 61 0a 66 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 1032.340017][T21171] RSP: 002b:00007ffcdbf51ad8 EFLAGS: 00010246 [ 1032.346092][T21171] RAX: 0000555556cc5c00 RBX: 00007ffcdbf51ae0 RCX: 0000000000714ea0 [ 1032.354194][T21171] RDX: 000000000040f880 RSI: 0000000000714e90 RDI: 0000555556cc5c20 [ 1032.362193][T21171] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1032.370168][T21171] R10: 0000555556cc5c10 R11: 0000000000000202 R12: 0000000000000001 [ 1032.378141][T21171] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1032.407206][T21171] memory: usage 307200kB, limit 307200kB, failcnt 10962 [ 1032.414477][T21171] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1032.424399][T21171] Memory cgroup stats for /syz3: [ 1032.424507][T21171] anon 223662080 [ 1032.424507][T21171] file 36864 [ 1032.424507][T21171] kernel_stack 12845056 [ 1032.424507][T21171] slab 19996672 [ 1032.424507][T21171] sock 0 [ 1032.424507][T21171] shmem 0 [ 1032.424507][T21171] file_mapped 0 [ 1032.424507][T21171] file_dirty 0 [ 1032.424507][T21171] file_writeback 0 [ 1032.424507][T21171] anon_thp 180355072 [ 1032.424507][T21171] inactive_anon 0 [ 1032.424507][T21171] active_anon 223662080 [ 1032.424507][T21171] inactive_file 57344 [ 1032.424507][T21171] active_file 61440 [ 1032.424507][T21171] unevictable 0 [ 1032.424507][T21171] slab_reclaimable 3784704 [ 1032.424507][T21171] slab_unreclaimable 16211968 [ 1032.424507][T21171] pgfault 87714 [ 1032.424507][T21171] pgmajfault 0 [ 1032.424507][T21171] workingset_refault 495 [ 1032.424507][T21171] workingset_activate 297 [ 1032.424507][T21171] workingset_nodereclaim 0 [ 1032.424507][T21171] pgrefill 4267 [ 1032.424507][T21171] pgscan 4684 [ 1032.424507][T21171] pgsteal 814 [ 1032.530833][T21171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21159,uid=0 [ 1032.548121][T21171] Memory cgroup out of memory: Killed process 21159 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x2000000, 0x0}, 0x10000}, 0x1c) 22:32:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}]}, 0x40}}, 0x0) 22:32:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x78000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xf5ffffff00000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7800]}}]}, 0x40}}, 0x0) [ 1032.592011][T21203] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}]}, 0x40}}, 0x0) 22:32:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x81000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfcffffff00000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9600]}}]}, 0x40}}, 0x0) [ 1032.778290][T21223] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1032.837420][T21223] CPU: 0 PID: 21223 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1032.846565][T21223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.846572][T21223] Call Trace: [ 1032.846596][T21223] dump_stack+0x172/0x1f0 [ 1032.846614][T21223] dump_header+0x177/0x1152 [ 1032.846631][T21223] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1032.846641][T21223] ? ___ratelimit+0x2c8/0x595 [ 1032.846658][T21223] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1032.846674][T21223] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1032.846689][T21223] ? trace_hardirqs_on+0x67/0x240 [ 1032.846704][T21223] ? pagefault_out_of_memory+0x11c/0x11c [ 1032.846719][T21223] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1032.846731][T21223] ? ___ratelimit+0x60/0x595 [ 1032.846747][T21223] ? do_raw_spin_unlock+0x57/0x270 [ 1032.920844][T21223] oom_kill_process.cold+0x10/0x15 [ 1032.925955][T21223] out_of_memory+0x334/0x1340 [ 1032.930637][T21223] ? lock_downgrade+0x920/0x920 22:32:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xffffff7f00000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1032.935560][T21223] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1032.941373][T21223] ? oom_killer_disable+0x280/0x280 [ 1032.946587][T21223] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1032.952143][T21223] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1032.957786][T21223] ? do_raw_spin_unlock+0x57/0x270 [ 1032.962908][T21223] ? _raw_spin_unlock+0x2d/0x50 [ 1032.967772][T21223] try_charge+0xf4b/0x1440 [ 1032.972204][T21223] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1032.977756][T21223] ? percpu_ref_tryget_live+0x111/0x290 [ 1032.983309][T21223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1032.989557][T21223] ? __kasan_check_read+0x11/0x20 [ 1032.994599][T21223] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1033.000154][T21223] mem_cgroup_try_charge+0x136/0x590 [ 1033.005448][T21223] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1033.011701][T21223] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1033.017357][T21223] wp_page_copy+0x41e/0x1590 [ 1033.021960][T21223] ? find_held_lock+0x35/0x130 [ 1033.026815][T21223] ? pmd_pfn+0x1d0/0x1d0 [ 1033.031069][T21223] ? lock_downgrade+0x920/0x920 [ 1033.037307][T21223] ? vm_normal_page+0x15d/0x3c0 [ 1033.037322][T21223] ? __pte_alloc_kernel+0x210/0x210 [ 1033.037339][T21223] ? __kasan_check_read+0x11/0x20 [ 1033.037355][T21223] ? do_raw_spin_unlock+0x57/0x270 [ 1033.052476][T21223] do_wp_page+0x499/0x14d0 [ 1033.061979][T21223] ? do_raw_spin_lock+0x12a/0x2e0 [ 1033.067006][T21223] ? rwlock_bug.part.0+0x90/0x90 [ 1033.071952][T21223] ? finish_mkwrite_fault+0x570/0x570 [ 1033.077331][T21223] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1033.083063][T21223] __handle_mm_fault+0x22f1/0x3f20 [ 1033.088191][T21223] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1033.093753][T21223] ? __kasan_check_read+0x11/0x20 [ 1033.098793][T21223] handle_mm_fault+0x1b5/0x6c0 [ 1033.103565][T21223] __do_page_fault+0x536/0xdd0 [ 1033.108342][T21223] do_page_fault+0x38/0x590 [ 1033.112850][T21223] page_fault+0x39/0x40 [ 1033.117004][T21223] RIP: 0033:0x40ea88 [ 1033.120900][T21223] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ce ee 4b 00 31 c0 e8 a3 32 ff ff 31 ff e8 ec 2e ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d de 19 66 00 [ 1033.140686][T21223] RSP: 002b:00007ffcdbf518b0 EFLAGS: 00010246 [ 1033.146749][T21223] RAX: 000000009dfdb825 RBX: 00000000c9b9c3ba RCX: 0000001b33720000 [ 1033.155006][T21223] RDX: 0000000000000000 RSI: 0000000000001825 RDI: ffffffff9dfdb825 [ 1033.162973][T21223] RBP: 0000000000000002 R08: 000000009dfdb825 R09: 000000009dfdb829 [ 1033.170929][T21223] R10: 00007ffcdbf51a50 R11: 0000000000000246 R12: 000000000075bfa8 [ 1033.178880][T21223] R13: 0000000080000000 R14: 00007f4726896008 R15: 0000000000000002 22:32:38 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xc405]}}]}, 0x40}}, 0x0) [ 1033.227835][T21223] memory: usage 307200kB, limit 307200kB, failcnt 10973 [ 1033.243826][T21223] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1033.251340][T21223] Memory cgroup stats for /syz3: [ 1033.251438][T21223] anon 223662080 [ 1033.251438][T21223] file 36864 [ 1033.251438][T21223] kernel_stack 12910592 [ 1033.251438][T21223] slab 19996672 [ 1033.251438][T21223] sock 0 [ 1033.251438][T21223] shmem 0 [ 1033.251438][T21223] file_mapped 0 [ 1033.251438][T21223] file_dirty 0 [ 1033.251438][T21223] file_writeback 0 [ 1033.251438][T21223] anon_thp 180355072 [ 1033.251438][T21223] inactive_anon 0 [ 1033.251438][T21223] active_anon 223662080 [ 1033.251438][T21223] inactive_file 57344 [ 1033.251438][T21223] active_file 61440 [ 1033.251438][T21223] unevictable 0 [ 1033.251438][T21223] slab_reclaimable 3784704 [ 1033.251438][T21223] slab_unreclaimable 16211968 [ 1033.251438][T21223] pgfault 87813 [ 1033.251438][T21223] pgmajfault 0 [ 1033.251438][T21223] workingset_refault 495 [ 1033.251438][T21223] workingset_activate 297 [ 1033.251438][T21223] workingset_nodereclaim 0 [ 1033.251438][T21223] pgrefill 4267 [ 1033.251438][T21223] pgscan 4684 [ 1033.251438][T21223] pgsteal 814 [ 1033.374920][T21223] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21204,uid=0 [ 1033.392762][T21223] Memory cgroup out of memory: Killed process 21204 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x3000000, 0x0}, 0x10000}, 0x1c) 22:32:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xffffffff00000000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}]}, 0x40}}, 0x0) 22:32:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x88a8ffff, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf000]}}]}, 0x40}}, 0x0) [ 1033.446477][T21224] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfa01]}}]}, 0x40}}, 0x0) 22:32:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xfffffffffffff000, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}]}, 0x40}}, 0x0) 22:32:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x9effffff, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1033.636571][T21271] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1033.661960][T21271] CPU: 0 PID: 21271 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1033.671106][T21271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.681160][T21271] Call Trace: [ 1033.681184][T21271] dump_stack+0x172/0x1f0 [ 1033.681203][T21271] dump_header+0x177/0x1152 [ 1033.681223][T21271] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1033.699103][T21271] ? ___ratelimit+0x2c8/0x595 [ 1033.703787][T21271] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1033.703805][T21271] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1033.703822][T21271] ? trace_hardirqs_on+0x67/0x240 [ 1033.719918][T21271] ? pagefault_out_of_memory+0x11c/0x11c [ 1033.725559][T21271] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1033.731378][T21271] ? ___ratelimit+0x60/0x595 [ 1033.735980][T21271] ? do_raw_spin_unlock+0x57/0x270 [ 1033.741140][T21271] oom_kill_process.cold+0x10/0x15 [ 1033.746280][T21271] out_of_memory+0x334/0x1340 [ 1033.750966][T21271] ? lock_downgrade+0x920/0x920 [ 1033.755831][T21271] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1033.761649][T21271] ? oom_killer_disable+0x280/0x280 [ 1033.766864][T21271] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1033.772430][T21271] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1033.778079][T21271] ? do_raw_spin_unlock+0x57/0x270 [ 1033.783209][T21271] ? _raw_spin_unlock+0x2d/0x50 [ 1033.788075][T21271] try_charge+0xf4b/0x1440 [ 1033.792518][T21271] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1033.798073][T21271] ? percpu_ref_tryget_live+0x111/0x290 [ 1033.803640][T21271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1033.809894][T21271] ? __kasan_check_read+0x11/0x20 [ 1033.814936][T21271] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1033.820494][T21271] mem_cgroup_try_charge+0x136/0x590 [ 1033.825787][T21271] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 22:32:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}]}, 0x40}}, 0x0) 22:32:38 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd902000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1033.832044][T21271] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1033.837692][T21271] wp_page_copy+0x41e/0x1590 [ 1033.842295][T21271] ? find_held_lock+0x35/0x130 [ 1033.847076][T21271] ? pmd_pfn+0x1d0/0x1d0 [ 1033.851324][T21271] ? lock_downgrade+0x920/0x920 [ 1033.856186][T21271] ? vm_normal_page+0x15d/0x3c0 [ 1033.861038][T21271] ? __pte_alloc_kernel+0x210/0x210 [ 1033.866245][T21271] ? __kasan_check_read+0x11/0x20 [ 1033.866259][T21271] ? do_raw_spin_unlock+0x57/0x270 [ 1033.866275][T21271] do_wp_page+0x499/0x14d0 [ 1033.866286][T21271] ? do_raw_spin_lock+0x12a/0x2e0 22:32:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf0ffff]}}]}, 0x40}}, 0x0) [ 1033.866306][T21271] ? rwlock_bug.part.0+0x90/0x90 [ 1033.890874][T21271] ? finish_mkwrite_fault+0x570/0x570 [ 1033.896259][T21271] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1033.901998][T21271] __handle_mm_fault+0x22f1/0x3f20 [ 1033.907124][T21271] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1033.912689][T21271] ? __kasan_check_read+0x11/0x20 [ 1033.917728][T21271] handle_mm_fault+0x1b5/0x6c0 [ 1033.922509][T21271] __do_page_fault+0x536/0xdd0 [ 1033.927283][T21271] do_page_fault+0x38/0x590 [ 1033.927305][T21271] page_fault+0x39/0x40 [ 1033.936280][T21271] RIP: 0033:0x40ea88 [ 1033.940179][T21271] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ce ee 4b 00 31 c0 e8 a3 32 ff ff 31 ff e8 ec 2e ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d de 19 66 00 [ 1033.959845][T21271] RSP: 002b:00007ffcdbf518b0 EFLAGS: 00010246 [ 1033.967308][T21271] RAX: 00000000befc507c RBX: 000000004ca717a3 RCX: 0000001b33720000 [ 1033.975289][T21271] RDX: 0000000000000000 RSI: 000000000000107c RDI: ffffffffbefc507c [ 1033.983263][T21271] RBP: 0000000000000006 R08: 00000000befc507c R09: 00000000befc5080 [ 1033.991249][T21271] R10: 00007ffcdbf51a50 R11: 0000000000000246 R12: 000000000075bfa8 [ 1033.999315][T21271] R13: 0000000080000000 R14: 00007f4726896008 R15: 0000000000000006 [ 1034.191170][T21271] memory: usage 307200kB, limit 307200kB, failcnt 11006 [ 1034.198715][T21271] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1034.211356][T21271] Memory cgroup stats for /syz3: [ 1034.211484][T21271] anon 223662080 [ 1034.211484][T21271] file 36864 [ 1034.211484][T21271] kernel_stack 12910592 [ 1034.211484][T21271] slab 19996672 [ 1034.211484][T21271] sock 0 [ 1034.211484][T21271] shmem 0 [ 1034.211484][T21271] file_mapped 0 [ 1034.211484][T21271] file_dirty 0 [ 1034.211484][T21271] file_writeback 0 [ 1034.211484][T21271] anon_thp 180355072 [ 1034.211484][T21271] inactive_anon 0 [ 1034.211484][T21271] active_anon 223662080 [ 1034.211484][T21271] inactive_file 57344 [ 1034.211484][T21271] active_file 61440 [ 1034.211484][T21271] unevictable 0 [ 1034.211484][T21271] slab_reclaimable 3784704 [ 1034.211484][T21271] slab_unreclaimable 16211968 [ 1034.211484][T21271] pgfault 87879 [ 1034.211484][T21271] pgmajfault 0 [ 1034.211484][T21271] workingset_refault 495 [ 1034.211484][T21271] workingset_activate 297 [ 1034.211484][T21271] workingset_nodereclaim 0 [ 1034.211484][T21271] pgrefill 4267 [ 1034.211484][T21271] pgscan 4684 [ 1034.211484][T21271] pgsteal 814 [ 1034.218113][T21271] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21257,uid=0 [ 1034.333440][T21271] Memory cgroup out of memory: Killed process 21257 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1034.370410][T21274] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1034.383071][T21311] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4000000, 0x0}, 0x10000}, 0x1c) 22:32:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}}]}, 0x40}}, 0x0) 22:32:39 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xb20a0000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000]}}]}, 0x40}}, 0x0) 22:32:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xc7000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2000000]}}]}, 0x40}}, 0x0) [ 1034.543806][T21322] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1034.573741][T21322] CPU: 0 PID: 21322 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1034.582897][T21322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 22:32:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1034.592962][T21322] Call Trace: [ 1034.596270][T21322] dump_stack+0x172/0x1f0 [ 1034.600609][T21322] dump_header+0x177/0x1152 [ 1034.605127][T21322] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1034.605139][T21322] ? ___ratelimit+0x2c8/0x595 [ 1034.605156][T21322] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1034.605171][T21322] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1034.605184][T21322] ? trace_hardirqs_on+0x67/0x240 [ 1034.605200][T21322] ? pagefault_out_of_memory+0x11c/0x11c [ 1034.637387][T21322] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1034.643198][T21322] ? ___ratelimit+0x60/0x595 [ 1034.643210][T21322] ? do_raw_spin_unlock+0x57/0x270 [ 1034.643229][T21322] oom_kill_process.cold+0x10/0x15 [ 1034.658044][T21322] out_of_memory+0x334/0x1340 [ 1034.662740][T21322] ? lock_downgrade+0x920/0x920 [ 1034.667601][T21322] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1034.667619][T21322] ? oom_killer_disable+0x280/0x280 [ 1034.667642][T21322] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1034.684250][T21322] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 22:32:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1034.689904][T21322] ? do_raw_spin_unlock+0x57/0x270 [ 1034.695034][T21322] ? _raw_spin_unlock+0x2d/0x50 [ 1034.699904][T21322] try_charge+0xf4b/0x1440 [ 1034.704345][T21322] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1034.709894][T21322] ? percpu_ref_tryget_live+0x111/0x290 [ 1034.715453][T21322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1034.721706][T21322] ? __kasan_check_read+0x11/0x20 [ 1034.726754][T21322] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1034.726770][T21322] mem_cgroup_try_charge+0x136/0x590 [ 1034.726786][T21322] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 22:32:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1034.726803][T21322] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1034.743854][T21322] wp_page_copy+0x41e/0x1590 [ 1034.743871][T21322] ? find_held_lock+0x35/0x130 [ 1034.743894][T21322] ? pmd_pfn+0x1d0/0x1d0 [ 1034.763073][T21322] ? lock_downgrade+0x920/0x920 [ 1034.767937][T21322] ? vm_normal_page+0x15d/0x3c0 [ 1034.772798][T21322] ? __pte_alloc_kernel+0x210/0x210 [ 1034.778011][T21322] ? __kasan_check_read+0x11/0x20 [ 1034.783047][T21322] ? do_raw_spin_unlock+0x57/0x270 [ 1034.788171][T21322] do_wp_page+0x499/0x14d0 22:32:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}}]}, 0x40}}, 0x0) [ 1034.792587][T21322] ? do_raw_spin_lock+0x12a/0x2e0 [ 1034.797605][T21322] ? rwlock_bug.part.0+0x90/0x90 [ 1034.797623][T21322] ? finish_mkwrite_fault+0x570/0x570 [ 1034.797636][T21322] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1034.797655][T21322] __handle_mm_fault+0x22f1/0x3f20 [ 1034.797674][T21322] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1034.824319][T21322] ? __kasan_check_read+0x11/0x20 [ 1034.829365][T21322] handle_mm_fault+0x1b5/0x6c0 [ 1034.834163][T21322] __do_page_fault+0x536/0xdd0 [ 1034.838943][T21322] do_page_fault+0x38/0x590 [ 1034.843449][T21322] page_fault+0x39/0x40 [ 1034.847601][T21322] RIP: 0033:0x40ea88 [ 1034.851494][T21322] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ce ee 4b 00 31 c0 e8 a3 32 ff ff 31 ff e8 ec 2e ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d de 19 66 00 [ 1034.871108][T21322] RSP: 002b:00007ffcdbf518b0 EFLAGS: 00010246 [ 1034.871122][T21322] RAX: 000000009dfdb825 RBX: 00000000c9b9c3ba RCX: 0000001b33720000 [ 1034.871129][T21322] RDX: 0000000000000000 RSI: 0000000000001825 RDI: ffffffff9dfdb825 [ 1034.871136][T21322] RBP: 0000000000000002 R08: 000000009dfdb825 R09: 000000009dfdb829 [ 1034.871142][T21322] R10: 00007ffcdbf51a50 R11: 0000000000000246 R12: 000000000075bfa8 [ 1034.871149][T21322] R13: 0000000080000000 R14: 00007f4726896008 R15: 0000000000000002 [ 1034.909809][T21322] memory: usage 307200kB, limit 307200kB, failcnt 11035 [ 1034.974683][T21322] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1034.983154][T21322] Memory cgroup stats for /syz3: [ 1034.983254][T21322] anon 223662080 [ 1034.983254][T21322] file 36864 [ 1034.983254][T21322] kernel_stack 12910592 [ 1034.983254][T21322] slab 19996672 [ 1034.983254][T21322] sock 0 [ 1034.983254][T21322] shmem 0 [ 1034.983254][T21322] file_mapped 0 [ 1034.983254][T21322] file_dirty 0 [ 1034.983254][T21322] file_writeback 0 [ 1034.983254][T21322] anon_thp 180355072 [ 1034.983254][T21322] inactive_anon 0 [ 1034.983254][T21322] active_anon 223662080 [ 1034.983254][T21322] inactive_file 57344 [ 1034.983254][T21322] active_file 61440 [ 1034.983254][T21322] unevictable 0 [ 1034.983254][T21322] slab_reclaimable 3784704 [ 1034.983254][T21322] slab_unreclaimable 16211968 [ 1034.983254][T21322] pgfault 87945 [ 1034.983254][T21322] pgmajfault 0 [ 1034.983254][T21322] workingset_refault 495 [ 1034.983254][T21322] workingset_activate 297 [ 1034.983254][T21322] workingset_nodereclaim 0 [ 1034.983254][T21322] pgrefill 4267 [ 1034.983254][T21322] pgscan 4684 [ 1034.983254][T21322] pgsteal 814 [ 1035.078428][T21322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21312,uid=0 [ 1035.105548][T21322] Memory cgroup out of memory: Killed process 21312 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x5000000, 0x0}, 0x10000}, 0x1c) 22:32:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf0ffffff, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3000000]}}]}, 0x40}}, 0x0) 22:32:40 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}}]}, 0x40}}, 0x0) [ 1035.179615][T21333] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf5ffffff, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000]}}]}, 0x40}}, 0x0) 22:32:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78]}}]}, 0x40}}, 0x0) [ 1035.401331][T21384] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 22:32:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1035.467572][T21384] CPU: 0 PID: 21384 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1035.476729][T21384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1035.486796][T21384] Call Trace: [ 1035.490124][T21384] dump_stack+0x172/0x1f0 [ 1035.494468][T21384] dump_header+0x177/0x1152 [ 1035.498978][T21384] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1035.504784][T21384] ? ___ratelimit+0x2c8/0x595 [ 1035.509466][T21384] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:32:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}}]}, 0x40}}, 0x0) [ 1035.515279][T21384] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1035.520579][T21384] ? trace_hardirqs_on+0x67/0x240 [ 1035.525620][T21384] ? pagefault_out_of_memory+0x11c/0x11c [ 1035.531265][T21384] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1035.537090][T21384] ? ___ratelimit+0x60/0x595 [ 1035.541684][T21384] ? do_raw_spin_unlock+0x57/0x270 [ 1035.546804][T21384] oom_kill_process.cold+0x10/0x15 [ 1035.551952][T21384] out_of_memory+0x334/0x1340 [ 1035.556636][T21384] ? lock_downgrade+0x920/0x920 [ 1035.561496][T21384] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1035.567313][T21384] ? oom_killer_disable+0x280/0x280 [ 1035.572528][T21384] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1035.578082][T21384] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1035.583731][T21384] ? do_raw_spin_unlock+0x57/0x270 [ 1035.588854][T21384] ? _raw_spin_unlock+0x2d/0x50 [ 1035.593716][T21384] try_charge+0xf4b/0x1440 [ 1035.598151][T21384] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1035.603789][T21384] ? percpu_ref_tryget_live+0x111/0x290 [ 1035.609388][T21384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1035.615640][T21384] ? __kasan_check_read+0x11/0x20 [ 1035.620685][T21384] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1035.626245][T21384] mem_cgroup_try_charge+0x136/0x590 [ 1035.631539][T21384] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1035.637791][T21384] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1035.643437][T21384] wp_page_copy+0x41e/0x1590 [ 1035.648033][T21384] ? find_held_lock+0x35/0x130 [ 1035.652810][T21384] ? pmd_pfn+0x1d0/0x1d0 [ 1035.657073][T21384] ? lock_downgrade+0x920/0x920 [ 1035.661930][T21384] ? vm_normal_page+0x15d/0x3c0 [ 1035.666788][T21384] ? __pte_alloc_kernel+0x210/0x210 [ 1035.671998][T21384] ? __kasan_check_read+0x11/0x20 [ 1035.677029][T21384] ? do_raw_spin_unlock+0x57/0x270 [ 1035.682153][T21384] do_wp_page+0x499/0x14d0 [ 1035.686602][T21384] ? do_raw_spin_lock+0x12a/0x2e0 [ 1035.691637][T21384] ? rwlock_bug.part.0+0x90/0x90 [ 1035.696584][T21384] ? finish_mkwrite_fault+0x570/0x570 [ 1035.701967][T21384] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1035.707800][T21384] __handle_mm_fault+0x22f1/0x3f20 [ 1035.712931][T21384] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1035.718498][T21384] ? __kasan_check_read+0x11/0x20 [ 1035.723579][T21384] handle_mm_fault+0x1b5/0x6c0 [ 1035.728367][T21384] __do_page_fault+0x536/0xdd0 [ 1035.733145][T21384] do_page_fault+0x38/0x590 [ 1035.737655][T21384] page_fault+0x39/0x40 [ 1035.741807][T21384] RIP: 0033:0x40ea88 [ 1035.745697][T21384] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ce ee 4b 00 31 c0 e8 a3 32 ff ff 31 ff e8 ec 2e ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d de 19 66 00 [ 1035.745705][T21384] RSP: 002b:00007ffcdbf518b0 EFLAGS: 00010246 [ 1035.745716][T21384] RAX: 00000000befc507c RBX: 000000004ca717a3 RCX: 0000001b33720000 [ 1035.745724][T21384] RDX: 0000000000000000 RSI: 000000000000107c RDI: ffffffffbefc507c [ 1035.745731][T21384] RBP: 0000000000000006 R08: 00000000befc507c R09: 00000000befc5080 [ 1035.745738][T21384] R10: 00007ffcdbf51a50 R11: 0000000000000246 R12: 000000000075bfa8 [ 1035.745751][T21384] R13: 0000000080000000 R14: 00007f4726896008 R15: 0000000000000006 [ 1035.805777][T21384] memory: usage 307200kB, limit 307200kB, failcnt 11064 [ 1035.828036][T21384] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1035.845227][T21384] Memory cgroup stats for /syz3: [ 1035.845332][T21384] anon 223662080 [ 1035.845332][T21384] file 36864 [ 1035.845332][T21384] kernel_stack 12910592 [ 1035.845332][T21384] slab 19996672 [ 1035.845332][T21384] sock 0 [ 1035.845332][T21384] shmem 0 [ 1035.845332][T21384] file_mapped 0 [ 1035.845332][T21384] file_dirty 0 [ 1035.845332][T21384] file_writeback 0 [ 1035.845332][T21384] anon_thp 180355072 [ 1035.845332][T21384] inactive_anon 0 [ 1035.845332][T21384] active_anon 223662080 [ 1035.845332][T21384] inactive_file 57344 [ 1035.845332][T21384] active_file 61440 [ 1035.845332][T21384] unevictable 0 [ 1035.845332][T21384] slab_reclaimable 3784704 [ 1035.845332][T21384] slab_unreclaimable 16211968 [ 1035.845332][T21384] pgfault 88011 [ 1035.845332][T21384] pgmajfault 0 [ 1035.845332][T21384] workingset_refault 495 [ 1035.845332][T21384] workingset_activate 297 [ 1035.845332][T21384] workingset_nodereclaim 0 [ 1035.845332][T21384] pgrefill 4267 [ 1035.845332][T21384] pgscan 4717 [ 1035.845332][T21384] pgsteal 814 [ 1035.939753][T21384] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21363,uid=0 [ 1035.956224][T21384] Memory cgroup out of memory: Killed process 21363 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:41 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6000000, 0x0}, 0x10000}, 0x1c) 22:32:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4020000]}}]}, 0x40}}, 0x0) 22:32:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2]}}]}, 0x40}}, 0x0) 22:32:41 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xfcffffff, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1035.988169][T21386] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1035.999974][T21415] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5000000]}}]}, 0x40}}, 0x0) 22:32:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xffffa888, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ea]}}]}, 0x40}}, 0x0) 22:32:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:41 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1036.222124][T21427] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1036.265922][T21427] CPU: 0 PID: 21427 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1036.275067][T21427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1036.285125][T21427] Call Trace: [ 1036.288426][T21427] dump_stack+0x172/0x1f0 [ 1036.292927][T21427] dump_header+0x177/0x1152 [ 1036.297446][T21427] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1036.303272][T21427] ? ___ratelimit+0x2c8/0x595 [ 1036.307968][T21427] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1036.313798][T21427] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1036.319101][T21427] ? trace_hardirqs_on+0x67/0x240 [ 1036.324122][T21427] ? pagefault_out_of_memory+0x11c/0x11c [ 1036.329757][T21427] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1036.335569][T21427] ? ___ratelimit+0x60/0x595 [ 1036.340176][T21427] ? do_raw_spin_unlock+0x57/0x270 [ 1036.345296][T21427] oom_kill_process.cold+0x10/0x15 [ 1036.350416][T21427] out_of_memory+0x334/0x1340 [ 1036.355246][T21427] ? lock_downgrade+0x920/0x920 [ 1036.360115][T21427] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1036.365939][T21427] ? oom_killer_disable+0x280/0x280 [ 1036.371168][T21427] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1036.376730][T21427] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1036.382382][T21427] ? do_raw_spin_unlock+0x57/0x270 [ 1036.387509][T21427] ? _raw_spin_unlock+0x2d/0x50 [ 1036.392373][T21427] try_charge+0xf4b/0x1440 [ 1036.396800][T21427] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1036.402335][T21427] ? percpu_ref_tryget_live+0x111/0x290 [ 1036.407894][T21427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1036.414139][T21427] ? __kasan_check_read+0x11/0x20 [ 1036.419171][T21427] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1036.424706][T21427] mem_cgroup_try_charge+0x136/0x590 [ 1036.429994][T21427] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1036.436226][T21427] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1036.441853][T21427] wp_page_copy+0x41e/0x1590 [ 1036.446433][T21427] ? find_held_lock+0x35/0x130 [ 1036.451196][T21427] ? pmd_pfn+0x1d0/0x1d0 [ 1036.455440][T21427] ? lock_downgrade+0x920/0x920 [ 1036.460300][T21427] ? vm_normal_page+0x15d/0x3c0 [ 1036.465232][T21427] ? __pte_alloc_kernel+0x210/0x210 [ 1036.470420][T21427] ? __kasan_check_read+0x11/0x20 [ 1036.475427][T21427] ? do_raw_spin_unlock+0x57/0x270 [ 1036.480527][T21427] do_wp_page+0x499/0x14d0 [ 1036.484926][T21427] ? do_raw_spin_lock+0x12a/0x2e0 [ 1036.489931][T21427] ? rwlock_bug.part.0+0x90/0x90 [ 1036.494912][T21427] ? finish_mkwrite_fault+0x570/0x570 [ 1036.500268][T21427] ? add_mm_counter_fast.part.0+0x40/0x40 [ 1036.505975][T21427] __handle_mm_fault+0x22f1/0x3f20 [ 1036.511087][T21427] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1036.516648][T21427] ? __kasan_check_read+0x11/0x20 [ 1036.521671][T21427] handle_mm_fault+0x1b5/0x6c0 [ 1036.526432][T21427] ? __do_page_fault+0x3ea/0xdd0 [ 1036.531355][T21427] __do_page_fault+0x536/0xdd0 [ 1036.536109][T21427] do_page_fault+0x38/0x590 [ 1036.540609][T21427] page_fault+0x39/0x40 [ 1036.544744][T21427] RIP: 0033:0x40ea88 22:32:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6000000]}}]}, 0x40}}, 0x0) [ 1036.548636][T21427] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ce ee 4b 00 31 c0 e8 a3 32 ff ff 31 ff e8 ec 2e ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d de 19 66 00 [ 1036.568233][T21427] RSP: 002b:00007ffcdbf518b0 EFLAGS: 00010246 [ 1036.574289][T21427] RAX: 000000009dfdb825 RBX: 00000000c9b9c3ba RCX: 0000001b33720000 [ 1036.582255][T21427] RDX: 0000000000000000 RSI: 0000000000001825 RDI: ffffffff9dfdb825 [ 1036.590207][T21427] RBP: 0000000000000002 R08: 000000009dfdb825 R09: 000000009dfdb829 [ 1036.598170][T21427] R10: 00007ffcdbf51a50 R11: 0000000000000246 R12: 000000000075bfa8 [ 1036.606153][T21427] R13: 0000000080000000 R14: 00007f4726896008 R15: 0000000000000002 [ 1036.664919][T21427] memory: usage 307168kB, limit 307200kB, failcnt 11092 [ 1036.673384][T21427] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1036.680608][T21427] Memory cgroup stats for /syz3: [ 1036.680726][T21427] anon 223662080 [ 1036.680726][T21427] file 36864 [ 1036.680726][T21427] kernel_stack 12910592 [ 1036.680726][T21427] slab 19996672 [ 1036.680726][T21427] sock 0 [ 1036.680726][T21427] shmem 0 [ 1036.680726][T21427] file_mapped 0 [ 1036.680726][T21427] file_dirty 0 [ 1036.680726][T21427] file_writeback 0 [ 1036.680726][T21427] anon_thp 180355072 [ 1036.680726][T21427] inactive_anon 0 [ 1036.680726][T21427] active_anon 223662080 [ 1036.680726][T21427] inactive_file 57344 [ 1036.680726][T21427] active_file 61440 [ 1036.680726][T21427] unevictable 0 [ 1036.680726][T21427] slab_reclaimable 3784704 [ 1036.680726][T21427] slab_unreclaimable 16211968 [ 1036.680726][T21427] pgfault 88077 [ 1036.680726][T21427] pgmajfault 0 [ 1036.680726][T21427] workingset_refault 495 [ 1036.680726][T21427] workingset_activate 297 [ 1036.680726][T21427] workingset_nodereclaim 0 [ 1036.680726][T21427] pgrefill 4300 [ 1036.680726][T21427] pgscan 4717 [ 1036.680726][T21427] pgsteal 814 [ 1036.811938][T21427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21416,uid=0 [ 1036.865241][T21427] Memory cgroup out of memory: Killed process 21416 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:41 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x7000000, 0x0}, 0x10000}, 0x1c) 22:32:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xfffff000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec]}}]}, 0x40}}, 0x0) 22:32:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:41 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6020000]}}]}, 0x40}}, 0x0) [ 1036.951271][T21435] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8000000]}}]}, 0x40}}, 0x0) 22:32:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}]}, 0x40}}, 0x0) 22:32:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xffffff7f, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1037.169481][T21486] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1037.249803][T21486] CPU: 0 PID: 21486 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1037.258958][T21486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1037.269020][T21486] Call Trace: [ 1037.272322][T21486] dump_stack+0x172/0x1f0 [ 1037.276671][T21486] dump_header+0x177/0x1152 [ 1037.281189][T21486] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1037.286994][T21486] ? ___ratelimit+0x2c8/0x595 [ 1037.287009][T21486] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1037.287024][T21486] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1037.287042][T21486] ? trace_hardirqs_on+0x67/0x240 [ 1037.297585][T21486] ? pagefault_out_of_memory+0x11c/0x11c [ 1037.297606][T21486] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1037.319308][T21486] ? ___ratelimit+0x60/0x595 [ 1037.323923][T21486] ? do_raw_spin_unlock+0x57/0x270 [ 1037.329047][T21486] oom_kill_process.cold+0x10/0x15 [ 1037.334301][T21486] out_of_memory+0x334/0x1340 [ 1037.339198][T21486] ? lock_downgrade+0x920/0x920 [ 1037.344071][T21486] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1037.349896][T21486] ? oom_killer_disable+0x280/0x280 [ 1037.355123][T21486] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1037.360678][T21486] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1037.366313][T21486] ? do_raw_spin_unlock+0x57/0x270 [ 1037.366330][T21486] ? _raw_spin_unlock+0x2d/0x50 [ 1037.366347][T21486] try_charge+0xf4b/0x1440 [ 1037.366372][T21486] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1037.386265][T21486] ? percpu_ref_tryget_live+0x111/0x290 [ 1037.391829][T21486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1037.398085][T21486] ? __kasan_check_read+0x11/0x20 [ 1037.403132][T21486] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1037.408693][T21486] mem_cgroup_try_charge+0x136/0x590 [ 1037.413988][T21486] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1037.420261][T21486] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1037.425903][T21486] __handle_mm_fault+0x1e34/0x3f20 [ 1037.431028][T21486] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1037.436600][T21486] ? __kasan_check_read+0x11/0x20 [ 1037.441643][T21486] handle_mm_fault+0x1b5/0x6c0 22:32:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9000000]}}]}, 0x40}}, 0x0) [ 1037.446410][T21486] __do_page_fault+0x536/0xdd0 [ 1037.451169][T21486] do_page_fault+0x38/0x590 [ 1037.455678][T21486] page_fault+0x39/0x40 [ 1037.459831][T21486] RIP: 0033:0x440b31 [ 1037.463722][T21486] Code: 8d 15 13 88 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 1037.483330][T21486] RSP: 002b:00007ffcdbf51978 EFLAGS: 00010202 [ 1037.489410][T21486] RAX: 0000000020000040 RBX: 0000000000000000 RCX: 0000000000000011 [ 1037.497389][T21486] RDX: 000000000000000b RSI: 0000000000760170 RDI: 0000000020000040 [ 1037.505371][T21486] RBP: 0000000000760150 R08: 000000000000ffff R09: 0000000000000000 [ 1037.513352][T21486] R10: 00000000004388c0 R11: 0000000000000012 R12: 00000000004c5e3f [ 1037.521328][T21486] R13: 000000000000012c R14: 0000000000760158 R15: fffffffffffffffe [ 1037.555088][T21486] memory: usage 307200kB, limit 307200kB, failcnt 11115 [ 1037.572123][T21486] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1037.581119][T21486] Memory cgroup stats for /syz3: [ 1037.581228][T21486] anon 223662080 [ 1037.581228][T21486] file 36864 [ 1037.581228][T21486] kernel_stack 12910592 [ 1037.581228][T21486] slab 19996672 [ 1037.581228][T21486] sock 0 [ 1037.581228][T21486] shmem 0 [ 1037.581228][T21486] file_mapped 0 [ 1037.581228][T21486] file_dirty 0 [ 1037.581228][T21486] file_writeback 0 [ 1037.581228][T21486] anon_thp 180355072 [ 1037.581228][T21486] inactive_anon 0 [ 1037.581228][T21486] active_anon 223662080 [ 1037.581228][T21486] inactive_file 0 [ 1037.581228][T21486] active_file 61440 [ 1037.581228][T21486] unevictable 0 [ 1037.581228][T21486] slab_reclaimable 3784704 [ 1037.581228][T21486] slab_unreclaimable 16211968 [ 1037.581228][T21486] pgfault 88176 [ 1037.581228][T21486] pgmajfault 0 [ 1037.581228][T21486] workingset_refault 495 [ 1037.581228][T21486] workingset_activate 297 [ 1037.581228][T21486] workingset_nodereclaim 0 [ 1037.581228][T21486] pgrefill 4300 [ 1037.581228][T21486] pgscan 4717 [ 1037.581228][T21486] pgsteal 814 [ 1037.675572][T21486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21468,uid=0 [ 1037.691614][T21486] Memory cgroup out of memory: Killed process 21468 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:42 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}]}, 0x40}}, 0x0) 22:32:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa000000]}}]}, 0x40}}, 0x0) 22:32:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x8000000, 0x0}, 0x10000}, 0x1c) 22:32:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xffffff9e, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1037.727230][T21487] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1037.739349][T21517] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xfffffff0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}]}, 0x40}}, 0x0) 22:32:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x20000000, 0x0}, 0x10000}, 0x1c) 22:32:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xb000000]}}]}, 0x40}}, 0x0) [ 1037.851256][T21535] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}]}, 0x40}}, 0x0) [ 1038.043076][T21553] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:43 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x3f000000, 0x0}, 0x10000}, 0x1c) 22:32:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xfffffff5, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf000000]}}]}, 0x40}}, 0x0) 22:32:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}]}, 0x40}}, 0x0) 22:32:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10000000]}}]}, 0x40}}, 0x0) 22:32:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x40000000, 0x0}, 0x10000}, 0x1c) 22:32:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}}]}, 0x40}}, 0x0) 22:32:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xfffffffc, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x11000000]}}]}, 0x40}}, 0x0) 22:32:44 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d9}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:44 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x48000000, 0x0}, 0x10000}, 0x1c) 22:32:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}]}, 0x40}}, 0x0) 22:32:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x500000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x12000000]}}]}, 0x40}}, 0x0) 22:32:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1039.480495][T21635] rds_bind: 4 callbacks suppressed [ 1039.480507][T21635] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x13000000]}}]}, 0x40}}, 0x0) 22:32:44 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4c000000, 0x0}, 0x10000}, 0x1c) 22:32:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}]}, 0x40}}, 0x0) 22:32:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x4000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1039.666812][T21645] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:45 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:45 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x60000000, 0x0}, 0x10000}, 0x1c) 22:32:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf0ffffffffffff, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x14000000]}}]}, 0x40}}, 0x0) 22:32:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}}]}, 0x40}}, 0x0) 22:32:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}}]}, 0x40}}, 0x0) 22:32:45 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x68000000, 0x0}, 0x10000}, 0x1c) [ 1040.258389][T21687] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x15000000]}}]}, 0x40}}, 0x0) 22:32:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x100000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}}]}, 0x40}}, 0x0) [ 1040.486073][T21705] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:45 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f000000]}}]}, 0x40}}, 0x0) 22:32:45 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6c000000, 0x0}, 0x10000}, 0x1c) 22:32:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x200000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}}]}, 0x40}}, 0x0) [ 1040.799947][T21737] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:45 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x74000000, 0x0}, 0x10000}, 0x1c) 22:32:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x40000000]}}]}, 0x40}}, 0x0) 22:32:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x300000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}]}, 0x40}}, 0x0) [ 1040.993052][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1041.056350][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1041.065417][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1041.075484][ T8812] Call Trace: [ 1041.078793][ T8812] dump_stack+0x172/0x1f0 [ 1041.083143][ T8812] dump_header+0x177/0x1152 [ 1041.087663][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1041.093478][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1041.098176][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1041.104004][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1041.109303][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1041.114343][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1041.119976][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1041.119991][ T8812] ? ___ratelimit+0x60/0x595 [ 1041.120005][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1041.120022][ T8812] oom_kill_process.cold+0x10/0x15 [ 1041.120041][ T8812] out_of_memory+0x334/0x1340 [ 1041.145282][ T8812] ? lock_downgrade+0x920/0x920 [ 1041.150153][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1041.156115][ T8812] ? oom_killer_disable+0x280/0x280 [ 1041.156143][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1041.156158][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1041.156177][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1041.166897][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1041.166917][ T8812] try_charge+0xf4b/0x1440 [ 1041.166940][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1041.192425][ T8812] ? find_held_lock+0x35/0x130 [ 1041.197204][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 22:32:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}]}, 0x40}}, 0x0) [ 1041.202774][ T8812] ? lock_downgrade+0x920/0x920 [ 1041.207637][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1041.213207][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1041.219128][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1041.224343][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1041.229902][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1041.235061][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1041.240443][ T8812] ? find_held_lock+0x35/0x130 [ 1041.245215][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1041.250946][ T8812] ? lock_downgrade+0x920/0x920 [ 1041.255798][ T8812] ? rwlock_bug.part.0+0x90/0x90 [ 1041.261090][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1041.267428][ T8812] alloc_pages_current+0x107/0x210 [ 1041.272553][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1041.277670][ T8812] __pmd_alloc+0x41/0x460 [ 1041.282015][ T8812] ? __pmd+0x60/0x60 [ 1041.285910][ T8812] pmd_alloc+0x10c/0x180 [ 1041.290150][ T8812] copy_page_range+0x610/0x1ed0 [ 1041.295187][ T8812] ? lock_downgrade+0x920/0x920 [ 1041.300069][ T8812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1041.305798][ T8812] ? pmd_alloc+0x180/0x180 [ 1041.310234][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1041.314932][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1041.319707][ T8812] ? anon_vma_fork+0xd4/0x4a0 [ 1041.324407][ T8812] dup_mm+0xa67/0x1430 [ 1041.328506][ T8812] ? vm_area_dup+0x170/0x170 [ 1041.333110][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1041.337984][ T8812] copy_process+0x2671/0x6830 [ 1041.342678][ T8812] ? __kasan_check_read+0x11/0x20 [ 1041.347738][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1041.352694][ T8812] ? __might_fault+0x12b/0x1e0 [ 1041.357466][ T8812] ? __might_fault+0x12b/0x1e0 [ 1041.362243][ T8812] _do_fork+0x146/0xfa0 [ 1041.366410][ T8812] ? copy_init_mm+0x20/0x20 [ 1041.370906][ T8812] ? __kasan_check_read+0x11/0x20 [ 1041.375922][ T8812] ? _copy_to_user+0x118/0x160 [ 1041.380686][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1041.385495][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1041.390339][ T8812] ? do_syscall_64+0x26/0x760 [ 1041.395019][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1041.400302][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1041.405312][ T8812] do_syscall_64+0xfa/0x760 [ 1041.409802][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1041.415675][ T8812] RIP: 0033:0x457eba [ 1041.419562][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1041.439166][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1041.447563][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1041.455525][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1041.463482][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1041.471438][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1041.479405][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1041.503826][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11142 [ 1041.518460][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1041.525402][ T8812] Memory cgroup stats for /syz3: [ 1041.525512][ T8812] anon 222277632 [ 1041.525512][ T8812] file 36864 [ 1041.525512][ T8812] kernel_stack 13107200 [ 1041.525512][ T8812] slab 20267008 [ 1041.525512][ T8812] sock 0 [ 1041.525512][ T8812] shmem 0 [ 1041.525512][ T8812] file_mapped 0 [ 1041.525512][ T8812] file_dirty 0 [ 1041.525512][ T8812] file_writeback 0 [ 1041.525512][ T8812] anon_thp 178257920 [ 1041.525512][ T8812] inactive_anon 0 [ 1041.525512][ T8812] active_anon 222277632 [ 1041.525512][ T8812] inactive_file 0 [ 1041.525512][ T8812] active_file 61440 [ 1041.525512][ T8812] unevictable 0 [ 1041.525512][ T8812] slab_reclaimable 3784704 [ 1041.525512][ T8812] slab_unreclaimable 16482304 [ 1041.525512][ T8812] pgfault 88770 [ 1041.525512][ T8812] pgmajfault 0 [ 1041.525512][ T8812] workingset_refault 495 [ 1041.525512][ T8812] workingset_activate 297 22:32:46 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x78000000]}}]}, 0x40}}, 0x0) 22:32:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800]}}]}, 0x40}}, 0x0) 22:32:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x400000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1041.525512][ T8812] workingset_nodereclaim 0 [ 1041.525512][ T8812] pgrefill 4333 [ 1041.525512][ T8812] pgscan 4750 [ 1041.525512][ T8812] pgsteal 814 [ 1041.621041][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14510,uid=0 [ 1041.636686][ T8812] Memory cgroup out of memory: Killed process 14510 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x500000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe201]}}]}, 0x40}}, 0x0) [ 1041.835452][T21796] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:46 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x7a000000, 0x0}, 0x10000}, 0x1c) 22:32:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x96000000]}}]}, 0x40}}, 0x0) 22:32:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x600000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea02]}}]}, 0x40}}, 0x0) [ 1042.003481][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1042.068478][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1042.077633][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1042.087710][ T8812] Call Trace: [ 1042.091004][ T8812] dump_stack+0x172/0x1f0 [ 1042.095344][ T8812] dump_header+0x177/0x1152 [ 1042.099844][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1042.105645][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1042.110328][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1042.116146][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1042.121437][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1042.126473][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1042.132122][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1042.137936][ T8812] ? ___ratelimit+0x60/0x595 [ 1042.142530][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1042.147655][ T8812] oom_kill_process.cold+0x10/0x15 [ 1042.152777][ T8812] out_of_memory+0x334/0x1340 [ 1042.157461][ T8812] ? lock_downgrade+0x920/0x920 [ 1042.162333][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1042.168153][ T8812] ? oom_killer_disable+0x280/0x280 [ 1042.173372][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1042.178926][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1042.184564][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1042.189818][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1042.194680][ T8812] try_charge+0xf4b/0x1440 [ 1042.199100][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1042.199114][ T8812] ? find_held_lock+0x35/0x130 [ 1042.199129][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1042.199148][ T8812] ? lock_downgrade+0x920/0x920 [ 1042.199165][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1042.225370][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1042.230845][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1042.236064][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1042.241616][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1042.246844][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1042.252206][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1042.257923][ T8812] ? mmu_notifier_invalidate_range_start+0x95/0x110 [ 1042.264502][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1042.270727][ T8812] alloc_pages_current+0x107/0x210 [ 1042.275826][ T8812] get_zeroed_page+0x14/0x50 [ 1042.280402][ T8812] __pud_alloc+0x3b/0x250 [ 1042.284729][ T8812] pud_alloc+0xde/0x150 [ 1042.288877][ T8812] copy_page_range+0x37a/0x1ed0 [ 1042.293709][ T8812] ? anon_vma_fork+0x371/0x4a0 [ 1042.298472][ T8812] ? lock_downgrade+0x920/0x920 [ 1042.303308][ T8812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1042.309008][ T8812] ? pmd_alloc+0x180/0x180 [ 1042.313410][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1042.318077][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1042.322820][ T8812] ? anon_vma_fork+0xd4/0x4a0 [ 1042.327523][ T8812] dup_mm+0xa67/0x1430 [ 1042.331722][ T8812] ? vm_area_dup+0x170/0x170 [ 1042.336321][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1042.341186][ T8812] copy_process+0x2671/0x6830 [ 1042.345900][ T8812] ? __kasan_check_read+0x11/0x20 [ 1042.350933][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1042.355859][ T8812] ? __might_fault+0x12b/0x1e0 [ 1042.360608][ T8812] ? __might_fault+0x12b/0x1e0 [ 1042.365360][ T8812] _do_fork+0x146/0xfa0 [ 1042.369573][ T8812] ? copy_init_mm+0x20/0x20 [ 1042.374108][ T8812] ? __kasan_check_read+0x11/0x20 [ 1042.379138][ T8812] ? _copy_to_user+0x118/0x160 [ 1042.383913][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1042.388674][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1042.393514][ T8812] ? do_syscall_64+0x26/0x760 [ 1042.398251][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1042.403577][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1042.408599][ T8812] do_syscall_64+0xfa/0x760 [ 1042.413104][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1042.418989][ T8812] RIP: 0033:0x457eba [ 1042.422882][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1042.442483][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1042.450895][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1042.458850][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1042.466894][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1042.474850][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1042.482801][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1042.510856][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11170 [ 1042.527139][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1042.534012][ T8812] Memory cgroup stats for /syz3: [ 1042.534115][ T8812] anon 222363648 [ 1042.534115][ T8812] file 36864 [ 1042.534115][ T8812] kernel_stack 13107200 [ 1042.534115][ T8812] slab 20267008 [ 1042.534115][ T8812] sock 0 [ 1042.534115][ T8812] shmem 0 [ 1042.534115][ T8812] file_mapped 0 [ 1042.534115][ T8812] file_dirty 0 [ 1042.534115][ T8812] file_writeback 0 [ 1042.534115][ T8812] anon_thp 178257920 [ 1042.534115][ T8812] inactive_anon 0 [ 1042.534115][ T8812] active_anon 222363648 [ 1042.534115][ T8812] inactive_file 0 [ 1042.534115][ T8812] active_file 61440 [ 1042.534115][ T8812] unevictable 0 [ 1042.534115][ T8812] slab_reclaimable 3784704 [ 1042.534115][ T8812] slab_unreclaimable 16482304 [ 1042.534115][ T8812] pgfault 88836 [ 1042.534115][ T8812] pgmajfault 0 [ 1042.534115][ T8812] workingset_refault 495 22:32:47 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd902}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec02]}}]}, 0x40}}, 0x0) 22:32:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9effffff]}}]}, 0x40}}, 0x0) 22:32:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x800000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1042.534115][ T8812] workingset_activate 297 [ 1042.534115][ T8812] workingset_nodereclaim 0 [ 1042.534115][ T8812] pgrefill 4333 [ 1042.534115][ T8812] pgscan 4750 [ 1042.534115][ T8812] pgsteal 814 22:32:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}}]}, 0x40}}, 0x0) [ 1042.658531][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21801,uid=0 22:32:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x900000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1042.716140][ T8812] Memory cgroup out of memory: Killed process 21801 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:47 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0xfffff000, 0x0}, 0x10000}, 0x1c) 22:32:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xc4050000]}}]}, 0x40}}, 0x0) 22:32:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}}]}, 0x40}}, 0x0) 22:32:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xa00000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1042.898523][T21858] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1043.091685][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1043.159529][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1043.168587][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1043.178786][ T8812] Call Trace: [ 1043.182089][ T8812] dump_stack+0x172/0x1f0 [ 1043.186457][ T8812] dump_header+0x177/0x1152 [ 1043.190954][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1043.196772][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1043.201466][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1043.207276][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1043.212570][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1043.217659][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1043.223474][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1043.229370][ T8812] ? ___ratelimit+0x60/0x595 [ 1043.234774][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1043.239886][ T8812] oom_kill_process.cold+0x10/0x15 [ 1043.245071][ T8812] out_of_memory+0x334/0x1340 [ 1043.249737][ T8812] ? lock_downgrade+0x920/0x920 [ 1043.254627][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1043.260416][ T8812] ? oom_killer_disable+0x280/0x280 [ 1043.265619][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1043.271149][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1043.276788][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1043.281897][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1043.286736][ T8812] try_charge+0xf4b/0x1440 [ 1043.291151][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1043.296684][ T8812] ? find_held_lock+0x35/0x130 [ 1043.301461][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1043.306993][ T8812] ? lock_downgrade+0x920/0x920 [ 1043.311832][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1043.317373][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1043.322909][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1043.328192][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1043.333726][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1043.338829][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1043.344213][ T8812] ? find_held_lock+0x35/0x130 [ 1043.348990][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1043.354747][ T8812] ? lock_downgrade+0x920/0x920 [ 1043.359625][ T8812] ? rwlock_bug.part.0+0x90/0x90 [ 1043.364744][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1043.371074][ T8812] alloc_pages_current+0x107/0x210 [ 1043.376174][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1043.381294][ T8812] __pmd_alloc+0x41/0x460 [ 1043.385626][ T8812] ? __pmd+0x60/0x60 [ 1043.389520][ T8812] pmd_alloc+0x10c/0x180 [ 1043.393762][ T8812] copy_page_range+0x610/0x1ed0 [ 1043.398613][ T8812] ? lock_downgrade+0x920/0x920 [ 1043.403452][ T8812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1043.409162][ T8812] ? pmd_alloc+0x180/0x180 [ 1043.413569][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1043.418262][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1043.423031][ T8812] ? anon_vma_fork+0xd4/0x4a0 [ 1043.427717][ T8812] dup_mm+0xa67/0x1430 [ 1043.431799][ T8812] ? vm_area_dup+0x170/0x170 [ 1043.436378][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1043.441244][ T8812] copy_process+0x2671/0x6830 [ 1043.445917][ T8812] ? __kasan_check_read+0x11/0x20 [ 1043.451010][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1043.455952][ T8812] ? __might_fault+0x12b/0x1e0 [ 1043.460722][ T8812] ? __might_fault+0x12b/0x1e0 [ 1043.465517][ T8812] _do_fork+0x146/0xfa0 [ 1043.469756][ T8812] ? copy_init_mm+0x20/0x20 [ 1043.474249][ T8812] ? __kasan_check_read+0x11/0x20 [ 1043.479264][ T8812] ? _copy_to_user+0x118/0x160 [ 1043.484024][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1043.488780][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1043.493625][ T8812] ? do_syscall_64+0x26/0x760 [ 1043.498317][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1043.503616][ T8812] ? trace_hardirqs_on+0x67/0x240 22:32:48 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}]}, 0x40}}, 0x0) 22:32:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xb00000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf0ffffff]}}]}, 0x40}}, 0x0) [ 1043.508640][ T8812] do_syscall_64+0xfa/0x760 [ 1043.513160][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1043.519041][ T8812] RIP: 0033:0x457eba [ 1043.522936][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1043.542627][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1043.551051][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1043.559028][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1043.567019][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1043.575002][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1043.582986][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1043.634648][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11192 [ 1043.665668][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1043.684500][ T8812] Memory cgroup stats for /syz3: [ 1043.684603][ T8812] anon 222363648 [ 1043.684603][ T8812] file 36864 [ 1043.684603][ T8812] kernel_stack 13107200 [ 1043.684603][ T8812] slab 20267008 [ 1043.684603][ T8812] sock 0 [ 1043.684603][ T8812] shmem 0 [ 1043.684603][ T8812] file_mapped 0 [ 1043.684603][ T8812] file_dirty 0 [ 1043.684603][ T8812] file_writeback 0 [ 1043.684603][ T8812] anon_thp 178257920 [ 1043.684603][ T8812] inactive_anon 0 [ 1043.684603][ T8812] active_anon 222363648 [ 1043.684603][ T8812] inactive_file 0 22:32:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1043.684603][ T8812] active_file 61440 [ 1043.684603][ T8812] unevictable 0 [ 1043.684603][ T8812] slab_reclaimable 3784704 [ 1043.684603][ T8812] slab_unreclaimable 16482304 [ 1043.684603][ T8812] pgfault 88902 [ 1043.684603][ T8812] pgmajfault 0 [ 1043.684603][ T8812] workingset_refault 495 [ 1043.684603][ T8812] workingset_activate 297 [ 1043.684603][ T8812] workingset_nodereclaim 0 [ 1043.684603][ T8812] pgrefill 4333 [ 1043.684603][ T8812] pgscan 4750 [ 1043.684603][ T8812] pgsteal 814 22:32:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xc00000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1043.778966][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21859,uid=0 [ 1043.819418][ T8812] Memory cgroup out of memory: Killed process 21859 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}]}, 0x40}}, 0x0) 22:32:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff]}}]}, 0x40}}, 0x0) 22:32:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xe00000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:49 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4000000000000, 0x0}, 0x10000}, 0x1c) [ 1043.950654][T21912] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1044.119286][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1044.154464][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1044.163545][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1044.173602][ T8812] Call Trace: [ 1044.176890][ T8812] dump_stack+0x172/0x1f0 [ 1044.176910][ T8812] dump_header+0x177/0x1152 [ 1044.176926][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1044.176936][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1044.176952][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1044.202016][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1044.207310][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1044.212352][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1044.218009][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1044.223800][ T8812] ? ___ratelimit+0x60/0x595 [ 1044.228377][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1044.233503][ T8812] oom_kill_process.cold+0x10/0x15 [ 1044.238607][ T8812] out_of_memory+0x334/0x1340 [ 1044.243273][ T8812] ? lock_downgrade+0x920/0x920 [ 1044.248271][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1044.254077][ T8812] ? oom_killer_disable+0x280/0x280 [ 1044.259266][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1044.264805][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1044.270512][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1044.275608][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1044.280443][ T8812] try_charge+0xf4b/0x1440 [ 1044.284850][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1044.290386][ T8812] ? find_held_lock+0x35/0x130 [ 1044.295164][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1044.300697][ T8812] ? lock_downgrade+0x920/0x920 [ 1044.305530][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1044.311074][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1044.316517][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1044.321719][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1044.327531][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1044.332697][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1044.338187][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1044.343894][ T8812] ? mmu_notifier_invalidate_range_start+0x95/0x110 [ 1044.350596][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1044.356953][ T8812] alloc_pages_current+0x107/0x210 [ 1044.362066][ T8812] get_zeroed_page+0x14/0x50 [ 1044.366722][ T8812] __pud_alloc+0x3b/0x250 [ 1044.371063][ T8812] pud_alloc+0xde/0x150 [ 1044.375202][ T8812] copy_page_range+0x37a/0x1ed0 [ 1044.380038][ T8812] ? anon_vma_fork+0x371/0x4a0 [ 1044.384790][ T8812] ? lock_downgrade+0x920/0x920 [ 1044.389631][ T8812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1044.395432][ T8812] ? pmd_alloc+0x180/0x180 [ 1044.400278][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1044.404951][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1044.409690][ T8812] ? anon_vma_fork+0xd4/0x4a0 [ 1044.414351][ T8812] dup_mm+0xa67/0x1430 [ 1044.418426][ T8812] ? vm_area_dup+0x170/0x170 [ 1044.423094][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1044.427929][ T8812] copy_process+0x2671/0x6830 [ 1044.432608][ T8812] ? __kasan_check_read+0x11/0x20 [ 1044.437623][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1044.442887][ T8812] ? __might_fault+0x12b/0x1e0 [ 1044.447632][ T8812] ? __might_fault+0x12b/0x1e0 [ 1044.452380][ T8812] _do_fork+0x146/0xfa0 [ 1044.456516][ T8812] ? copy_init_mm+0x20/0x20 [ 1044.461022][ T8812] ? __kasan_check_read+0x11/0x20 [ 1044.466026][ T8812] ? _copy_to_user+0x118/0x160 [ 1044.470783][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1044.475528][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1044.480366][ T8812] ? do_syscall_64+0x26/0x760 [ 1044.485026][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1044.490310][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1044.495430][ T8812] do_syscall_64+0xfa/0x760 [ 1044.499918][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1044.505793][ T8812] RIP: 0033:0x457eba [ 1044.509668][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1044.529277][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1044.537672][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1044.545637][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1044.553590][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1044.561550][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1044.569508][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1044.600485][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11206 [ 1044.608686][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1044.615925][ T8812] Memory cgroup stats for /syz3: [ 1044.616031][ T8812] anon 222363648 [ 1044.616031][ T8812] file 36864 [ 1044.616031][ T8812] kernel_stack 13107200 [ 1044.616031][ T8812] slab 20267008 [ 1044.616031][ T8812] sock 0 [ 1044.616031][ T8812] shmem 0 [ 1044.616031][ T8812] file_mapped 0 [ 1044.616031][ T8812] file_dirty 0 [ 1044.616031][ T8812] file_writeback 0 [ 1044.616031][ T8812] anon_thp 178257920 [ 1044.616031][ T8812] inactive_anon 0 [ 1044.616031][ T8812] active_anon 222363648 [ 1044.616031][ T8812] inactive_file 0 [ 1044.616031][ T8812] active_file 61440 [ 1044.616031][ T8812] unevictable 0 [ 1044.616031][ T8812] slab_reclaimable 3784704 [ 1044.616031][ T8812] slab_unreclaimable 16482304 [ 1044.616031][ T8812] pgfault 88968 [ 1044.616031][ T8812] pgmajfault 0 [ 1044.616031][ T8812] workingset_refault 495 [ 1044.616031][ T8812] workingset_activate 297 [ 1044.616031][ T8812] workingset_nodereclaim 0 [ 1044.616031][ T8812] pgrefill 4333 [ 1044.616031][ T8812] pgscan 4750 [ 1044.616031][ T8812] pgsteal 814 22:32:49 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf00000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfa010000]}}]}, 0x40}}, 0x0) 22:32:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}]}, 0x40}}, 0x0) 22:32:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1044.719898][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21913,uid=0 22:32:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1000000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1044.790873][ T8812] Memory cgroup out of memory: Killed process 21913 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfcffffff]}}]}, 0x40}}, 0x0) 22:32:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}]}, 0x40}}, 0x0) 22:32:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1100000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1044.951522][T21958] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x80000000000000, 0x0}, 0x10000}, 0x1c) 22:32:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1045.126791][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1045.157009][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1045.166061][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1045.176191][ T8812] Call Trace: [ 1045.176212][ T8812] dump_stack+0x172/0x1f0 [ 1045.176231][ T8812] dump_header+0x177/0x1152 [ 1045.176246][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1045.176262][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1045.198940][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1045.204778][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1045.210084][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1045.215127][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1045.220788][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1045.226615][ T8812] ? ___ratelimit+0x60/0x595 [ 1045.231219][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1045.236347][ T8812] oom_kill_process.cold+0x10/0x15 [ 1045.241479][ T8812] out_of_memory+0x334/0x1340 [ 1045.246168][ T8812] ? lock_downgrade+0x920/0x920 [ 1045.251153][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1045.256972][ T8812] ? oom_killer_disable+0x280/0x280 [ 1045.262202][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1045.267736][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1045.273356][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1045.278457][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1045.283300][ T8812] try_charge+0xf4b/0x1440 [ 1045.287715][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1045.293377][ T8812] ? find_held_lock+0x35/0x130 [ 1045.298254][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1045.303800][ T8812] ? lock_downgrade+0x920/0x920 [ 1045.308647][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1045.314195][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1045.319647][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1045.324851][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1045.330379][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1045.335555][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1045.340974][ T8812] ? find_held_lock+0x35/0x130 [ 1045.345722][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1045.351443][ T8812] ? lock_downgrade+0x920/0x920 [ 1045.356330][ T8812] ? rwlock_bug.part.0+0x90/0x90 [ 1045.361301][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1045.367536][ T8812] alloc_pages_current+0x107/0x210 [ 1045.372756][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1045.377900][ T8812] __pmd_alloc+0x41/0x460 [ 1045.382226][ T8812] ? __pmd+0x60/0x60 [ 1045.386105][ T8812] pmd_alloc+0x10c/0x180 [ 1045.390332][ T8812] copy_page_range+0x610/0x1ed0 [ 1045.395190][ T8812] ? lock_downgrade+0x920/0x920 [ 1045.400045][ T8812] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1045.405756][ T8812] ? pmd_alloc+0x180/0x180 [ 1045.410316][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1045.415024][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1045.419846][ T8812] ? anon_vma_fork+0xd4/0x4a0 [ 1045.424515][ T8812] dup_mm+0xa67/0x1430 [ 1045.428580][ T8812] ? vm_area_dup+0x170/0x170 [ 1045.433157][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1045.437992][ T8812] copy_process+0x2671/0x6830 [ 1045.442648][ T8812] ? __kasan_check_read+0x11/0x20 [ 1045.447655][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1045.452571][ T8812] ? __might_fault+0x12b/0x1e0 [ 1045.457316][ T8812] ? __might_fault+0x12b/0x1e0 [ 1045.462066][ T8812] _do_fork+0x146/0xfa0 [ 1045.466224][ T8812] ? copy_init_mm+0x20/0x20 [ 1045.470714][ T8812] ? __kasan_check_read+0x11/0x20 [ 1045.475724][ T8812] ? _copy_to_user+0x118/0x160 [ 1045.480481][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1045.485228][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1045.490187][ T8812] ? do_syscall_64+0x26/0x760 [ 1045.494857][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1045.500122][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1045.505128][ T8812] do_syscall_64+0xfa/0x760 [ 1045.509613][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1045.515570][ T8812] RIP: 0033:0x457eba [ 1045.519542][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1045.539224][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1045.547630][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1045.555585][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1045.563629][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1045.571603][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1045.579572][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1045.611951][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11227 [ 1045.619452][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1045.626692][ T8812] Memory cgroup stats for /syz3: [ 1045.626811][ T8812] anon 222363648 [ 1045.626811][ T8812] file 36864 [ 1045.626811][ T8812] kernel_stack 13107200 [ 1045.626811][ T8812] slab 20267008 [ 1045.626811][ T8812] sock 0 [ 1045.626811][ T8812] shmem 0 [ 1045.626811][ T8812] file_mapped 0 [ 1045.626811][ T8812] file_dirty 0 [ 1045.626811][ T8812] file_writeback 0 [ 1045.626811][ T8812] anon_thp 178257920 [ 1045.626811][ T8812] inactive_anon 0 [ 1045.626811][ T8812] active_anon 222363648 [ 1045.626811][ T8812] inactive_file 0 22:32:50 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffff000]}}]}, 0x40}}, 0x0) 22:32:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}]}, 0x40}}, 0x0) 22:32:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1200000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1045.626811][ T8812] active_file 61440 [ 1045.626811][ T8812] unevictable 0 [ 1045.626811][ T8812] slab_reclaimable 3784704 [ 1045.626811][ T8812] slab_unreclaimable 16482304 [ 1045.626811][ T8812] pgfault 89034 [ 1045.626811][ T8812] pgmajfault 0 [ 1045.626811][ T8812] workingset_refault 495 [ 1045.626811][ T8812] workingset_activate 297 [ 1045.626811][ T8812] workingset_nodereclaim 0 [ 1045.626811][ T8812] pgrefill 4333 [ 1045.626811][ T8812] pgscan 4783 [ 1045.626811][ T8812] pgsteal 814 22:32:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1300000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}]}, 0x40}}, 0x0) 22:32:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffff7f]}}]}, 0x40}}, 0x0) [ 1045.839175][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21965,uid=0 [ 1045.884732][ T8812] Memory cgroup out of memory: Killed process 21965 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1400000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0xf0ffffffffffff, 0x0}, 0x10000}, 0x1c) 22:32:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1046.092031][T22022] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1046.271158][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1046.308955][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1046.318014][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1046.328231][ T8812] Call Trace: [ 1046.331515][ T8812] dump_stack+0x172/0x1f0 [ 1046.335835][ T8812] dump_header+0x177/0x1152 [ 1046.340344][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1046.346132][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1046.350804][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1046.356609][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1046.361880][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1046.367026][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1046.372776][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1046.378573][ T8812] ? ___ratelimit+0x60/0x595 [ 1046.383162][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1046.388273][ T8812] oom_kill_process.cold+0x10/0x15 [ 1046.393408][ T8812] out_of_memory+0x334/0x1340 [ 1046.398072][ T8812] ? lock_downgrade+0x920/0x920 [ 1046.403010][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1046.408814][ T8812] ? oom_killer_disable+0x280/0x280 [ 1046.414015][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1046.419565][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1046.425206][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1046.430316][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1046.435158][ T8812] try_charge+0xf4b/0x1440 [ 1046.439573][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1046.445106][ T8812] ? find_held_lock+0x35/0x130 [ 1046.449858][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1046.455400][ T8812] ? lock_downgrade+0x920/0x920 [ 1046.460241][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1046.465772][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1046.471418][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1046.476599][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1046.482132][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1046.487232][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1046.492584][ T8812] ? __pmd_alloc+0x377/0x460 [ 1046.497169][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1046.502874][ T8812] ? rwlock_bug.part.0+0x90/0x90 [ 1046.507817][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1046.514045][ T8812] alloc_pages_current+0x107/0x210 [ 1046.519140][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1046.523627][ T8812] __pte_alloc+0x20/0x310 [ 1046.527946][ T8812] copy_page_range+0x14da/0x1ed0 [ 1046.532877][ T8812] ? pmd_alloc+0x180/0x180 [ 1046.537287][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1046.541969][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1046.546716][ T8812] ? anon_vma_fork+0xd4/0x4a0 [ 1046.551391][ T8812] dup_mm+0xa67/0x1430 [ 1046.555451][ T8812] ? vm_area_dup+0x170/0x170 [ 1046.560031][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1046.564888][ T8812] copy_process+0x2671/0x6830 [ 1046.569560][ T8812] ? __kasan_check_read+0x11/0x20 [ 1046.574588][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1046.579507][ T8812] ? __might_fault+0x12b/0x1e0 [ 1046.584270][ T8812] ? __might_fault+0x12b/0x1e0 [ 1046.589059][ T8812] _do_fork+0x146/0xfa0 [ 1046.593238][ T8812] ? copy_init_mm+0x20/0x20 [ 1046.597754][ T8812] ? __kasan_check_read+0x11/0x20 [ 1046.602788][ T8812] ? _copy_to_user+0x118/0x160 [ 1046.607570][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1046.612347][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1046.617215][ T8812] ? do_syscall_64+0x26/0x760 [ 1046.621991][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1046.627265][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1046.627283][ T8812] do_syscall_64+0xfa/0x760 [ 1046.627371][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1046.642736][ T8812] RIP: 0033:0x457eba [ 1046.646636][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 22:32:51 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}]}, 0x40}}, 0x0) 22:32:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffff9e]}}]}, 0x40}}, 0x0) 22:32:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x1500000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffff0]}}]}, 0x40}}, 0x0) [ 1046.666245][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1046.674669][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1046.682652][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1046.690625][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1046.698588][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1046.698595][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1046.752263][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11242 22:32:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x3f00000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1046.793994][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1046.815007][ T8812] Memory cgroup stats for /syz3: [ 1046.815118][ T8812] anon 222363648 [ 1046.815118][ T8812] file 36864 [ 1046.815118][ T8812] kernel_stack 13107200 [ 1046.815118][ T8812] slab 20267008 [ 1046.815118][ T8812] sock 0 [ 1046.815118][ T8812] shmem 0 [ 1046.815118][ T8812] file_mapped 0 22:32:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffff5]}}]}, 0x40}}, 0x0) 22:32:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1046.815118][ T8812] file_dirty 0 [ 1046.815118][ T8812] file_writeback 0 [ 1046.815118][ T8812] anon_thp 178257920 [ 1046.815118][ T8812] inactive_anon 0 [ 1046.815118][ T8812] active_anon 222363648 [ 1046.815118][ T8812] inactive_file 0 [ 1046.815118][ T8812] active_file 0 [ 1046.815118][ T8812] unevictable 0 [ 1046.815118][ T8812] slab_reclaimable 3784704 [ 1046.815118][ T8812] slab_unreclaimable 16482304 [ 1046.815118][ T8812] pgfault 89100 [ 1046.815118][ T8812] pgmajfault 0 [ 1046.815118][ T8812] workingset_refault 495 22:32:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}}]}, 0x40}}, 0x0) [ 1046.815118][ T8812] workingset_activate 297 [ 1046.815118][ T8812] workingset_nodereclaim 0 [ 1046.815118][ T8812] pgrefill 4333 [ 1046.815118][ T8812] pgscan 4783 [ 1046.815118][ T8812] pgsteal 814 [ 1047.063902][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22025,uid=0 [ 1047.099464][ T8812] Memory cgroup out of memory: Killed process 22025 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:52 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x100000000000000, 0x0}, 0x10000}, 0x1c) 22:32:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x4000000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1047.227953][T22089] RDS: rds_bind could not find a transport for fe88::ff04, load rds_tcp or rds_rdma? [ 1047.298271][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1047.332214][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1047.341275][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.351577][ T8812] Call Trace: [ 1047.354881][ T8812] dump_stack+0x172/0x1f0 [ 1047.359221][ T8812] dump_header+0x177/0x1152 [ 1047.363735][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1047.369611][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1047.374296][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1047.380098][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1047.385364][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1047.390373][ T8812] ? pagefault_out_of_memory+0x11c/0x11c 22:32:52 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}}]}, 0x40}}, 0x0) 22:32:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffffc]}}]}, 0x40}}, 0x0) 22:32:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x6000000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1047.395989][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1047.401785][ T8812] ? ___ratelimit+0x60/0x595 [ 1047.406384][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1047.411524][ T8812] oom_kill_process.cold+0x10/0x15 [ 1047.416642][ T8812] out_of_memory+0x334/0x1340 [ 1047.421323][ T8812] ? lock_downgrade+0x920/0x920 [ 1047.426184][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1047.431997][ T8812] ? oom_killer_disable+0x280/0x280 [ 1047.437215][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1047.442771][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1047.448398][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1047.448415][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1047.448432][ T8812] try_charge+0xf4b/0x1440 [ 1047.448459][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1047.468406][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1047.473948][ T8812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1047.480256][ T8812] ? __kasan_check_read+0x11/0x20 [ 1047.485331][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1047.490983][ T8812] mem_cgroup_try_charge+0x136/0x590 22:32:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}}]}, 0x40}}, 0x0) [ 1047.496277][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1047.502534][ T8812] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1047.508175][ T8812] wp_page_copy+0x41e/0x1590 [ 1047.512777][ T8812] ? find_held_lock+0x35/0x130 [ 1047.517564][ T8812] ? pmd_pfn+0x1d0/0x1d0 [ 1047.521824][ T8812] ? lock_downgrade+0x920/0x920 [ 1047.526684][ T8812] ? swp_swapcount+0x540/0x540 [ 1047.531459][ T8812] ? __kasan_check_read+0x11/0x20 [ 1047.536493][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1047.542049][ T8812] do_wp_page+0x499/0x14d0 22:32:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1047.546465][ T8812] ? finish_mkwrite_fault+0x570/0x570 [ 1047.546487][ T8812] __handle_mm_fault+0x22f1/0x3f20 [ 1047.546507][ T8812] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1047.562510][ T8812] ? __kasan_check_read+0x11/0x20 [ 1047.567558][ T8812] handle_mm_fault+0x1b5/0x6c0 [ 1047.567582][ T8812] __do_page_fault+0x536/0xdd0 [ 1047.567604][ T8812] do_page_fault+0x38/0x590 [ 1047.567620][ T8812] page_fault+0x39/0x40 [ 1047.567636][ T8812] RIP: 0033:0x40d711 [ 1047.589653][ T8812] Code: 3d 83 a9 34 00 00 0f 85 3b 08 00 00 e8 e8 a6 04 00 85 c0 89 c5 0f 88 73 05 00 00 0f 84 f0 04 00 00 89 c6 bf 6a f1 4b 00 31 c0 0a 46 ff ff c7 44 24 30 00 00 00 00 e8 9d 4d ff ff 49 89 c6 48 [ 1047.609260][ T8812] RSP: 002b:00007ffcdbf51b30 EFLAGS: 00010246 [ 1047.615323][ T8812] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000457eba [ 1047.615331][ T8812] RDX: 0000000000000000 RSI: 00000000000015e7 RDI: 00000000004bf16a [ 1047.615338][ T8812] RBP: 00000000000015e7 R08: 0000000000000001 R09: 0000555556cc5940 [ 1047.615346][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1047.615354][ T8812] R13: 00007ffcdbf51b60 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:32:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}}]}, 0x40}}, 0x0) 22:32:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x6558000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000000]}}]}, 0x40}}, 0x0) [ 1047.850741][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11276 [ 1047.902002][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1047.923419][ T8812] Memory cgroup stats for /syz3: [ 1047.923503][ T8812] anon 222363648 [ 1047.923503][ T8812] file 36864 [ 1047.923503][ T8812] kernel_stack 13107200 [ 1047.923503][ T8812] slab 20267008 [ 1047.923503][ T8812] sock 0 [ 1047.923503][ T8812] shmem 0 [ 1047.923503][ T8812] file_mapped 0 [ 1047.923503][ T8812] file_dirty 0 [ 1047.923503][ T8812] file_writeback 0 [ 1047.923503][ T8812] anon_thp 178257920 [ 1047.923503][ T8812] inactive_anon 0 [ 1047.923503][ T8812] active_anon 222363648 [ 1047.923503][ T8812] inactive_file 0 [ 1047.923503][ T8812] active_file 0 [ 1047.923503][ T8812] unevictable 0 [ 1047.923503][ T8812] slab_reclaimable 3784704 [ 1047.923503][ T8812] slab_unreclaimable 16482304 [ 1047.923503][ T8812] pgfault 89166 [ 1047.923503][ T8812] pgmajfault 0 [ 1047.923503][ T8812] workingset_refault 495 [ 1047.923503][ T8812] workingset_activate 297 [ 1047.923503][ T8812] workingset_nodereclaim 0 [ 1047.923503][ T8812] pgrefill 4366 [ 1047.923503][ T8812] pgscan 4783 [ 1047.923503][ T8812] pgsteal 847 [ 1048.017514][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22090,uid=0 [ 1048.033259][ T8812] Memory cgroup out of memory: Killed process 22090 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1048.074939][T22096] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1048.085288][T22096] CPU: 0 PID: 22096 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1048.094399][T22096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.104455][T22096] Call Trace: [ 1048.107748][T22096] dump_stack+0x172/0x1f0 [ 1048.112085][T22096] dump_header+0x177/0x1152 [ 1048.116594][T22096] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1048.122397][T22096] ? ___ratelimit+0x2c8/0x595 [ 1048.127067][T22096] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1048.127083][T22096] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1048.127098][T22096] ? trace_hardirqs_on+0x67/0x240 [ 1048.127114][T22096] ? pagefault_out_of_memory+0x11c/0x11c [ 1048.127131][T22096] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1048.154610][T22096] ? ___ratelimit+0x60/0x595 [ 1048.159312][T22096] ? do_raw_spin_unlock+0x57/0x270 [ 1048.164472][T22096] oom_kill_process.cold+0x10/0x15 [ 1048.169694][T22096] out_of_memory+0x334/0x1340 [ 1048.174360][T22096] ? lock_downgrade+0x920/0x920 [ 1048.179197][T22096] ? oom_killer_disable+0x280/0x280 [ 1048.184490][T22096] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1048.190034][T22096] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1048.195841][T22096] ? do_raw_spin_unlock+0x57/0x270 [ 1048.200943][T22096] ? _raw_spin_unlock+0x2d/0x50 [ 1048.205781][T22096] try_charge+0xa2d/0x1440 [ 1048.210195][T22096] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1048.215726][T22096] ? percpu_ref_tryget_live+0x111/0x290 [ 1048.221271][T22096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1048.227586][T22096] ? __kasan_check_read+0x11/0x20 [ 1048.232643][T22096] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1048.238173][T22096] mem_cgroup_try_charge+0x136/0x590 [ 1048.243443][T22096] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1048.249669][T22096] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1048.255310][T22096] wp_page_copy+0x41e/0x1590 [ 1048.259885][T22096] ? find_held_lock+0x35/0x130 [ 1048.264632][T22096] ? pmd_pfn+0x1d0/0x1d0 [ 1048.268859][T22096] ? lock_downgrade+0x920/0x920 [ 1048.273691][T22096] ? swp_swapcount+0x540/0x540 [ 1048.278437][T22096] ? __kasan_check_read+0x11/0x20 [ 1048.283450][T22096] ? do_raw_spin_unlock+0x57/0x270 [ 1048.288546][T22096] do_wp_page+0x499/0x14d0 [ 1048.292964][T22096] ? finish_mkwrite_fault+0x570/0x570 [ 1048.298321][T22096] __handle_mm_fault+0x22f1/0x3f20 [ 1048.303419][T22096] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1048.308955][T22096] ? __kasan_check_read+0x11/0x20 [ 1048.313966][T22096] handle_mm_fault+0x1b5/0x6c0 [ 1048.318804][T22096] __do_page_fault+0x536/0xdd0 [ 1048.323552][T22096] do_page_fault+0x38/0x590 [ 1048.328038][T22096] page_fault+0x39/0x40 [ 1048.332172][T22096] RIP: 0033:0x457eee [ 1048.336060][T22096] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1048.355662][T22096] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1048.361719][T22096] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1048.369673][T22096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1048.377623][T22096] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1048.385571][T22096] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1048.393517][T22096] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1048.402477][T22096] memory: usage 304872kB, limit 307200kB, failcnt 11276 [ 1048.409949][T22096] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1048.417259][T22096] Memory cgroup stats for /syz3: [ 1048.417328][T22096] anon 220217344 [ 1048.417328][T22096] file 36864 [ 1048.417328][T22096] kernel_stack 13107200 [ 1048.417328][T22096] slab 20267008 [ 1048.417328][T22096] sock 0 [ 1048.417328][T22096] shmem 0 [ 1048.417328][T22096] file_mapped 0 [ 1048.417328][T22096] file_dirty 0 [ 1048.417328][T22096] file_writeback 0 [ 1048.417328][T22096] anon_thp 176160768 [ 1048.417328][T22096] inactive_anon 0 [ 1048.417328][T22096] active_anon 220217344 [ 1048.417328][T22096] inactive_file 0 [ 1048.417328][T22096] active_file 0 [ 1048.417328][T22096] unevictable 0 [ 1048.417328][T22096] slab_reclaimable 3784704 [ 1048.417328][T22096] slab_unreclaimable 16482304 [ 1048.417328][T22096] pgfault 89166 [ 1048.417328][T22096] pgmajfault 0 [ 1048.417328][T22096] workingset_refault 495 [ 1048.417328][T22096] workingset_activate 297 [ 1048.417328][T22096] workingset_nodereclaim 0 [ 1048.417328][T22096] pgrefill 4366 [ 1048.417328][T22096] pgscan 4783 [ 1048.417328][T22096] pgsteal 847 [ 1048.510862][T22096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11402,uid=0 22:32:53 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x200000000000000, 0x0}, 0x10000}, 0x1c) 22:32:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x7800000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}}]}, 0x40}}, 0x0) 22:32:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf0ffffffffffff]}}]}, 0x40}}, 0x0) 22:32:53 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9020000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1048.526800][T22096] Memory cgroup out of memory: Killed process 11402 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1048.561596][T22139] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x8000000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x100000000000000]}}]}, 0x40}}, 0x0) 22:32:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1048.671462][T22162] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:53 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x300000000000000, 0x0}, 0x10000}, 0x1c) 22:32:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}}]}, 0x40}}, 0x0) 22:32:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}}]}, 0x40}}, 0x0) [ 1048.905535][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1048.935393][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1048.944453][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1048.954503][ T8812] Call Trace: [ 1048.957790][ T8812] dump_stack+0x172/0x1f0 [ 1048.957811][ T8812] dump_header+0x177/0x1152 [ 1048.957826][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1048.957841][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1048.977104][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1048.982917][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1048.988203][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1048.993322][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1048.998960][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 22:32:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1049.004773][ T8812] ? ___ratelimit+0x60/0x595 [ 1049.009360][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1049.014479][ T8812] oom_kill_process.cold+0x10/0x15 [ 1049.019605][ T8812] out_of_memory+0x334/0x1340 [ 1049.024286][ T8812] ? lock_downgrade+0x920/0x920 [ 1049.029131][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1049.029148][ T8812] ? oom_killer_disable+0x280/0x280 [ 1049.029171][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1049.029187][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 22:32:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}}]}, 0x40}}, 0x0) [ 1049.052818][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1049.057938][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1049.062797][ T8812] try_charge+0xf4b/0x1440 [ 1049.067225][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1049.072776][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1049.078326][ T8812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1049.084571][ T8812] ? __kasan_check_read+0x11/0x20 [ 1049.089605][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1049.095236][ T8812] mem_cgroup_try_charge+0x136/0x590 [ 1049.095253][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1049.095274][ T8812] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1049.106772][ T8812] wp_page_copy+0x41e/0x1590 [ 1049.116959][ T8812] ? find_held_lock+0x35/0x130 [ 1049.121739][ T8812] ? pmd_pfn+0x1d0/0x1d0 [ 1049.125986][ T8812] ? lock_downgrade+0x920/0x920 [ 1049.130845][ T8812] ? swp_swapcount+0x540/0x540 [ 1049.135618][ T8812] ? __kasan_check_read+0x11/0x20 [ 1049.140645][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1049.145762][ T8812] do_wp_page+0x499/0x14d0 [ 1049.150197][ T8812] ? finish_mkwrite_fault+0x570/0x570 22:32:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}}]}, 0x40}}, 0x0) [ 1049.155581][ T8812] __handle_mm_fault+0x22f1/0x3f20 [ 1049.160704][ T8812] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1049.166260][ T8812] ? __kasan_check_read+0x11/0x20 [ 1049.171301][ T8812] handle_mm_fault+0x1b5/0x6c0 [ 1049.176071][ T8812] __do_page_fault+0x536/0xdd0 [ 1049.180844][ T8812] do_page_fault+0x38/0x590 [ 1049.185356][ T8812] page_fault+0x39/0x40 [ 1049.189509][ T8812] RIP: 0033:0x457fde [ 1049.193405][ T8812] Code: 5c 41 5d 41 5e 5d c3 48 c7 c2 d4 ff ff ff f7 d8 41 bd ff ff ff ff 64 89 02 64 8b 04 25 d0 02 00 00 41 39 c4 0f 85 2f 01 00 00 <64> 44 89 04 25 d4 02 00 00 45 85 f6 0f 85 7f 00 00 00 48 85 db 74 [ 1049.213003][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010246 [ 1049.219072][ T8812] RAX: 0000000000000001 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1049.219080][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1049.219087][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1049.219094][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 22:32:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x200000000000000]}}]}, 0x40}}, 0x0) 22:32:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x8100000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1049.219102][ T8812] R13: 00000000000015f1 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:32:54 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x300000000000000]}}]}, 0x40}}, 0x0) 22:32:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x88a8ffff00000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1049.516412][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11304 [ 1049.556907][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1049.584987][ T8812] Memory cgroup stats for /syz3: [ 1049.585099][ T8812] anon 222375936 [ 1049.585099][ T8812] file 36864 [ 1049.585099][ T8812] kernel_stack 13107200 [ 1049.585099][ T8812] slab 20267008 [ 1049.585099][ T8812] sock 0 [ 1049.585099][ T8812] shmem 0 [ 1049.585099][ T8812] file_mapped 0 [ 1049.585099][ T8812] file_dirty 0 [ 1049.585099][ T8812] file_writeback 0 [ 1049.585099][ T8812] anon_thp 178257920 [ 1049.585099][ T8812] inactive_anon 0 [ 1049.585099][ T8812] active_anon 222375936 [ 1049.585099][ T8812] inactive_file 0 [ 1049.585099][ T8812] active_file 0 [ 1049.585099][ T8812] unevictable 0 [ 1049.585099][ T8812] slab_reclaimable 3784704 [ 1049.585099][ T8812] slab_unreclaimable 16482304 [ 1049.585099][ T8812] pgfault 89298 [ 1049.585099][ T8812] pgmajfault 0 [ 1049.585099][ T8812] workingset_refault 495 [ 1049.585099][ T8812] workingset_activate 330 [ 1049.585099][ T8812] workingset_nodereclaim 0 [ 1049.585099][ T8812] pgrefill 4366 [ 1049.585099][ T8812] pgscan 4783 [ 1049.585099][ T8812] pgsteal 847 [ 1049.694415][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22140,uid=0 [ 1049.715048][ T8812] Memory cgroup out of memory: Killed process 22140 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1049.767439][T22179] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1049.782095][T22179] CPU: 0 PID: 22179 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1049.791249][T22179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1049.801614][T22179] Call Trace: [ 1049.804892][T22179] dump_stack+0x172/0x1f0 [ 1049.809218][T22179] dump_header+0x177/0x1152 [ 1049.813705][T22179] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1049.819486][T22179] ? ___ratelimit+0x2c8/0x595 [ 1049.824159][T22179] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1049.829957][T22179] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1049.835222][T22179] ? trace_hardirqs_on+0x67/0x240 [ 1049.840248][T22179] ? pagefault_out_of_memory+0x11c/0x11c [ 1049.845859][T22179] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1049.851659][T22179] ? ___ratelimit+0x60/0x595 [ 1049.856245][T22179] ? do_raw_spin_unlock+0x57/0x270 [ 1049.861350][T22179] oom_kill_process.cold+0x10/0x15 [ 1049.866444][T22179] out_of_memory+0x334/0x1340 [ 1049.871103][T22179] ? lock_downgrade+0x920/0x920 [ 1049.875935][T22179] ? oom_killer_disable+0x280/0x280 [ 1049.881656][T22179] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1049.887182][T22179] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1049.892795][T22179] ? do_raw_spin_unlock+0x57/0x270 [ 1049.897891][T22179] ? _raw_spin_unlock+0x2d/0x50 [ 1049.902734][T22179] try_charge+0xa2d/0x1440 [ 1049.907157][T22179] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1049.912680][T22179] ? percpu_ref_tryget_live+0x111/0x290 [ 1049.918218][T22179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1049.924437][T22179] ? __kasan_check_read+0x11/0x20 [ 1049.929459][T22179] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1049.935256][T22179] mem_cgroup_try_charge+0x136/0x590 [ 1049.940532][T22179] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1049.946759][T22179] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1049.952374][T22179] wp_page_copy+0x41e/0x1590 [ 1049.956954][T22179] ? find_held_lock+0x35/0x130 [ 1049.962398][T22179] ? pmd_pfn+0x1d0/0x1d0 [ 1049.966629][T22179] ? lock_downgrade+0x920/0x920 [ 1049.971471][T22179] ? swp_swapcount+0x540/0x540 [ 1049.976212][T22179] ? __kasan_check_read+0x11/0x20 [ 1049.981223][T22179] ? do_raw_spin_unlock+0x57/0x270 [ 1049.986327][T22179] do_wp_page+0x499/0x14d0 [ 1049.990725][T22179] ? finish_mkwrite_fault+0x570/0x570 [ 1049.996094][T22179] __handle_mm_fault+0x22f1/0x3f20 [ 1050.001199][T22179] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1050.006741][T22179] ? __kasan_check_read+0x11/0x20 [ 1050.011768][T22179] handle_mm_fault+0x1b5/0x6c0 [ 1050.016513][T22179] __do_page_fault+0x536/0xdd0 [ 1050.021277][T22179] do_page_fault+0x38/0x590 [ 1050.025771][T22179] page_fault+0x39/0x40 [ 1050.029919][T22179] RIP: 0010:__put_user_4+0x1c/0x30 [ 1050.035009][T22179] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 fe 01 00 48 8b 9b 58 14 00 00 48 83 eb 03 48 39 d9 73 3f 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 1050.054610][T22179] RSP: 0018:ffff888032007f30 EFLAGS: 00010293 [ 1050.060670][T22179] RAX: 00000000000015f1 RBX: 00007fffffffeffd RCX: 0000555556cc5c10 [ 1050.068636][T22179] RDX: dffffc0000000000 RSI: 1ffff11014f1d1ac RDI: ffff8880a78e8a70 [ 1050.076591][T22179] RBP: ffff888032007f48 R08: 0000000000000001 R09: ffff8880a78e8d58 [ 1050.084552][T22179] R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: 0000000000000000 [ 1050.092531][T22179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1050.100501][T22179] ? schedule_tail+0xd8/0x130 [ 1050.105160][T22179] ret_from_fork+0x8/0x30 [ 1050.109487][T22179] RIP: 0033:0x457eba [ 1050.113373][T22179] Code: Bad RIP value. [ 1050.117424][T22179] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1050.125812][T22179] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1050.133761][T22179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1050.141728][T22179] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1050.149785][T22179] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1050.157760][T22179] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1050.173986][T22179] memory: usage 305000kB, limit 307200kB, failcnt 11304 [ 1050.181492][T22179] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1050.188904][T22179] Memory cgroup stats for /syz3: [ 1050.189177][T22179] anon 220221440 [ 1050.189177][T22179] file 36864 [ 1050.189177][T22179] kernel_stack 13107200 [ 1050.189177][T22179] slab 20267008 [ 1050.189177][T22179] sock 0 [ 1050.189177][T22179] shmem 0 [ 1050.189177][T22179] file_mapped 0 [ 1050.189177][T22179] file_dirty 0 [ 1050.189177][T22179] file_writeback 0 [ 1050.189177][T22179] anon_thp 176160768 [ 1050.189177][T22179] inactive_anon 0 [ 1050.189177][T22179] active_anon 220221440 [ 1050.189177][T22179] inactive_file 0 [ 1050.189177][T22179] active_file 0 [ 1050.189177][T22179] unevictable 0 [ 1050.189177][T22179] slab_reclaimable 3784704 [ 1050.189177][T22179] slab_unreclaimable 16482304 [ 1050.189177][T22179] pgfault 89298 [ 1050.189177][T22179] pgmajfault 0 [ 1050.189177][T22179] workingset_refault 495 [ 1050.189177][T22179] workingset_activate 330 [ 1050.189177][T22179] workingset_nodereclaim 0 [ 1050.189177][T22179] pgrefill 4366 [ 1050.189177][T22179] pgscan 4783 [ 1050.189177][T22179] pgsteal 847 [ 1050.283789][T22179] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22163,uid=0 [ 1050.299992][T22179] Memory cgroup out of memory: Killed process 22163 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}}]}, 0x40}}, 0x0) 22:32:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x400000000000000]}}]}, 0x40}}, 0x0) 22:32:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x9effffff00000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:55 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x400000000000000, 0x0}, 0x10000}, 0x1c) 22:32:55 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1050.341746][T22232] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}]}, 0x40}}, 0x0) 22:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xb20a000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1050.481893][T22253] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:55 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x500000000000000, 0x0}, 0x10000}, 0x1c) 22:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x402000000000000]}}]}, 0x40}}, 0x0) [ 1050.697870][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 22:32:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}]}, 0x40}}, 0x0) [ 1050.742936][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1050.752073][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1050.762116][ T8812] Call Trace: [ 1050.762136][ T8812] dump_stack+0x172/0x1f0 [ 1050.762155][ T8812] dump_header+0x177/0x1152 [ 1050.762171][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1050.762180][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1050.762197][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1050.791093][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1050.796384][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1050.801418][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1050.807044][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1050.807059][ T8812] ? ___ratelimit+0x60/0x595 [ 1050.807074][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1050.807090][ T8812] oom_kill_process.cold+0x10/0x15 [ 1050.807106][ T8812] out_of_memory+0x334/0x1340 [ 1050.807120][ T8812] ? lock_downgrade+0x920/0x920 [ 1050.807139][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:32:55 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1050.843017][ T8812] ? oom_killer_disable+0x280/0x280 [ 1050.848238][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1050.853792][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1050.859446][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1050.864582][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1050.869550][ T8812] try_charge+0xf4b/0x1440 [ 1050.873986][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1050.879544][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1050.885108][ T8812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1050.891382][ T8812] ? __kasan_check_read+0x11/0x20 [ 1050.896424][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1050.901988][ T8812] mem_cgroup_try_charge+0x136/0x590 [ 1050.907361][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1050.913607][ T8812] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1050.919250][ T8812] wp_page_copy+0x41e/0x1590 [ 1050.923848][ T8812] ? find_held_lock+0x35/0x130 [ 1050.928629][ T8812] ? pmd_pfn+0x1d0/0x1d0 [ 1050.932889][ T8812] ? lock_downgrade+0x920/0x920 [ 1050.937748][ T8812] ? swp_swapcount+0x540/0x540 [ 1050.942553][ T8812] ? __kasan_check_read+0x11/0x20 [ 1050.947593][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1050.952715][ T8812] do_wp_page+0x499/0x14d0 [ 1050.957152][ T8812] ? finish_mkwrite_fault+0x570/0x570 [ 1050.962549][ T8812] __handle_mm_fault+0x22f1/0x3f20 [ 1050.967679][ T8812] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1050.973242][ T8812] ? __kasan_check_read+0x11/0x20 [ 1050.978285][ T8812] handle_mm_fault+0x1b5/0x6c0 [ 1050.983066][ T8812] __do_page_fault+0x536/0xdd0 [ 1050.987874][ T8812] do_page_fault+0x38/0x590 22:32:56 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000]}}]}, 0x40}}, 0x0) 22:32:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1050.992394][ T8812] page_fault+0x39/0x40 [ 1050.996547][ T8812] RIP: 0033:0x457fde [ 1051.000442][ T8812] Code: 5c 41 5d 41 5e 5d c3 48 c7 c2 d4 ff ff ff f7 d8 41 bd ff ff ff ff 64 89 02 64 8b 04 25 d0 02 00 00 41 39 c4 0f 85 2f 01 00 00 <64> 44 89 04 25 d4 02 00 00 45 85 f6 0f 85 7f 00 00 00 48 85 db 74 [ 1051.020056][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010246 [ 1051.026137][ T8812] RAX: 0000000000000001 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1051.034202][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 22:32:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xc700000000000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1051.042181][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1051.050203][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1051.050211][ T8812] R13: 00000000000015fb R14: 0000000000000000 R15: 00007ffcdbf51b70 22:32:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x500000000000000]}}]}, 0x40}}, 0x0) 22:32:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf0ffffff00000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1051.393466][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11340 [ 1051.400633][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1051.431162][ T8812] Memory cgroup stats for /syz3: [ 1051.431258][ T8812] anon 222375936 [ 1051.431258][ T8812] file 36864 [ 1051.431258][ T8812] kernel_stack 13107200 [ 1051.431258][ T8812] slab 20267008 [ 1051.431258][ T8812] sock 0 [ 1051.431258][ T8812] shmem 0 [ 1051.431258][ T8812] file_mapped 0 [ 1051.431258][ T8812] file_dirty 0 [ 1051.431258][ T8812] file_writeback 0 [ 1051.431258][ T8812] anon_thp 178257920 [ 1051.431258][ T8812] inactive_anon 0 [ 1051.431258][ T8812] active_anon 222375936 [ 1051.431258][ T8812] inactive_file 0 [ 1051.431258][ T8812] active_file 0 [ 1051.431258][ T8812] unevictable 0 [ 1051.431258][ T8812] slab_reclaimable 3784704 [ 1051.431258][ T8812] slab_unreclaimable 16482304 [ 1051.431258][ T8812] pgfault 89430 [ 1051.431258][ T8812] pgmajfault 0 [ 1051.431258][ T8812] workingset_refault 495 [ 1051.431258][ T8812] workingset_activate 330 [ 1051.431258][ T8812] workingset_nodereclaim 0 [ 1051.431258][ T8812] pgrefill 4366 [ 1051.431258][ T8812] pgscan 4783 [ 1051.431258][ T8812] pgsteal 847 [ 1051.531515][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22254,uid=0 [ 1051.562499][ T8812] Memory cgroup out of memory: Killed process 22254 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1051.593630][T22271] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1051.604417][T22271] CPU: 0 PID: 22271 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1051.613650][T22271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1051.623684][T22271] Call Trace: [ 1051.626958][T22271] dump_stack+0x172/0x1f0 [ 1051.631283][T22271] dump_header+0x177/0x1152 [ 1051.635763][T22271] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1051.641542][T22271] ? ___ratelimit+0x2c8/0x595 [ 1051.646225][T22271] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1051.652021][T22271] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1051.657291][T22271] ? trace_hardirqs_on+0x67/0x240 [ 1051.662292][T22271] ? pagefault_out_of_memory+0x11c/0x11c [ 1051.667900][T22271] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1051.673680][T22271] ? ___ratelimit+0x60/0x595 [ 1051.678244][T22271] ? do_raw_spin_unlock+0x57/0x270 [ 1051.683332][T22271] oom_kill_process.cold+0x10/0x15 [ 1051.688429][T22271] out_of_memory+0x334/0x1340 [ 1051.693084][T22271] ? lock_downgrade+0x920/0x920 [ 1051.697917][T22271] ? oom_killer_disable+0x280/0x280 [ 1051.703104][T22271] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1051.708627][T22271] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1051.714240][T22271] ? do_raw_spin_unlock+0x57/0x270 [ 1051.719339][T22271] ? _raw_spin_unlock+0x2d/0x50 [ 1051.724177][T22271] try_charge+0xa2d/0x1440 [ 1051.728576][T22271] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1051.734095][T22271] ? percpu_ref_tryget_live+0x111/0x290 [ 1051.739646][T22271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1051.745863][T22271] ? __kasan_check_read+0x11/0x20 [ 1051.750882][T22271] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1051.756417][T22271] mem_cgroup_try_charge+0x136/0x590 [ 1051.761680][T22271] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1051.768078][T22271] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1051.773688][T22271] wp_page_copy+0x41e/0x1590 [ 1051.778255][T22271] ? find_held_lock+0x35/0x130 [ 1051.782996][T22271] ? pmd_pfn+0x1d0/0x1d0 [ 1051.787232][T22271] ? lock_downgrade+0x920/0x920 [ 1051.792061][T22271] ? swp_swapcount+0x540/0x540 [ 1051.796802][T22271] ? __kasan_check_read+0x11/0x20 [ 1051.801804][T22271] ? do_raw_spin_unlock+0x57/0x270 [ 1051.806895][T22271] do_wp_page+0x499/0x14d0 [ 1051.811304][T22271] ? finish_mkwrite_fault+0x570/0x570 [ 1051.816662][T22271] __handle_mm_fault+0x22f1/0x3f20 [ 1051.821756][T22271] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1051.827370][T22271] ? __kasan_check_read+0x11/0x20 [ 1051.832372][T22271] handle_mm_fault+0x1b5/0x6c0 [ 1051.837117][T22271] __do_page_fault+0x536/0xdd0 [ 1051.841873][T22271] do_page_fault+0x38/0x590 [ 1051.846355][T22271] page_fault+0x39/0x40 [ 1051.850487][T22271] RIP: 0010:__put_user_4+0x1c/0x30 [ 1051.855583][T22271] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 fe 01 00 48 8b 9b 58 14 00 00 48 83 eb 03 48 39 d9 73 3f 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 1051.875173][T22271] RSP: 0018:ffff88803204ff30 EFLAGS: 00010293 [ 1051.881217][T22271] RAX: 00000000000015fb RBX: 00007fffffffeffd RCX: 0000555556cc5c10 [ 1051.889167][T22271] RDX: dffffc0000000000 RSI: 1ffff1101493c524 RDI: ffff8880a49e2630 [ 1051.897113][T22271] RBP: ffff88803204ff48 R08: 0000000000000001 R09: ffff8880a49e2918 [ 1051.905061][T22271] R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: 0000000000000000 [ 1051.913009][T22271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1051.920978][T22271] ? schedule_tail+0xd8/0x130 [ 1051.925632][T22271] ret_from_fork+0x8/0x30 [ 1051.929934][T22271] RIP: 0033:0x457eba [ 1051.933907][T22271] Code: Bad RIP value. [ 1051.937949][T22271] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1051.946399][T22271] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1051.954349][T22271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1051.962299][T22271] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1051.970255][T22271] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1051.978202][T22271] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1051.987034][T22271] memory: usage 304960kB, limit 307200kB, failcnt 11340 [ 1051.994238][T22271] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1052.001414][T22271] Memory cgroup stats for /syz3: [ 1052.001499][T22271] anon 220221440 [ 1052.001499][T22271] file 36864 [ 1052.001499][T22271] kernel_stack 13107200 [ 1052.001499][T22271] slab 20267008 [ 1052.001499][T22271] sock 0 [ 1052.001499][T22271] shmem 0 [ 1052.001499][T22271] file_mapped 0 [ 1052.001499][T22271] file_dirty 0 [ 1052.001499][T22271] file_writeback 0 [ 1052.001499][T22271] anon_thp 176160768 [ 1052.001499][T22271] inactive_anon 0 [ 1052.001499][T22271] active_anon 220221440 [ 1052.001499][T22271] inactive_file 0 [ 1052.001499][T22271] active_file 0 [ 1052.001499][T22271] unevictable 0 [ 1052.001499][T22271] slab_reclaimable 3784704 [ 1052.001499][T22271] slab_unreclaimable 16482304 [ 1052.001499][T22271] pgfault 89430 [ 1052.001499][T22271] pgmajfault 0 [ 1052.001499][T22271] workingset_refault 495 [ 1052.001499][T22271] workingset_activate 330 [ 1052.001499][T22271] workingset_nodereclaim 0 [ 1052.001499][T22271] pgrefill 4366 [ 1052.001499][T22271] pgscan 4783 [ 1052.001499][T22271] pgsteal 847 [ 1052.095708][T22271] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22233,uid=0 [ 1052.111534][T22271] Memory cgroup out of memory: Killed process 22233 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x600000000000000, 0x0}, 0x10000}, 0x1c) 22:32:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff]}}]}, 0x40}}, 0x0) 22:32:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xf5ffffff00000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:57 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x600000000000000]}}]}, 0x40}}, 0x0) [ 1052.147917][T22318] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x602000000000000]}}]}, 0x40}}, 0x0) 22:32:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2010000]}}]}, 0x40}}, 0x0) 22:32:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xfcffffff00000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1052.281029][T22338] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x700000000000000, 0x0}, 0x10000}, 0x1c) 22:32:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x800000000000000]}}]}, 0x40}}, 0x0) 22:32:57 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1052.530990][T22354] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1052.562023][T22354] CPU: 0 PID: 22354 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1052.571178][T22354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 22:32:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea020000]}}]}, 0x40}}, 0x0) [ 1052.581229][T22354] Call Trace: [ 1052.581251][T22354] dump_stack+0x172/0x1f0 [ 1052.581268][T22354] dump_header+0x177/0x1152 [ 1052.581283][T22354] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1052.581292][T22354] ? ___ratelimit+0x2c8/0x595 [ 1052.581305][T22354] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1052.581324][T22354] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1052.614950][T22354] ? trace_hardirqs_on+0x67/0x240 [ 1052.619991][T22354] ? pagefault_out_of_memory+0x11c/0x11c [ 1052.625637][T22354] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1052.631536][T22354] ? ___ratelimit+0x60/0x595 [ 1052.636161][T22354] ? do_raw_spin_unlock+0x57/0x270 [ 1052.636180][T22354] oom_kill_process.cold+0x10/0x15 [ 1052.636197][T22354] out_of_memory+0x334/0x1340 [ 1052.651152][T22354] ? lock_downgrade+0x920/0x920 [ 1052.656021][T22354] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1052.656041][T22354] ? oom_killer_disable+0x280/0x280 [ 1052.656063][T22354] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1052.656078][T22354] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1052.656095][T22354] ? do_raw_spin_unlock+0x57/0x270 [ 1052.656115][T22354] ? _raw_spin_unlock+0x2d/0x50 [ 1052.672730][T22354] try_charge+0xf4b/0x1440 [ 1052.688297][T22354] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1052.688312][T22354] ? percpu_ref_tryget_live+0x111/0x290 [ 1052.688335][T22354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1052.710119][T22354] ? __kasan_check_read+0x11/0x20 [ 1052.715170][T22354] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1052.720733][T22354] mem_cgroup_try_charge+0x136/0x590 22:32:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec020000]}}]}, 0x40}}, 0x0) [ 1052.726129][T22354] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1052.732384][T22354] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1052.738031][T22354] __handle_mm_fault+0x1e34/0x3f20 [ 1052.743162][T22354] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1052.748747][T22354] ? __kasan_check_read+0x11/0x20 [ 1052.753797][T22354] handle_mm_fault+0x1b5/0x6c0 [ 1052.758583][T22354] __do_page_fault+0x536/0xdd0 [ 1052.763373][T22354] do_page_fault+0x38/0x590 [ 1052.767906][T22354] page_fault+0x39/0x40 [ 1052.772068][T22354] RIP: 0033:0x41122f [ 1052.775963][T22354] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1052.795565][T22354] RSP: 002b:00007ffcdbf51890 EFLAGS: 00010206 [ 1052.795577][T22354] RAX: 00007f4724875000 RBX: 0000000000020000 RCX: 000000000045993a [ 1052.795584][T22354] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1052.795591][T22354] RBP: 00007ffcdbf51970 R08: ffffffffffffffff R09: 0000000000000000 22:32:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xffffff7f00000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1052.795597][T22354] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbf51a60 [ 1052.795605][T22354] R13: 00007f4724895700 R14: 0000000000000000 R15: 000000000075bf2c 22:32:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xffffffff00000000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x900000000000000]}}]}, 0x40}}, 0x0) 22:32:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}}]}, 0x40}}, 0x0) 22:32:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0xfffffffffffff000, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1052.968380][T22354] memory: usage 307200kB, limit 307200kB, failcnt 11377 [ 1052.995293][T22354] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1053.025181][T22354] Memory cgroup stats for /syz3: [ 1053.025290][T22354] anon 222375936 [ 1053.025290][T22354] file 36864 [ 1053.025290][T22354] kernel_stack 13107200 [ 1053.025290][T22354] slab 20267008 [ 1053.025290][T22354] sock 0 [ 1053.025290][T22354] shmem 0 [ 1053.025290][T22354] file_mapped 0 [ 1053.025290][T22354] file_dirty 0 [ 1053.025290][T22354] file_writeback 0 [ 1053.025290][T22354] anon_thp 178257920 [ 1053.025290][T22354] inactive_anon 0 [ 1053.025290][T22354] active_anon 222375936 [ 1053.025290][T22354] inactive_file 0 [ 1053.025290][T22354] active_file 0 [ 1053.025290][T22354] unevictable 0 [ 1053.025290][T22354] slab_reclaimable 3784704 [ 1053.025290][T22354] slab_unreclaimable 16482304 [ 1053.025290][T22354] pgfault 89595 [ 1053.025290][T22354] pgmajfault 0 [ 1053.025290][T22354] workingset_refault 495 [ 1053.025290][T22354] workingset_activate 330 [ 1053.025290][T22354] workingset_nodereclaim 0 [ 1053.025290][T22354] pgrefill 4366 [ 1053.025290][T22354] pgscan 4783 [ 1053.025290][T22354] pgsteal 847 [ 1053.200632][T22354] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22319,uid=0 [ 1053.224748][T22354] Memory cgroup out of memory: Killed process 22319 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x800000000000000, 0x0}, 0x10000}, 0x1c) 22:32:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}}]}, 0x40}}, 0x0) 22:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1053.312878][T22404] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1053.417910][T22415] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1053.442926][T22415] CPU: 0 PID: 22415 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1053.452080][T22415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1053.462269][T22415] Call Trace: 22:32:58 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x2, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa00000000000000]}}]}, 0x40}}, 0x0) 22:32:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff]}}]}, 0x40}}, 0x0) [ 1053.465578][T22415] dump_stack+0x172/0x1f0 [ 1053.469937][T22415] dump_header+0x177/0x1152 [ 1053.474571][T22415] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1053.480371][T22415] ? ___ratelimit+0x2c8/0x595 [ 1053.485043][T22415] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1053.485060][T22415] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1053.485074][T22415] ? trace_hardirqs_on+0x67/0x240 [ 1053.485089][T22415] ? pagefault_out_of_memory+0x11c/0x11c [ 1053.485106][T22415] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1053.512607][T22415] ? ___ratelimit+0x60/0x595 22:32:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xb00000000000000]}}]}, 0x40}}, 0x0) [ 1053.517204][T22415] ? do_raw_spin_unlock+0x57/0x270 [ 1053.522357][T22415] oom_kill_process.cold+0x10/0x15 [ 1053.527476][T22415] out_of_memory+0x334/0x1340 [ 1053.532161][T22415] ? lock_downgrade+0x920/0x920 [ 1053.537022][T22415] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1053.542849][T22415] ? oom_killer_disable+0x280/0x280 [ 1053.548068][T22415] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1053.553708][T22415] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1053.559350][T22415] ? do_raw_spin_unlock+0x57/0x270 [ 1053.564473][T22415] ? _raw_spin_unlock+0x2d/0x50 [ 1053.569334][T22415] try_charge+0xf4b/0x1440 [ 1053.573781][T22415] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1053.579313][T22415] ? find_held_lock+0x35/0x130 [ 1053.579329][T22415] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1053.579349][T22415] ? lock_downgrade+0x920/0x920 [ 1053.579360][T22415] ? percpu_ref_tryget_live+0x111/0x290 [ 1053.579379][T22415] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1053.605462][T22415] ? memcg_kmem_put_cache+0x50/0x50 [ 1053.610667][T22415] ? get_mem_cgroup_from_mm+0x156/0x320 22:32:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}}]}, 0x40}}, 0x0) [ 1053.616224][T22415] __memcg_kmem_charge+0x13a/0x3a0 [ 1053.621358][T22415] __alloc_pages_nodemask+0x4f7/0x900 [ 1053.626728][T22415] ? lock_downgrade+0x920/0x920 [ 1053.631583][T22415] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1053.637311][T22415] ? __kasan_check_read+0x11/0x20 [ 1053.642338][T22415] ? __kasan_check_read+0x11/0x20 [ 1053.647354][T22415] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1053.647372][T22415] alloc_pages_current+0x107/0x210 [ 1053.647390][T22415] __pmd_alloc+0x41/0x460 22:32:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf00000000000000]}}]}, 0x40}}, 0x0) [ 1053.647404][T22415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1053.647425][T22415] __handle_mm_fault+0x17ac/0x3f20 [ 1053.647444][T22415] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1053.679939][T22415] ? __kasan_check_read+0x11/0x20 [ 1053.684979][T22415] handle_mm_fault+0x1b5/0x6c0 [ 1053.689756][T22415] __do_page_fault+0x536/0xdd0 [ 1053.694534][T22415] do_page_fault+0x38/0x590 [ 1053.699045][T22415] page_fault+0x39/0x40 [ 1053.703197][T22415] RIP: 0033:0x401aa7 22:32:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}]}, 0x40}}, 0x0) [ 1053.707093][T22415] Code: 00 00 00 48 83 ec 08 48 8b 15 0d ea 66 00 48 8b 05 fe e9 66 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 e0 e9 66 00 48 83 c4 08 c3 48 89 c6 bf a8 9c 4c 00 [ 1053.726693][T22415] RSP: 002b:00007ffcdbf51970 EFLAGS: 00010287 [ 1053.732777][T22415] RAX: 0000001b32720000 RBX: 0000000000000000 RCX: 0000001b33720000 [ 1053.740749][T22415] RDX: 0000001b32720004 RSI: 00007ffcdbf51730 RDI: 0000000000000000 [ 1053.748719][T22415] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 1053.756690][T22415] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 22:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1053.764659][T22415] R13: 00007ffcdbf51b60 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1053.922981][T22415] memory: usage 307184kB, limit 307200kB, failcnt 11410 [ 1053.930313][T22415] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1053.937797][T22415] Memory cgroup stats for /syz3: [ 1053.937900][T22415] anon 222363648 [ 1053.937900][T22415] file 36864 [ 1053.937900][T22415] kernel_stack 13107200 [ 1053.937900][T22415] slab 20267008 [ 1053.937900][T22415] sock 0 [ 1053.937900][T22415] shmem 0 [ 1053.937900][T22415] file_mapped 0 [ 1053.937900][T22415] file_dirty 0 [ 1053.937900][T22415] file_writeback 0 [ 1053.937900][T22415] anon_thp 178257920 [ 1053.937900][T22415] inactive_anon 0 [ 1053.937900][T22415] active_anon 222363648 [ 1053.937900][T22415] inactive_file 0 [ 1053.937900][T22415] active_file 0 [ 1053.937900][T22415] unevictable 0 [ 1053.937900][T22415] slab_reclaimable 3784704 [ 1053.937900][T22415] slab_unreclaimable 16482304 [ 1053.937900][T22415] pgfault 89661 [ 1053.937900][T22415] pgmajfault 0 [ 1053.937900][T22415] workingset_refault 495 [ 1053.937900][T22415] workingset_activate 330 [ 1053.937900][T22415] workingset_nodereclaim 0 [ 1053.937900][T22415] pgrefill 4366 [ 1053.937900][T22415] pgscan 4783 [ 1053.937900][T22415] pgsteal 847 [ 1054.032357][T22415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22405,uid=0 [ 1054.048251][T22415] Memory cgroup out of memory: Killed process 22405 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x2000000000000000, 0x0}, 0x10000}, 0x1c) 22:32:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x3, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1054.087272][T22451] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:32:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000000000000]}}]}, 0x40}}, 0x0) 22:32:59 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e]}}]}, 0x40}}, 0x0) 22:32:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x4, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1054.253853][T22461] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1054.290332][T22461] CPU: 0 PID: 22461 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 22:32:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0]}}]}, 0x40}}, 0x0) [ 1054.299485][T22461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1054.310612][T22461] Call Trace: [ 1054.313917][T22461] dump_stack+0x172/0x1f0 [ 1054.318264][T22461] dump_header+0x177/0x1152 [ 1054.322783][T22461] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1054.328593][T22461] ? ___ratelimit+0x2c8/0x595 [ 1054.333307][T22461] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1054.339151][T22461] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1054.344438][T22461] ? trace_hardirqs_on+0x67/0x240 [ 1054.349552][T22461] ? pagefault_out_of_memory+0x11c/0x11c [ 1054.349569][T22461] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1054.349582][T22461] ? ___ratelimit+0x60/0x595 [ 1054.349593][T22461] ? do_raw_spin_unlock+0x57/0x270 [ 1054.349610][T22461] oom_kill_process.cold+0x10/0x15 [ 1054.375810][T22461] out_of_memory+0x334/0x1340 [ 1054.380496][T22461] ? lock_downgrade+0x920/0x920 [ 1054.385355][T22461] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1054.391168][T22461] ? oom_killer_disable+0x280/0x280 [ 1054.396386][T22461] mem_cgroup_out_of_memory+0x1d8/0x240 22:32:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}}]}, 0x40}}, 0x0) [ 1054.401943][T22461] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1054.407587][T22461] ? do_raw_spin_unlock+0x57/0x270 [ 1054.412731][T22461] ? _raw_spin_unlock+0x2d/0x50 [ 1054.417590][T22461] try_charge+0xf4b/0x1440 [ 1054.422020][T22461] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1054.427563][T22461] ? percpu_ref_tryget_live+0x111/0x290 [ 1054.433114][T22461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1054.439355][T22461] ? __kasan_check_read+0x11/0x20 [ 1054.444387][T22461] ? get_mem_cgroup_from_mm+0x156/0x320 22:32:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}]}, 0x40}}, 0x0) [ 1054.449950][T22461] mem_cgroup_try_charge+0x136/0x590 [ 1054.455237][T22461] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1054.461482][T22461] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1054.467118][T22461] wp_page_copy+0x41e/0x1590 [ 1054.471727][T22461] ? find_held_lock+0x35/0x130 [ 1054.476507][T22461] ? pmd_pfn+0x1d0/0x1d0 [ 1054.480756][T22461] ? lock_downgrade+0x920/0x920 [ 1054.485614][T22461] ? swp_swapcount+0x540/0x540 [ 1054.490379][T22461] ? __kasan_check_read+0x11/0x20 [ 1054.495414][T22461] ? do_raw_spin_unlock+0x57/0x270 [ 1054.500528][T22461] do_wp_page+0x499/0x14d0 [ 1054.504951][T22461] ? finish_mkwrite_fault+0x570/0x570 [ 1054.510332][T22461] __handle_mm_fault+0x22f1/0x3f20 [ 1054.515454][T22461] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1054.521014][T22461] ? __kasan_check_read+0x11/0x20 [ 1054.526046][T22461] handle_mm_fault+0x1b5/0x6c0 [ 1054.530818][T22461] __do_page_fault+0x536/0xdd0 [ 1054.535621][T22461] do_page_fault+0x38/0x590 [ 1054.540136][T22461] page_fault+0x39/0x40 [ 1054.544289][T22461] RIP: 0033:0x4309c6 22:32:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}}]}, 0x40}}, 0x0) [ 1054.548185][T22461] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 56 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 9c 45 64 00 85 c0 0f 84 [ 1054.567791][T22461] RSP: 002b:00007ffcdbf51770 EFLAGS: 00010206 [ 1054.573861][T22461] RAX: 00000000000205b1 RBX: 0000000000715640 RCX: 0000000000000121 [ 1054.581836][T22461] RDX: 0000555556cc6930 RSI: 0000555556cc6a50 RDI: 0000000000000000 [ 1054.589805][T22461] RBP: 0000000000000121 R08: ffffffffffffffff R09: 0000000000000000 22:32:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1100000000000000]}}]}, 0x40}}, 0x0) [ 1054.589812][T22461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000715698 [ 1054.589820][T22461] R13: 0000000000715698 R14: 0000000000000000 R15: 0000000000002710 [ 1054.681848][T22461] memory: usage 307200kB, limit 307200kB, failcnt 11451 [ 1054.708346][T22461] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1054.743974][T22461] Memory cgroup stats for /syz3: [ 1054.744082][T22461] anon 222363648 [ 1054.744082][T22461] file 36864 [ 1054.744082][T22461] kernel_stack 13107200 [ 1054.744082][T22461] slab 20267008 [ 1054.744082][T22461] sock 0 [ 1054.744082][T22461] shmem 0 [ 1054.744082][T22461] file_mapped 0 [ 1054.744082][T22461] file_dirty 0 [ 1054.744082][T22461] file_writeback 0 [ 1054.744082][T22461] anon_thp 178257920 [ 1054.744082][T22461] inactive_anon 0 [ 1054.744082][T22461] active_anon 222363648 [ 1054.744082][T22461] inactive_file 0 [ 1054.744082][T22461] active_file 0 [ 1054.744082][T22461] unevictable 0 [ 1054.744082][T22461] slab_reclaimable 3784704 [ 1054.744082][T22461] slab_unreclaimable 16482304 [ 1054.744082][T22461] pgfault 89727 [ 1054.744082][T22461] pgmajfault 0 [ 1054.744082][T22461] workingset_refault 495 [ 1054.744082][T22461] workingset_activate 330 [ 1054.744082][T22461] workingset_nodereclaim 0 [ 1054.744082][T22461] pgrefill 4366 [ 1054.744082][T22461] pgscan 4816 [ 1054.744082][T22461] pgsteal 847 [ 1054.872905][T22461] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22453,uid=0 [ 1054.894373][T22461] Memory cgroup out of memory: Killed process 22453 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:32:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x3f00000000000000, 0x0}, 0x10000}, 0x1c) 22:32:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:32:59 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:32:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x5, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:32:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}}]}, 0x40}}, 0x0) 22:32:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1200000000000000]}}]}, 0x40}}, 0x0) [ 1054.928701][T22506] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}]}, 0x40}}, 0x0) 22:33:00 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x6, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1300000000000000]}}]}, 0x40}}, 0x0) [ 1055.071387][T22527] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1055.135141][T22527] CPU: 0 PID: 22527 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1055.144380][T22527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1055.154441][T22527] Call Trace: [ 1055.157751][T22527] dump_stack+0x172/0x1f0 [ 1055.162098][T22527] dump_header+0x177/0x1152 [ 1055.166613][T22527] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1055.172585][T22527] ? ___ratelimit+0x2c8/0x595 [ 1055.177264][T22527] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1055.177281][T22527] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1055.177295][T22527] ? trace_hardirqs_on+0x67/0x240 [ 1055.177313][T22527] ? pagefault_out_of_memory+0x11c/0x11c [ 1055.199029][T22527] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1055.204833][T22527] ? ___ratelimit+0x60/0x595 [ 1055.204846][T22527] ? do_raw_spin_unlock+0x57/0x270 [ 1055.204865][T22527] oom_kill_process.cold+0x10/0x15 [ 1055.204881][T22527] out_of_memory+0x334/0x1340 [ 1055.204899][T22527] ? lock_downgrade+0x920/0x920 [ 1055.229250][T22527] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1055.235065][T22527] ? oom_killer_disable+0x280/0x280 [ 1055.240275][T22527] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1055.245820][T22527] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1055.251463][T22527] ? do_raw_spin_unlock+0x57/0x270 [ 1055.256587][T22527] ? _raw_spin_unlock+0x2d/0x50 [ 1055.261458][T22527] try_charge+0xf4b/0x1440 [ 1055.265900][T22527] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1055.271445][T22527] ? find_held_lock+0x35/0x130 [ 1055.276220][T22527] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1055.281774][T22527] ? lock_downgrade+0x920/0x920 [ 1055.286626][T22527] ? percpu_ref_tryget_live+0x111/0x290 [ 1055.292215][T22527] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1055.297685][T22527] ? memcg_kmem_put_cache+0x50/0x50 [ 1055.302891][T22527] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1055.308430][T22527] __memcg_kmem_charge+0x13a/0x3a0 [ 1055.308447][T22527] __alloc_pages_nodemask+0x4f7/0x900 [ 1055.308464][T22527] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1055.308478][T22527] ? __pmd_alloc+0x377/0x460 [ 1055.308499][T22527] ? lock_downgrade+0x920/0x920 [ 1055.334109][T22527] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1055.340382][T22527] alloc_pages_current+0x107/0x210 [ 1055.345518][T22527] pte_alloc_one+0x1b/0x1a0 [ 1055.350040][T22527] __do_fault+0x2dd/0x540 [ 1055.354380][T22527] ? __pmd_alloc+0x37c/0x460 [ 1055.358980][T22527] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1055.365235][T22527] __handle_mm_fault+0x2adf/0x3f20 [ 1055.370366][T22527] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1055.375935][T22527] ? __kasan_check_read+0x11/0x20 [ 1055.380981][T22527] handle_mm_fault+0x1b5/0x6c0 22:33:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}]}, 0x40}}, 0x0) [ 1055.385765][T22527] __do_page_fault+0x536/0xdd0 [ 1055.390552][T22527] do_page_fault+0x38/0x590 [ 1055.395071][T22527] page_fault+0x39/0x40 [ 1055.399231][T22527] RIP: 0033:0x401aa7 [ 1055.403137][T22527] Code: 00 00 00 48 83 ec 08 48 8b 15 0d ea 66 00 48 8b 05 fe e9 66 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 e0 e9 66 00 48 83 c4 08 c3 48 89 c6 bf a8 9c 4c 00 [ 1055.422750][T22527] RSP: 002b:00007ffcdbf51970 EFLAGS: 00010287 [ 1055.428824][T22527] RAX: 0000001b32720000 RBX: 0000000000000000 RCX: 0000001b33720000 [ 1055.436803][T22527] RDX: 0000001b32720004 RSI: 00007ffcdbf51730 RDI: 0000000000000000 [ 1055.444794][T22527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000004 [ 1055.452774][T22527] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 1055.460747][T22527] R13: 00007ffcdbf51b60 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1055.513231][T22527] memory: usage 307200kB, limit 307200kB, failcnt 11470 [ 1055.529704][T22527] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1055.537156][T22527] Memory cgroup stats for /syz3: [ 1055.537252][T22527] anon 222363648 [ 1055.537252][T22527] file 36864 [ 1055.537252][T22527] kernel_stack 13107200 [ 1055.537252][T22527] slab 20267008 [ 1055.537252][T22527] sock 0 [ 1055.537252][T22527] shmem 0 [ 1055.537252][T22527] file_mapped 0 [ 1055.537252][T22527] file_dirty 0 [ 1055.537252][T22527] file_writeback 0 [ 1055.537252][T22527] anon_thp 178257920 [ 1055.537252][T22527] inactive_anon 0 [ 1055.537252][T22527] active_anon 222363648 [ 1055.537252][T22527] inactive_file 0 [ 1055.537252][T22527] active_file 0 [ 1055.537252][T22527] unevictable 0 [ 1055.537252][T22527] slab_reclaimable 3784704 [ 1055.537252][T22527] slab_unreclaimable 16482304 [ 1055.537252][T22527] pgfault 89793 [ 1055.537252][T22527] pgmajfault 0 [ 1055.537252][T22527] workingset_refault 495 [ 1055.537252][T22527] workingset_activate 330 [ 1055.537252][T22527] workingset_nodereclaim 0 [ 1055.537252][T22527] pgrefill 4366 [ 1055.537252][T22527] pgscan 4816 [ 1055.537252][T22527] pgsteal 847 [ 1055.631367][T22527] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22507,uid=0 [ 1055.647238][T22527] Memory cgroup out of memory: Killed process 22507 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}]}, 0x40}}, 0x0) 22:33:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1400000000000000]}}]}, 0x40}}, 0x0) 22:33:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x8, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:00 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4000000000000000, 0x0}, 0x10000}, 0x1c) 22:33:00 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd902000000000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1055.686590][T22559] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x9, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1500000000000000]}}]}, 0x40}}, 0x0) 22:33:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}]}, 0x40}}, 0x0) [ 1055.837715][T22579] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 22:33:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1055.899688][T22579] CPU: 0 PID: 22579 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1055.908855][T22579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1055.918913][T22579] Call Trace: [ 1055.922212][T22579] dump_stack+0x172/0x1f0 [ 1055.926553][T22579] dump_header+0x177/0x1152 [ 1055.931075][T22579] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1055.936881][T22579] ? ___ratelimit+0x2c8/0x595 [ 1055.941564][T22579] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1055.947535][T22579] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1055.952827][T22579] ? trace_hardirqs_on+0x67/0x240 [ 1055.957861][T22579] ? pagefault_out_of_memory+0x11c/0x11c [ 1055.963495][T22579] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1055.969290][T22579] ? ___ratelimit+0x60/0x595 [ 1055.969303][T22579] ? do_raw_spin_unlock+0x57/0x270 [ 1055.969321][T22579] oom_kill_process.cold+0x10/0x15 [ 1055.969337][T22579] out_of_memory+0x334/0x1340 [ 1055.969350][T22579] ? lock_downgrade+0x920/0x920 [ 1055.969371][T22579] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1055.999417][T22579] ? oom_killer_disable+0x280/0x280 [ 1056.004631][T22579] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1056.010185][T22579] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1056.015826][T22579] ? do_raw_spin_unlock+0x57/0x270 [ 1056.020936][T22579] ? _raw_spin_unlock+0x2d/0x50 [ 1056.026023][T22579] try_charge+0xf4b/0x1440 [ 1056.030478][T22579] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1056.036009][T22579] ? percpu_ref_tryget_live+0x111/0x290 [ 1056.041689][T22579] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1056.047915][T22579] ? __kasan_check_read+0x11/0x20 [ 1056.052927][T22579] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1056.058460][T22579] mem_cgroup_try_charge+0x136/0x590 [ 1056.063732][T22579] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1056.069958][T22579] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1056.075570][T22579] wp_page_copy+0x41e/0x1590 [ 1056.080141][T22579] ? find_held_lock+0x35/0x130 [ 1056.084884][T22579] ? pmd_pfn+0x1d0/0x1d0 [ 1056.089249][T22579] ? lock_downgrade+0x920/0x920 [ 1056.094091][T22579] ? swp_swapcount+0x540/0x540 [ 1056.098853][T22579] ? __kasan_check_read+0x11/0x20 [ 1056.103866][T22579] ? do_raw_spin_unlock+0x57/0x270 [ 1056.108968][T22579] do_wp_page+0x499/0x14d0 [ 1056.113373][T22579] ? finish_mkwrite_fault+0x570/0x570 [ 1056.118736][T22579] __handle_mm_fault+0x22f1/0x3f20 [ 1056.123851][T22579] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1056.129389][T22579] ? __kasan_check_read+0x11/0x20 [ 1056.134401][T22579] handle_mm_fault+0x1b5/0x6c0 [ 1056.139170][T22579] __do_page_fault+0x536/0xdd0 [ 1056.143941][T22579] do_page_fault+0x38/0x590 [ 1056.148451][T22579] page_fault+0x39/0x40 [ 1056.152588][T22579] RIP: 0033:0x40fa76 [ 1056.156484][T22579] Code: 0a 66 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 89 4a 08 49 8b 89 c8 02 00 00 48 89 11 48 c7 05 3a 0a 66 00 00 00 00 00 <48> c7 05 17 54 30 00 90 4e 71 00 31 d2 48 c7 05 02 54 30 00 90 4e [ 1056.176069][T22579] RSP: 002b:00007ffcdbf51ad8 EFLAGS: 00010246 [ 1056.182115][T22579] RAX: 0000555556cc5c00 RBX: 00007ffcdbf51ae0 RCX: 0000000000a704a0 [ 1056.190316][T22579] RDX: 0000000000a704a0 RSI: 0000000000714e90 RDI: 0000555556cc5c20 [ 1056.198432][T22579] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1056.206506][T22579] R10: 0000555556cc5c10 R11: 0000000000000202 R12: 0000000000000001 [ 1056.214550][T22579] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:33:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xa, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xb, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}}]}, 0x40}}, 0x0) 22:33:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00000000000000]}}]}, 0x40}}, 0x0) [ 1056.365007][T22579] memory: usage 307200kB, limit 307200kB, failcnt 11495 [ 1056.394095][T22579] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1056.425256][T22579] Memory cgroup stats for /syz3: [ 1056.425361][T22579] anon 222363648 [ 1056.425361][T22579] file 36864 [ 1056.425361][T22579] kernel_stack 13107200 [ 1056.425361][T22579] slab 20267008 [ 1056.425361][T22579] sock 0 [ 1056.425361][T22579] shmem 0 [ 1056.425361][T22579] file_mapped 0 [ 1056.425361][T22579] file_dirty 0 [ 1056.425361][T22579] file_writeback 0 [ 1056.425361][T22579] anon_thp 178257920 [ 1056.425361][T22579] inactive_anon 0 [ 1056.425361][T22579] active_anon 222363648 [ 1056.425361][T22579] inactive_file 0 [ 1056.425361][T22579] active_file 0 [ 1056.425361][T22579] unevictable 0 [ 1056.425361][T22579] slab_reclaimable 3784704 [ 1056.425361][T22579] slab_unreclaimable 16482304 [ 1056.425361][T22579] pgfault 89826 [ 1056.425361][T22579] pgmajfault 0 [ 1056.425361][T22579] workingset_refault 495 [ 1056.425361][T22579] workingset_activate 330 [ 1056.425361][T22579] workingset_nodereclaim 0 [ 1056.425361][T22579] pgrefill 4399 [ 1056.425361][T22579] pgscan 4816 [ 1056.425361][T22579] pgsteal 847 22:33:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1056.618311][T22579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22560,uid=0 [ 1056.648596][T22579] Memory cgroup out of memory: Killed process 22560 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:01 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4800000000000000, 0x0}, 0x10000}, 0x1c) 22:33:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xc, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:01 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000000000000]}}]}, 0x40}}, 0x0) 22:33:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}}]}, 0x40}}, 0x0) 22:33:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1056.718713][T22627] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x7800000000000000]}}]}, 0x40}}, 0x0) 22:33:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}]}, 0x40}}, 0x0) 22:33:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xe, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1056.965942][T22648] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1057.008926][T22648] CPU: 0 PID: 22648 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1057.018096][T22648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.018103][T22648] Call Trace: [ 1057.018124][T22648] dump_stack+0x172/0x1f0 [ 1057.018148][T22648] dump_header+0x177/0x1152 [ 1057.040283][T22648] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1057.046099][T22648] ? ___ratelimit+0x2c8/0x595 [ 1057.050785][T22648] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1057.056602][T22648] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1057.056619][T22648] ? trace_hardirqs_on+0x67/0x240 [ 1057.056637][T22648] ? pagefault_out_of_memory+0x11c/0x11c [ 1057.056653][T22648] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1057.056666][T22648] ? ___ratelimit+0x60/0x595 [ 1057.056677][T22648] ? do_raw_spin_unlock+0x57/0x270 [ 1057.056696][T22648] oom_kill_process.cold+0x10/0x15 [ 1057.093246][T22648] out_of_memory+0x334/0x1340 [ 1057.097931][T22648] ? lock_downgrade+0x920/0x920 [ 1057.102798][T22648] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1057.108616][T22648] ? oom_killer_disable+0x280/0x280 [ 1057.113837][T22648] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1057.119387][T22648] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1057.125049][T22648] ? do_raw_spin_unlock+0x57/0x270 [ 1057.130175][T22648] ? _raw_spin_unlock+0x2d/0x50 [ 1057.135172][T22648] try_charge+0xf4b/0x1440 [ 1057.139612][T22648] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1057.145157][T22648] ? percpu_ref_tryget_live+0x111/0x290 [ 1057.145177][T22648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.145195][T22648] ? __kasan_check_read+0x11/0x20 [ 1057.156966][T22648] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1057.156985][T22648] mem_cgroup_try_charge+0x136/0x590 [ 1057.157001][T22648] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1057.157018][T22648] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1057.157035][T22648] wp_page_copy+0x41e/0x1590 [ 1057.157058][T22648] ? find_held_lock+0x35/0x130 [ 1057.194066][T22648] ? pmd_pfn+0x1d0/0x1d0 [ 1057.198326][T22648] ? lock_downgrade+0x920/0x920 [ 1057.203191][T22648] ? swp_swapcount+0x540/0x540 22:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1057.207980][T22648] ? __kasan_check_read+0x11/0x20 [ 1057.213012][T22648] ? do_raw_spin_unlock+0x57/0x270 [ 1057.218133][T22648] do_wp_page+0x499/0x14d0 [ 1057.222563][T22648] ? finish_mkwrite_fault+0x570/0x570 [ 1057.227951][T22648] __handle_mm_fault+0x22f1/0x3f20 [ 1057.233077][T22648] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1057.238648][T22648] ? __kasan_check_read+0x11/0x20 [ 1057.243793][T22648] handle_mm_fault+0x1b5/0x6c0 [ 1057.248563][T22648] __do_page_fault+0x536/0xdd0 [ 1057.253326][T22648] do_page_fault+0x38/0x590 [ 1057.257833][T22648] page_fault+0x39/0x40 [ 1057.261983][T22648] RIP: 0033:0x47193e [ 1057.265872][T22648] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87 [ 1057.285485][T22648] RSP: 002b:00007ffcdbf50f50 EFLAGS: 00010206 [ 1057.291563][T22648] RAX: 0000000000000006 RBX: 00007ffcdbf514b0 RCX: 0000000000000000 [ 1057.299551][T22648] RDX: 00007ffcdbf51628 RSI: 00000000004bf14c RDI: 00007ffcdbf514b0 [ 1057.307533][T22648] RBP: 00007ffcdbf514a0 R08: 0000000000000000 R09: 00007ffcdbf51628 [ 1057.315519][T22648] R10: 0000000000000075 R11: 0000000000000206 R12: 00007ffcdbf51640 [ 1057.323494][T22648] R13: 00000000004bf14c R14: 00007ffcdbf51628 R15: 0000000000000001 [ 1057.434238][T22648] memory: usage 307204kB, limit 307200kB, failcnt 11529 [ 1057.442845][T22648] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1057.452099][T22648] Memory cgroup stats for /syz3: [ 1057.452200][T22648] anon 222363648 [ 1057.452200][T22648] file 36864 [ 1057.452200][T22648] kernel_stack 13107200 [ 1057.452200][T22648] slab 20267008 [ 1057.452200][T22648] sock 0 [ 1057.452200][T22648] shmem 0 [ 1057.452200][T22648] file_mapped 0 [ 1057.452200][T22648] file_dirty 0 [ 1057.452200][T22648] file_writeback 0 [ 1057.452200][T22648] anon_thp 178257920 [ 1057.452200][T22648] inactive_anon 0 [ 1057.452200][T22648] active_anon 222363648 [ 1057.452200][T22648] inactive_file 0 [ 1057.452200][T22648] active_file 0 [ 1057.452200][T22648] unevictable 0 [ 1057.452200][T22648] slab_reclaimable 3784704 [ 1057.452200][T22648] slab_unreclaimable 16482304 [ 1057.452200][T22648] pgfault 89925 [ 1057.452200][T22648] pgmajfault 0 [ 1057.452200][T22648] workingset_refault 495 [ 1057.452200][T22648] workingset_activate 330 [ 1057.452200][T22648] workingset_nodereclaim 0 [ 1057.452200][T22648] pgrefill 4399 [ 1057.452200][T22648] pgscan 4816 [ 1057.452200][T22648] pgsteal 847 [ 1057.546021][T22648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22628,uid=0 [ 1057.562674][T22648] Memory cgroup out of memory: Killed process 22628 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:02 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x4c00000000000000, 0x0}, 0x10000}, 0x1c) 22:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8000000000000000]}}]}, 0x40}}, 0x0) 22:33:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xf, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}}]}, 0x40}}, 0x0) 22:33:02 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1057.603509][T22686] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}}]}, 0x40}}, 0x0) 22:33:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9600000000000000]}}]}, 0x40}}, 0x0) 22:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1057.741754][T22701] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1057.761201][T22701] CPU: 0 PID: 22701 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1057.770338][T22701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.780393][T22701] Call Trace: [ 1057.783700][T22701] dump_stack+0x172/0x1f0 [ 1057.788053][T22701] dump_header+0x177/0x1152 [ 1057.792568][T22701] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1057.798367][T22701] ? ___ratelimit+0x2c8/0x595 [ 1057.803033][T22701] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1057.808846][T22701] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1057.814143][T22701] ? trace_hardirqs_on+0x67/0x240 [ 1057.819178][T22701] ? pagefault_out_of_memory+0x11c/0x11c [ 1057.824814][T22701] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1057.824829][T22701] ? ___ratelimit+0x60/0x595 [ 1057.824840][T22701] ? do_raw_spin_unlock+0x57/0x270 [ 1057.824859][T22701] oom_kill_process.cold+0x10/0x15 [ 1057.845438][T22701] out_of_memory+0x334/0x1340 [ 1057.850139][T22701] ? lock_downgrade+0x920/0x920 [ 1057.850159][T22701] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1057.850179][T22701] ? oom_killer_disable+0x280/0x280 [ 1057.866019][T22701] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1057.871580][T22701] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1057.877230][T22701] ? do_raw_spin_unlock+0x57/0x270 [ 1057.877250][T22701] ? _raw_spin_unlock+0x2d/0x50 [ 1057.877269][T22701] try_charge+0xf4b/0x1440 [ 1057.877291][T22701] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1057.877308][T22701] ? percpu_ref_tryget_live+0x111/0x290 [ 1057.891686][T22701] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.891708][T22701] ? __kasan_check_read+0x11/0x20 [ 1057.914073][T22701] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1057.919639][T22701] mem_cgroup_try_charge+0x136/0x590 [ 1057.924937][T22701] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1057.931188][T22701] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1057.936831][T22701] wp_page_copy+0x41e/0x1590 22:33:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1057.941476][T22701] ? find_held_lock+0x35/0x130 [ 1057.946254][T22701] ? pmd_pfn+0x1d0/0x1d0 [ 1057.950509][T22701] ? lock_downgrade+0x920/0x920 [ 1057.955373][T22701] ? swp_swapcount+0x540/0x540 [ 1057.960155][T22701] ? __kasan_check_read+0x11/0x20 [ 1057.965186][T22701] ? do_raw_spin_unlock+0x57/0x270 [ 1057.970307][T22701] do_wp_page+0x499/0x14d0 [ 1057.974737][T22701] ? finish_mkwrite_fault+0x570/0x570 [ 1057.980128][T22701] __handle_mm_fault+0x22f1/0x3f20 [ 1057.985260][T22701] ? vmf_insert_mixed_mkwrite+0x40/0x40 22:33:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1057.990830][T22701] ? __kasan_check_read+0x11/0x20 [ 1057.995868][T22701] handle_mm_fault+0x1b5/0x6c0 [ 1058.000644][T22701] __do_page_fault+0x536/0xdd0 [ 1058.005421][T22701] do_page_fault+0x38/0x590 [ 1058.009930][T22701] page_fault+0x39/0x40 [ 1058.014088][T22701] RIP: 0033:0x47193e [ 1058.017982][T22701] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87 22:33:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x10, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1058.037589][T22701] RSP: 002b:00007ffcdbf50f50 EFLAGS: 00010206 [ 1058.037600][T22701] RAX: 0000000000000006 RBX: 00007ffcdbf514b0 RCX: 0000000000000000 [ 1058.037607][T22701] RDX: 00007ffcdbf51628 RSI: 00000000004bf14c RDI: 00007ffcdbf514b0 [ 1058.037614][T22701] RBP: 00007ffcdbf514a0 R08: 0000000000000000 R09: 00007ffcdbf51628 [ 1058.037621][T22701] R10: 0000000000000075 R11: 0000000000000206 R12: 00007ffcdbf51640 [ 1058.037629][T22701] R13: 00000000004bf14c R14: 00007ffcdbf51628 R15: 0000000000000001 [ 1058.185704][T22701] memory: usage 307200kB, limit 307200kB, failcnt 11563 [ 1058.211823][T22701] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1058.242982][T22701] Memory cgroup stats for /syz3: [ 1058.243158][T22701] anon 222363648 [ 1058.243158][T22701] file 36864 [ 1058.243158][T22701] kernel_stack 13107200 [ 1058.243158][T22701] slab 20267008 [ 1058.243158][T22701] sock 0 [ 1058.243158][T22701] shmem 0 [ 1058.243158][T22701] file_mapped 0 [ 1058.243158][T22701] file_dirty 0 [ 1058.243158][T22701] file_writeback 0 [ 1058.243158][T22701] anon_thp 178257920 [ 1058.243158][T22701] inactive_anon 0 [ 1058.243158][T22701] active_anon 222363648 [ 1058.243158][T22701] inactive_file 0 [ 1058.243158][T22701] active_file 0 [ 1058.243158][T22701] unevictable 0 [ 1058.243158][T22701] slab_reclaimable 3784704 [ 1058.243158][T22701] slab_unreclaimable 16482304 [ 1058.243158][T22701] pgfault 89991 [ 1058.243158][T22701] pgmajfault 0 [ 1058.243158][T22701] workingset_refault 495 [ 1058.243158][T22701] workingset_activate 330 [ 1058.243158][T22701] workingset_nodereclaim 0 [ 1058.243158][T22701] pgrefill 4399 [ 1058.243158][T22701] pgscan 4849 [ 1058.243158][T22701] pgsteal 847 [ 1058.336990][T22701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22687,uid=0 [ 1058.352984][T22701] Memory cgroup out of memory: Killed process 22687 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6000000000000000, 0x0}, 0x10000}, 0x1c) 22:33:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9effffff00000000]}}]}, 0x40}}, 0x0) 22:33:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}}]}, 0x40}}, 0x0) 22:33:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x11, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1058.387548][T22735] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:03 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000006c0), 0x4) 22:33:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}}]}, 0x40}}, 0x0) 22:33:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xc405000000000000]}}]}, 0x40}}, 0x0) 22:33:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x12, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1058.546278][T22755] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1058.597367][T22755] CPU: 0 PID: 22755 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1058.606520][T22755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1058.616575][T22755] Call Trace: [ 1058.616596][T22755] dump_stack+0x172/0x1f0 [ 1058.616615][T22755] dump_header+0x177/0x1152 [ 1058.616629][T22755] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1058.616645][T22755] ? ___ratelimit+0x2c8/0x595 [ 1058.639894][T22755] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1058.639918][T22755] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1058.650991][T22755] ? trace_hardirqs_on+0x67/0x240 [ 1058.656032][T22755] ? pagefault_out_of_memory+0x11c/0x11c [ 1058.661688][T22755] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1058.668887][T22755] ? ___ratelimit+0x60/0x595 [ 1058.668901][T22755] ? do_raw_spin_unlock+0x57/0x270 [ 1058.668920][T22755] oom_kill_process.cold+0x10/0x15 [ 1058.683705][T22755] out_of_memory+0x334/0x1340 [ 1058.683727][T22755] ? lock_downgrade+0x920/0x920 [ 1058.693245][T22755] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1058.699064][T22755] ? oom_killer_disable+0x280/0x280 [ 1058.704285][T22755] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1058.709846][T22755] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1058.715495][T22755] ? do_raw_spin_unlock+0x57/0x270 [ 1058.720621][T22755] ? _raw_spin_unlock+0x2d/0x50 [ 1058.725490][T22755] try_charge+0xf4b/0x1440 [ 1058.730192][T22755] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1058.735750][T22755] ? percpu_ref_tryget_live+0x111/0x290 [ 1058.741349][T22755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:33:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf0ffffff00000000]}}]}, 0x40}}, 0x0) [ 1058.747599][T22755] ? __kasan_check_read+0x11/0x20 [ 1058.752639][T22755] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1058.758205][T22755] mem_cgroup_try_charge+0x136/0x590 [ 1058.763502][T22755] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1058.769759][T22755] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1058.775409][T22755] wp_page_copy+0x41e/0x1590 [ 1058.780007][T22755] ? find_held_lock+0x35/0x130 [ 1058.784767][T22755] ? pmd_pfn+0x1d0/0x1d0 [ 1058.784785][T22755] ? lock_downgrade+0x920/0x920 22:33:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}}]}, 0x40}}, 0x0) [ 1058.784801][T22755] ? swp_swapcount+0x540/0x540 [ 1058.784815][T22755] ? __kasan_check_read+0x11/0x20 [ 1058.784830][T22755] ? do_raw_spin_unlock+0x57/0x270 [ 1058.808772][T22755] do_wp_page+0x499/0x14d0 [ 1058.813218][T22755] ? finish_mkwrite_fault+0x570/0x570 [ 1058.818613][T22755] __handle_mm_fault+0x22f1/0x3f20 [ 1058.823740][T22755] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1058.829306][T22755] ? __kasan_check_read+0x11/0x20 [ 1058.834349][T22755] handle_mm_fault+0x1b5/0x6c0 [ 1058.839128][T22755] __do_page_fault+0x536/0xdd0 [ 1058.843922][T22755] do_page_fault+0x38/0x590 [ 1058.848437][T22755] page_fault+0x39/0x40 [ 1058.852593][T22755] RIP: 0033:0x457f3b [ 1058.856493][T22755] Code: 25 20 06 00 00 b8 b0 43 41 00 48 89 15 8e e8 61 00 48 85 c0 74 08 4c 89 cf e8 81 c4 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 4a e0 2b 00 00 00 00 00 48 c7 05 2f e0 2b 00 00 00 00 00 [ 1058.876100][T22755] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010202 [ 1058.882177][T22755] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 00000000004143c3 [ 1058.890159][T22755] RDX: 00000238c327e493 RSI: 0000000000000018 RDI: 0000555556cc5c20 22:33:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}}]}, 0x40}}, 0x0) [ 1058.898132][T22755] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1058.906105][T22755] R10: 0000555556cc5c10 R11: 0000000000000202 R12: 0000000000000001 [ 1058.914099][T22755] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1058.933430][T22755] memory: usage 307200kB, limit 307200kB, failcnt 11590 [ 1058.941440][T22755] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1058.962706][T22755] Memory cgroup stats for /syz3: [ 1058.962803][T22755] anon 222363648 [ 1058.962803][T22755] file 36864 [ 1058.962803][T22755] kernel_stack 13107200 [ 1058.962803][T22755] slab 20267008 [ 1058.962803][T22755] sock 0 [ 1058.962803][T22755] shmem 0 [ 1058.962803][T22755] file_mapped 0 [ 1058.962803][T22755] file_dirty 0 [ 1058.962803][T22755] file_writeback 0 [ 1058.962803][T22755] anon_thp 178257920 [ 1058.962803][T22755] inactive_anon 0 [ 1058.962803][T22755] active_anon 222363648 [ 1058.962803][T22755] inactive_file 0 [ 1058.962803][T22755] active_file 0 [ 1058.962803][T22755] unevictable 0 [ 1058.962803][T22755] slab_reclaimable 3784704 [ 1058.962803][T22755] slab_unreclaimable 16482304 [ 1058.962803][T22755] pgfault 90024 [ 1058.962803][T22755] pgmajfault 0 [ 1058.962803][T22755] workingset_refault 495 [ 1058.962803][T22755] workingset_activate 330 [ 1058.962803][T22755] workingset_nodereclaim 0 [ 1058.962803][T22755] pgrefill 4399 [ 1058.962803][T22755] pgscan 4849 [ 1058.962803][T22755] pgsteal 847 [ 1059.144959][T22755] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22736,uid=0 [ 1059.161175][T22755] Memory cgroup out of memory: Killed process 22736 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6800000000000000, 0x0}, 0x10000}, 0x1c) 22:33:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf5ffffff00000000]}}]}, 0x40}}, 0x0) 22:33:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}}]}, 0x40}}, 0x0) 22:33:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x13, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1059.237333][T22787] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1059.356734][T22809] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 22:33:04 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492967, 0x0) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000)=0x80000001, 0x4) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:33:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x14, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfa01000000000000]}}]}, 0x40}}, 0x0) 22:33:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}}]}, 0x40}}, 0x0) [ 1059.416705][T22809] CPU: 0 PID: 22809 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1059.425859][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1059.435912][T22809] Call Trace: [ 1059.435933][T22809] dump_stack+0x172/0x1f0 [ 1059.435951][T22809] dump_header+0x177/0x1152 [ 1059.435972][T22809] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1059.453856][T22809] ? ___ratelimit+0x2c8/0x595 [ 1059.458551][T22809] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1059.464370][T22809] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1059.469666][T22809] ? trace_hardirqs_on+0x67/0x240 [ 1059.474785][T22809] ? pagefault_out_of_memory+0x11c/0x11c [ 1059.480421][T22809] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1059.480435][T22809] ? ___ratelimit+0x60/0x595 [ 1059.480451][T22809] ? do_raw_spin_unlock+0x57/0x270 [ 1059.495927][T22809] oom_kill_process.cold+0x10/0x15 [ 1059.501056][T22809] out_of_memory+0x334/0x1340 [ 1059.505916][T22809] ? lock_downgrade+0x920/0x920 [ 1059.510778][T22809] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1059.516597][T22809] ? oom_killer_disable+0x280/0x280 [ 1059.521805][T22809] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1059.527352][T22809] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1059.527370][T22809] ? do_raw_spin_unlock+0x57/0x270 [ 1059.527386][T22809] ? _raw_spin_unlock+0x2d/0x50 [ 1059.527404][T22809] try_charge+0xf4b/0x1440 [ 1059.547396][T22809] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1059.552954][T22809] ? percpu_ref_tryget_live+0x111/0x290 [ 1059.558512][T22809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:33:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfcffffff00000000]}}]}, 0x40}}, 0x0) 22:33:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}}]}, 0x40}}, 0x0) [ 1059.564755][T22809] ? __kasan_check_read+0x11/0x20 [ 1059.569791][T22809] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1059.575347][T22809] mem_cgroup_try_charge+0x136/0x590 [ 1059.580634][T22809] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1059.586885][T22809] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1059.592529][T22809] wp_page_copy+0x41e/0x1590 [ 1059.597128][T22809] ? find_held_lock+0x35/0x130 [ 1059.597148][T22809] ? pmd_pfn+0x1d0/0x1d0 [ 1059.597161][T22809] ? lock_downgrade+0x920/0x920 [ 1059.597180][T22809] ? swp_swapcount+0x540/0x540 [ 1059.615746][T22809] ? __kasan_check_read+0x11/0x20 [ 1059.620777][T22809] ? do_raw_spin_unlock+0x57/0x270 [ 1059.625902][T22809] do_wp_page+0x499/0x14d0 [ 1059.630331][T22809] ? finish_mkwrite_fault+0x570/0x570 [ 1059.635713][T22809] __handle_mm_fault+0x22f1/0x3f20 [ 1059.635733][T22809] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1059.635760][T22809] ? __kasan_check_read+0x11/0x20 [ 1059.651407][T22809] handle_mm_fault+0x1b5/0x6c0 [ 1059.656187][T22809] __do_page_fault+0x536/0xdd0 [ 1059.660970][T22809] do_page_fault+0x38/0x590 [ 1059.665480][T22809] page_fault+0x39/0x40 [ 1059.669632][T22809] RIP: 0033:0x457eee [ 1059.673515][T22809] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1059.693123][T22809] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1059.699195][T22809] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1059.707179][T22809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 22:33:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffff7f00000000]}}]}, 0x40}}, 0x0) [ 1059.715153][T22809] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1059.723212][T22809] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1059.731187][T22809] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1059.829461][T22809] memory: usage 307200kB, limit 307200kB, failcnt 11629 [ 1059.850022][T22809] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1059.857832][T22809] Memory cgroup stats for /syz3: [ 1059.857941][T22809] anon 222363648 [ 1059.857941][T22809] file 36864 [ 1059.857941][T22809] kernel_stack 13107200 [ 1059.857941][T22809] slab 20267008 [ 1059.857941][T22809] sock 0 [ 1059.857941][T22809] shmem 0 [ 1059.857941][T22809] file_mapped 0 [ 1059.857941][T22809] file_dirty 0 [ 1059.857941][T22809] file_writeback 0 [ 1059.857941][T22809] anon_thp 178257920 [ 1059.857941][T22809] inactive_anon 0 [ 1059.857941][T22809] active_anon 222363648 [ 1059.857941][T22809] inactive_file 57344 [ 1059.857941][T22809] active_file 0 [ 1059.857941][T22809] unevictable 0 [ 1059.857941][T22809] slab_reclaimable 3784704 [ 1059.857941][T22809] slab_unreclaimable 16482304 [ 1059.857941][T22809] pgfault 90123 [ 1059.857941][T22809] pgmajfault 0 [ 1059.857941][T22809] workingset_refault 495 [ 1059.857941][T22809] workingset_activate 330 [ 1059.857941][T22809] workingset_nodereclaim 0 [ 1059.857941][T22809] pgrefill 4399 [ 1059.857941][T22809] pgscan 4849 [ 1059.857941][T22809] pgsteal 847 [ 1059.968584][T22809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22788,uid=0 [ 1059.990125][T22809] Memory cgroup out of memory: Killed process 22788 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x6c00000000000000, 0x0}, 0x10000}, 0x1c) 22:33:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000]}}]}, 0x40}}, 0x0) 22:33:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x15, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffffff00000000]}}]}, 0x40}}, 0x0) [ 1060.051454][T22837] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1060.221010][T22853] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:33:05 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}]}, 0x40}}, 0x0) 22:33:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x60, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1060.298274][T22853] CPU: 0 PID: 22853 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1060.307428][T22853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.317486][T22853] Call Trace: [ 1060.320950][T22853] dump_stack+0x172/0x1f0 [ 1060.325297][T22853] dump_header+0x177/0x1152 [ 1060.329801][T22853] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1060.335598][T22853] ? ___ratelimit+0x2c8/0x595 [ 1060.335611][T22853] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xfffffffffffff000]}}]}, 0x40}}, 0x0) [ 1060.335626][T22853] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1060.335640][T22853] ? trace_hardirqs_on+0x67/0x240 [ 1060.335655][T22853] ? pagefault_out_of_memory+0x11c/0x11c [ 1060.335672][T22853] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1060.367821][T22853] ? ___ratelimit+0x60/0x595 [ 1060.372417][T22853] ? do_raw_spin_unlock+0x57/0x270 [ 1060.377548][T22853] oom_kill_process.cold+0x10/0x15 [ 1060.382668][T22853] out_of_memory+0x334/0x1340 [ 1060.387352][T22853] ? lock_downgrade+0x920/0x920 [ 1060.392214][T22853] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1060.398031][T22853] ? oom_killer_disable+0x280/0x280 [ 1060.403236][T22853] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1060.408788][T22853] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1060.408805][T22853] ? do_raw_spin_unlock+0x57/0x270 [ 1060.408821][T22853] ? _raw_spin_unlock+0x2d/0x50 [ 1060.408839][T22853] try_charge+0xf4b/0x1440 [ 1060.428834][T22853] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1060.434385][T22853] ? find_held_lock+0x35/0x130 [ 1060.439159][T22853] ? get_mem_cgroup_from_mm+0x139/0x320 22:33:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}]}, 0x40}}, 0x0) [ 1060.444719][T22853] ? lock_downgrade+0x920/0x920 [ 1060.449582][T22853] ? percpu_ref_tryget_live+0x111/0x290 [ 1060.455148][T22853] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1060.460640][T22853] ? memcg_kmem_put_cache+0x50/0x50 [ 1060.465850][T22853] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1060.471406][T22853] __memcg_kmem_charge+0x13a/0x3a0 [ 1060.476535][T22853] __alloc_pages_nodemask+0x4f7/0x900 [ 1060.481912][T22853] ? find_held_lock+0x35/0x130 [ 1060.486684][T22853] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1060.492427][T22853] ? __kasan_check_read+0x11/0x20 22:33:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1060.497468][T22853] ? mark_lock+0xc2/0x1220 [ 1060.501900][T22853] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1060.508148][T22853] alloc_pages_current+0x107/0x210 [ 1060.513268][T22853] pte_alloc_one+0x1b/0x1a0 [ 1060.517781][T22853] __handle_mm_fault+0x34d7/0x3f20 [ 1060.522906][T22853] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1060.528475][T22853] ? __kasan_check_read+0x11/0x20 [ 1060.533520][T22853] handle_mm_fault+0x1b5/0x6c0 [ 1060.538296][T22853] __do_page_fault+0x536/0xdd0 [ 1060.543082][T22853] ? page_fault+0x16/0x40 [ 1060.547430][T22853] do_page_fault+0x38/0x590 [ 1060.551937][T22853] page_fault+0x39/0x40 [ 1060.556085][T22853] RIP: 0033:0x457eba [ 1060.559985][T22853] Code: Bad RIP value. [ 1060.564053][T22853] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010246 [ 1060.570378][T22853] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1060.578341][T22853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1060.578354][T22853] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1060.594279][T22853] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1060.602246][T22853] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1060.688888][T22853] memory: usage 307200kB, limit 307200kB, failcnt 11660 [ 1060.699011][T22853] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1060.710352][T22853] Memory cgroup stats for /syz3: [ 1060.710463][T22853] anon 222363648 [ 1060.710463][T22853] file 36864 [ 1060.710463][T22853] kernel_stack 13107200 [ 1060.710463][T22853] slab 20267008 [ 1060.710463][T22853] sock 0 [ 1060.710463][T22853] shmem 0 [ 1060.710463][T22853] file_mapped 0 [ 1060.710463][T22853] file_dirty 0 [ 1060.710463][T22853] file_writeback 0 [ 1060.710463][T22853] anon_thp 178257920 [ 1060.710463][T22853] inactive_anon 0 [ 1060.710463][T22853] active_anon 222363648 [ 1060.710463][T22853] inactive_file 57344 [ 1060.710463][T22853] active_file 0 [ 1060.710463][T22853] unevictable 0 [ 1060.710463][T22853] slab_reclaimable 3784704 [ 1060.710463][T22853] slab_unreclaimable 16482304 [ 1060.710463][T22853] pgfault 90189 [ 1060.710463][T22853] pgmajfault 0 [ 1060.710463][T22853] workingset_refault 495 [ 1060.710463][T22853] workingset_activate 330 [ 1060.710463][T22853] workingset_nodereclaim 0 [ 1060.710463][T22853] pgrefill 4399 [ 1060.710463][T22853] pgscan 4849 [ 1060.710463][T22853] pgsteal 847 [ 1060.717633][T22853] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22839,uid=0 [ 1060.837348][T22853] Memory cgroup out of memory: Killed process 22839 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:05 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x7400000000000000, 0x0}, 0x10000}, 0x1c) 22:33:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2]}}]}, 0x40}}, 0x0) 22:33:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800000000000000]}}]}, 0x40}}, 0x0) 22:33:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x78, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1060.897187][T22889] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:06 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}}]}, 0x40}}, 0x0) [ 1061.051556][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1061.077280][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1061.086342][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1061.096406][ T8812] Call Trace: [ 1061.099703][ T8812] dump_stack+0x172/0x1f0 [ 1061.104045][ T8812] dump_header+0x177/0x1152 [ 1061.108558][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1061.114367][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1061.119064][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1061.124885][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1061.130176][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1061.135207][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1061.140844][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1061.146647][ T8812] ? ___ratelimit+0x60/0x595 [ 1061.146659][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1061.146676][ T8812] oom_kill_process.cold+0x10/0x15 [ 1061.146692][ T8812] out_of_memory+0x334/0x1340 [ 1061.146706][ T8812] ? lock_downgrade+0x920/0x920 [ 1061.146721][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1061.146738][ T8812] ? oom_killer_disable+0x280/0x280 [ 1061.182134][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1061.187694][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1061.193428][ T8812] ? do_raw_spin_unlock+0x57/0x270 22:33:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000]}}]}, 0x40}}, 0x0) 22:33:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe201000000000000]}}]}, 0x40}}, 0x0) [ 1061.198554][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1061.203420][ T8812] try_charge+0xf4b/0x1440 [ 1061.207857][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1061.213433][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1061.218992][ T8812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1061.225242][ T8812] ? __kasan_check_read+0x11/0x20 [ 1061.230286][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1061.235870][ T8812] mem_cgroup_try_charge+0x136/0x590 [ 1061.241160][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1061.247411][ T8812] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1061.253077][ T8812] wp_page_copy+0x41e/0x1590 [ 1061.257758][ T8812] ? find_held_lock+0x35/0x130 [ 1061.262607][ T8812] ? pmd_pfn+0x1d0/0x1d0 [ 1061.266870][ T8812] ? lock_downgrade+0x920/0x920 [ 1061.271721][ T8812] ? swp_swapcount+0x540/0x540 [ 1061.276490][ T8812] ? __kasan_check_read+0x11/0x20 [ 1061.281526][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1061.286649][ T8812] do_wp_page+0x499/0x14d0 [ 1061.291076][ T8812] ? finish_mkwrite_fault+0x570/0x570 [ 1061.296466][ T8812] __handle_mm_fault+0x22f1/0x3f20 22:33:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea02000000000000]}}]}, 0x40}}, 0x0) [ 1061.301598][ T8812] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1061.307164][ T8812] ? __kasan_check_read+0x11/0x20 [ 1061.312204][ T8812] handle_mm_fault+0x1b5/0x6c0 [ 1061.317593][ T8812] __do_page_fault+0x536/0xdd0 [ 1061.322384][ T8812] do_page_fault+0x38/0x590 [ 1061.326902][ T8812] page_fault+0x39/0x40 [ 1061.331061][ T8812] RIP: 0033:0x45801a 22:33:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec02000000000000]}}]}, 0x40}}, 0x0) 22:33:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1061.334965][ T8812] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba [ 1061.354585][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010246 [ 1061.360680][ T8812] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1061.368662][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a74fc8 [ 1061.376658][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1061.384656][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 00000000000000ca [ 1061.392651][ T8812] R13: 0000000000001635 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1061.423712][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11685 [ 1061.444146][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1061.458675][ T8812] Memory cgroup stats for /syz3: [ 1061.458790][ T8812] anon 222363648 [ 1061.458790][ T8812] file 36864 [ 1061.458790][ T8812] kernel_stack 13107200 [ 1061.458790][ T8812] slab 20267008 [ 1061.458790][ T8812] sock 0 [ 1061.458790][ T8812] shmem 0 [ 1061.458790][ T8812] file_mapped 0 [ 1061.458790][ T8812] file_dirty 0 [ 1061.458790][ T8812] file_writeback 0 [ 1061.458790][ T8812] anon_thp 178257920 [ 1061.458790][ T8812] inactive_anon 0 [ 1061.458790][ T8812] active_anon 222363648 [ 1061.458790][ T8812] inactive_file 57344 [ 1061.458790][ T8812] active_file 0 [ 1061.458790][ T8812] unevictable 0 [ 1061.458790][ T8812] slab_reclaimable 3784704 [ 1061.458790][ T8812] slab_unreclaimable 16482304 [ 1061.458790][ T8812] pgfault 90255 [ 1061.458790][ T8812] pgmajfault 0 [ 1061.458790][ T8812] workingset_refault 495 [ 1061.458790][ T8812] workingset_activate 330 [ 1061.458790][ T8812] workingset_nodereclaim 0 [ 1061.458790][ T8812] pgrefill 4432 [ 1061.458790][ T8812] pgscan 4882 [ 1061.458790][ T8812] pgsteal 847 [ 1061.596932][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22890,uid=0 [ 1061.633405][ T8812] Memory cgroup out of memory: Killed process 22890 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1061.665047][T22910] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1061.677290][T22910] CPU: 0 PID: 22910 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1061.686396][T22910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1061.696466][T22910] Call Trace: [ 1061.699770][T22910] dump_stack+0x172/0x1f0 [ 1061.704112][T22910] dump_header+0x177/0x1152 [ 1061.708629][T22910] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1061.714451][T22910] ? ___ratelimit+0x2c8/0x595 [ 1061.719140][T22910] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1061.724958][T22910] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1061.730248][T22910] ? trace_hardirqs_on+0x67/0x240 [ 1061.735266][T22910] ? pagefault_out_of_memory+0x11c/0x11c [ 1061.735284][T22910] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1061.735296][T22910] ? ___ratelimit+0x60/0x595 [ 1061.735309][T22910] ? do_raw_spin_unlock+0x57/0x270 [ 1061.735325][T22910] oom_kill_process.cold+0x10/0x15 [ 1061.735338][T22910] out_of_memory+0x334/0x1340 [ 1061.735355][T22910] ? lock_downgrade+0x920/0x920 [ 1061.771056][T22910] ? oom_killer_disable+0x280/0x280 [ 1061.776282][T22910] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1061.781850][T22910] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1061.787587][T22910] ? do_raw_spin_unlock+0x57/0x270 [ 1061.792715][T22910] ? _raw_spin_unlock+0x2d/0x50 [ 1061.797588][T22910] try_charge+0xa2d/0x1440 [ 1061.802029][T22910] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1061.807581][T22910] ? find_held_lock+0x35/0x130 [ 1061.812359][T22910] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1061.817908][T22910] ? lock_downgrade+0x920/0x920 [ 1061.822739][T22910] ? percpu_ref_tryget_live+0x111/0x290 [ 1061.828271][T22910] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1061.833767][T22910] ? memcg_kmem_put_cache+0x50/0x50 [ 1061.838960][T22910] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1061.844488][T22910] __memcg_kmem_charge+0x13a/0x3a0 [ 1061.849579][T22910] __alloc_pages_nodemask+0x4f7/0x900 [ 1061.854930][T22910] ? find_held_lock+0x35/0x130 [ 1061.859682][T22910] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1061.865381][T22910] ? __kasan_check_read+0x11/0x20 [ 1061.870380][T22910] ? mark_lock+0xc2/0x1220 [ 1061.874784][T22910] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1061.881006][T22910] alloc_pages_current+0x107/0x210 [ 1061.886098][T22910] pte_alloc_one+0x1b/0x1a0 [ 1061.890579][T22910] __handle_mm_fault+0x34d7/0x3f20 [ 1061.896105][T22910] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1061.901665][T22910] ? __kasan_check_read+0x11/0x20 [ 1061.906680][T22910] handle_mm_fault+0x1b5/0x6c0 [ 1061.911440][T22910] __do_page_fault+0x536/0xdd0 [ 1061.916194][T22910] ? page_fault+0x16/0x40 [ 1061.920507][T22910] do_page_fault+0x38/0x590 [ 1061.924988][T22910] page_fault+0x39/0x40 [ 1061.929121][T22910] RIP: 0033:0x457eba [ 1061.933001][T22910] Code: Bad RIP value. [ 1061.937050][T22910] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010246 [ 1061.943090][T22910] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1061.951040][T22910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1061.959001][T22910] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1061.966949][T22910] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1061.974899][T22910] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1061.983386][T22910] memory: usage 305000kB, limit 307200kB, failcnt 11685 [ 1061.990858][T22910] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1061.998035][T22910] Memory cgroup stats for /syz3: [ 1061.998137][T22910] anon 220213248 [ 1061.998137][T22910] file 36864 [ 1061.998137][T22910] kernel_stack 13107200 [ 1061.998137][T22910] slab 20267008 [ 1061.998137][T22910] sock 0 [ 1061.998137][T22910] shmem 0 [ 1061.998137][T22910] file_mapped 0 [ 1061.998137][T22910] file_dirty 0 [ 1061.998137][T22910] file_writeback 0 [ 1061.998137][T22910] anon_thp 176160768 [ 1061.998137][T22910] inactive_anon 0 [ 1061.998137][T22910] active_anon 220213248 [ 1061.998137][T22910] inactive_file 57344 [ 1061.998137][T22910] active_file 0 [ 1061.998137][T22910] unevictable 0 [ 1061.998137][T22910] slab_reclaimable 3784704 [ 1061.998137][T22910] slab_unreclaimable 16482304 [ 1061.998137][T22910] pgfault 90255 [ 1061.998137][T22910] pgmajfault 0 [ 1061.998137][T22910] workingset_refault 495 [ 1061.998137][T22910] workingset_activate 330 [ 1061.998137][T22910] workingset_nodereclaim 0 [ 1061.998137][T22910] pgrefill 4432 [ 1061.998137][T22910] pgscan 4882 [ 1061.998137][T22910] pgsteal 847 [ 1062.092194][T22910] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22339,uid=0 [ 1062.108061][T22910] Memory cgroup out of memory: Killed process 22339 (syz-executor.3) total-vm:72576kB, anon-rss:2196kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x7a00000000000000, 0x0}, 0x10000}, 0x1c) 22:33:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xc7, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3]}}]}, 0x40}}, 0x0) 22:33:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000]}}]}, 0x40}}, 0x0) 22:33:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:07 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492967, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x20601, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r4, 0x100000001}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x9, 0x10000, 0x8000, 0x1, 0x9, 0x401, 0x3f, 0x1, r4}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r5, 0x3}, &(0x7f0000000100)=0x8) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) [ 1062.142269][T22945] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xf0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}}]}, 0x40}}, 0x0) 22:33:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0xfffffffffffff000, 0x0}, 0x10000}, 0x1c) [ 1062.242908][T22965] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4]}}]}, 0x40}}, 0x0) 22:33:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1062.439428][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1062.502763][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1062.511823][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1062.521969][ T8812] Call Trace: [ 1062.525271][ T8812] dump_stack+0x172/0x1f0 [ 1062.529624][ T8812] dump_header+0x177/0x1152 [ 1062.534141][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1062.539951][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1062.544635][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff00000000]}}]}, 0x40}}, 0x0) [ 1062.550448][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1062.555742][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1062.560780][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1062.566423][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1062.572243][ T8812] ? ___ratelimit+0x60/0x595 [ 1062.576857][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1062.581975][ T8812] oom_kill_process.cold+0x10/0x15 [ 1062.587091][ T8812] out_of_memory+0x334/0x1340 [ 1062.591768][ T8812] ? lock_downgrade+0x920/0x920 [ 1062.596622][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1062.596640][ T8812] ? oom_killer_disable+0x280/0x280 [ 1062.596662][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1062.596679][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1062.618846][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1062.623980][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1062.628849][ T8812] try_charge+0xf4b/0x1440 [ 1062.633291][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1062.639817][ T8812] ? find_held_lock+0x35/0x130 [ 1062.644594][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 22:33:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}}]}, 0x40}}, 0x0) [ 1062.650153][ T8812] ? lock_downgrade+0x920/0x920 [ 1062.655011][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1062.660568][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1062.666031][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1062.671237][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1062.676791][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1062.681908][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1062.687283][ T8812] ? __schedule+0x776/0x17a0 [ 1062.691886][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1062.697638][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1062.702675][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1062.712400][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1062.718651][ T8812] alloc_pages_current+0x107/0x210 [ 1062.718669][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1062.718684][ T8812] __pte_alloc+0x20/0x310 [ 1062.718699][ T8812] copy_page_range+0x14da/0x1ed0 [ 1062.718733][ T8812] ? pmd_alloc+0x180/0x180 [ 1062.741955][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1062.747424][ T8812] ? validate_mm_rb+0xa3/0xc0 22:33:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}}]}, 0x40}}, 0x0) [ 1062.752115][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1062.756893][ T8812] dup_mm+0xa67/0x1430 [ 1062.761154][ T8812] ? vm_area_dup+0x170/0x170 [ 1062.766273][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1062.771138][ T8812] copy_process+0x2671/0x6830 [ 1062.775824][ T8812] ? __kasan_check_read+0x11/0x20 [ 1062.780869][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1062.785810][ T8812] ? __might_fault+0x12b/0x1e0 [ 1062.791015][ T8812] ? __might_fault+0x12b/0x1e0 [ 1062.795795][ T8812] _do_fork+0x146/0xfa0 [ 1062.799968][ T8812] ? copy_init_mm+0x20/0x20 [ 1062.804475][ T8812] ? __kasan_check_read+0x11/0x20 [ 1062.809489][ T8812] ? _copy_to_user+0x118/0x160 [ 1062.809511][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1062.809526][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1062.809548][ T8812] ? do_syscall_64+0x26/0x760 [ 1062.809569][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1062.833837][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1062.838876][ T8812] do_syscall_64+0xfa/0x760 [ 1062.843400][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1062.849382][ T8812] RIP: 0033:0x457eba 22:33:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}}]}, 0x40}}, 0x0) 22:33:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, 0x40}}, 0x0) [ 1062.853279][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1062.872889][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1062.881310][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1062.889293][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 22:33:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x300, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1062.897275][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1062.905264][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1062.913240][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1062.985258][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11719 [ 1062.993521][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1063.000592][ T8812] Memory cgroup stats for /syz3: [ 1063.000693][ T8812] anon 222375936 [ 1063.000693][ T8812] file 36864 [ 1063.000693][ T8812] kernel_stack 13107200 [ 1063.000693][ T8812] slab 20267008 [ 1063.000693][ T8812] sock 0 [ 1063.000693][ T8812] shmem 0 [ 1063.000693][ T8812] file_mapped 0 [ 1063.000693][ T8812] file_dirty 0 [ 1063.000693][ T8812] file_writeback 0 [ 1063.000693][ T8812] anon_thp 178257920 [ 1063.000693][ T8812] inactive_anon 0 [ 1063.000693][ T8812] active_anon 222375936 [ 1063.000693][ T8812] inactive_file 57344 [ 1063.000693][ T8812] active_file 0 [ 1063.000693][ T8812] unevictable 0 [ 1063.000693][ T8812] slab_reclaimable 3784704 [ 1063.000693][ T8812] slab_unreclaimable 16482304 [ 1063.000693][ T8812] pgfault 90354 [ 1063.000693][ T8812] pgmajfault 0 [ 1063.000693][ T8812] workingset_refault 495 [ 1063.000693][ T8812] workingset_activate 330 [ 1063.000693][ T8812] workingset_nodereclaim 0 22:33:08 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5]}}]}, 0x40}}, 0x0) 22:33:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1063.000693][ T8812] pgrefill 4432 [ 1063.000693][ T8812] pgscan 4882 [ 1063.000693][ T8812] pgsteal 847 [ 1063.219755][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22968,uid=0 [ 1063.244115][ T8812] Memory cgroup out of memory: Killed process 22968 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10002}, 0x1c) 22:33:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x500, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, 0x40}}, 0x0) 22:33:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6]}}]}, 0x40}}, 0x0) 22:33:08 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x800000000000, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1063.286853][T23041] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1063.420173][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:33:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, 0x40}}, 0x0) [ 1063.511299][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1063.520366][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1063.530525][ T8812] Call Trace: [ 1063.533827][ T8812] dump_stack+0x172/0x1f0 [ 1063.538172][ T8812] dump_header+0x177/0x1152 [ 1063.542683][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1063.548477][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1063.548490][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1063.548506][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1063.548520][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1063.548538][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1063.574905][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1063.580719][ T8812] ? ___ratelimit+0x60/0x595 [ 1063.585313][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1063.590436][ T8812] oom_kill_process.cold+0x10/0x15 [ 1063.595561][ T8812] out_of_memory+0x334/0x1340 [ 1063.600244][ T8812] ? lock_downgrade+0x920/0x920 [ 1063.605104][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:33:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}]}, 0x40}}, 0x0) [ 1063.610921][ T8812] ? oom_killer_disable+0x280/0x280 [ 1063.616136][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1063.621692][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1063.627342][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1063.632477][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1063.637323][ T8812] try_charge+0xf4b/0x1440 [ 1063.637347][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1063.637361][ T8812] ? find_held_lock+0x35/0x130 [ 1063.637378][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 22:33:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}]}, 0x40}}, 0x0) [ 1063.657695][ T8812] ? lock_downgrade+0x920/0x920 [ 1063.662556][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1063.668114][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1063.673584][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1063.678795][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1063.684353][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1063.689468][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1063.694842][ T8812] ? stack_trace_consume_entry+0x190/0x190 [ 1063.700660][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1063.706381][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1063.711413][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1063.716444][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1063.722688][ T8812] alloc_pages_current+0x107/0x210 [ 1063.727792][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1063.727809][ T8812] __pte_alloc+0x20/0x310 [ 1063.727826][ T8812] copy_page_range+0x14da/0x1ed0 [ 1063.727860][ T8812] ? pmd_alloc+0x180/0x180 [ 1063.746001][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1063.751469][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1063.756156][ T8812] ? __vma_link_rb+0x5ad/0x770 22:33:08 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) prctl$PR_GET_THP_DISABLE(0x2a) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) [ 1063.761654][ T8812] dup_mm+0xa67/0x1430 [ 1063.765748][ T8812] ? vm_area_dup+0x170/0x170 [ 1063.770350][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1063.775820][ T8812] copy_process+0x2671/0x6830 [ 1063.780503][ T8812] ? __kasan_check_read+0x11/0x20 [ 1063.785551][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1063.790491][ T8812] ? __might_fault+0x12b/0x1e0 [ 1063.795261][ T8812] ? __might_fault+0x12b/0x1e0 [ 1063.800040][ T8812] _do_fork+0x146/0xfa0 [ 1063.804205][ T8812] ? copy_init_mm+0x20/0x20 [ 1063.808723][ T8812] ? __kasan_check_read+0x11/0x20 [ 1063.813749][ T8812] ? _copy_to_user+0x118/0x160 [ 1063.818541][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1063.823317][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1063.828181][ T8812] ? do_syscall_64+0x26/0x760 [ 1063.832853][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1063.838144][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1063.843185][ T8812] do_syscall_64+0xfa/0x760 [ 1063.847699][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1063.853588][ T8812] RIP: 0033:0x457eba 22:33:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, 0x40}}, 0x0) [ 1063.857486][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1063.877096][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1063.885503][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1063.893465][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1063.893477][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 22:33:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1063.909405][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1063.917384][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1063.969264][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11730 [ 1063.983661][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1063.997616][ T8812] Memory cgroup stats for /syz3: [ 1063.997722][ T8812] anon 222375936 [ 1063.997722][ T8812] file 36864 [ 1063.997722][ T8812] kernel_stack 13107200 [ 1063.997722][ T8812] slab 20267008 [ 1063.997722][ T8812] sock 0 [ 1063.997722][ T8812] shmem 0 [ 1063.997722][ T8812] file_mapped 0 [ 1063.997722][ T8812] file_dirty 0 [ 1063.997722][ T8812] file_writeback 0 [ 1063.997722][ T8812] anon_thp 178257920 [ 1063.997722][ T8812] inactive_anon 0 [ 1063.997722][ T8812] active_anon 222375936 [ 1063.997722][ T8812] inactive_file 57344 [ 1063.997722][ T8812] active_file 0 [ 1063.997722][ T8812] unevictable 0 [ 1063.997722][ T8812] slab_reclaimable 3784704 [ 1063.997722][ T8812] slab_unreclaimable 16482304 [ 1063.997722][ T8812] pgfault 90420 [ 1063.997722][ T8812] pgmajfault 0 [ 1063.997722][ T8812] workingset_refault 528 [ 1063.997722][ T8812] workingset_activate 330 [ 1063.997722][ T8812] workingset_nodereclaim 0 [ 1063.997722][ T8812] pgrefill 4432 [ 1063.997722][ T8812] pgscan 4882 [ 1063.997722][ T8812] pgsteal 847 [ 1064.008461][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23042,uid=0 [ 1064.202301][ T8812] Memory cgroup out of memory: Killed process 23042 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10003}, 0x1c) 22:33:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x600, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8]}}]}, 0x40}}, 0x0) 22:33:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}, 0x40}}, 0x0) 22:33:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1064.273123][T23099] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1064.342352][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:33:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9]}}]}, 0x40}}, 0x0) [ 1064.406025][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1064.415095][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1064.425169][ T8812] Call Trace: [ 1064.428473][ T8812] dump_stack+0x172/0x1f0 [ 1064.432823][ T8812] dump_header+0x177/0x1152 [ 1064.437341][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1064.443158][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1064.447846][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1064.453665][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1064.458971][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1064.463999][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1064.469646][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1064.469659][ T8812] ? ___ratelimit+0x60/0x595 [ 1064.469670][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1064.469685][ T8812] oom_kill_process.cold+0x10/0x15 [ 1064.469707][ T8812] out_of_memory+0x334/0x1340 [ 1064.494949][ T8812] ? lock_downgrade+0x920/0x920 [ 1064.499819][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:33:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa]}}]}, 0x40}}, 0x0) [ 1064.505660][ T8812] ? oom_killer_disable+0x280/0x280 [ 1064.510880][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1064.516436][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1064.522353][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1064.527478][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1064.532338][ T8812] try_charge+0xf4b/0x1440 [ 1064.536770][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1064.542316][ T8812] ? find_held_lock+0x35/0x130 [ 1064.547086][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1064.552641][ T8812] ? lock_downgrade+0x920/0x920 [ 1064.557500][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1064.563044][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1064.568514][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1064.573718][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1064.579285][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1064.584416][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1064.589803][ T8812] ? stack_trace_consume_entry+0x190/0x190 [ 1064.595627][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 22:33:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xb]}}]}, 0x40}}, 0x0) [ 1064.602483][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1064.607518][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1064.612557][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1064.618809][ T8812] alloc_pages_current+0x107/0x210 [ 1064.623933][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1064.628706][ T8812] __pte_alloc+0x20/0x310 [ 1064.633045][ T8812] copy_page_range+0x14da/0x1ed0 [ 1064.638014][ T8812] ? pmd_alloc+0x180/0x180 [ 1064.642434][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1064.647886][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1064.647903][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1064.647922][ T8812] dup_mm+0xa67/0x1430 [ 1064.647948][ T8812] ? vm_area_dup+0x170/0x170 [ 1064.666017][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1064.670885][ T8812] copy_process+0x2671/0x6830 [ 1064.675572][ T8812] ? __kasan_check_read+0x11/0x20 [ 1064.680636][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1064.685582][ T8812] ? __might_fault+0x12b/0x1e0 [ 1064.690361][ T8812] ? __might_fault+0x12b/0x1e0 [ 1064.690386][ T8812] _do_fork+0x146/0xfa0 [ 1064.690404][ T8812] ? copy_init_mm+0x20/0x20 [ 1064.703809][ T8812] ? __kasan_check_read+0x11/0x20 [ 1064.708929][ T8812] ? _copy_to_user+0x118/0x160 [ 1064.714238][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1064.719002][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1064.719027][ T8812] ? do_syscall_64+0x26/0x760 [ 1064.719043][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1064.719059][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1064.719079][ T8812] do_syscall_64+0xfa/0x760 [ 1064.743530][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.749426][ T8812] RIP: 0033:0x457eba [ 1064.753324][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1064.772936][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1064.781444][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1064.789421][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1064.797402][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1064.805370][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1064.805378][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:33:09 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492967, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x5, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) 22:33:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}, 0x40}}, 0x0) [ 1064.976010][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11759 [ 1064.983004][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1065.008259][ T8812] Memory cgroup stats for /syz3: [ 1065.008360][ T8812] anon 222375936 [ 1065.008360][ T8812] file 36864 [ 1065.008360][ T8812] kernel_stack 13107200 [ 1065.008360][ T8812] slab 20267008 [ 1065.008360][ T8812] sock 0 [ 1065.008360][ T8812] shmem 0 [ 1065.008360][ T8812] file_mapped 0 [ 1065.008360][ T8812] file_dirty 0 [ 1065.008360][ T8812] file_writeback 0 [ 1065.008360][ T8812] anon_thp 178257920 [ 1065.008360][ T8812] inactive_anon 0 [ 1065.008360][ T8812] active_anon 222375936 [ 1065.008360][ T8812] inactive_file 57344 [ 1065.008360][ T8812] active_file 0 [ 1065.008360][ T8812] unevictable 0 [ 1065.008360][ T8812] slab_reclaimable 3784704 [ 1065.008360][ T8812] slab_unreclaimable 16482304 [ 1065.008360][ T8812] pgfault 90486 [ 1065.008360][ T8812] pgmajfault 0 [ 1065.008360][ T8812] workingset_refault 528 [ 1065.008360][ T8812] workingset_activate 330 [ 1065.008360][ T8812] workingset_nodereclaim 0 [ 1065.008360][ T8812] pgrefill 4432 [ 1065.008360][ T8812] pgscan 4882 [ 1065.008360][ T8812] pgsteal 847 [ 1065.103460][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23102,uid=0 [ 1065.120284][ T8812] Memory cgroup out of memory: Killed process 23102 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf]}}]}, 0x40}}, 0x0) 22:33:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10004}, 0x1c) 22:33:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}]}, 0x40}}, 0x0) 22:33:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:10 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x900, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1065.170930][T23157] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1065.285175][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1065.310936][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1065.319996][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.330057][ T8812] Call Trace: [ 1065.333357][ T8812] dump_stack+0x172/0x1f0 [ 1065.337710][ T8812] dump_header+0x177/0x1152 [ 1065.342335][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1065.348148][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1065.352821][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1065.358763][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1065.364054][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1065.369100][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1065.374840][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1065.380657][ T8812] ? ___ratelimit+0x60/0x595 22:33:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x10]}}]}, 0x40}}, 0x0) 22:33:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1065.385252][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1065.385274][ T8812] oom_kill_process.cold+0x10/0x15 [ 1065.385295][ T8812] out_of_memory+0x334/0x1340 [ 1065.385315][ T8812] ? lock_downgrade+0x920/0x920 [ 1065.395542][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1065.395561][ T8812] ? oom_killer_disable+0x280/0x280 [ 1065.395588][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1065.395611][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1065.427267][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1065.432402][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1065.437276][ T8812] try_charge+0xf4b/0x1440 [ 1065.441720][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1065.447276][ T8812] ? find_held_lock+0x35/0x130 [ 1065.452095][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1065.457674][ T8812] ? lock_downgrade+0x920/0x920 [ 1065.462536][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1065.468102][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1065.473570][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1065.478779][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 22:33:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x11]}}]}, 0x40}}, 0x0) [ 1065.484335][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1065.489457][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1065.494838][ T8812] ? stack_trace_consume_entry+0x190/0x190 [ 1065.500647][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1065.506368][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1065.511410][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1065.516444][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1065.516468][ T8812] alloc_pages_current+0x107/0x210 [ 1065.528358][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1065.528374][ T8812] __pte_alloc+0x20/0x310 [ 1065.528391][ T8812] copy_page_range+0x14da/0x1ed0 [ 1065.528429][ T8812] ? pmd_alloc+0x180/0x180 [ 1065.546540][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1065.552027][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1065.556986][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1065.561780][ T8812] dup_mm+0xa67/0x1430 [ 1065.565884][ T8812] ? vm_area_dup+0x170/0x170 [ 1065.570483][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1065.575347][ T8812] copy_process+0x2671/0x6830 [ 1065.580035][ T8812] ? __kasan_check_read+0x11/0x20 [ 1065.585102][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1065.590054][ T8812] ? __might_fault+0x12b/0x1e0 [ 1065.594827][ T8812] ? __might_fault+0x12b/0x1e0 [ 1065.599605][ T8812] _do_fork+0x146/0xfa0 [ 1065.603776][ T8812] ? copy_init_mm+0x20/0x20 [ 1065.608294][ T8812] ? __kasan_check_read+0x11/0x20 [ 1065.613323][ T8812] ? _copy_to_user+0x118/0x160 [ 1065.618099][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1065.622869][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1065.627732][ T8812] ? do_syscall_64+0x26/0x760 22:33:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x12]}}]}, 0x40}}, 0x0) 22:33:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1065.632420][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1065.637709][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1065.642744][ T8812] do_syscall_64+0xfa/0x760 [ 1065.647260][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1065.653149][ T8812] RIP: 0033:0x457eba [ 1065.657048][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1065.676640][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 22:33:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}]}, 0x40}}, 0x0) [ 1065.676652][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1065.676659][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1065.676667][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1065.676674][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1065.676682][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1065.699152][ T8812] memory: usage 307192kB, limit 307200kB, failcnt 11781 [ 1065.859307][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1065.873130][ T8812] Memory cgroup stats for /syz3: [ 1065.873234][ T8812] anon 222375936 [ 1065.873234][ T8812] file 36864 [ 1065.873234][ T8812] kernel_stack 13107200 [ 1065.873234][ T8812] slab 20267008 [ 1065.873234][ T8812] sock 0 [ 1065.873234][ T8812] shmem 0 [ 1065.873234][ T8812] file_mapped 0 [ 1065.873234][ T8812] file_dirty 0 [ 1065.873234][ T8812] file_writeback 0 [ 1065.873234][ T8812] anon_thp 178257920 [ 1065.873234][ T8812] inactive_anon 0 [ 1065.873234][ T8812] active_anon 222375936 [ 1065.873234][ T8812] inactive_file 57344 [ 1065.873234][ T8812] active_file 0 [ 1065.873234][ T8812] unevictable 0 [ 1065.873234][ T8812] slab_reclaimable 3784704 [ 1065.873234][ T8812] slab_unreclaimable 16482304 [ 1065.873234][ T8812] pgfault 90552 [ 1065.873234][ T8812] pgmajfault 0 [ 1065.873234][ T8812] workingset_refault 528 [ 1065.873234][ T8812] workingset_activate 330 [ 1065.873234][ T8812] workingset_nodereclaim 0 [ 1065.873234][ T8812] pgrefill 4432 [ 1065.873234][ T8812] pgscan 4882 [ 1065.873234][ T8812] pgsteal 847 [ 1065.884869][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23158,uid=0 [ 1065.991011][ T8812] Memory cgroup out of memory: Killed process 23158 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10005}, 0x1c) 22:33:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xa00, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:11 executing program 5: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'rose0\x00', @broadcast}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492967, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x4, 0x9, 0x2, r2}, &(0x7f0000000280)=0x10) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x4400) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0x210, 0x0, 0x210, 0x0, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d4, 0x0, 0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0x1fffffe], [0x0, 0xffffffff, 0xff, 0xff000000], 'ip6erspan0\x00', 'bcsf0\x00', {}, {0xff}, 0x2, 0x5, 0x2, 0x86}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr="c23b7e84844e2fb63951db03f3d7f135", [0x0, 0xffffff00, 0x0, 0x7f00007f], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'bridge0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x2, 0x1}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x146f, 0x0, 0x8001, 0x22, 0x3}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x0, 0x80000001, 0x8000, 0x2, 0x1ff, 0x2000, 0x128}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 22:33:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}]}, 0x40}}, 0x0) 22:33:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x13]}}]}, 0x40}}, 0x0) [ 1066.031858][T23205] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xab2, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1066.198831][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:33:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}]}, 0x40}}, 0x0) 22:33:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x14]}}]}, 0x40}}, 0x0) [ 1066.265401][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1066.274459][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.284516][ T8812] Call Trace: [ 1066.287819][ T8812] dump_stack+0x172/0x1f0 [ 1066.292158][ T8812] dump_header+0x177/0x1152 [ 1066.296660][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1066.296671][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1066.296685][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1066.296699][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1066.296717][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1066.323275][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1066.329358][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1066.335170][ T8812] ? ___ratelimit+0x60/0x595 [ 1066.335183][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1066.335199][ T8812] oom_kill_process.cold+0x10/0x15 [ 1066.335217][ T8812] out_of_memory+0x334/0x1340 [ 1066.347065][ T8812] ? lock_downgrade+0x920/0x920 [ 1066.347084][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1066.347099][ T8812] ? oom_killer_disable+0x280/0x280 [ 1066.347124][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1066.378321][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1066.383963][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1066.389085][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1066.393949][ T8812] try_charge+0xf4b/0x1440 [ 1066.398377][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1066.403929][ T8812] ? find_held_lock+0x35/0x130 [ 1066.408707][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 22:33:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x15]}}]}, 0x40}}, 0x0) [ 1066.414273][ T8812] ? lock_downgrade+0x920/0x920 [ 1066.419132][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1066.424690][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1066.430154][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1066.435710][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1066.441266][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1066.446387][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1066.451767][ T8812] ? stack_trace_consume_entry+0x190/0x190 [ 1066.457576][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1066.463293][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1066.468319][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1066.473344][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1066.479590][ T8812] alloc_pages_current+0x107/0x210 [ 1066.484789][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1066.489383][ T8812] __pte_alloc+0x20/0x310 [ 1066.493712][ T8812] copy_page_range+0x14da/0x1ed0 [ 1066.498680][ T8812] ? pmd_alloc+0x180/0x180 [ 1066.503105][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1066.508662][ T8812] ? validate_mm_rb+0xa3/0xc0 22:33:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1066.513349][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1066.518124][ T8812] dup_mm+0xa67/0x1430 [ 1066.522212][ T8812] ? vm_area_dup+0x170/0x170 [ 1066.526805][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1066.531664][ T8812] copy_process+0x2671/0x6830 [ 1066.536340][ T8812] ? __kasan_check_read+0x11/0x20 [ 1066.541377][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1066.546313][ T8812] ? __might_fault+0x12b/0x1e0 [ 1066.546331][ T8812] ? __might_fault+0x12b/0x1e0 [ 1066.546354][ T8812] _do_fork+0x146/0xfa0 [ 1066.555843][ T8812] ? copy_init_mm+0x20/0x20 [ 1066.555865][ T8812] ? __kasan_check_read+0x11/0x20 [ 1066.555877][ T8812] ? _copy_to_user+0x118/0x160 [ 1066.555899][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1066.579054][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1066.583921][ T8812] ? do_syscall_64+0x26/0x760 [ 1066.588606][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1066.593908][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1066.598950][ T8812] do_syscall_64+0xfa/0x760 [ 1066.603478][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.609378][ T8812] RIP: 0033:0x457eba [ 1066.613278][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1066.632880][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1066.632893][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1066.632900][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1066.632907][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1066.632915][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1066.632921][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1066.843553][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11819 [ 1066.851260][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1066.858307][ T8812] Memory cgroup stats for /syz3: [ 1066.858644][ T8812] anon 222375936 [ 1066.858644][ T8812] file 36864 [ 1066.858644][ T8812] kernel_stack 13107200 [ 1066.858644][ T8812] slab 20267008 [ 1066.858644][ T8812] sock 0 [ 1066.858644][ T8812] shmem 0 [ 1066.858644][ T8812] file_mapped 0 [ 1066.858644][ T8812] file_dirty 0 [ 1066.858644][ T8812] file_writeback 0 [ 1066.858644][ T8812] anon_thp 178257920 [ 1066.858644][ T8812] inactive_anon 0 [ 1066.858644][ T8812] active_anon 222375936 [ 1066.858644][ T8812] inactive_file 57344 [ 1066.858644][ T8812] active_file 0 [ 1066.858644][ T8812] unevictable 0 [ 1066.858644][ T8812] slab_reclaimable 3784704 [ 1066.858644][ T8812] slab_unreclaimable 16482304 [ 1066.858644][ T8812] pgfault 90651 [ 1066.858644][ T8812] pgmajfault 0 [ 1066.858644][ T8812] workingset_refault 528 [ 1066.858644][ T8812] workingset_activate 330 [ 1066.858644][ T8812] workingset_nodereclaim 0 [ 1066.858644][ T8812] pgrefill 4432 [ 1066.858644][ T8812] pgscan 4882 [ 1066.858644][ T8812] pgsteal 847 [ 1066.953201][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23206,uid=0 [ 1066.968813][ T8812] Memory cgroup out of memory: Killed process 23206 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10006}, 0x1c) 22:33:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x78]}}]}, 0x40}}, 0x0) [ 1067.003742][T23266] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:12 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}]}, 0x40}}, 0x0) 22:33:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xb00, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1067.067570][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:33:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x96]}}]}, 0x40}}, 0x0) [ 1067.148776][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1067.157850][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.167903][ T8812] Call Trace: [ 1067.171195][ T8812] dump_stack+0x172/0x1f0 [ 1067.176502][ T8812] dump_header+0x177/0x1152 [ 1067.181033][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1067.186988][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1067.191686][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf0]}}]}, 0x40}}, 0x0) [ 1067.197512][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1067.202820][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1067.207869][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1067.213520][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1067.219336][ T8812] ? ___ratelimit+0x60/0x595 [ 1067.223939][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1067.229067][ T8812] oom_kill_process.cold+0x10/0x15 [ 1067.234202][ T8812] out_of_memory+0x334/0x1340 [ 1067.238904][ T8812] ? lock_downgrade+0x920/0x920 [ 1067.243792][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1067.249607][ T8812] ? oom_killer_disable+0x280/0x280 [ 1067.249634][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1067.249650][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1067.249670][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1067.271154][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1067.276031][ T8812] try_charge+0xf4b/0x1440 [ 1067.280478][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1067.286039][ T8812] ? find_held_lock+0x35/0x130 [ 1067.290820][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 22:33:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1fa]}}]}, 0x40}}, 0x0) 22:33:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}}]}, 0x40}}, 0x0) [ 1067.296520][ T8812] ? lock_downgrade+0x920/0x920 [ 1067.301381][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1067.306940][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1067.312675][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1067.317896][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1067.323466][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1067.328592][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1067.328609][ T8812] ? stack_trace_consume_entry+0x190/0x190 [ 1067.328623][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1067.328640][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1067.350731][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1067.350754][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1067.350774][ T8812] alloc_pages_current+0x107/0x210 [ 1067.367229][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1067.371748][ T8812] __pte_alloc+0x20/0x310 [ 1067.376098][ T8812] copy_page_range+0x14da/0x1ed0 [ 1067.381059][ T8812] ? pmd_alloc+0x180/0x180 [ 1067.381077][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1067.381093][ T8812] ? validate_mm_rb+0xa3/0xc0 22:33:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x204]}}]}, 0x40}}, 0x0) [ 1067.381114][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1067.400396][ T8812] dup_mm+0xa67/0x1430 [ 1067.404502][ T8812] ? vm_area_dup+0x170/0x170 [ 1067.409114][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1067.414031][ T8812] copy_process+0x2671/0x6830 [ 1067.418725][ T8812] ? __kasan_check_read+0x11/0x20 [ 1067.423779][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1067.428729][ T8812] ? __might_fault+0x12b/0x1e0 [ 1067.433507][ T8812] ? __might_fault+0x12b/0x1e0 [ 1067.438310][ T8812] _do_fork+0x146/0xfa0 [ 1067.442481][ T8812] ? copy_init_mm+0x20/0x20 22:33:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}}]}, 0x40}}, 0x0) [ 1067.447003][ T8812] ? __kasan_check_read+0x11/0x20 [ 1067.452041][ T8812] ? _copy_to_user+0x118/0x160 [ 1067.456827][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1067.461610][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1067.466480][ T8812] ? do_syscall_64+0x26/0x760 [ 1067.471230][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1067.471248][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1067.481544][ T8812] do_syscall_64+0xfa/0x760 [ 1067.486065][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.491957][ T8812] RIP: 0033:0x457eba [ 1067.491973][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1067.491981][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1067.491995][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1067.492007][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1067.523983][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1067.523992][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1067.524001][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1067.552110][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11853 [ 1067.581105][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1067.588226][ T8812] Memory cgroup stats for /syz3: [ 1067.588334][ T8812] anon 222375936 [ 1067.588334][ T8812] file 36864 [ 1067.588334][ T8812] kernel_stack 13107200 [ 1067.588334][ T8812] slab 20267008 [ 1067.588334][ T8812] sock 0 [ 1067.588334][ T8812] shmem 0 [ 1067.588334][ T8812] file_mapped 0 [ 1067.588334][ T8812] file_dirty 0 [ 1067.588334][ T8812] file_writeback 0 [ 1067.588334][ T8812] anon_thp 178257920 [ 1067.588334][ T8812] inactive_anon 0 [ 1067.588334][ T8812] active_anon 222375936 [ 1067.588334][ T8812] inactive_file 57344 [ 1067.588334][ T8812] active_file 0 [ 1067.588334][ T8812] unevictable 0 [ 1067.588334][ T8812] slab_reclaimable 3784704 [ 1067.588334][ T8812] slab_unreclaimable 16482304 [ 1067.588334][ T8812] pgfault 90717 [ 1067.588334][ T8812] pgmajfault 0 [ 1067.588334][ T8812] workingset_refault 528 [ 1067.588334][ T8812] workingset_activate 330 [ 1067.588334][ T8812] workingset_nodereclaim 0 [ 1067.588334][ T8812] pgrefill 4432 [ 1067.588334][ T8812] pgscan 4882 [ 1067.588334][ T8812] pgsteal 847 [ 1067.701243][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23267,uid=0 [ 1067.775130][ T8812] Memory cgroup out of memory: Killed process 23267 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10007}, 0x1c) 22:33:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xc00, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:12 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x206]}}]}, 0x40}}, 0x0) 22:33:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}}]}, 0x40}}, 0x0) [ 1067.852549][T23321] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1067.977479][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1068.031189][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1068.040337][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.050384][ T8812] Call Trace: [ 1068.050404][ T8812] dump_stack+0x172/0x1f0 [ 1068.050423][ T8812] dump_header+0x177/0x1152 [ 1068.050438][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1068.050449][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1068.050467][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1068.078812][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1068.084105][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1068.089140][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1068.094781][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1068.100590][ T8812] ? ___ratelimit+0x60/0x595 [ 1068.105185][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1068.110307][ T8812] oom_kill_process.cold+0x10/0x15 [ 1068.115433][ T8812] out_of_memory+0x334/0x1340 [ 1068.120113][ T8812] ? lock_downgrade+0x920/0x920 [ 1068.124968][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:33:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x300]}}]}, 0x40}}, 0x0) [ 1068.130780][ T8812] ? oom_killer_disable+0x280/0x280 [ 1068.136003][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1068.141552][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1068.147208][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1068.152349][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1068.157210][ T8812] try_charge+0xf4b/0x1440 [ 1068.161661][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1068.167219][ T8812] ? find_held_lock+0x35/0x130 [ 1068.171986][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 22:33:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78]}}]}, 0x40}}, 0x0) [ 1068.177546][ T8812] ? lock_downgrade+0x920/0x920 [ 1068.182409][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1068.187965][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1068.193476][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1068.198685][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1068.204240][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1068.209361][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1068.209379][ T8812] ? stack_trace_consume_entry+0x190/0x190 [ 1068.209393][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1068.209408][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1068.209430][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1068.236374][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1068.242650][ T8812] alloc_pages_current+0x107/0x210 [ 1068.247775][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1068.252284][ T8812] __pte_alloc+0x20/0x310 [ 1068.252303][ T8812] copy_page_range+0x14da/0x1ed0 [ 1068.252336][ T8812] ? pmd_alloc+0x180/0x180 [ 1068.265986][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1068.271457][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1068.276143][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1068.281030][ T8812] dup_mm+0xa67/0x1430 [ 1068.281063][ T8812] ? vm_area_dup+0x170/0x170 [ 1068.281081][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1068.281101][ T8812] copy_process+0x2671/0x6830 [ 1068.281120][ T8812] ? __kasan_check_read+0x11/0x20 [ 1068.304290][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1068.309241][ T8812] ? __might_fault+0x12b/0x1e0 [ 1068.314018][ T8812] ? __might_fault+0x12b/0x1e0 [ 1068.318800][ T8812] _do_fork+0x146/0xfa0 [ 1068.322971][ T8812] ? copy_init_mm+0x20/0x20 22:33:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}}]}, 0x40}}, 0x0) [ 1068.327489][ T8812] ? __kasan_check_read+0x11/0x20 [ 1068.333077][ T8812] ? _copy_to_user+0x118/0x160 [ 1068.337859][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1068.342628][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1068.347495][ T8812] ? do_syscall_64+0x26/0x760 [ 1068.352182][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1068.357481][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1068.362517][ T8812] do_syscall_64+0xfa/0x760 [ 1068.367036][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1068.372926][ T8812] RIP: 0033:0x457eba [ 1068.376833][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1068.396436][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1068.396451][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1068.396457][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1068.396465][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 22:33:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x402]}}]}, 0x40}}, 0x0) [ 1068.396473][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1068.396481][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1068.420221][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11886 [ 1068.453045][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1068.460479][ T8812] Memory cgroup stats for /syz3: [ 1068.460598][ T8812] anon 222375936 [ 1068.460598][ T8812] file 36864 [ 1068.460598][ T8812] kernel_stack 13107200 [ 1068.460598][ T8812] slab 20267008 [ 1068.460598][ T8812] sock 0 [ 1068.460598][ T8812] shmem 0 [ 1068.460598][ T8812] file_mapped 0 [ 1068.460598][ T8812] file_dirty 0 [ 1068.460598][ T8812] file_writeback 0 [ 1068.460598][ T8812] anon_thp 178257920 [ 1068.460598][ T8812] inactive_anon 0 [ 1068.460598][ T8812] active_anon 222375936 [ 1068.460598][ T8812] inactive_file 57344 [ 1068.460598][ T8812] active_file 0 [ 1068.460598][ T8812] unevictable 0 [ 1068.460598][ T8812] slab_reclaimable 3784704 [ 1068.460598][ T8812] slab_unreclaimable 16482304 [ 1068.460598][ T8812] pgfault 90783 [ 1068.460598][ T8812] pgmajfault 0 [ 1068.460598][ T8812] workingset_refault 528 [ 1068.460598][ T8812] workingset_activate 330 [ 1068.460598][ T8812] workingset_nodereclaim 0 [ 1068.460598][ T8812] pgrefill 4465 [ 1068.460598][ T8812] pgscan 4915 [ 1068.460598][ T8812] pgsteal 847 [ 1068.589655][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23324,uid=0 [ 1068.606787][ T8812] Memory cgroup out of memory: Killed process 23324 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10008}, 0x1c) 22:33:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xe00, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1068.670698][T23369] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e2]}}]}, 0x40}}, 0x0) 22:33:13 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x1, 0x67, 0x100000001, 0x0, 0x1000}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:33:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x500]}}]}, 0x40}}, 0x0) 22:33:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1068.779242][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:33:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xf00, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1068.861244][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1068.870348][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.880406][ T8812] Call Trace: [ 1068.883708][ T8812] dump_stack+0x172/0x1f0 [ 1068.888051][ T8812] dump_header+0x177/0x1152 [ 1068.892565][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1068.898378][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1068.903061][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ea]}}]}, 0x40}}, 0x0) [ 1068.909376][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1068.914669][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1068.919706][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1068.925346][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1068.931157][ T8812] ? ___ratelimit+0x60/0x595 [ 1068.935752][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1068.940874][ T8812] oom_kill_process.cold+0x10/0x15 [ 1068.945990][ T8812] out_of_memory+0x334/0x1340 [ 1068.950675][ T8812] ? lock_downgrade+0x920/0x920 [ 1068.955536][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:33:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5c4]}}]}, 0x40}}, 0x0) 22:33:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1068.961775][ T8812] ? oom_killer_disable+0x280/0x280 [ 1068.961800][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1068.961818][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1068.978167][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1068.983291][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1068.988155][ T8812] try_charge+0xf4b/0x1440 [ 1068.992589][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1068.998153][ T8812] ? find_held_lock+0x35/0x130 [ 1068.998172][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1068.998192][ T8812] ? lock_downgrade+0x920/0x920 [ 1069.013316][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1069.018877][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1069.024349][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1069.029562][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1069.035110][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1069.035129][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1069.035147][ T8812] ? __schedule+0x776/0x17a0 [ 1069.050175][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1069.055905][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1069.060944][ T8812] ? copy_page_range+0xef4/0x1ed0 [ 1069.065979][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1069.065999][ T8812] alloc_pages_current+0x107/0x210 [ 1069.066015][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1069.066030][ T8812] __pte_alloc+0x20/0x310 [ 1069.066048][ T8812] copy_page_range+0x14da/0x1ed0 [ 1069.091163][ T8812] ? pmd_alloc+0x180/0x180 [ 1069.095593][ T8812] ? __rb_insert_augmented+0x20c/0xd90 [ 1069.101064][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1069.105750][ T8812] ? __vma_link_rb+0x5ad/0x770 22:33:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1069.110529][ T8812] dup_mm+0xa67/0x1430 [ 1069.114616][ T8812] ? vm_area_dup+0x170/0x170 [ 1069.119212][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1069.124081][ T8812] copy_process+0x2671/0x6830 [ 1069.128764][ T8812] ? __kasan_check_read+0x11/0x20 [ 1069.133810][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1069.138758][ T8812] ? __might_fault+0x12b/0x1e0 [ 1069.143536][ T8812] ? __might_fault+0x12b/0x1e0 [ 1069.148317][ T8812] _do_fork+0x146/0xfa0 [ 1069.152476][ T8812] ? copy_init_mm+0x20/0x20 [ 1069.157687][ T8812] ? __kasan_check_read+0x11/0x20 [ 1069.162719][ T8812] ? _copy_to_user+0x118/0x160 [ 1069.167498][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1069.172270][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1069.177144][ T8812] ? do_syscall_64+0x26/0x760 [ 1069.181836][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1069.187137][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1069.192185][ T8812] do_syscall_64+0xfa/0x760 [ 1069.196709][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.202603][ T8812] RIP: 0033:0x457eba [ 1069.206507][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1069.226340][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1069.234749][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1069.234759][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1069.234768][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1069.234777][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1069.234786][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1069.315539][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11919 [ 1069.329348][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1069.339257][ T8812] Memory cgroup stats for /syz3: [ 1069.339360][ T8812] anon 222375936 [ 1069.339360][ T8812] file 36864 [ 1069.339360][ T8812] kernel_stack 13107200 [ 1069.339360][ T8812] slab 20267008 [ 1069.339360][ T8812] sock 0 [ 1069.339360][ T8812] shmem 0 [ 1069.339360][ T8812] file_mapped 0 [ 1069.339360][ T8812] file_dirty 0 [ 1069.339360][ T8812] file_writeback 0 [ 1069.339360][ T8812] anon_thp 178257920 [ 1069.339360][ T8812] inactive_anon 0 [ 1069.339360][ T8812] active_anon 222375936 [ 1069.339360][ T8812] inactive_file 57344 [ 1069.339360][ T8812] active_file 0 [ 1069.339360][ T8812] unevictable 0 [ 1069.339360][ T8812] slab_reclaimable 3784704 [ 1069.339360][ T8812] slab_unreclaimable 16482304 [ 1069.339360][ T8812] pgfault 90849 [ 1069.339360][ T8812] pgmajfault 0 [ 1069.339360][ T8812] workingset_refault 528 [ 1069.339360][ T8812] workingset_activate 330 [ 1069.339360][ T8812] workingset_nodereclaim 0 [ 1069.339360][ T8812] pgrefill 4465 [ 1069.339360][ T8812] pgscan 4915 [ 1069.339360][ T8812] pgsteal 847 [ 1069.433696][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23372,uid=0 [ 1069.450153][ T8812] Memory cgroup out of memory: Killed process 23372 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10048}, 0x1c) 22:33:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x600]}}]}, 0x40}}, 0x0) 22:33:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec]}}]}, 0x40}}, 0x0) 22:33:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1069.506689][T23419] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1069.633179][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 22:33:14 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) flock(r0, 0x1f5123bbbc71014d) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492967, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x17, 0x4) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:33:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x1100, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1069.705779][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1069.714832][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.727255][ T8812] Call Trace: [ 1069.727281][ T8812] dump_stack+0x172/0x1f0 [ 1069.727301][ T8812] dump_header+0x177/0x1152 [ 1069.727322][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1069.734920][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1069.749860][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1069.755675][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1069.761208][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1069.766259][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1069.771903][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1069.777833][ T8812] ? ___ratelimit+0x60/0x595 [ 1069.782790][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1069.787910][ T8812] oom_kill_process.cold+0x10/0x15 [ 1069.787926][ T8812] out_of_memory+0x334/0x1340 [ 1069.787945][ T8812] ? lock_downgrade+0x920/0x920 [ 1069.797823][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1069.797839][ T8812] ? oom_killer_disable+0x280/0x280 [ 1069.797863][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1069.797886][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1069.824922][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1069.831182][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1069.836047][ T8812] try_charge+0xf4b/0x1440 [ 1069.840485][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1069.846050][ T8812] ? find_held_lock+0x35/0x130 [ 1069.850833][ T8812] ? get_mem_cgroup_from_mm+0x139/0x320 22:33:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}]}, 0x40}}, 0x0) 22:33:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x602]}}]}, 0x40}}, 0x0) [ 1069.856392][ T8812] ? lock_downgrade+0x920/0x920 [ 1069.861246][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1069.866807][ T8812] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1069.872802][ T8812] ? memcg_kmem_put_cache+0x50/0x50 [ 1069.878013][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1069.883568][ T8812] __memcg_kmem_charge+0x13a/0x3a0 [ 1069.888780][ T8812] __alloc_pages_nodemask+0x4f7/0x900 [ 1069.894156][ T8812] ? __pmd_alloc+0x377/0x460 [ 1069.898752][ T8812] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1069.904490][ T8812] ? rwlock_bug.part.0+0x90/0x90 [ 1069.909444][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1069.915701][ T8812] alloc_pages_current+0x107/0x210 [ 1069.920832][ T8812] pte_alloc_one+0x1b/0x1a0 [ 1069.925339][ T8812] __pte_alloc+0x20/0x310 [ 1069.929677][ T8812] copy_page_range+0x14da/0x1ed0 [ 1069.934673][ T8812] ? pmd_alloc+0x180/0x180 [ 1069.939117][ T8812] ? validate_mm_rb+0xa3/0xc0 [ 1069.943801][ T8812] ? __vma_link_rb+0x5ad/0x770 [ 1069.948564][ T8812] ? anon_vma_fork+0xd4/0x4a0 22:33:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x900]}}]}, 0x40}}, 0x0) 22:33:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}]}, 0x40}}, 0x0) [ 1069.953249][ T8812] dup_mm+0xa67/0x1430 [ 1069.957338][ T8812] ? vm_area_dup+0x170/0x170 [ 1069.961932][ T8812] ? debug_mutex_init+0x2d/0x60 [ 1069.966799][ T8812] copy_process+0x2671/0x6830 [ 1069.971479][ T8812] ? __kasan_check_read+0x11/0x20 [ 1069.976523][ T8812] ? __cleanup_sighand+0x60/0x60 [ 1069.981467][ T8812] ? __might_fault+0x12b/0x1e0 [ 1069.986243][ T8812] ? __might_fault+0x12b/0x1e0 [ 1069.991014][ T8812] _do_fork+0x146/0xfa0 [ 1069.995162][ T8812] ? copy_init_mm+0x20/0x20 [ 1069.995184][ T8812] ? __kasan_check_read+0x11/0x20 [ 1069.995197][ T8812] ? _copy_to_user+0x118/0x160 [ 1069.995217][ T8812] __x64_sys_clone+0x1ab/0x270 [ 1069.995235][ T8812] ? __ia32_sys_vfork+0xd0/0xd0 [ 1070.019080][ T8812] ? do_syscall_64+0x26/0x760 [ 1070.019096][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1070.019114][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1070.034070][ T8812] do_syscall_64+0xfa/0x760 [ 1070.038586][ T8812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1070.044474][ T8812] RIP: 0033:0x457eba [ 1070.048371][ T8812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1070.067979][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1070.067994][ T8812] RAX: ffffffffffffffda RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1070.068002][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1070.068009][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1070.068017][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1070.068025][ T8812] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1070.221994][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11936 [ 1070.230355][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1070.238559][ T8812] Memory cgroup stats for /syz3: [ 1070.238665][ T8812] anon 222375936 [ 1070.238665][ T8812] file 36864 [ 1070.238665][ T8812] kernel_stack 13107200 [ 1070.238665][ T8812] slab 20267008 [ 1070.238665][ T8812] sock 0 [ 1070.238665][ T8812] shmem 0 [ 1070.238665][ T8812] file_mapped 0 [ 1070.238665][ T8812] file_dirty 0 [ 1070.238665][ T8812] file_writeback 0 [ 1070.238665][ T8812] anon_thp 178257920 [ 1070.238665][ T8812] inactive_anon 0 [ 1070.238665][ T8812] active_anon 222375936 [ 1070.238665][ T8812] inactive_file 57344 [ 1070.238665][ T8812] active_file 0 [ 1070.238665][ T8812] unevictable 0 [ 1070.238665][ T8812] slab_reclaimable 3784704 [ 1070.238665][ T8812] slab_unreclaimable 16482304 [ 1070.238665][ T8812] pgfault 90915 [ 1070.238665][ T8812] pgmajfault 0 [ 1070.238665][ T8812] workingset_refault 528 [ 1070.238665][ T8812] workingset_activate 330 [ 1070.238665][ T8812] workingset_nodereclaim 0 [ 1070.238665][ T8812] pgrefill 4465 [ 1070.238665][ T8812] pgscan 4915 [ 1070.238665][ T8812] pgsteal 847 [ 1070.332575][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23420,uid=0 [ 1070.358483][ T8812] Memory cgroup out of memory: Killed process 23420 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x1200, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa00]}}]}, 0x40}}, 0x0) 22:33:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1004c}, 0x1c) [ 1070.407143][T23472] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1070.517441][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1070.565407][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1070.574552][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1070.584625][ T8812] Call Trace: [ 1070.587915][ T8812] dump_stack+0x172/0x1f0 [ 1070.587936][ T8812] dump_header+0x177/0x1152 [ 1070.587951][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1070.587966][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1070.607323][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:15 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000)) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}]}, 0x40}}, 0x0) 22:33:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x1300, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xb00]}}]}, 0x40}}, 0x0) [ 1070.613150][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1070.618448][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1070.623481][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1070.630078][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1070.636010][ T8812] ? ___ratelimit+0x60/0x595 [ 1070.640646][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1070.645769][ T8812] oom_kill_process.cold+0x10/0x15 [ 1070.650926][ T8812] out_of_memory+0x334/0x1340 [ 1070.655615][ T8812] ? lock_downgrade+0x920/0x920 [ 1070.660494][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1070.666323][ T8812] ? oom_killer_disable+0x280/0x280 [ 1070.671537][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1070.677090][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1070.682736][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1070.687847][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1070.687866][ T8812] try_charge+0xf4b/0x1440 [ 1070.687888][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1070.687901][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1070.687921][ T8812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1070.714461][ T8812] ? __kasan_check_read+0x11/0x20 [ 1070.719509][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1070.725073][ T8812] mem_cgroup_try_charge+0x136/0x590 [ 1070.730463][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1070.736736][ T8812] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1070.742383][ T8812] wp_page_copy+0x41e/0x1590 [ 1070.746991][ T8812] ? find_held_lock+0x35/0x130 [ 1070.751765][ T8812] ? pmd_pfn+0x1d0/0x1d0 [ 1070.756021][ T8812] ? lock_downgrade+0x920/0x920 [ 1070.760880][ T8812] ? swp_swapcount+0x540/0x540 22:33:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf00]}}]}, 0x40}}, 0x0) [ 1070.765652][ T8812] ? __kasan_check_read+0x11/0x20 [ 1070.770681][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1070.775799][ T8812] do_wp_page+0x499/0x14d0 [ 1070.780233][ T8812] ? finish_mkwrite_fault+0x570/0x570 [ 1070.785616][ T8812] __handle_mm_fault+0x22f1/0x3f20 [ 1070.790735][ T8812] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1070.796299][ T8812] ? __kasan_check_read+0x11/0x20 [ 1070.801342][ T8812] handle_mm_fault+0x1b5/0x6c0 [ 1070.806116][ T8812] __do_page_fault+0x536/0xdd0 [ 1070.810881][ T8812] do_page_fault+0x38/0x590 22:33:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}]}, 0x40}}, 0x0) [ 1070.815389][ T8812] page_fault+0x39/0x40 [ 1070.819543][ T8812] RIP: 0033:0x457fde [ 1070.823446][ T8812] Code: 5c 41 5d 41 5e 5d c3 48 c7 c2 d4 ff ff ff f7 d8 41 bd ff ff ff ff 64 89 02 64 8b 04 25 d0 02 00 00 41 39 c4 0f 85 2f 01 00 00 <64> 44 89 04 25 d4 02 00 00 45 85 f6 0f 85 7f 00 00 00 48 85 db 74 [ 1070.843056][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010246 [ 1070.849154][ T8812] RAX: 0000000000000001 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1070.857130][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1070.865113][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1070.865121][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1070.865129][ T8812] R13: 000000000000166b R14: 0000000000000000 R15: 00007ffcdbf51b70 22:33:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x1400, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}]}, 0x40}}, 0x0) 22:33:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1100]}}]}, 0x40}}, 0x0) [ 1070.989916][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11970 [ 1071.028970][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1071.087008][ T8812] Memory cgroup stats for /syz3: [ 1071.087121][ T8812] anon 222375936 [ 1071.087121][ T8812] file 36864 [ 1071.087121][ T8812] kernel_stack 13107200 [ 1071.087121][ T8812] slab 20267008 [ 1071.087121][ T8812] sock 0 [ 1071.087121][ T8812] shmem 0 [ 1071.087121][ T8812] file_mapped 0 [ 1071.087121][ T8812] file_dirty 0 [ 1071.087121][ T8812] file_writeback 0 [ 1071.087121][ T8812] anon_thp 178257920 [ 1071.087121][ T8812] inactive_anon 0 [ 1071.087121][ T8812] active_anon 222375936 [ 1071.087121][ T8812] inactive_file 57344 [ 1071.087121][ T8812] active_file 61440 [ 1071.087121][ T8812] unevictable 0 [ 1071.087121][ T8812] slab_reclaimable 3784704 [ 1071.087121][ T8812] slab_unreclaimable 16482304 [ 1071.087121][ T8812] pgfault 90981 [ 1071.087121][ T8812] pgmajfault 0 [ 1071.087121][ T8812] workingset_refault 528 [ 1071.087121][ T8812] workingset_activate 330 [ 1071.087121][ T8812] workingset_nodereclaim 0 [ 1071.087121][ T8812] pgrefill 4465 [ 1071.087121][ T8812] pgscan 4915 [ 1071.087121][ T8812] pgsteal 847 [ 1071.244147][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23473,uid=0 [ 1071.269108][ T8812] Memory cgroup out of memory: Killed process 23473 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1071.303985][T23488] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1071.315293][T23488] CPU: 0 PID: 23488 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1071.324415][T23488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1071.324421][T23488] Call Trace: [ 1071.324442][T23488] dump_stack+0x172/0x1f0 [ 1071.324460][T23488] dump_header+0x177/0x1152 [ 1071.324483][T23488] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1071.337810][T23488] ? ___ratelimit+0x2c8/0x595 [ 1071.337826][T23488] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1071.337842][T23488] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1071.337859][T23488] ? trace_hardirqs_on+0x67/0x240 [ 1071.346647][T23488] ? pagefault_out_of_memory+0x11c/0x11c [ 1071.346664][T23488] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1071.346676][T23488] ? ___ratelimit+0x60/0x595 [ 1071.346687][T23488] ? do_raw_spin_unlock+0x57/0x270 [ 1071.346704][T23488] oom_kill_process.cold+0x10/0x15 [ 1071.346723][T23488] out_of_memory+0x334/0x1340 [ 1071.404093][T23488] ? lock_downgrade+0x920/0x920 [ 1071.408955][T23488] ? oom_killer_disable+0x280/0x280 [ 1071.414170][T23488] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1071.419722][T23488] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1071.425361][T23488] ? do_raw_spin_unlock+0x57/0x270 [ 1071.430458][T23488] ? _raw_spin_unlock+0x2d/0x50 [ 1071.435377][T23488] try_charge+0xa2d/0x1440 [ 1071.439785][T23488] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1071.445310][T23488] ? percpu_ref_tryget_live+0x111/0x290 [ 1071.450843][T23488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1071.457125][T23488] ? __kasan_check_read+0x11/0x20 [ 1071.462134][T23488] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1071.467662][T23488] mem_cgroup_try_charge+0x136/0x590 [ 1071.472929][T23488] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1071.479151][T23488] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1071.484778][T23488] wp_page_copy+0x41e/0x1590 [ 1071.489355][T23488] ? find_held_lock+0x35/0x130 [ 1071.494107][T23488] ? pmd_pfn+0x1d0/0x1d0 [ 1071.498339][T23488] ? lock_downgrade+0x920/0x920 [ 1071.503189][T23488] ? swp_swapcount+0x540/0x540 [ 1071.507939][T23488] ? __kasan_check_read+0x11/0x20 [ 1071.512952][T23488] ? do_raw_spin_unlock+0x57/0x270 [ 1071.518049][T23488] do_wp_page+0x499/0x14d0 [ 1071.522446][T23488] ? finish_mkwrite_fault+0x570/0x570 [ 1071.527801][T23488] __handle_mm_fault+0x22f1/0x3f20 [ 1071.532995][T23488] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1071.538547][T23488] ? __kasan_check_read+0x11/0x20 [ 1071.543579][T23488] handle_mm_fault+0x1b5/0x6c0 [ 1071.548345][T23488] __do_page_fault+0x536/0xdd0 [ 1071.553093][T23488] do_page_fault+0x38/0x590 [ 1071.557575][T23488] page_fault+0x39/0x40 [ 1071.561716][T23488] RIP: 0010:__put_user_4+0x1c/0x30 [ 1071.566812][T23488] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 fe 01 00 48 8b 9b 58 14 00 00 48 83 eb 03 48 39 d9 73 3f 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 1071.586484][T23488] RSP: 0018:ffff88802476ff30 EFLAGS: 00010293 [ 1071.592539][T23488] RAX: 000000000000166b RBX: 00007fffffffeffd RCX: 0000555556cc5c10 [ 1071.600510][T23488] RDX: dffffc0000000000 RSI: 1ffff11012be09e4 RDI: ffff888095f04c30 [ 1071.608480][T23488] RBP: ffff88802476ff48 R08: 0000000000000001 R09: ffff888095f04f18 [ 1071.616445][T23488] R10: fffffbfff138aef8 R11: ffffffff89c577c7 R12: 0000000000000000 [ 1071.616453][T23488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1071.616484][T23488] ? schedule_tail+0xd8/0x130 [ 1071.616503][T23488] ret_from_fork+0x8/0x30 [ 1071.632404][T23488] RIP: 0033:0x457eba [ 1071.632425][T23488] Code: Bad RIP value. [ 1071.632433][T23488] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1071.632445][T23488] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1071.632457][T23488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1071.673995][T23488] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1071.681971][T23488] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1071.690011][T23488] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1071.700368][T23488] memory: usage 304996kB, limit 307200kB, failcnt 11970 [ 1071.707702][T23488] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1071.714878][T23488] Memory cgroup stats for /syz3: [ 1071.714981][T23488] anon 220221440 [ 1071.714981][T23488] file 36864 [ 1071.714981][T23488] kernel_stack 13107200 [ 1071.714981][T23488] slab 20267008 [ 1071.714981][T23488] sock 0 [ 1071.714981][T23488] shmem 0 [ 1071.714981][T23488] file_mapped 0 [ 1071.714981][T23488] file_dirty 0 [ 1071.714981][T23488] file_writeback 0 [ 1071.714981][T23488] anon_thp 176160768 [ 1071.714981][T23488] inactive_anon 0 [ 1071.714981][T23488] active_anon 220221440 [ 1071.714981][T23488] inactive_file 57344 [ 1071.714981][T23488] active_file 61440 [ 1071.714981][T23488] unevictable 0 [ 1071.714981][T23488] slab_reclaimable 3784704 [ 1071.714981][T23488] slab_unreclaimable 16482304 [ 1071.714981][T23488] pgfault 90981 [ 1071.714981][T23488] pgmajfault 0 [ 1071.714981][T23488] workingset_refault 528 [ 1071.714981][T23488] workingset_activate 330 [ 1071.714981][T23488] workingset_nodereclaim 0 [ 1071.714981][T23488] pgrefill 4465 [ 1071.714981][T23488] pgscan 4915 [ 1071.714981][T23488] pgsteal 847 [ 1071.809500][T23488] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22946,uid=0 [ 1071.825611][T23488] Memory cgroup out of memory: Killed process 22946 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10060}, 0x1c) 22:33:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1200]}}]}, 0x40}}, 0x0) 22:33:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}}]}, 0x40}}, 0x0) 22:33:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x1500, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:16 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0x3, 0x4, 0x1}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1071.860943][T23539] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:17 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xa) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}]}, 0x40}}, 0x0) 22:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x3f00, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10068}, 0x1c) 22:33:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1300]}}]}, 0x40}}, 0x0) [ 1071.998849][T23563] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1072.072891][ T8812] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1072.175225][ T8812] CPU: 0 PID: 8812 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1072.184291][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1072.194500][ T8812] Call Trace: [ 1072.197799][ T8812] dump_stack+0x172/0x1f0 [ 1072.202139][ T8812] dump_header+0x177/0x1152 [ 1072.206653][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1072.212466][ T8812] ? ___ratelimit+0x2c8/0x595 [ 1072.217141][ T8812] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1072.222952][ T8812] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1072.228239][ T8812] ? trace_hardirqs_on+0x67/0x240 [ 1072.233268][ T8812] ? pagefault_out_of_memory+0x11c/0x11c [ 1072.239953][ T8812] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1072.245784][ T8812] ? ___ratelimit+0x60/0x595 [ 1072.250379][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1072.255504][ T8812] oom_kill_process.cold+0x10/0x15 [ 1072.260623][ T8812] out_of_memory+0x334/0x1340 [ 1072.265309][ T8812] ? lock_downgrade+0x920/0x920 22:33:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1400]}}]}, 0x40}}, 0x0) [ 1072.270176][ T8812] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1072.275993][ T8812] ? oom_killer_disable+0x280/0x280 [ 1072.281292][ T8812] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1072.286844][ T8812] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1072.292481][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1072.297599][ T8812] ? _raw_spin_unlock+0x2d/0x50 [ 1072.302455][ T8812] try_charge+0xf4b/0x1440 [ 1072.306886][ T8812] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1072.312428][ T8812] ? percpu_ref_tryget_live+0x111/0x290 [ 1072.317982][ T8812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1072.324221][ T8812] ? __kasan_check_read+0x11/0x20 [ 1072.329265][ T8812] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1072.329284][ T8812] mem_cgroup_try_charge+0x136/0x590 [ 1072.329303][ T8812] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1072.329320][ T8812] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1072.329342][ T8812] wp_page_copy+0x41e/0x1590 [ 1072.356582][ T8812] ? find_held_lock+0x35/0x130 [ 1072.361627][ T8812] ? pmd_pfn+0x1d0/0x1d0 [ 1072.365880][ T8812] ? lock_downgrade+0x920/0x920 [ 1072.370741][ T8812] ? swp_swapcount+0x540/0x540 22:33:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1500]}}]}, 0x40}}, 0x0) [ 1072.375511][ T8812] ? __kasan_check_read+0x11/0x20 [ 1072.380538][ T8812] ? do_raw_spin_unlock+0x57/0x270 [ 1072.385656][ T8812] do_wp_page+0x499/0x14d0 [ 1072.390084][ T8812] ? finish_mkwrite_fault+0x570/0x570 [ 1072.395471][ T8812] __handle_mm_fault+0x22f1/0x3f20 [ 1072.400591][ T8812] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1072.406195][ T8812] ? __kasan_check_read+0x11/0x20 [ 1072.411237][ T8812] handle_mm_fault+0x1b5/0x6c0 [ 1072.416009][ T8812] __do_page_fault+0x536/0xdd0 [ 1072.420785][ T8812] do_page_fault+0x38/0x590 [ 1072.425281][ T8812] page_fault+0x39/0x40 [ 1072.425292][ T8812] RIP: 0033:0x45801a [ 1072.425305][ T8812] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba [ 1072.425316][ T8812] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010246 [ 1072.452928][ T8812] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1072.452936][ T8812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a74fc8 22:33:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}]}, 0x40}}, 0x0) 22:33:17 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492967, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x4000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1072.452944][ T8812] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1072.452952][ T8812] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 00000000000000ca [ 1072.452959][ T8812] R13: 0000000000001675 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1072.464493][ T8812] memory: usage 307200kB, limit 307200kB, failcnt 11994 22:33:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00]}}]}, 0x40}}, 0x0) 22:33:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}}]}, 0x40}}, 0x0) 22:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x5865, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1072.642716][ T8812] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1072.702208][ T8812] Memory cgroup stats for /syz3: [ 1072.702310][ T8812] anon 222375936 [ 1072.702310][ T8812] file 36864 [ 1072.702310][ T8812] kernel_stack 13107200 [ 1072.702310][ T8812] slab 20267008 [ 1072.702310][ T8812] sock 0 [ 1072.702310][ T8812] shmem 0 [ 1072.702310][ T8812] file_mapped 0 [ 1072.702310][ T8812] file_dirty 0 [ 1072.702310][ T8812] file_writeback 0 [ 1072.702310][ T8812] anon_thp 178257920 [ 1072.702310][ T8812] inactive_anon 0 [ 1072.702310][ T8812] active_anon 222375936 [ 1072.702310][ T8812] inactive_file 57344 [ 1072.702310][ T8812] active_file 61440 [ 1072.702310][ T8812] unevictable 0 [ 1072.702310][ T8812] slab_reclaimable 3784704 [ 1072.702310][ T8812] slab_unreclaimable 16482304 [ 1072.702310][ T8812] pgfault 91113 [ 1072.702310][ T8812] pgmajfault 0 [ 1072.702310][ T8812] workingset_refault 528 [ 1072.702310][ T8812] workingset_activate 330 [ 1072.702310][ T8812] workingset_nodereclaim 0 [ 1072.702310][ T8812] pgrefill 4465 [ 1072.702310][ T8812] pgscan 4915 [ 1072.702310][ T8812] pgsteal 847 [ 1072.884513][ T8812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23564,uid=0 [ 1072.900189][ T8812] Memory cgroup out of memory: Killed process 23564 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1072.953974][T23569] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1072.987282][T23569] CPU: 0 PID: 23569 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1072.996429][T23569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.006489][T23569] Call Trace: [ 1073.009809][T23569] dump_stack+0x172/0x1f0 [ 1073.014152][T23569] dump_header+0x177/0x1152 [ 1073.018663][T23569] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1073.024468][T23569] ? ___ratelimit+0x2c8/0x595 [ 1073.029163][T23569] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1073.034954][T23569] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1073.040221][T23569] ? trace_hardirqs_on+0x67/0x240 [ 1073.045243][T23569] ? pagefault_out_of_memory+0x11c/0x11c [ 1073.050870][T23569] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1073.056660][T23569] ? ___ratelimit+0x60/0x595 [ 1073.061232][T23569] ? do_raw_spin_unlock+0x57/0x270 [ 1073.066328][T23569] oom_kill_process.cold+0x10/0x15 [ 1073.071428][T23569] out_of_memory+0x334/0x1340 [ 1073.076085][T23569] ? lock_downgrade+0x920/0x920 [ 1073.080933][T23569] ? oom_killer_disable+0x280/0x280 [ 1073.086131][T23569] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1073.091762][T23569] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1073.097384][T23569] ? do_raw_spin_unlock+0x57/0x270 [ 1073.102479][T23569] ? _raw_spin_unlock+0x2d/0x50 [ 1073.107313][T23569] try_charge+0xa2d/0x1440 [ 1073.111720][T23569] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1073.117249][T23569] ? find_held_lock+0x35/0x130 [ 1073.121991][T23569] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1073.127543][T23569] ? lock_downgrade+0x920/0x920 [ 1073.132393][T23569] ? percpu_ref_tryget_live+0x111/0x290 [ 1073.137944][T23569] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1073.143412][T23569] ? memcg_kmem_put_cache+0x50/0x50 [ 1073.148621][T23569] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1073.154915][T23569] __memcg_kmem_charge+0x13a/0x3a0 [ 1073.160019][T23569] __alloc_pages_nodemask+0x4f7/0x900 [ 1073.165370][T23569] ? find_held_lock+0x35/0x130 [ 1073.170116][T23569] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1073.175837][T23569] ? __kasan_check_read+0x11/0x20 [ 1073.180859][T23569] ? mark_lock+0xc2/0x1220 [ 1073.185282][T23569] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1073.191533][T23569] alloc_pages_current+0x107/0x210 [ 1073.196678][T23569] pte_alloc_one+0x1b/0x1a0 [ 1073.201166][T23569] __handle_mm_fault+0x34d7/0x3f20 [ 1073.206266][T23569] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1073.211806][T23569] ? __kasan_check_read+0x11/0x20 [ 1073.216817][T23569] handle_mm_fault+0x1b5/0x6c0 [ 1073.221572][T23569] __do_page_fault+0x536/0xdd0 [ 1073.226317][T23569] ? page_fault+0x16/0x40 [ 1073.230630][T23569] do_page_fault+0x38/0x590 [ 1073.235116][T23569] page_fault+0x39/0x40 [ 1073.239264][T23569] RIP: 0033:0x457eba [ 1073.243146][T23569] Code: Bad RIP value. [ 1073.247234][T23569] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010246 [ 1073.253274][T23569] RAX: 0000000000000000 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1073.261229][T23569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1073.269183][T23569] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1073.277131][T23569] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1073.285090][T23569] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1073.293809][T23569] memory: usage 305000kB, limit 307200kB, failcnt 11994 [ 1073.301171][T23569] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1073.308565][T23569] Memory cgroup stats for /syz3: [ 1073.308634][T23569] anon 220225536 [ 1073.308634][T23569] file 36864 [ 1073.308634][T23569] kernel_stack 13107200 [ 1073.308634][T23569] slab 20267008 [ 1073.308634][T23569] sock 0 [ 1073.308634][T23569] shmem 0 [ 1073.308634][T23569] file_mapped 0 [ 1073.308634][T23569] file_dirty 0 [ 1073.308634][T23569] file_writeback 0 [ 1073.308634][T23569] anon_thp 176160768 [ 1073.308634][T23569] inactive_anon 0 [ 1073.308634][T23569] active_anon 220225536 [ 1073.308634][T23569] inactive_file 57344 [ 1073.308634][T23569] active_file 61440 [ 1073.308634][T23569] unevictable 0 [ 1073.308634][T23569] slab_reclaimable 3784704 [ 1073.308634][T23569] slab_unreclaimable 16482304 [ 1073.308634][T23569] pgfault 91113 [ 1073.308634][T23569] pgmajfault 0 [ 1073.308634][T23569] workingset_refault 528 [ 1073.308634][T23569] workingset_activate 330 [ 1073.308634][T23569] workingset_nodereclaim 0 [ 1073.308634][T23569] pgrefill 4465 [ 1073.308634][T23569] pgscan 4915 [ 1073.308634][T23569] pgsteal 847 [ 1073.404012][T23569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23540,uid=0 [ 1073.419904][T23569] Memory cgroup out of memory: Killed process 23540 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1006c}, 0x1c) 22:33:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}}]}, 0x40}}, 0x0) 22:33:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000]}}]}, 0x40}}, 0x0) 22:33:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x6000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:18 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000ffa000/0x4000)=nil}) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492967, 0x0) fchmod(r1, 0x20) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0xed5, 0xb, 0xccfaa9785c73ea30}) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x4, 0x8}, {0xfff, 0x4}, {0x9, 0x5}, {0xa, 0x9}]}) [ 1073.462503][T23631] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}}]}, 0x40}}, 0x0) 22:33:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x7800]}}]}, 0x40}}, 0x0) [ 1073.597193][T23647] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10074}, 0x1c) 22:33:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x6558, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1073.792542][T23664] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1073.830125][T23664] CPU: 0 PID: 23664 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 22:33:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500]}}]}, 0x40}}, 0x0) [ 1073.839270][T23664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1073.849334][T23664] Call Trace: [ 1073.852631][T23664] dump_stack+0x172/0x1f0 [ 1073.856970][T23664] dump_header+0x177/0x1152 [ 1073.861479][T23664] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1073.867278][T23664] ? ___ratelimit+0x2c8/0x595 [ 1073.867292][T23664] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1073.867307][T23664] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1073.867321][T23664] ? trace_hardirqs_on+0x67/0x240 22:33:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}]}, 0x40}}, 0x0) [ 1073.867341][T23664] ? pagefault_out_of_memory+0x11c/0x11c [ 1073.893778][T23664] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1073.899607][T23664] ? ___ratelimit+0x60/0x595 [ 1073.904198][T23664] ? do_raw_spin_unlock+0x57/0x270 [ 1073.909317][T23664] oom_kill_process.cold+0x10/0x15 [ 1073.914447][T23664] out_of_memory+0x334/0x1340 [ 1073.919139][T23664] ? lock_downgrade+0x920/0x920 [ 1073.924004][T23664] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1073.929815][T23664] ? oom_killer_disable+0x280/0x280 [ 1073.935030][T23664] mem_cgroup_out_of_memory+0x1d8/0x240 22:33:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}]}, 0x40}}, 0x0) [ 1073.940581][T23664] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1073.946225][T23664] ? do_raw_spin_unlock+0x57/0x270 [ 1073.951341][T23664] ? _raw_spin_unlock+0x2d/0x50 [ 1073.956280][T23664] try_charge+0xf4b/0x1440 [ 1073.960702][T23664] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1073.966514][T23664] ? percpu_ref_tryget_live+0x111/0x290 [ 1073.972061][T23664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1073.978302][T23664] ? __kasan_check_read+0x11/0x20 [ 1073.983336][T23664] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1073.988891][T23664] mem_cgroup_try_charge+0x136/0x590 [ 1073.994176][T23664] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1074.000422][T23664] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1074.006067][T23664] wp_page_copy+0x41e/0x1590 [ 1074.010657][T23664] ? find_held_lock+0x35/0x130 [ 1074.015429][T23664] ? pmd_pfn+0x1d0/0x1d0 [ 1074.019677][T23664] ? lock_downgrade+0x920/0x920 [ 1074.024534][T23664] ? swp_swapcount+0x540/0x540 [ 1074.029300][T23664] ? __kasan_check_read+0x11/0x20 [ 1074.034309][T23664] ? do_raw_spin_unlock+0x57/0x270 [ 1074.039427][T23664] do_wp_page+0x499/0x14d0 22:33:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7800]}}]}, 0x40}}, 0x0) [ 1074.043840][T23664] ? finish_mkwrite_fault+0x570/0x570 [ 1074.049226][T23664] __handle_mm_fault+0x22f1/0x3f20 [ 1074.054347][T23664] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1074.059911][T23664] ? __kasan_check_read+0x11/0x20 [ 1074.064947][T23664] handle_mm_fault+0x1b5/0x6c0 [ 1074.069723][T23664] __do_page_fault+0x536/0xdd0 [ 1074.074497][T23664] do_page_fault+0x38/0x590 [ 1074.079010][T23664] page_fault+0x39/0x40 [ 1074.083170][T23664] RIP: 0033:0x457eee 22:33:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1074.087067][T23664] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1074.106672][T23664] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1074.112749][T23664] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1074.120728][T23664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1074.128705][T23664] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1074.136682][T23664] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1074.144656][T23664] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:33:19 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:33:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9600]}}]}, 0x40}}, 0x0) 22:33:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe201]}}]}, 0x40}}, 0x0) [ 1074.283136][T23664] memory: usage 307200kB, limit 307200kB, failcnt 12013 [ 1074.312978][T23664] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1074.343975][T23664] Memory cgroup stats for /syz3: [ 1074.344081][T23664] anon 222375936 [ 1074.344081][T23664] file 36864 [ 1074.344081][T23664] kernel_stack 13107200 [ 1074.344081][T23664] slab 20267008 [ 1074.344081][T23664] sock 0 [ 1074.344081][T23664] shmem 0 [ 1074.344081][T23664] file_mapped 0 [ 1074.344081][T23664] file_dirty 0 [ 1074.344081][T23664] file_writeback 0 [ 1074.344081][T23664] anon_thp 178257920 [ 1074.344081][T23664] inactive_anon 0 [ 1074.344081][T23664] active_anon 222375936 [ 1074.344081][T23664] inactive_file 57344 [ 1074.344081][T23664] active_file 61440 [ 1074.344081][T23664] unevictable 0 [ 1074.344081][T23664] slab_reclaimable 3784704 [ 1074.344081][T23664] slab_unreclaimable 16482304 [ 1074.344081][T23664] pgfault 91245 [ 1074.344081][T23664] pgmajfault 0 [ 1074.344081][T23664] workingset_refault 528 [ 1074.344081][T23664] workingset_activate 330 [ 1074.344081][T23664] workingset_nodereclaim 0 [ 1074.344081][T23664] pgrefill 4465 [ 1074.344081][T23664] pgscan 4915 [ 1074.344081][T23664] pgsteal 847 [ 1074.517078][T23664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23632,uid=0 [ 1074.546951][T23664] Memory cgroup out of memory: Killed process 23632 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1007a}, 0x1c) 22:33:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x7800, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xc405]}}]}, 0x40}}, 0x0) 22:33:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea02]}}]}, 0x40}}, 0x0) [ 1074.601080][T23716] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec02]}}]}, 0x40}}, 0x0) 22:33:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x8100, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1074.702375][T23730] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 22:33:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf000]}}]}, 0x40}}, 0x0) [ 1074.745548][T23730] CPU: 0 PID: 23730 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1074.754688][T23730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1074.764832][T23730] Call Trace: [ 1074.768137][T23730] dump_stack+0x172/0x1f0 [ 1074.772478][T23730] dump_header+0x177/0x1152 [ 1074.776994][T23730] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1074.782795][T23730] ? ___ratelimit+0x2c8/0x595 [ 1074.787473][T23730] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1074.787489][T23730] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1074.787503][T23730] ? trace_hardirqs_on+0x67/0x240 [ 1074.787519][T23730] ? pagefault_out_of_memory+0x11c/0x11c [ 1074.787536][T23730] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1074.815026][T23730] ? ___ratelimit+0x60/0x595 [ 1074.819618][T23730] ? do_raw_spin_unlock+0x57/0x270 [ 1074.824741][T23730] oom_kill_process.cold+0x10/0x15 [ 1074.829851][T23730] out_of_memory+0x334/0x1340 [ 1074.829867][T23730] ? lock_downgrade+0x920/0x920 [ 1074.829886][T23730] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1074.829902][T23730] ? oom_killer_disable+0x280/0x280 [ 1074.850387][T23730] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1074.850409][T23730] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1074.850428][T23730] ? do_raw_spin_unlock+0x57/0x270 [ 1074.866686][T23730] ? _raw_spin_unlock+0x2d/0x50 [ 1074.871594][T23730] try_charge+0xf4b/0x1440 [ 1074.876067][T23730] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1074.881625][T23730] ? percpu_ref_tryget_live+0x111/0x290 [ 1074.887171][T23730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1074.893409][T23730] ? __kasan_check_read+0x11/0x20 [ 1074.893430][T23730] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1074.893447][T23730] mem_cgroup_try_charge+0x136/0x590 [ 1074.909254][T23730] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1074.915503][T23730] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1074.921159][T23730] wp_page_copy+0x41e/0x1590 [ 1074.925757][T23730] ? find_held_lock+0x35/0x130 [ 1074.930534][T23730] ? pmd_pfn+0x1d0/0x1d0 [ 1074.934788][T23730] ? lock_downgrade+0x920/0x920 [ 1074.939642][T23730] ? swp_swapcount+0x540/0x540 [ 1074.944411][T23730] ? __kasan_check_read+0x11/0x20 [ 1074.949440][T23730] ? do_raw_spin_unlock+0x57/0x270 [ 1074.954560][T23730] do_wp_page+0x499/0x14d0 [ 1074.959082][T23730] ? finish_mkwrite_fault+0x570/0x570 [ 1074.964476][T23730] __handle_mm_fault+0x22f1/0x3f20 [ 1074.969595][T23730] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1074.975167][T23730] ? __kasan_check_read+0x11/0x20 [ 1074.980205][T23730] handle_mm_fault+0x1b5/0x6c0 [ 1074.984989][T23730] __do_page_fault+0x536/0xdd0 [ 1074.989766][T23730] do_page_fault+0x38/0x590 [ 1074.994367][T23730] page_fault+0x39/0x40 [ 1074.998523][T23730] RIP: 0033:0x457eee [ 1075.002419][T23730] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1075.022027][T23730] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1075.028124][T23730] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1075.036092][T23730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1075.044169][T23730] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1075.044182][T23730] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1075.060192][T23730] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:33:20 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492967, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x3ff}, &(0x7f0000000300)=0x90) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x6000, &(0x7f0000000040), 0x0, r1, 0xc}) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000240)=""/182) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x0, 0x100000}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 22:33:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfa01]}}]}, 0x40}}, 0x0) [ 1075.119366][T23730] memory: usage 307200kB, limit 307200kB, failcnt 12032 [ 1075.127258][T23730] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1075.135471][T23730] Memory cgroup stats for /syz3: [ 1075.135584][T23730] anon 222363648 [ 1075.135584][T23730] file 36864 [ 1075.135584][T23730] kernel_stack 13107200 [ 1075.135584][T23730] slab 20267008 [ 1075.135584][T23730] sock 0 [ 1075.135584][T23730] shmem 0 [ 1075.135584][T23730] file_mapped 0 [ 1075.135584][T23730] file_dirty 0 [ 1075.135584][T23730] file_writeback 0 [ 1075.135584][T23730] anon_thp 178257920 [ 1075.135584][T23730] inactive_anon 0 [ 1075.135584][T23730] active_anon 222363648 [ 1075.135584][T23730] inactive_file 57344 [ 1075.135584][T23730] active_file 61440 [ 1075.135584][T23730] unevictable 0 [ 1075.135584][T23730] slab_reclaimable 3784704 [ 1075.135584][T23730] slab_unreclaimable 16482304 [ 1075.135584][T23730] pgfault 91311 [ 1075.135584][T23730] pgmajfault 0 [ 1075.135584][T23730] workingset_refault 528 [ 1075.135584][T23730] workingset_activate 330 [ 1075.135584][T23730] workingset_nodereclaim 0 [ 1075.135584][T23730] pgrefill 4465 [ 1075.135584][T23730] pgscan 4915 [ 1075.135584][T23730] pgsteal 847 [ 1075.253053][T23730] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23717,uid=0 [ 1075.300163][T23730] Memory cgroup out of memory: Killed process 23717 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100f0}, 0x1c) 22:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}}]}, 0x40}}, 0x0) 22:33:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xb20a, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf0ffff]}}]}, 0x40}}, 0x0) [ 1075.394261][T23770] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}}]}, 0x40}}, 0x0) 22:33:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xc700, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1000000]}}]}, 0x40}}, 0x0) [ 1075.556833][T23791] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1075.603038][T23791] CPU: 0 PID: 23791 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1075.612183][T23791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1075.622240][T23791] Call Trace: [ 1075.625537][T23791] dump_stack+0x172/0x1f0 [ 1075.629876][T23791] dump_header+0x177/0x1152 [ 1075.634387][T23791] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1075.640194][T23791] ? ___ratelimit+0x2c8/0x595 [ 1075.644878][T23791] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1075.650696][T23791] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1075.656049][T23791] ? trace_hardirqs_on+0x67/0x240 [ 1075.661075][T23791] ? pagefault_out_of_memory+0x11c/0x11c [ 1075.666712][T23791] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1075.672522][T23791] ? ___ratelimit+0x60/0x595 [ 1075.677110][T23791] ? do_raw_spin_unlock+0x57/0x270 [ 1075.682220][T23791] oom_kill_process.cold+0x10/0x15 [ 1075.687336][T23791] out_of_memory+0x334/0x1340 [ 1075.692012][T23791] ? lock_downgrade+0x920/0x920 [ 1075.696869][T23791] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1075.702678][T23791] ? oom_killer_disable+0x280/0x280 [ 1075.707895][T23791] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1075.713444][T23791] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1075.719091][T23791] ? do_raw_spin_unlock+0x57/0x270 [ 1075.724206][T23791] ? _raw_spin_unlock+0x2d/0x50 [ 1075.729070][T23791] try_charge+0xf4b/0x1440 [ 1075.729094][T23791] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1075.729106][T23791] ? percpu_ref_tryget_live+0x111/0x290 [ 1075.729123][T23791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1075.729138][T23791] ? __kasan_check_read+0x11/0x20 [ 1075.729156][T23791] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1075.761381][T23791] mem_cgroup_try_charge+0x136/0x590 [ 1075.766686][T23791] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1075.772939][T23791] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1075.778580][T23791] wp_page_copy+0x41e/0x1590 [ 1075.783171][T23791] ? find_held_lock+0x35/0x130 [ 1075.787945][T23791] ? pmd_pfn+0x1d0/0x1d0 [ 1075.792198][T23791] ? lock_downgrade+0x920/0x920 [ 1075.797053][T23791] ? swp_swapcount+0x540/0x540 [ 1075.801819][T23791] ? __kasan_check_read+0x11/0x20 [ 1075.806842][T23791] ? do_raw_spin_unlock+0x57/0x270 [ 1075.812053][T23791] do_wp_page+0x499/0x14d0 [ 1075.816450][T23791] ? finish_mkwrite_fault+0x570/0x570 [ 1075.821804][T23791] __handle_mm_fault+0x22f1/0x3f20 [ 1075.826939][T23791] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1075.832594][T23791] ? __kasan_check_read+0x11/0x20 [ 1075.837612][T23791] handle_mm_fault+0x1b5/0x6c0 [ 1075.842356][T23791] __do_page_fault+0x536/0xdd0 [ 1075.847105][T23791] do_page_fault+0x38/0x590 [ 1075.851592][T23791] page_fault+0x39/0x40 [ 1075.855721][T23791] RIP: 0033:0x457eee [ 1075.859590][T23791] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1075.879168][T23791] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1075.885209][T23791] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1075.893297][T23791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1075.901295][T23791] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1075.909249][T23791] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1075.917203][T23791] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:33:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}]}, 0x40}}, 0x0) 22:33:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2000000]}}]}, 0x40}}, 0x0) [ 1075.980871][T23791] memory: usage 307200kB, limit 307200kB, failcnt 12060 [ 1075.999823][T23791] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1076.008851][T23791] Memory cgroup stats for /syz3: [ 1076.008955][T23791] anon 222363648 [ 1076.008955][T23791] file 36864 [ 1076.008955][T23791] kernel_stack 13107200 [ 1076.008955][T23791] slab 20267008 [ 1076.008955][T23791] sock 0 [ 1076.008955][T23791] shmem 0 [ 1076.008955][T23791] file_mapped 0 [ 1076.008955][T23791] file_dirty 0 [ 1076.008955][T23791] file_writeback 0 [ 1076.008955][T23791] anon_thp 178257920 [ 1076.008955][T23791] inactive_anon 0 [ 1076.008955][T23791] active_anon 222363648 [ 1076.008955][T23791] inactive_file 57344 [ 1076.008955][T23791] active_file 61440 [ 1076.008955][T23791] unevictable 0 [ 1076.008955][T23791] slab_reclaimable 3784704 [ 1076.008955][T23791] slab_unreclaimable 16482304 [ 1076.008955][T23791] pgfault 91377 [ 1076.008955][T23791] pgmajfault 0 [ 1076.008955][T23791] workingset_refault 528 [ 1076.008955][T23791] workingset_activate 330 [ 1076.008955][T23791] workingset_nodereclaim 0 [ 1076.008955][T23791] pgrefill 4465 [ 1076.008955][T23791] pgscan 4915 [ 1076.008955][T23791] pgsteal 847 [ 1076.183773][T23791] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23771,uid=0 [ 1076.199708][T23791] Memory cgroup out of memory: Killed process 23771 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3000000]}}]}, 0x40}}, 0x0) 22:33:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xf000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}]}, 0x40}}, 0x0) 22:33:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10300}, 0x1c) 22:33:21 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492967, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x20601, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r3, 0x100000001}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0xffe0000000}, 0x8) eventfd2(0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492967, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000000)="85da570806326b56dfd1117d66798a9979220cc6116d0ce90267e25fc50e", 0x1e) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xfcc9}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) [ 1076.270383][T23821] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xf0ffff, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000000]}}]}, 0x40}}, 0x0) [ 1076.448768][T23839] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 22:33:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}]}, 0x40}}, 0x0) [ 1076.512567][T23839] CPU: 0 PID: 23839 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1076.522407][T23839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1076.532471][T23839] Call Trace: [ 1076.535779][T23839] dump_stack+0x172/0x1f0 [ 1076.540123][T23839] dump_header+0x177/0x1152 [ 1076.544640][T23839] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1076.550452][T23839] ? ___ratelimit+0x2c8/0x595 [ 1076.555143][T23839] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1076.560961][T23839] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1076.566258][T23839] ? trace_hardirqs_on+0x67/0x240 [ 1076.571294][T23839] ? pagefault_out_of_memory+0x11c/0x11c [ 1076.577473][T23839] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1076.583305][T23839] ? ___ratelimit+0x60/0x595 [ 1076.587903][T23839] ? do_raw_spin_unlock+0x57/0x270 [ 1076.593029][T23839] oom_kill_process.cold+0x10/0x15 [ 1076.598159][T23839] out_of_memory+0x334/0x1340 [ 1076.602847][T23839] ? lock_downgrade+0x920/0x920 22:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4020000]}}]}, 0x40}}, 0x0) [ 1076.607714][T23839] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1076.613537][T23839] ? oom_killer_disable+0x280/0x280 [ 1076.618760][T23839] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1076.624319][T23839] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1076.630140][T23839] ? do_raw_spin_unlock+0x57/0x270 [ 1076.635269][T23839] ? _raw_spin_unlock+0x2d/0x50 [ 1076.640218][T23839] try_charge+0xf4b/0x1440 [ 1076.644651][T23839] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1076.650197][T23839] ? percpu_ref_tryget_live+0x111/0x290 22:33:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1076.656364][T23839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1076.666264][T23839] ? __kasan_check_read+0x11/0x20 [ 1076.671327][T23839] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1076.676896][T23839] mem_cgroup_try_charge+0x136/0x590 [ 1076.682191][T23839] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1076.688450][T23839] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1076.694192][T23839] wp_page_copy+0x41e/0x1590 [ 1076.698801][T23839] ? find_held_lock+0x35/0x130 [ 1076.703581][T23839] ? pmd_pfn+0x1d0/0x1d0 [ 1076.707831][T23839] ? lock_downgrade+0x920/0x920 22:33:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}]}, 0x40}}, 0x0) [ 1076.712699][T23839] ? swp_swapcount+0x540/0x540 [ 1076.717489][T23839] ? __kasan_check_read+0x11/0x20 [ 1076.722523][T23839] ? do_raw_spin_unlock+0x57/0x270 [ 1076.727646][T23839] do_wp_page+0x499/0x14d0 [ 1076.732076][T23839] ? finish_mkwrite_fault+0x570/0x570 [ 1076.737469][T23839] __handle_mm_fault+0x22f1/0x3f20 [ 1076.742598][T23839] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1076.748174][T23839] ? __kasan_check_read+0x11/0x20 [ 1076.753217][T23839] handle_mm_fault+0x1b5/0x6c0 [ 1076.757997][T23839] __do_page_fault+0x536/0xdd0 22:33:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5000000]}}]}, 0x40}}, 0x0) 22:33:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1076.762778][T23839] do_page_fault+0x38/0x590 [ 1076.767291][T23839] page_fault+0x39/0x40 [ 1076.771443][T23839] RIP: 0033:0x457eee [ 1076.775343][T23839] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1076.794954][T23839] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1076.801043][T23839] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1076.809127][T23839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1076.817107][T23839] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1076.825089][T23839] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1076.833067][T23839] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 22:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}]}, 0x40}}, 0x0) [ 1077.118816][T23839] memory: usage 307200kB, limit 307200kB, failcnt 12079 [ 1077.137022][T23839] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1077.173523][T23839] Memory cgroup stats for /syz3: [ 1077.173636][T23839] anon 222363648 [ 1077.173636][T23839] file 36864 [ 1077.173636][T23839] kernel_stack 13107200 [ 1077.173636][T23839] slab 20267008 [ 1077.173636][T23839] sock 0 [ 1077.173636][T23839] shmem 0 [ 1077.173636][T23839] file_mapped 0 [ 1077.173636][T23839] file_dirty 0 [ 1077.173636][T23839] file_writeback 0 [ 1077.173636][T23839] anon_thp 178257920 [ 1077.173636][T23839] inactive_anon 0 [ 1077.173636][T23839] active_anon 222363648 [ 1077.173636][T23839] inactive_file 57344 [ 1077.173636][T23839] active_file 61440 [ 1077.173636][T23839] unevictable 0 [ 1077.173636][T23839] slab_reclaimable 3784704 [ 1077.173636][T23839] slab_unreclaimable 16482304 [ 1077.173636][T23839] pgfault 91443 [ 1077.173636][T23839] pgmajfault 0 [ 1077.173636][T23839] workingset_refault 528 [ 1077.173636][T23839] workingset_activate 330 [ 1077.173636][T23839] workingset_nodereclaim 0 [ 1077.173636][T23839] pgrefill 4465 [ 1077.173636][T23839] pgscan 4915 [ 1077.173636][T23839] pgsteal 847 [ 1077.277916][T23839] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23822,uid=0 [ 1077.294105][T23839] Memory cgroup out of memory: Killed process 23822 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10500}, 0x1c) 22:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x1000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6000000]}}]}, 0x40}}, 0x0) 22:33:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:22 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xcb, 0x100, 0x100000001, 0x3, 0x10001, 0x8, 0xa4, 0x7, 0x400, 0x1, 0xc4}, 0xb) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}]}, 0x40}}, 0x0) [ 1077.369099][T23905] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1077.487835][T23927] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1077.521590][T23927] CPU: 0 PID: 23927 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1077.530735][T23927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1077.540791][T23927] Call Trace: [ 1077.540816][T23927] dump_stack+0x172/0x1f0 [ 1077.540835][T23927] dump_header+0x177/0x1152 [ 1077.540849][T23927] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1077.540859][T23927] ? ___ratelimit+0x2c8/0x595 [ 1077.540872][T23927] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1077.540894][T23927] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1077.574520][T23927] ? trace_hardirqs_on+0x67/0x240 [ 1077.574539][T23927] ? pagefault_out_of_memory+0x11c/0x11c [ 1077.574558][T23927] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1077.591238][T23927] ? ___ratelimit+0x60/0x595 [ 1077.595843][T23927] ? do_raw_spin_unlock+0x57/0x270 [ 1077.595865][T23927] oom_kill_process.cold+0x10/0x15 [ 1077.595881][T23927] out_of_memory+0x334/0x1340 [ 1077.595896][T23927] ? lock_downgrade+0x920/0x920 [ 1077.595917][T23927] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1077.616128][T23927] ? oom_killer_disable+0x280/0x280 [ 1077.616157][T23927] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1077.616173][T23927] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 22:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}]}, 0x40}}, 0x0) 22:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6020000]}}]}, 0x40}}, 0x0) [ 1077.616193][T23927] ? do_raw_spin_unlock+0x57/0x270 [ 1077.627176][T23927] ? _raw_spin_unlock+0x2d/0x50 [ 1077.627196][T23927] try_charge+0xf4b/0x1440 [ 1077.627218][T23927] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1077.659772][T23927] ? percpu_ref_tryget_live+0x111/0x290 [ 1077.665336][T23927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1077.671588][T23927] ? __kasan_check_read+0x11/0x20 [ 1077.676640][T23927] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1077.682204][T23927] mem_cgroup_try_charge+0x136/0x590 [ 1077.687500][T23927] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1077.693752][T23927] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1077.699397][T23927] wp_page_copy+0x41e/0x1590 [ 1077.703999][T23927] ? find_held_lock+0x35/0x130 [ 1077.708776][T23927] ? pmd_pfn+0x1d0/0x1d0 [ 1077.713026][T23927] ? lock_downgrade+0x920/0x920 [ 1077.717887][T23927] ? swp_swapcount+0x540/0x540 [ 1077.722660][T23927] ? __kasan_check_read+0x11/0x20 [ 1077.727689][T23927] ? do_raw_spin_unlock+0x57/0x270 [ 1077.732808][T23927] do_wp_page+0x499/0x14d0 22:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}}]}, 0x40}}, 0x0) [ 1077.737233][T23927] ? finish_mkwrite_fault+0x570/0x570 [ 1077.742621][T23927] __handle_mm_fault+0x22f1/0x3f20 [ 1077.747738][T23927] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1077.753908][T23927] ? __kasan_check_read+0x11/0x20 [ 1077.758942][T23927] handle_mm_fault+0x1b5/0x6c0 [ 1077.763701][T23927] __do_page_fault+0x536/0xdd0 [ 1077.768477][T23927] do_page_fault+0x38/0x590 [ 1077.772986][T23927] page_fault+0x39/0x40 [ 1077.777135][T23927] RIP: 0033:0x457eee [ 1077.781034][T23927] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 e8 61 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 1077.804841][T23927] RSP: 002b:00007ffcdbf51ae0 EFLAGS: 00010206 [ 1077.810914][T23927] RAX: 0000000000a76248 RBX: 00007ffcdbf51ae0 RCX: 0000000000457eba [ 1077.818894][T23927] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1077.826875][T23927] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 22:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x2000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}}]}, 0x40}}, 0x0) [ 1077.834854][T23927] R10: 0000555556cc5c10 R11: 0000000000000246 R12: 0000000000000001 [ 1077.842839][T23927] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1078.005162][T23927] memory: usage 307172kB, limit 307200kB, failcnt 12098 [ 1078.013907][T23927] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1078.021864][T23927] Memory cgroup stats for /syz3: [ 1078.021969][T23927] anon 222363648 [ 1078.021969][T23927] file 36864 [ 1078.021969][T23927] kernel_stack 13107200 [ 1078.021969][T23927] slab 20267008 [ 1078.021969][T23927] sock 0 [ 1078.021969][T23927] shmem 0 [ 1078.021969][T23927] file_mapped 0 [ 1078.021969][T23927] file_dirty 0 [ 1078.021969][T23927] file_writeback 0 [ 1078.021969][T23927] anon_thp 178257920 [ 1078.021969][T23927] inactive_anon 0 [ 1078.021969][T23927] active_anon 222363648 [ 1078.021969][T23927] inactive_file 57344 [ 1078.021969][T23927] active_file 61440 [ 1078.021969][T23927] unevictable 0 [ 1078.021969][T23927] slab_reclaimable 3784704 [ 1078.021969][T23927] slab_unreclaimable 16482304 [ 1078.021969][T23927] pgfault 91509 [ 1078.021969][T23927] pgmajfault 0 [ 1078.021969][T23927] workingset_refault 528 [ 1078.021969][T23927] workingset_activate 330 [ 1078.021969][T23927] workingset_nodereclaim 0 [ 1078.021969][T23927] pgrefill 4465 [ 1078.021969][T23927] pgscan 4915 [ 1078.021969][T23927] pgsteal 847 [ 1078.120815][T23927] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23906,uid=0 [ 1078.138591][T23927] Memory cgroup out of memory: Killed process 23906 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x3000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8000000]}}]}, 0x40}}, 0x0) 22:33:23 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:23 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10600}, 0x1c) 22:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}}]}, 0x40}}, 0x0) [ 1078.185147][T23959] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}}]}, 0x40}}, 0x0) 22:33:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x4000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9000000]}}]}, 0x40}}, 0x0) [ 1078.330327][T23980] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1078.372655][T23980] CPU: 0 PID: 23980 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1078.381797][T23980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1078.391850][T23980] Call Trace: [ 1078.395329][T23980] dump_stack+0x172/0x1f0 [ 1078.399673][T23980] dump_header+0x177/0x1152 [ 1078.404187][T23980] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1078.410004][T23980] ? ___ratelimit+0x2c8/0x595 [ 1078.414685][T23980] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1078.420496][T23980] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1078.425792][T23980] ? trace_hardirqs_on+0x67/0x240 [ 1078.430820][T23980] ? pagefault_out_of_memory+0x11c/0x11c [ 1078.436457][T23980] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1078.442270][T23980] ? ___ratelimit+0x60/0x595 [ 1078.446861][T23980] ? do_raw_spin_unlock+0x57/0x270 [ 1078.451973][T23980] oom_kill_process.cold+0x10/0x15 [ 1078.457089][T23980] out_of_memory+0x334/0x1340 [ 1078.461764][T23980] ? lock_downgrade+0x920/0x920 [ 1078.466619][T23980] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa000000]}}]}, 0x40}}, 0x0) [ 1078.472429][T23980] ? oom_killer_disable+0x280/0x280 [ 1078.477641][T23980] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1078.483195][T23980] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1078.488859][T23980] ? do_raw_spin_unlock+0x57/0x270 [ 1078.493977][T23980] ? _raw_spin_unlock+0x2d/0x50 [ 1078.498838][T23980] try_charge+0xf4b/0x1440 [ 1078.503281][T23980] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1078.508843][T23980] ? percpu_ref_tryget_live+0x111/0x290 [ 1078.514392][T23980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:33:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1078.520639][T23980] ? __kasan_check_read+0x11/0x20 [ 1078.525672][T23980] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1078.531240][T23980] mem_cgroup_try_charge+0x136/0x590 [ 1078.536529][T23980] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1078.542875][T23980] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1078.548511][T23980] wp_page_copy+0x41e/0x1590 [ 1078.553104][T23980] ? find_held_lock+0x35/0x130 [ 1078.557912][T23980] ? pmd_pfn+0x1d0/0x1d0 [ 1078.562159][T23980] ? lock_downgrade+0x920/0x920 [ 1078.567018][T23980] ? swp_swapcount+0x540/0x540 22:33:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1078.571789][T23980] ? __kasan_check_read+0x11/0x20 [ 1078.576835][T23980] ? do_raw_spin_unlock+0x57/0x270 [ 1078.581950][T23980] do_wp_page+0x499/0x14d0 [ 1078.586390][T23980] ? finish_mkwrite_fault+0x570/0x570 [ 1078.591769][T23980] __handle_mm_fault+0x22f1/0x3f20 [ 1078.596892][T23980] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1078.602458][T23980] ? __kasan_check_read+0x11/0x20 [ 1078.607491][T23980] handle_mm_fault+0x1b5/0x6c0 [ 1078.612264][T23980] __do_page_fault+0x536/0xdd0 [ 1078.617045][T23980] do_page_fault+0x38/0x590 22:33:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xb000000]}}]}, 0x40}}, 0x0) [ 1078.621552][T23980] page_fault+0x39/0x40 [ 1078.625705][T23980] RIP: 0033:0x40ca3b [ 1078.629614][T23980] Code: 74 28 41 8b 07 85 c0 0f 85 f0 00 00 00 41 83 c6 01 48 81 c5 a8 00 00 00 41 83 fe 10 75 d7 bf f6 ef 4b 00 31 c0 e8 05 52 ff ff 45 f8 01 44 89 75 f4 48 89 ef c6 45 15 00 c7 45 fc 00 00 00 00 [ 1078.649222][T23980] RSP: 002b:00007ffcdbf51980 EFLAGS: 00010246 [ 1078.655297][T23980] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007ffcdbf51a38 [ 1078.663270][T23980] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1078.671245][T23980] RBP: 000000000075bf2c R08: 00007ffcdbf51a40 R09: 0000000000760090 [ 1078.679217][T23980] R10: 0000000000438a40 R11: 0000000000000012 R12: 000000000075bf20 [ 1078.687193][T23980] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1078.745214][T23980] memory: usage 307200kB, limit 307200kB, failcnt 12108 22:33:23 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2200, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x39) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r2 = semget$private(0x0, 0x1, 0x500) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000000000)=""/146) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0xea4, 0x0, 0xff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xfbb, 0x0, 0x0, 0x0, 0x14}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 1078.801620][T23980] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1078.832688][T23980] Memory cgroup stats for /syz3: [ 1078.832798][T23980] anon 222363648 [ 1078.832798][T23980] file 36864 [ 1078.832798][T23980] kernel_stack 13107200 [ 1078.832798][T23980] slab 20267008 [ 1078.832798][T23980] sock 0 [ 1078.832798][T23980] shmem 0 [ 1078.832798][T23980] file_mapped 0 [ 1078.832798][T23980] file_dirty 0 [ 1078.832798][T23980] file_writeback 0 [ 1078.832798][T23980] anon_thp 178257920 [ 1078.832798][T23980] inactive_anon 0 [ 1078.832798][T23980] active_anon 222363648 [ 1078.832798][T23980] inactive_file 57344 [ 1078.832798][T23980] active_file 61440 [ 1078.832798][T23980] unevictable 0 [ 1078.832798][T23980] slab_reclaimable 3784704 [ 1078.832798][T23980] slab_unreclaimable 16482304 [ 1078.832798][T23980] pgfault 91608 [ 1078.832798][T23980] pgmajfault 0 [ 1078.832798][T23980] workingset_refault 528 [ 1078.832798][T23980] workingset_activate 330 [ 1078.832798][T23980] workingset_nodereclaim 0 [ 1078.832798][T23980] pgrefill 4465 [ 1078.832798][T23980] pgscan 4915 [ 1078.832798][T23980] pgsteal 847 [ 1078.838866][T23980] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=23960,uid=0 [ 1079.051149][T23980] Memory cgroup out of memory: Killed process 23960 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10700}, 0x1c) 22:33:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}}]}, 0x40}}, 0x0) 22:33:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x5000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf000000]}}]}, 0x40}}, 0x0) 22:33:24 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xc0000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1079.092336][T24027] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x6000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}}]}, 0x40}}, 0x0) 22:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x10000000]}}]}, 0x40}}, 0x0) [ 1079.230537][T24046] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1079.299528][T24046] CPU: 0 PID: 24046 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1079.308678][T24046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1079.318877][T24046] Call Trace: [ 1079.318902][T24046] dump_stack+0x172/0x1f0 [ 1079.318922][T24046] dump_header+0x177/0x1152 [ 1079.318944][T24046] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1079.336998][T24046] ? ___ratelimit+0x2c8/0x595 [ 1079.341692][T24046] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1079.347521][T24046] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1079.347538][T24046] ? trace_hardirqs_on+0x67/0x240 [ 1079.347554][T24046] ? pagefault_out_of_memory+0x11c/0x11c [ 1079.347570][T24046] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1079.347583][T24046] ? ___ratelimit+0x60/0x595 [ 1079.347593][T24046] ? do_raw_spin_unlock+0x57/0x270 [ 1079.347614][T24046] oom_kill_process.cold+0x10/0x15 [ 1079.384162][T24046] out_of_memory+0x334/0x1340 [ 1079.388846][T24046] ? lock_downgrade+0x920/0x920 [ 1079.393706][T24046] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1079.399526][T24046] ? oom_killer_disable+0x280/0x280 [ 1079.404753][T24046] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1079.410344][T24046] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1079.416000][T24046] ? do_raw_spin_unlock+0x57/0x270 [ 1079.421118][T24046] ? _raw_spin_unlock+0x2d/0x50 [ 1079.425979][T24046] try_charge+0xf4b/0x1440 [ 1079.430674][T24046] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1079.436223][T24046] ? percpu_ref_tryget_live+0x111/0x290 [ 1079.441781][T24046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:33:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x11000000]}}]}, 0x40}}, 0x0) [ 1079.448120][T24046] ? __kasan_check_read+0x11/0x20 [ 1079.453149][T24046] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1079.458702][T24046] mem_cgroup_try_charge+0x136/0x590 [ 1079.463989][T24046] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1079.470231][T24046] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1079.475866][T24046] wp_page_copy+0x41e/0x1590 [ 1079.480472][T24046] ? find_held_lock+0x35/0x130 [ 1079.485251][T24046] ? pmd_pfn+0x1d0/0x1d0 [ 1079.489512][T24046] ? lock_downgrade+0x920/0x920 [ 1079.494374][T24046] ? swp_swapcount+0x540/0x540 [ 1079.499137][T24046] ? __kasan_check_read+0x11/0x20 [ 1079.499151][T24046] ? do_raw_spin_unlock+0x57/0x270 [ 1079.499170][T24046] do_wp_page+0x499/0x14d0 [ 1079.513805][T24046] ? finish_mkwrite_fault+0x570/0x570 [ 1079.519180][T24046] __handle_mm_fault+0x22f1/0x3f20 [ 1079.519203][T24046] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1079.519229][T24046] ? __kasan_check_read+0x11/0x20 [ 1079.537523][T24046] handle_mm_fault+0x1b5/0x6c0 [ 1079.542306][T24046] __do_page_fault+0x536/0xdd0 [ 1079.547096][T24046] do_page_fault+0x38/0x590 [ 1079.551625][T24046] page_fault+0x39/0x40 [ 1079.555789][T24046] RIP: 0033:0x40ca3b [ 1079.559729][T24046] Code: 74 28 41 8b 07 85 c0 0f 85 f0 00 00 00 41 83 c6 01 48 81 c5 a8 00 00 00 41 83 fe 10 75 d7 bf f6 ef 4b 00 31 c0 e8 05 52 ff ff 45 f8 01 44 89 75 f4 48 89 ef c6 45 15 00 c7 45 fc 00 00 00 00 [ 1079.579341][T24046] RSP: 002b:00007ffcdbf51980 EFLAGS: 00010246 [ 1079.585418][T24046] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00007ffcdbf51a38 22:33:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1079.593419][T24046] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1079.601396][T24046] RBP: 000000000075bf2c R08: 00007ffcdbf51a40 R09: 0000000000760090 [ 1079.609375][T24046] R10: 0000000000438a40 R11: 0000000000000012 R12: 000000000075bf20 [ 1079.617443][T24046] R13: 0000000000000005 R14: 0000000000000000 R15: 000000000075bf2c [ 1079.697198][T24046] memory: usage 307200kB, limit 307200kB, failcnt 12141 [ 1079.725407][T24046] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1079.771067][T24046] Memory cgroup stats for /syz3: [ 1079.771190][T24046] anon 222363648 [ 1079.771190][T24046] file 36864 [ 1079.771190][T24046] kernel_stack 13107200 [ 1079.771190][T24046] slab 20267008 [ 1079.771190][T24046] sock 0 [ 1079.771190][T24046] shmem 0 [ 1079.771190][T24046] file_mapped 0 [ 1079.771190][T24046] file_dirty 0 [ 1079.771190][T24046] file_writeback 0 [ 1079.771190][T24046] anon_thp 178257920 [ 1079.771190][T24046] inactive_anon 0 [ 1079.771190][T24046] active_anon 222363648 [ 1079.771190][T24046] inactive_file 57344 [ 1079.771190][T24046] active_file 61440 [ 1079.771190][T24046] unevictable 0 [ 1079.771190][T24046] slab_reclaimable 3784704 [ 1079.771190][T24046] slab_unreclaimable 16482304 [ 1079.771190][T24046] pgfault 91674 [ 1079.771190][T24046] pgmajfault 0 [ 1079.771190][T24046] workingset_refault 528 [ 1079.771190][T24046] workingset_activate 330 [ 1079.771190][T24046] workingset_nodereclaim 0 [ 1079.771190][T24046] pgrefill 4465 [ 1079.771190][T24046] pgscan 4915 [ 1079.771190][T24046] pgsteal 847 [ 1079.908116][T24046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24028,uid=0 [ 1079.930462][T24046] Memory cgroup out of memory: Killed process 24028 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x12000}, 0x1c) 22:33:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x8000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}}]}, 0x40}}, 0x0) 22:33:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x12000000]}}]}, 0x40}}, 0x0) 22:33:25 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492967, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:33:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1079.989700][T24083] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x13000000]}}]}, 0x40}}, 0x0) 22:33:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}}]}, 0x40}}, 0x0) 22:33:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x9000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1080.206905][T24100] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1080.285329][T24100] CPU: 0 PID: 24100 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1080.294474][T24100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.304536][T24100] Call Trace: [ 1080.307841][T24100] dump_stack+0x172/0x1f0 [ 1080.312180][T24100] dump_header+0x177/0x1152 [ 1080.316867][T24100] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1080.322676][T24100] ? ___ratelimit+0x2c8/0x595 [ 1080.327361][T24100] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x14000000]}}]}, 0x40}}, 0x0) [ 1080.333174][T24100] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1080.338464][T24100] ? trace_hardirqs_on+0x67/0x240 [ 1080.343491][T24100] ? pagefault_out_of_memory+0x11c/0x11c [ 1080.349155][T24100] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1080.354980][T24100] ? ___ratelimit+0x60/0x595 [ 1080.359576][T24100] ? do_raw_spin_unlock+0x57/0x270 [ 1080.364701][T24100] oom_kill_process.cold+0x10/0x15 [ 1080.369821][T24100] out_of_memory+0x334/0x1340 [ 1080.374506][T24100] ? lock_downgrade+0x920/0x920 [ 1080.379367][T24100] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:33:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1080.385182][T24100] ? oom_killer_disable+0x280/0x280 [ 1080.390393][T24100] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1080.395942][T24100] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1080.401579][T24100] ? do_raw_spin_unlock+0x57/0x270 [ 1080.406702][T24100] ? _raw_spin_unlock+0x2d/0x50 [ 1080.411561][T24100] try_charge+0xf4b/0x1440 [ 1080.415998][T24100] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1080.421547][T24100] ? percpu_ref_tryget_live+0x111/0x290 [ 1080.427102][T24100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1080.433348][T24100] ? __kasan_check_read+0x11/0x20 [ 1080.438383][T24100] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1080.443936][T24100] mem_cgroup_try_charge+0x136/0x590 [ 1080.449225][T24100] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1080.455471][T24100] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1080.461115][T24100] wp_page_copy+0x41e/0x1590 [ 1080.465707][T24100] ? find_held_lock+0x35/0x130 [ 1080.470479][T24100] ? pmd_pfn+0x1d0/0x1d0 [ 1080.474731][T24100] ? lock_downgrade+0x920/0x920 [ 1080.479588][T24100] ? swp_swapcount+0x540/0x540 [ 1080.484355][T24100] ? __kasan_check_read+0x11/0x20 [ 1080.489383][T24100] ? do_raw_spin_unlock+0x57/0x270 [ 1080.494503][T24100] do_wp_page+0x499/0x14d0 [ 1080.498928][T24100] ? finish_mkwrite_fault+0x570/0x570 [ 1080.504311][T24100] __handle_mm_fault+0x22f1/0x3f20 [ 1080.509423][T24100] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1080.514977][T24100] ? __kasan_check_read+0x11/0x20 [ 1080.520013][T24100] handle_mm_fault+0x1b5/0x6c0 [ 1080.524783][T24100] __do_page_fault+0x536/0xdd0 [ 1080.529551][T24100] do_page_fault+0x38/0x590 [ 1080.534055][T24100] page_fault+0x39/0x40 [ 1080.538212][T24100] RIP: 0033:0x47193e [ 1080.542123][T24100] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87 [ 1080.561731][T24100] RSP: 002b:00007ffcdbf50f50 EFLAGS: 00010206 [ 1080.567803][T24100] RAX: 0000000000000006 RBX: 00007ffcdbf514b0 RCX: 0000000000000000 [ 1080.575765][T24100] RDX: 00007ffcdbf51628 RSI: 00000000004bf14c RDI: 00007ffcdbf514b0 [ 1080.575774][T24100] RBP: 00007ffcdbf514a0 R08: 0000000000000000 R09: 00007ffcdbf51628 [ 1080.575781][T24100] R10: 0000000000000075 R11: 0000000000000206 R12: 00007ffcdbf51640 [ 1080.575789][T24100] R13: 00000000004bf14c R14: 00007ffcdbf51628 R15: 0000000000000001 [ 1080.613163][T24100] memory: usage 307200kB, limit 307200kB, failcnt 12164 [ 1080.629493][T24100] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1080.636709][T24100] Memory cgroup stats for /syz3: [ 1080.636812][T24100] anon 222363648 [ 1080.636812][T24100] file 36864 [ 1080.636812][T24100] kernel_stack 13107200 [ 1080.636812][T24100] slab 20267008 [ 1080.636812][T24100] sock 0 [ 1080.636812][T24100] shmem 0 [ 1080.636812][T24100] file_mapped 0 [ 1080.636812][T24100] file_dirty 0 [ 1080.636812][T24100] file_writeback 0 [ 1080.636812][T24100] anon_thp 178257920 [ 1080.636812][T24100] inactive_anon 0 [ 1080.636812][T24100] active_anon 222363648 [ 1080.636812][T24100] inactive_file 57344 [ 1080.636812][T24100] active_file 61440 [ 1080.636812][T24100] unevictable 0 [ 1080.636812][T24100] slab_reclaimable 3784704 [ 1080.636812][T24100] slab_unreclaimable 16482304 [ 1080.636812][T24100] pgfault 91740 [ 1080.636812][T24100] pgmajfault 0 [ 1080.636812][T24100] workingset_refault 528 [ 1080.636812][T24100] workingset_activate 330 [ 1080.636812][T24100] workingset_nodereclaim 0 [ 1080.636812][T24100] pgrefill 4465 [ 1080.636812][T24100] pgscan 4915 [ 1080.636812][T24100] pgsteal 847 [ 1080.731618][T24100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24084,uid=0 [ 1080.758967][T24100] Memory cgroup out of memory: Killed process 24084 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:25 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r3) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x15000000]}}]}, 0x40}}, 0x0) 22:33:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}}]}, 0x40}}, 0x0) 22:33:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xa000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x13f00}, 0x1c) [ 1080.806884][T24133] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xb000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}}]}, 0x40}}, 0x0) [ 1080.934580][T24149] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1080.969426][T24149] CPU: 0 PID: 24149 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 22:33:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000]}}]}, 0x40}}, 0x0) 22:33:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1080.978564][T24149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.988621][T24149] Call Trace: [ 1080.991920][T24149] dump_stack+0x172/0x1f0 [ 1080.996267][T24149] dump_header+0x177/0x1152 [ 1081.000782][T24149] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1081.006590][T24149] ? ___ratelimit+0x2c8/0x595 [ 1081.011265][T24149] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1081.011282][T24149] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1081.011299][T24149] ? trace_hardirqs_on+0x67/0x240 [ 1081.027418][T24149] ? pagefault_out_of_memory+0x11c/0x11c [ 1081.033061][T24149] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1081.038873][T24149] ? ___ratelimit+0x60/0x595 [ 1081.043470][T24149] ? do_raw_spin_unlock+0x57/0x270 [ 1081.048585][T24149] oom_kill_process.cold+0x10/0x15 [ 1081.048602][T24149] out_of_memory+0x334/0x1340 [ 1081.048620][T24149] ? lock_downgrade+0x920/0x920 [ 1081.063213][T24149] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1081.063231][T24149] ? oom_killer_disable+0x280/0x280 [ 1081.063253][T24149] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1081.079757][T24149] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1081.085400][T24149] ? do_raw_spin_unlock+0x57/0x270 [ 1081.090527][T24149] ? _raw_spin_unlock+0x2d/0x50 [ 1081.095388][T24149] try_charge+0xf4b/0x1440 [ 1081.099820][T24149] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1081.105376][T24149] ? percpu_ref_tryget_live+0x111/0x290 [ 1081.110928][T24149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1081.110947][T24149] ? __kasan_check_read+0x11/0x20 [ 1081.110973][T24149] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1081.127744][T24149] mem_cgroup_try_charge+0x136/0x590 [ 1081.133041][T24149] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1081.139304][T24149] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1081.144954][T24149] wp_page_copy+0x41e/0x1590 [ 1081.149563][T24149] ? find_held_lock+0x35/0x130 [ 1081.154340][T24149] ? pmd_pfn+0x1d0/0x1d0 [ 1081.158584][T24149] ? lock_downgrade+0x920/0x920 [ 1081.158605][T24149] ? swp_swapcount+0x540/0x540 [ 1081.158622][T24149] ? __kasan_check_read+0x11/0x20 [ 1081.158633][T24149] ? do_raw_spin_unlock+0x57/0x270 [ 1081.158651][T24149] do_wp_page+0x499/0x14d0 22:33:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}]}, 0x40}}, 0x0) [ 1081.182929][T24149] ? finish_mkwrite_fault+0x570/0x570 [ 1081.188325][T24149] __handle_mm_fault+0x22f1/0x3f20 [ 1081.193453][T24149] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1081.199023][T24149] ? __kasan_check_read+0x11/0x20 [ 1081.204052][T24149] handle_mm_fault+0x1b5/0x6c0 [ 1081.208823][T24149] __do_page_fault+0x536/0xdd0 [ 1081.213600][T24149] do_page_fault+0x38/0x590 [ 1081.218108][T24149] page_fault+0x39/0x40 [ 1081.222266][T24149] RIP: 0033:0x47193e [ 1081.226162][T24149] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87 [ 1081.245769][T24149] RSP: 002b:00007ffcdbf50f50 EFLAGS: 00010206 [ 1081.251840][T24149] RAX: 0000000000000006 RBX: 00007ffcdbf514b0 RCX: 0000000000000000 [ 1081.259809][T24149] RDX: 00007ffcdbf51628 RSI: 00000000004bf14c RDI: 00007ffcdbf514b0 [ 1081.267769][T24149] RBP: 00007ffcdbf514a0 R08: 0000000000000000 R09: 00007ffcdbf51628 [ 1081.267777][T24149] R10: 0000000000000075 R11: 0000000000000206 R12: 00007ffcdbf51640 22:33:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xc000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1081.267785][T24149] R13: 00000000004bf14c R14: 00007ffcdbf51628 R15: 0000000000000001 [ 1081.353668][T24149] memory: usage 307200kB, limit 307200kB, failcnt 12189 [ 1081.375275][T24149] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1081.387519][T24149] Memory cgroup stats for /syz3: [ 1081.387622][T24149] anon 222375936 [ 1081.387622][T24149] file 36864 [ 1081.387622][T24149] kernel_stack 13107200 [ 1081.387622][T24149] slab 20267008 [ 1081.387622][T24149] sock 0 [ 1081.387622][T24149] shmem 0 [ 1081.387622][T24149] file_mapped 0 [ 1081.387622][T24149] file_dirty 0 [ 1081.387622][T24149] file_writeback 0 [ 1081.387622][T24149] anon_thp 178257920 [ 1081.387622][T24149] inactive_anon 0 [ 1081.387622][T24149] active_anon 222375936 [ 1081.387622][T24149] inactive_file 57344 [ 1081.387622][T24149] active_file 61440 [ 1081.387622][T24149] unevictable 0 [ 1081.387622][T24149] slab_reclaimable 3784704 [ 1081.387622][T24149] slab_unreclaimable 16482304 [ 1081.387622][T24149] pgfault 91806 [ 1081.387622][T24149] pgmajfault 0 [ 1081.387622][T24149] workingset_refault 528 [ 1081.387622][T24149] workingset_activate 330 [ 1081.387622][T24149] workingset_nodereclaim 0 [ 1081.387622][T24149] pgrefill 4465 [ 1081.387622][T24149] pgscan 4915 [ 1081.387622][T24149] pgsteal 847 [ 1081.502041][T24149] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24134,uid=0 [ 1081.518716][T24149] Memory cgroup out of memory: Killed process 24134 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1081.589702][T24188] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:26 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x4, 0x5, r1, 0x0, 0xee01, 0x0, 0x5000000000000000, 0x8000}) fcntl$getown(r2, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x47, 0x3, 0x0, 0x3, 0x0, 0xffffffffffffff13, 0x2a20, 0x0, 0x9, 0x1, 0x8cb5, 0x1, 0x7f, 0xffffffff, 0x6, 0x6c4, 0x2, 0x27, 0x6, 0x1, 0x6, 0x80000000, 0x4f, 0x0, 0x2f, 0x2, 0x3b8e, 0xfffffffffffffffe, 0x1fc2, 0x9, 0x2000000, 0xb1, 0x3, 0x7, 0xa77e, 0x3, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x0, 0x1fa, 0x2, 0x5, 0x9, 0x0, 0x3e}, r1, 0x0, r3, 0x8) timerfd_create(0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "c4b949762d8a188b", "21c08df9a7efe0f249a26d06487491027e25a08c80f040f131aa3e86b2c7623c", "0f205137", "e2b1c14720152c4d"}, 0x38) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 22:33:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xe000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x40000000]}}]}, 0x40}}, 0x0) 22:33:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}]}, 0x40}}, 0x0) 22:33:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x14000}, 0x1c) [ 1081.784404][T24202] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 22:33:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x78000000]}}]}, 0x40}}, 0x0) [ 1081.828492][T24202] CPU: 0 PID: 24202 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1081.837639][T24202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.847700][T24202] Call Trace: [ 1081.851018][T24202] dump_stack+0x172/0x1f0 [ 1081.855379][T24202] dump_header+0x177/0x1152 [ 1081.859880][T24202] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1081.865670][T24202] ? ___ratelimit+0x2c8/0x595 [ 1081.865683][T24202] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x96000000]}}]}, 0x40}}, 0x0) [ 1081.865699][T24202] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1081.865714][T24202] ? trace_hardirqs_on+0x67/0x240 [ 1081.865729][T24202] ? pagefault_out_of_memory+0x11c/0x11c [ 1081.865746][T24202] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1081.897929][T24202] ? ___ratelimit+0x60/0x595 [ 1081.902518][T24202] ? do_raw_spin_unlock+0x57/0x270 [ 1081.907642][T24202] oom_kill_process.cold+0x10/0x15 [ 1081.912849][T24202] out_of_memory+0x334/0x1340 [ 1081.917528][T24202] ? lock_downgrade+0x920/0x920 [ 1081.922399][T24202] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1081.928194][T24202] ? oom_killer_disable+0x280/0x280 [ 1081.928219][T24202] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1081.928233][T24202] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1081.928251][T24202] ? do_raw_spin_unlock+0x57/0x270 [ 1081.949681][T24202] ? _raw_spin_unlock+0x2d/0x50 [ 1081.954538][T24202] try_charge+0xf4b/0x1440 [ 1081.958971][T24202] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1081.964603][T24202] ? percpu_ref_tryget_live+0x111/0x290 [ 1081.970154][T24202] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:33:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9effffff]}}]}, 0x40}}, 0x0) [ 1081.976414][T24202] ? __kasan_check_read+0x11/0x20 [ 1081.981451][T24202] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1081.987005][T24202] mem_cgroup_try_charge+0x136/0x590 [ 1081.992297][T24202] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1081.998545][T24202] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1082.004210][T24202] wp_page_copy+0x41e/0x1590 [ 1082.008806][T24202] ? find_held_lock+0x35/0x130 [ 1082.013581][T24202] ? pmd_pfn+0x1d0/0x1d0 [ 1082.017831][T24202] ? lock_downgrade+0x920/0x920 [ 1082.022686][T24202] ? swp_swapcount+0x540/0x540 22:33:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xc4050000]}}]}, 0x40}}, 0x0) [ 1082.027452][T24202] ? __kasan_check_read+0x11/0x20 [ 1082.032479][T24202] ? do_raw_spin_unlock+0x57/0x270 [ 1082.037595][T24202] do_wp_page+0x499/0x14d0 [ 1082.042018][T24202] ? finish_mkwrite_fault+0x570/0x570 [ 1082.047402][T24202] __handle_mm_fault+0x22f1/0x3f20 [ 1082.052523][T24202] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1082.058091][T24202] ? __kasan_check_read+0x11/0x20 [ 1082.063123][T24202] handle_mm_fault+0x1b5/0x6c0 [ 1082.067904][T24202] __do_page_fault+0x536/0xdd0 [ 1082.072678][T24202] do_page_fault+0x38/0x590 [ 1082.077190][T24202] page_fault+0x39/0x40 [ 1082.081341][T24202] RIP: 0033:0x47193e [ 1082.085237][T24202] Code: ff 90 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 81 ec 28 05 00 00 48 c7 c0 d4 ff ff ff 64 8b 00 <89> 85 5c fb ff ff 8b 87 c0 00 00 00 85 c0 0f 85 ee 00 00 00 c7 87 [ 1082.104832][T24202] RSP: 002b:00007ffcdbf50f50 EFLAGS: 00010206 [ 1082.104843][T24202] RAX: 0000000000000006 RBX: 00007ffcdbf514b0 RCX: 0000000000000000 [ 1082.104851][T24202] RDX: 00007ffcdbf51628 RSI: 00000000004bf14c RDI: 00007ffcdbf514b0 22:33:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78000000]}}]}, 0x40}}, 0x0) 22:33:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1082.104858][T24202] RBP: 00007ffcdbf514a0 R08: 0000000000000000 R09: 00007ffcdbf51628 [ 1082.104866][T24202] R10: 0000000000000075 R11: 0000000000000206 R12: 00007ffcdbf51640 [ 1082.104874][T24202] R13: 00000000004bf14c R14: 00007ffcdbf51628 R15: 0000000000000001 [ 1082.126405][T24202] memory: usage 307200kB, limit 307200kB, failcnt 12212 [ 1082.177721][T24202] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1082.186779][T24202] Memory cgroup stats for /syz3: [ 1082.186860][T24202] anon 222375936 [ 1082.186860][T24202] file 36864 [ 1082.186860][T24202] kernel_stack 13107200 [ 1082.186860][T24202] slab 20267008 [ 1082.186860][T24202] sock 0 [ 1082.186860][T24202] shmem 0 [ 1082.186860][T24202] file_mapped 0 [ 1082.186860][T24202] file_dirty 0 [ 1082.186860][T24202] file_writeback 0 [ 1082.186860][T24202] anon_thp 178257920 [ 1082.186860][T24202] inactive_anon 0 [ 1082.186860][T24202] active_anon 222375936 [ 1082.186860][T24202] inactive_file 57344 [ 1082.186860][T24202] active_file 61440 [ 1082.186860][T24202] unevictable 0 [ 1082.186860][T24202] slab_reclaimable 3784704 [ 1082.186860][T24202] slab_unreclaimable 16482304 [ 1082.186860][T24202] pgfault 91872 [ 1082.186860][T24202] pgmajfault 0 [ 1082.186860][T24202] workingset_refault 528 [ 1082.186860][T24202] workingset_activate 330 [ 1082.186860][T24202] workingset_nodereclaim 0 [ 1082.186860][T24202] pgrefill 4465 [ 1082.186860][T24202] pgscan 4915 [ 1082.186860][T24202] pgsteal 847 [ 1082.282593][T24202] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24189,uid=0 [ 1082.299128][T24202] Memory cgroup out of memory: Killed process 24189 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1082.380327][T24242] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:27 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) eventfd2(0x8, 0x801) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x7, 0x9e, 0x5, 0x3, 0x4, 0x0, 0x90d}, &(0x7f0000000040)={0x0, 0x7fff, 0x100, 0x10001, 0x80000000, 0x200, 0x0, 0x5}, &(0x7f0000000080)={0x7f, 0x401, 0xfffffffffffffffa, 0x7, 0x6, 0xffffffffffff0000, 0x3ff, 0x7d}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000180)={0x1}, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x0, 0xb, 0x4}) ioctl$VT_WAITACTIVE(r1, 0x5607) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000300)={0x2, 0x1}, 0x2) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000280)={{0x2, 0x4e20, @multicast1}, {0xc, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xc0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 'veth1_to_team\x00'}) 22:33:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xf000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}}]}, 0x40}}, 0x0) 22:33:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff]}}]}, 0x40}}, 0x0) 22:33:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x14800}, 0x1c) 22:33:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}}]}, 0x40}}, 0x0) 22:33:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2010000]}}]}, 0x40}}, 0x0) [ 1082.771738][T24258] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 22:33:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x10000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1082.863357][T24258] CPU: 0 PID: 24258 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1082.872503][T24258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1082.882561][T24258] Call Trace: [ 1082.885862][T24258] dump_stack+0x172/0x1f0 [ 1082.890207][T24258] dump_header+0x177/0x1152 [ 1082.894722][T24258] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1082.900528][T24258] ? ___ratelimit+0x2c8/0x595 [ 1082.905211][T24258] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1082.911031][T24258] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1082.916324][T24258] ? trace_hardirqs_on+0x67/0x240 [ 1082.921359][T24258] ? pagefault_out_of_memory+0x11c/0x11c [ 1082.927007][T24258] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1082.932820][T24258] ? ___ratelimit+0x60/0x595 [ 1082.937418][T24258] ? do_raw_spin_unlock+0x57/0x270 [ 1082.942631][T24258] oom_kill_process.cold+0x10/0x15 [ 1082.947747][T24258] out_of_memory+0x334/0x1340 [ 1082.952429][T24258] ? lock_downgrade+0x920/0x920 [ 1082.957286][T24258] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 22:33:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1082.963094][T24258] ? oom_killer_disable+0x280/0x280 [ 1082.968304][T24258] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1082.973854][T24258] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1082.979498][T24258] ? do_raw_spin_unlock+0x57/0x270 [ 1082.984622][T24258] ? _raw_spin_unlock+0x2d/0x50 [ 1082.989500][T24258] try_charge+0xf4b/0x1440 [ 1082.993942][T24258] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1082.999502][T24258] ? find_held_lock+0x35/0x130 [ 1083.004365][T24258] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1083.009927][T24258] ? lock_downgrade+0x920/0x920 [ 1083.014780][T24258] ? percpu_ref_tryget_live+0x111/0x290 [ 1083.020338][T24258] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1083.025803][T24258] ? memcg_kmem_put_cache+0x50/0x50 [ 1083.031015][T24258] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1083.036579][T24258] __memcg_kmem_charge+0x13a/0x3a0 [ 1083.041718][T24258] __alloc_pages_nodemask+0x4f7/0x900 [ 1083.047113][T24258] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1083.052663][T24258] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1083.058389][T24258] ? percpu_ref_put_many+0xb6/0x190 [ 1083.063601][T24258] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1083.068890][T24258] ? trace_hardirqs_on+0x67/0x240 [ 1083.073904][T24258] ? __kasan_check_read+0x11/0x20 [ 1083.073925][T24258] copy_process+0x3f8/0x6830 [ 1083.083519][T24258] ? psi_memstall_leave+0x12e/0x180 [ 1083.088731][T24258] ? __cleanup_sighand+0x60/0x60 [ 1083.088753][T24258] ? __kasan_check_read+0x11/0x20 [ 1083.098785][T24258] ? __lock_acquire+0x8a0/0x4a00 [ 1083.103728][T24258] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1083.108929][T24258] _do_fork+0x146/0xfa0 [ 1083.113708][T24258] ? copy_init_mm+0x20/0x20 [ 1083.118225][T24258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1083.124472][T24258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1083.130716][T24258] ? debug_smp_processor_id+0x3c/0x214 [ 1083.136179][T24258] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1083.142342][T24258] __x64_sys_clone+0x1ab/0x270 [ 1083.147284][T24258] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1083.153277][T24258] ? __ia32_sys_vfork+0xd0/0xd0 [ 1083.158132][T24258] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1083.164542][T24258] ? do_syscall_64+0x26/0x760 [ 1083.169339][T24258] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1083.174654][T24258] ? trace_hardirqs_on+0x67/0x240 [ 1083.179681][T24258] do_syscall_64+0xfa/0x760 [ 1083.184172][T24258] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1083.190088][T24258] RIP: 0033:0x45c2b9 [ 1083.193963][T24258] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1083.213544][T24258] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1083.221933][T24258] RAX: ffffffffffffffda RBX: 00007f4724895700 RCX: 000000000045c2b9 [ 1083.229885][T24258] RDX: 00007f47248959d0 RSI: 00007f4724894db0 RDI: 00000000003d0f00 [ 1083.237833][T24258] RBP: 00007ffcdbf51a60 R08: 00007f4724895700 R09: 00007f4724895700 [ 1083.245869][T24258] R10: 00007f47248959d0 R11: 0000000000000202 R12: 0000000000000000 [ 1083.253838][T24258] R13: 00007ffcdbf518ff R14: 00007f47248959c0 R15: 000000000075bf2c [ 1083.305871][T24258] memory: usage 307200kB, limit 307200kB, failcnt 12242 [ 1083.321532][T24258] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1083.328761][T24258] Memory cgroup stats for /syz3: [ 1083.328878][T24258] anon 222375936 [ 1083.328878][T24258] file 36864 [ 1083.328878][T24258] kernel_stack 13107200 [ 1083.328878][T24258] slab 20267008 [ 1083.328878][T24258] sock 0 [ 1083.328878][T24258] shmem 0 [ 1083.328878][T24258] file_mapped 0 [ 1083.328878][T24258] file_dirty 0 [ 1083.328878][T24258] file_writeback 0 [ 1083.328878][T24258] anon_thp 178257920 [ 1083.328878][T24258] inactive_anon 0 [ 1083.328878][T24258] active_anon 222375936 [ 1083.328878][T24258] inactive_file 57344 [ 1083.328878][T24258] active_file 61440 [ 1083.328878][T24258] unevictable 0 [ 1083.328878][T24258] slab_reclaimable 3784704 [ 1083.328878][T24258] slab_unreclaimable 16482304 [ 1083.328878][T24258] pgfault 91938 [ 1083.328878][T24258] pgmajfault 0 [ 1083.328878][T24258] workingset_refault 528 [ 1083.328878][T24258] workingset_activate 330 [ 1083.328878][T24258] workingset_nodereclaim 0 [ 1083.328878][T24258] pgrefill 4465 [ 1083.328878][T24258] pgscan 4915 [ 1083.328878][T24258] pgsteal 847 [ 1083.424446][T24258] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24243,uid=0 [ 1083.440416][T24258] Memory cgroup out of memory: Killed process 24243 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1083.473070][T24302] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:28 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x4, 0x800, 0x3f) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492967, 0x0) r1 = accept4$netrom(r0, &(0x7f0000000240)={{0x3, @null}, [@rose, @remote, @remote, @default, @rose, @netrom, @bcast]}, &(0x7f0000000080)=0x48, 0x800) getsockname$netrom(r1, &(0x7f00000002c0)={{0x3, @bcast}, [@remote, @bcast, @null, @bcast, @remote, @null, @null, @rose]}, &(0x7f0000000100)=0x48) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000180)={0x6, 0x102, 0x3, {0x4, 0x200, 0x3, 0x8}}) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x501000) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000040)=0x4, 0x4) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 22:33:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea020000]}}]}, 0x40}}, 0x0) 22:33:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfa010000]}}]}, 0x40}}, 0x0) 22:33:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x11000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x14c00}, 0x1c) [ 1083.621509][T24311] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 22:33:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec020000]}}]}, 0x40}}, 0x0) 22:33:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1083.679413][T24311] CPU: 0 PID: 24311 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1083.688560][T24311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1083.698620][T24311] Call Trace: [ 1083.701921][T24311] dump_stack+0x172/0x1f0 [ 1083.706262][T24311] dump_header+0x177/0x1152 [ 1083.710778][T24311] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1083.716582][T24311] ? ___ratelimit+0x2c8/0x595 [ 1083.721266][T24311] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1083.727081][T24311] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1083.732372][T24311] ? trace_hardirqs_on+0x67/0x240 [ 1083.737836][T24311] ? pagefault_out_of_memory+0x11c/0x11c [ 1083.743467][T24311] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1083.749261][T24311] ? ___ratelimit+0x60/0x595 [ 1083.749274][T24311] ? do_raw_spin_unlock+0x57/0x270 [ 1083.749292][T24311] oom_kill_process.cold+0x10/0x15 [ 1083.749307][T24311] out_of_memory+0x334/0x1340 [ 1083.749324][T24311] ? lock_downgrade+0x920/0x920 [ 1083.773589][T24311] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1083.779402][T24311] ? oom_killer_disable+0x280/0x280 [ 1083.784619][T24311] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1083.790170][T24311] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1083.795814][T24311] ? do_raw_spin_unlock+0x57/0x270 [ 1083.800929][T24311] ? _raw_spin_unlock+0x2d/0x50 [ 1083.805795][T24311] try_charge+0xf4b/0x1440 [ 1083.810225][T24311] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1083.815772][T24311] ? percpu_ref_tryget_live+0x111/0x290 [ 1083.821326][T24311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 22:33:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff]}}]}, 0x40}}, 0x0) 22:33:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1083.827572][T24311] ? __kasan_check_read+0x11/0x20 [ 1083.832611][T24311] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1083.838162][T24311] mem_cgroup_try_charge+0x136/0x590 [ 1083.843452][T24311] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1083.849878][T24311] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1083.855518][T24311] wp_page_copy+0x41e/0x1590 [ 1083.860109][T24311] ? find_held_lock+0x35/0x130 [ 1083.864884][T24311] ? pmd_pfn+0x1d0/0x1d0 [ 1083.869134][T24311] ? lock_downgrade+0x920/0x920 [ 1083.873985][T24311] ? swp_swapcount+0x540/0x540 [ 1083.878833][T24311] ? __kasan_check_read+0x11/0x20 [ 1083.883861][T24311] ? do_raw_spin_unlock+0x57/0x270 [ 1083.888983][T24311] do_wp_page+0x499/0x14d0 [ 1083.893399][T24311] ? finish_mkwrite_fault+0x570/0x570 [ 1083.898794][T24311] __handle_mm_fault+0x22f1/0x3f20 [ 1083.898816][T24311] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1083.909456][T24311] ? __kasan_check_read+0x11/0x20 [ 1083.914496][T24311] handle_mm_fault+0x1b5/0x6c0 [ 1083.919268][T24311] __do_page_fault+0x536/0xdd0 [ 1083.924048][T24311] do_page_fault+0x38/0x590 22:33:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}}]}, 0x40}}, 0x0) [ 1083.928562][T24311] page_fault+0x39/0x40 [ 1083.932715][T24311] RIP: 0033:0x40fa76 [ 1083.936616][T24311] Code: 0a 66 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 89 4a 08 49 8b 89 c8 02 00 00 48 89 11 48 c7 05 3a 0a 66 00 00 00 00 00 <48> c7 05 17 54 30 00 90 4e 71 00 31 d2 48 c7 05 02 54 30 00 90 4e [ 1083.956846][T24311] RSP: 002b:00007ffcdbf51ad8 EFLAGS: 00010246 [ 1083.962924][T24311] RAX: 0000555556cc5c00 RBX: 00007ffcdbf51ae0 RCX: 0000000000a704a0 [ 1083.970904][T24311] RDX: 0000000000a704a0 RSI: 0000000000714e90 RDI: 0000555556cc5c20 22:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfcffffff]}}]}, 0x40}}, 0x0) [ 1083.978884][T24311] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1083.986855][T24311] R10: 0000555556cc5c10 R11: 0000000000000202 R12: 0000000000000001 [ 1083.994832][T24311] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1084.025694][T24311] memory: usage 307200kB, limit 307200kB, failcnt 12266 [ 1084.051637][T24311] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1084.059071][T24311] Memory cgroup stats for /syz3: [ 1084.059166][T24311] anon 222375936 [ 1084.059166][T24311] file 36864 [ 1084.059166][T24311] kernel_stack 13107200 [ 1084.059166][T24311] slab 20267008 [ 1084.059166][T24311] sock 0 [ 1084.059166][T24311] shmem 0 [ 1084.059166][T24311] file_mapped 0 [ 1084.059166][T24311] file_dirty 0 [ 1084.059166][T24311] file_writeback 0 [ 1084.059166][T24311] anon_thp 178257920 [ 1084.059166][T24311] inactive_anon 0 [ 1084.059166][T24311] active_anon 222375936 [ 1084.059166][T24311] inactive_file 57344 [ 1084.059166][T24311] active_file 61440 [ 1084.059166][T24311] unevictable 0 [ 1084.059166][T24311] slab_reclaimable 3784704 [ 1084.059166][T24311] slab_unreclaimable 16482304 [ 1084.059166][T24311] pgfault 92004 [ 1084.059166][T24311] pgmajfault 0 [ 1084.059166][T24311] workingset_refault 528 [ 1084.059166][T24311] workingset_activate 330 [ 1084.059166][T24311] workingset_nodereclaim 0 [ 1084.059166][T24311] pgrefill 4465 [ 1084.059166][T24311] pgscan 4915 [ 1084.059166][T24311] pgsteal 847 [ 1084.179328][T24311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24305,uid=0 [ 1084.202464][T24311] Memory cgroup out of memory: Killed process 24305 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1084.267375][T24352] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:29 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x223, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x40087705, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 22:33:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x12000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff]}}]}, 0x40}}, 0x0) 22:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfffff000]}}]}, 0x40}}, 0x0) 22:33:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x16000}, 0x1c) 22:33:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x13000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1084.547734][T24361] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1084.608449][T24361] CPU: 0 PID: 24361 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1084.617597][T24361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.629131][T24361] Call Trace: [ 1084.629153][T24361] dump_stack+0x172/0x1f0 [ 1084.629171][T24361] dump_header+0x177/0x1152 [ 1084.629190][T24361] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1084.641264][T24361] ? ___ratelimit+0x2c8/0x595 [ 1084.651718][T24361] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1084.657535][T24361] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1084.662829][T24361] ? trace_hardirqs_on+0x67/0x240 [ 1084.667862][T24361] ? pagefault_out_of_memory+0x11c/0x11c [ 1084.673496][T24361] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1084.673512][T24361] ? ___ratelimit+0x60/0x595 [ 1084.673524][T24361] ? do_raw_spin_unlock+0x57/0x270 [ 1084.673543][T24361] oom_kill_process.cold+0x10/0x15 [ 1084.694119][T24361] out_of_memory+0x334/0x1340 [ 1084.698804][T24361] ? lock_downgrade+0x920/0x920 [ 1084.703659][T24361] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1084.703677][T24361] ? oom_killer_disable+0x280/0x280 [ 1084.703702][T24361] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1084.720197][T24361] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1084.725863][T24361] ? do_raw_spin_unlock+0x57/0x270 [ 1084.730978][T24361] ? _raw_spin_unlock+0x2d/0x50 [ 1084.735841][T24361] try_charge+0xf4b/0x1440 [ 1084.740275][T24361] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1084.745832][T24361] ? find_held_lock+0x35/0x130 [ 1084.750600][T24361] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1084.756159][T24361] ? lock_downgrade+0x920/0x920 [ 1084.761014][T24361] ? percpu_ref_tryget_live+0x111/0x290 [ 1084.766570][T24361] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1084.772034][T24361] ? memcg_kmem_put_cache+0x50/0x50 [ 1084.777238][T24361] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1084.782790][T24361] __memcg_kmem_charge+0x13a/0x3a0 [ 1084.787909][T24361] __alloc_pages_nodemask+0x4f7/0x900 [ 1084.793284][T24361] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1084.798843][T24361] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1084.804565][T24361] ? percpu_ref_put_many+0xb6/0x190 [ 1084.809770][T24361] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1084.815062][T24361] ? trace_hardirqs_on+0x67/0x240 [ 1084.820089][T24361] ? __kasan_check_read+0x11/0x20 [ 1084.825112][T24361] copy_process+0x3f8/0x6830 [ 1084.825127][T24361] ? psi_memstall_leave+0x12e/0x180 [ 1084.825152][T24361] ? __cleanup_sighand+0x60/0x60 [ 1084.839829][T24361] ? __kasan_check_read+0x11/0x20 [ 1084.844854][T24361] ? __lock_acquire+0x8a0/0x4a00 [ 1084.844871][T24361] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1084.844898][T24361] _do_fork+0x146/0xfa0 [ 1084.859173][T24361] ? copy_init_mm+0x20/0x20 [ 1084.863686][T24361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1084.870428][T24361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1084.876674][T24361] ? debug_smp_processor_id+0x3c/0x214 [ 1084.876697][T24361] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1084.876719][T24361] __x64_sys_clone+0x1ab/0x270 [ 1084.876737][T24361] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1084.893084][T24361] ? __ia32_sys_vfork+0xd0/0xd0 [ 1084.893102][T24361] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1084.893123][T24361] ? do_syscall_64+0x26/0x760 [ 1084.914803][T24361] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1084.920092][T24361] ? trace_hardirqs_on+0x67/0x240 [ 1084.925128][T24361] do_syscall_64+0xfa/0x760 [ 1084.929642][T24361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1084.935532][T24361] RIP: 0033:0x45c2b9 [ 1084.939428][T24361] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 22:33:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}}]}, 0x40}}, 0x0) 22:33:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}]}, 0x40}}, 0x0) 22:33:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}]}, 0x40}}, 0x0) 22:33:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e]}}]}, 0x40}}, 0x0) [ 1084.959037][T24361] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1084.967462][T24361] RAX: ffffffffffffffda RBX: 00007f4724895700 RCX: 000000000045c2b9 [ 1084.975430][T24361] RDX: 00007f47248959d0 RSI: 00007f4724894db0 RDI: 00000000003d0f00 [ 1084.975443][T24361] RBP: 00007ffcdbf51a60 R08: 00007f4724895700 R09: 00007f4724895700 [ 1084.975451][T24361] R10: 00007f47248959d0 R11: 0000000000000202 R12: 0000000000000000 [ 1084.975458][T24361] R13: 00007ffcdbf518ff R14: 00007f47248959c0 R15: 000000000075bf2c [ 1085.080956][T24361] memory: usage 307200kB, limit 307200kB, failcnt 12296 [ 1085.097146][T24361] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1085.117534][T24361] Memory cgroup stats for /syz3: [ 1085.117645][T24361] anon 222375936 [ 1085.117645][T24361] file 36864 [ 1085.117645][T24361] kernel_stack 13107200 [ 1085.117645][T24361] slab 20267008 [ 1085.117645][T24361] sock 0 [ 1085.117645][T24361] shmem 0 [ 1085.117645][T24361] file_mapped 0 [ 1085.117645][T24361] file_dirty 0 [ 1085.117645][T24361] file_writeback 0 [ 1085.117645][T24361] anon_thp 178257920 [ 1085.117645][T24361] inactive_anon 0 [ 1085.117645][T24361] active_anon 222375936 [ 1085.117645][T24361] inactive_file 57344 [ 1085.117645][T24361] active_file 61440 [ 1085.117645][T24361] unevictable 0 [ 1085.117645][T24361] slab_reclaimable 3784704 [ 1085.117645][T24361] slab_unreclaimable 16482304 [ 1085.117645][T24361] pgfault 92070 [ 1085.117645][T24361] pgmajfault 0 [ 1085.117645][T24361] workingset_refault 528 [ 1085.117645][T24361] workingset_activate 330 [ 1085.117645][T24361] workingset_nodereclaim 0 [ 1085.117645][T24361] pgrefill 4465 [ 1085.117645][T24361] pgscan 4915 [ 1085.117645][T24361] pgsteal 847 [ 1085.237816][T24361] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24353,uid=0 [ 1085.253804][T24361] Memory cgroup out of memory: Killed process 24353 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:30 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x27, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0xc00) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000100)="7f413e7014efea64b331e02fd98ced1dbbdadbf8cf65e2055200b7", 0x1b, 0x7}, {&(0x7f0000000240)="b1f2ba452c0663a538c01d4a557ecc48715bdb9b85531d593e23f0881307cffe039c2dd5fb9cb3f601743319fc922279bd3bd0e7225051287a1cea2a8ecc5c5999ebd2f4ea7f5c7fc72d3d8e943d47b30b1cc5e512acbcaf92d2432cc96ffccd9840e4ccd8a9894c63345b3071b413108b029e80d70022", 0x77, 0x7}, {&(0x7f0000000180)="04f577ab7ce48635815076640e554675b017f7b278d5b492779d39899f310ca46e4ae07fa73b6ac1f95f3b93a3d6b3e782990ff0477f28af92", 0x39, 0x7d1a}], 0x44, &(0x7f00000003c0)={[{@utf8='utf8'}, {@mode={'mode', 0x3d, 0x7}}, {@session={'session', 0x3d, 0x2}}, {@map_normal='map=normal'}, {@map_acorn='map=acorn'}], [{@audit='audit'}, {@appraise_type='appraise_type=imasig'}]}) 22:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffff9e]}}]}, 0x40}}, 0x0) 22:33:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0]}}]}, 0x40}}, 0x0) 22:33:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1085.303526][T24404] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x14000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x16800}, 0x1c) [ 1085.379997][T24411] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1085.443032][T24411] CPU: 0 PID: 24411 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1085.452185][T24411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.462244][T24411] Call Trace: [ 1085.465547][T24411] dump_stack+0x172/0x1f0 [ 1085.469889][T24411] dump_header+0x177/0x1152 [ 1085.474427][T24411] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1085.480770][T24411] ? ___ratelimit+0x2c8/0x595 [ 1085.485463][T24411] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1085.491274][T24411] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1085.496812][T24411] ? trace_hardirqs_on+0x67/0x240 [ 1085.496828][T24411] ? pagefault_out_of_memory+0x11c/0x11c [ 1085.496845][T24411] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1085.496858][T24411] ? ___ratelimit+0x60/0x595 [ 1085.496873][T24411] ? do_raw_spin_unlock+0x57/0x270 [ 1085.523084][T24411] oom_kill_process.cold+0x10/0x15 [ 1085.528215][T24411] out_of_memory+0x334/0x1340 [ 1085.532924][T24411] ? lock_downgrade+0x920/0x920 [ 1085.537793][T24411] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1085.543612][T24411] ? oom_killer_disable+0x280/0x280 [ 1085.548829][T24411] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1085.554404][T24411] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1085.560046][T24411] ? do_raw_spin_unlock+0x57/0x270 [ 1085.565169][T24411] ? _raw_spin_unlock+0x2d/0x50 [ 1085.570031][T24411] try_charge+0xf4b/0x1440 [ 1085.574463][T24411] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1085.580014][T24411] ? percpu_ref_tryget_live+0x111/0x290 [ 1085.585567][T24411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1085.585583][T24411] ? __kasan_check_read+0x11/0x20 [ 1085.585604][T24411] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1085.596838][T24411] mem_cgroup_try_charge+0x136/0x590 [ 1085.596857][T24411] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1085.596875][T24411] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1085.596893][T24411] wp_page_copy+0x41e/0x1590 [ 1085.624106][T24411] ? find_held_lock+0x35/0x130 [ 1085.628974][T24411] ? pmd_pfn+0x1d0/0x1d0 [ 1085.633228][T24411] ? lock_downgrade+0x920/0x920 [ 1085.638094][T24411] ? swp_swapcount+0x540/0x540 [ 1085.642886][T24411] ? __kasan_check_read+0x11/0x20 [ 1085.648129][T24411] ? do_raw_spin_unlock+0x57/0x270 [ 1085.653255][T24411] do_wp_page+0x499/0x14d0 [ 1085.657689][T24411] ? finish_mkwrite_fault+0x570/0x570 [ 1085.663076][T24411] __handle_mm_fault+0x22f1/0x3f20 [ 1085.668202][T24411] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1085.673768][T24411] ? __kasan_check_read+0x11/0x20 [ 1085.678817][T24411] handle_mm_fault+0x1b5/0x6c0 [ 1085.683596][T24411] __do_page_fault+0x536/0xdd0 [ 1085.688387][T24411] do_page_fault+0x38/0x590 [ 1085.692902][T24411] page_fault+0x39/0x40 [ 1085.697145][T24411] RIP: 0033:0x40fa76 [ 1085.701032][T24411] Code: 0a 66 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 89 4a 08 49 8b 89 c8 02 00 00 48 89 11 48 c7 05 3a 0a 66 00 00 00 00 00 <48> c7 05 17 54 30 00 90 4e 71 00 31 d2 48 c7 05 02 54 30 00 90 4e [ 1085.720725][T24411] RSP: 002b:00007ffcdbf51ad8 EFLAGS: 00010246 [ 1085.726800][T24411] RAX: 0000555556cc5c00 RBX: 00007ffcdbf51ae0 RCX: 0000000000a704a0 [ 1085.734784][T24411] RDX: 0000000000a704a0 RSI: 0000000000714e90 RDI: 0000555556cc5c20 22:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfffffff0]}}]}, 0x40}}, 0x0) 22:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfffffff5]}}]}, 0x40}}, 0x0) 22:33:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}]}, 0x40}}, 0x0) 22:33:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x15000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1085.742768][T24411] RBP: 00007ffcdbf51b20 R08: 0000000000000001 R09: 0000555556cc5940 [ 1085.750774][T24411] R10: 0000555556cc5c10 R11: 0000000000000202 R12: 0000000000000001 [ 1085.759100][T24411] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcdbf51b70 [ 1085.805066][T24411] memory: usage 307200kB, limit 307200kB, failcnt 12320 [ 1085.812331][T24411] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1085.846308][T24411] Memory cgroup stats for /syz3: [ 1085.846418][T24411] anon 222375936 [ 1085.846418][T24411] file 36864 [ 1085.846418][T24411] kernel_stack 13107200 [ 1085.846418][T24411] slab 20267008 [ 1085.846418][T24411] sock 0 [ 1085.846418][T24411] shmem 0 [ 1085.846418][T24411] file_mapped 0 [ 1085.846418][T24411] file_dirty 0 [ 1085.846418][T24411] file_writeback 0 [ 1085.846418][T24411] anon_thp 178257920 [ 1085.846418][T24411] inactive_anon 0 [ 1085.846418][T24411] active_anon 222375936 [ 1085.846418][T24411] inactive_file 57344 [ 1085.846418][T24411] active_file 61440 [ 1085.846418][T24411] unevictable 0 [ 1085.846418][T24411] slab_reclaimable 3784704 [ 1085.846418][T24411] slab_unreclaimable 16482304 [ 1085.846418][T24411] pgfault 92136 [ 1085.846418][T24411] pgmajfault 0 [ 1085.846418][T24411] workingset_refault 528 [ 1085.846418][T24411] workingset_activate 330 [ 1085.846418][T24411] workingset_nodereclaim 0 [ 1085.846418][T24411] pgrefill 4465 [ 1085.846418][T24411] pgscan 4915 [ 1085.846418][T24411] pgsteal 847 [ 1085.965870][T24411] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24407,uid=0 [ 1085.982574][T24411] Memory cgroup out of memory: Killed process 24407 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1086.039295][T24451] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:31 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 22:33:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}}]}, 0x40}}, 0x0) 22:33:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000000000]}}]}, 0x40}}, 0x0) 22:33:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x3f000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x16c00}, 0x1c) 22:33:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}}]}, 0x40}}, 0x0) 22:33:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}]}, 0x40}}, 0x0) 22:33:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1086.754532][T24462] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 22:33:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x40000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1086.850944][T24462] CPU: 0 PID: 24462 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1086.860181][T24462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1086.870244][T24462] Call Trace: [ 1086.873552][T24462] dump_stack+0x172/0x1f0 [ 1086.877896][T24462] dump_header+0x177/0x1152 [ 1086.882405][T24462] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1086.888216][T24462] ? ___ratelimit+0x2c8/0x595 [ 1086.892900][T24462] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 22:33:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}}]}, 0x40}}, 0x0) 22:33:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1086.898712][T24462] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1086.903997][T24462] ? trace_hardirqs_on+0x67/0x240 [ 1086.909027][T24462] ? pagefault_out_of_memory+0x11c/0x11c [ 1086.914673][T24462] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1086.920479][T24462] ? ___ratelimit+0x60/0x595 [ 1086.925072][T24462] ? do_raw_spin_unlock+0x57/0x270 [ 1086.930202][T24462] oom_kill_process.cold+0x10/0x15 [ 1086.935326][T24462] out_of_memory+0x334/0x1340 [ 1086.940010][T24462] ? lock_downgrade+0x920/0x920 [ 1086.944873][T24462] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1086.950703][T24462] ? oom_killer_disable+0x280/0x280 [ 1086.955916][T24462] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1086.961466][T24462] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1086.967109][T24462] ? do_raw_spin_unlock+0x57/0x270 [ 1086.972231][T24462] ? _raw_spin_unlock+0x2d/0x50 [ 1086.977094][T24462] try_charge+0xf4b/0x1440 [ 1086.981533][T24462] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1086.987084][T24462] ? find_held_lock+0x35/0x130 [ 1086.991847][T24462] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1086.997400][T24462] ? lock_downgrade+0x920/0x920 [ 1087.002246][T24462] ? percpu_ref_tryget_live+0x111/0x290 [ 1087.007804][T24462] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1087.013272][T24462] ? memcg_kmem_put_cache+0x50/0x50 [ 1087.018478][T24462] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1087.024117][T24462] __memcg_kmem_charge+0x13a/0x3a0 [ 1087.029241][T24462] __alloc_pages_nodemask+0x4f7/0x900 [ 1087.034622][T24462] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1087.040170][T24462] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1087.045893][T24462] ? percpu_ref_put_many+0xb6/0x190 [ 1087.051097][T24462] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1087.056385][T24462] ? trace_hardirqs_on+0x67/0x240 [ 1087.061409][T24462] ? __kasan_check_read+0x11/0x20 [ 1087.066442][T24462] copy_process+0x3f8/0x6830 [ 1087.066458][T24462] ? psi_memstall_leave+0x12e/0x180 [ 1087.066482][T24462] ? __cleanup_sighand+0x60/0x60 [ 1087.066499][T24462] ? __kasan_check_read+0x11/0x20 [ 1087.086399][T24462] ? __lock_acquire+0x8a0/0x4a00 [ 1087.092129][T24462] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1087.097350][T24462] _do_fork+0x146/0xfa0 [ 1087.101519][T24462] ? copy_init_mm+0x20/0x20 [ 1087.106039][T24462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1087.112376][T24462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1087.118654][T24462] ? debug_smp_processor_id+0x3c/0x214 [ 1087.124126][T24462] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1087.130296][T24462] __x64_sys_clone+0x1ab/0x270 [ 1087.135069][T24462] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1087.141059][T24462] ? __ia32_sys_vfork+0xd0/0xd0 [ 1087.145918][T24462] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1087.152184][T24462] ? do_syscall_64+0x26/0x760 [ 1087.156867][T24462] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1087.162159][T24462] ? trace_hardirqs_on+0x67/0x240 [ 1087.167195][T24462] do_syscall_64+0xfa/0x760 [ 1087.171815][T24462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1087.177690][T24462] RIP: 0033:0x45c2b9 [ 1087.181571][T24462] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1087.201168][T24462] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1087.209659][T24462] RAX: ffffffffffffffda RBX: 00007f4724895700 RCX: 000000000045c2b9 [ 1087.217619][T24462] RDX: 00007f47248959d0 RSI: 00007f4724894db0 RDI: 00000000003d0f00 [ 1087.225571][T24462] RBP: 00007ffcdbf51a60 R08: 00007f4724895700 R09: 00007f4724895700 [ 1087.233533][T24462] R10: 00007f47248959d0 R11: 0000000000000202 R12: 0000000000000000 [ 1087.241485][T24462] R13: 00007ffcdbf518ff R14: 00007f47248959c0 R15: 000000000075bf2c [ 1087.299451][T24462] memory: usage 307196kB, limit 307200kB, failcnt 12350 [ 1087.319991][T24462] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1087.335801][T24462] Memory cgroup stats for /syz3: [ 1087.335905][T24462] anon 222375936 [ 1087.335905][T24462] file 36864 [ 1087.335905][T24462] kernel_stack 13107200 [ 1087.335905][T24462] slab 20267008 [ 1087.335905][T24462] sock 0 [ 1087.335905][T24462] shmem 0 [ 1087.335905][T24462] file_mapped 0 [ 1087.335905][T24462] file_dirty 0 [ 1087.335905][T24462] file_writeback 0 [ 1087.335905][T24462] anon_thp 178257920 [ 1087.335905][T24462] inactive_anon 0 [ 1087.335905][T24462] active_anon 222375936 [ 1087.335905][T24462] inactive_file 57344 [ 1087.335905][T24462] active_file 61440 [ 1087.335905][T24462] unevictable 0 [ 1087.335905][T24462] slab_reclaimable 3784704 [ 1087.335905][T24462] slab_unreclaimable 16482304 [ 1087.335905][T24462] pgfault 92202 [ 1087.335905][T24462] pgmajfault 0 [ 1087.335905][T24462] workingset_refault 528 [ 1087.335905][T24462] workingset_activate 330 [ 1087.335905][T24462] workingset_nodereclaim 0 [ 1087.335905][T24462] pgrefill 4465 [ 1087.335905][T24462] pgscan 4915 [ 1087.335905][T24462] pgsteal 847 [ 1087.430733][T24462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24452,uid=0 [ 1087.446534][T24462] Memory cgroup out of memory: Killed process 24452 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1087.479809][T24501] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:32 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$dupfd(r1, 0x406, r0) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 22:33:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}}]}, 0x40}}, 0x0) 22:33:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}]}, 0x40}}, 0x0) 22:33:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x60000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x17400}, 0x1c) 22:33:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}]}, 0x40}}, 0x0) 22:33:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x65580000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1087.669480][T24511] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1087.724353][T24511] CPU: 0 PID: 24511 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1087.733509][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1087.733516][T24511] Call Trace: [ 1087.733536][T24511] dump_stack+0x172/0x1f0 [ 1087.733562][T24511] dump_header+0x177/0x1152 [ 1087.755692][T24511] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1087.755706][T24511] ? ___ratelimit+0x2c8/0x595 [ 1087.755720][T24511] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1087.755739][T24511] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1087.755753][T24511] ? trace_hardirqs_on+0x67/0x240 [ 1087.755771][T24511] ? pagefault_out_of_memory+0x11c/0x11c [ 1087.782343][T24511] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1087.782359][T24511] ? ___ratelimit+0x60/0x595 [ 1087.798449][T24511] ? do_raw_spin_unlock+0x57/0x270 [ 1087.798470][T24511] oom_kill_process.cold+0x10/0x15 [ 1087.798487][T24511] out_of_memory+0x334/0x1340 [ 1087.813335][T24511] ? lock_downgrade+0x920/0x920 [ 1087.818197][T24511] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1087.824009][T24511] ? oom_killer_disable+0x280/0x280 [ 1087.829220][T24511] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1087.834768][T24511] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1087.840411][T24511] ? do_raw_spin_unlock+0x57/0x270 [ 1087.845523][T24511] ? _raw_spin_unlock+0x2d/0x50 [ 1087.850384][T24511] try_charge+0xf4b/0x1440 [ 1087.854819][T24511] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1087.860365][T24511] ? find_held_lock+0x35/0x130 [ 1087.865140][T24511] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1087.870700][T24511] ? lock_downgrade+0x920/0x920 [ 1087.875551][T24511] ? percpu_ref_tryget_live+0x111/0x290 [ 1087.881109][T24511] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1087.886574][T24511] ? memcg_kmem_put_cache+0x50/0x50 [ 1087.891785][T24511] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1087.897338][T24511] __memcg_kmem_charge+0x13a/0x3a0 [ 1087.902458][T24511] __alloc_pages_nodemask+0x4f7/0x900 [ 1087.907840][T24511] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1087.913390][T24511] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1087.919113][T24511] ? percpu_ref_put_many+0xb6/0x190 22:33:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}]}, 0x40}}, 0x0) 22:33:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}]}, 0x40}}, 0x0) [ 1087.924341][T24511] copy_process+0x3f8/0x6830 [ 1087.929115][T24511] ? psi_memstall_leave+0x12e/0x180 [ 1087.934329][T24511] ? __cleanup_sighand+0x60/0x60 [ 1087.939274][T24511] ? __kasan_check_read+0x11/0x20 [ 1087.944305][T24511] ? __lock_acquire+0x8a0/0x4a00 [ 1087.949247][T24511] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1087.954451][T24511] _do_fork+0x146/0xfa0 [ 1087.958611][T24511] ? copy_init_mm+0x20/0x20 [ 1087.963128][T24511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1087.969374][T24511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1087.975628][T24511] ? debug_smp_processor_id+0x3c/0x214 [ 1087.981268][T24511] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1087.987426][T24511] __x64_sys_clone+0x1ab/0x270 [ 1087.992195][T24511] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1087.998178][T24511] ? __ia32_sys_vfork+0xd0/0xd0 [ 1088.003034][T24511] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1088.009278][T24511] ? do_syscall_64+0x26/0x760 [ 1088.013941][T24511] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1088.019224][T24511] ? trace_hardirqs_on+0x67/0x240 [ 1088.024254][T24511] do_syscall_64+0xfa/0x760 [ 1088.028763][T24511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1088.035780][T24511] RIP: 0033:0x45c2b9 [ 1088.039692][T24511] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1088.059323][T24511] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1088.067757][T24511] RAX: ffffffffffffffda RBX: 00007f4724895700 RCX: 000000000045c2b9 [ 1088.075756][T24511] RDX: 00007f47248959d0 RSI: 00007f4724894db0 RDI: 00000000003d0f00 [ 1088.083729][T24511] RBP: 00007ffcdbf51a60 R08: 00007f4724895700 R09: 00007f4724895700 [ 1088.091709][T24511] R10: 00007f47248959d0 R11: 0000000000000202 R12: 0000000000000000 [ 1088.099688][T24511] R13: 00007ffcdbf518ff R14: 00007f47248959c0 R15: 000000000075bf2c [ 1088.146053][T24511] memory: usage 307196kB, limit 307200kB, failcnt 12380 [ 1088.163659][T24511] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1088.182197][T24511] Memory cgroup stats for /syz3: [ 1088.182304][T24511] anon 222375936 [ 1088.182304][T24511] file 36864 [ 1088.182304][T24511] kernel_stack 13107200 [ 1088.182304][T24511] slab 20267008 [ 1088.182304][T24511] sock 0 [ 1088.182304][T24511] shmem 0 [ 1088.182304][T24511] file_mapped 0 [ 1088.182304][T24511] file_dirty 0 [ 1088.182304][T24511] file_writeback 0 [ 1088.182304][T24511] anon_thp 178257920 [ 1088.182304][T24511] inactive_anon 0 [ 1088.182304][T24511] active_anon 222375936 [ 1088.182304][T24511] inactive_file 57344 [ 1088.182304][T24511] active_file 61440 [ 1088.182304][T24511] unevictable 0 [ 1088.182304][T24511] slab_reclaimable 3784704 [ 1088.182304][T24511] slab_unreclaimable 16482304 [ 1088.182304][T24511] pgfault 92268 [ 1088.182304][T24511] pgmajfault 0 [ 1088.182304][T24511] workingset_refault 528 [ 1088.182304][T24511] workingset_activate 330 [ 1088.182304][T24511] workingset_nodereclaim 0 [ 1088.182304][T24511] pgrefill 4465 [ 1088.182304][T24511] pgscan 4915 [ 1088.182304][T24511] pgsteal 847 [ 1088.284332][T24511] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24502,uid=0 [ 1088.300768][T24511] Memory cgroup out of memory: Killed process 24502 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1088.350447][T24560] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}]}, 0x40}}, 0x0) 22:33:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x78000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}]}, 0x40}}, 0x0) 22:33:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x17a00}, 0x1c) 22:33:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x402000000000000]}}]}, 0x40}}, 0x0) [ 1088.543995][T24569] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1088.583587][T24569] CPU: 0 PID: 24569 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 22:33:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1088.592746][T24569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1088.602808][T24569] Call Trace: [ 1088.606103][T24569] dump_stack+0x172/0x1f0 [ 1088.606123][T24569] dump_header+0x177/0x1152 [ 1088.606142][T24569] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1088.620760][T24569] ? ___ratelimit+0x2c8/0x595 [ 1088.620777][T24569] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1088.620794][T24569] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1088.620808][T24569] ? trace_hardirqs_on+0x67/0x240 [ 1088.620826][T24569] ? pagefault_out_of_memory+0x11c/0x11c [ 1088.647172][T24569] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1088.652979][T24569] ? ___ratelimit+0x60/0x595 [ 1088.657571][T24569] ? do_raw_spin_unlock+0x57/0x270 [ 1088.662702][T24569] oom_kill_process.cold+0x10/0x15 [ 1088.667821][T24569] out_of_memory+0x334/0x1340 [ 1088.672503][T24569] ? lock_downgrade+0x920/0x920 [ 1088.677356][T24569] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1088.677373][T24569] ? oom_killer_disable+0x280/0x280 [ 1088.677395][T24569] mem_cgroup_out_of_memory+0x1d8/0x240 22:33:33 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x20601, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r3, 0x100000001}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={r3, 0x6c, "04662fda591f9e62e22ed73bb5f1d34c30bec3924e24dd08785ccb3f6b4e3ba79300b2b9b89a9115cee4a01e17cc8a0c9e7f7bb89a83268114563290ad2dbe6fa1b9be46b243090c8f9b16302961c16b3385a6733d08189ad89aeaa6bc941e6cb3186023de770ff9c0256490"}, &(0x7f0000000080)=0x74) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x4, 0x0, 0xad, &(0x7f0000000280)="884de77393bd4e4d34540787338f09c09a2f5c3ecbe53b06a9b1d3675657e18972dfda5e33dfc346ff77c3704c89badb89443c7f7eccb7afcce4ec96da951619b85dde5457b85b907af19d245f80265c867062051c5365a7b9ee6ab10b1010ef9d6fc20ba927797228743da464837e793b77e9beba8f3292428423be1c59801bd9737faaa336d10c0ca339588611dea53d50d40b3ba4b4a08b0aea2dbe3a19fde027f8a0fe940d6555ce79845e"}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) [ 1088.693996][T24569] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1088.699644][T24569] ? do_raw_spin_unlock+0x57/0x270 [ 1088.704760][T24569] ? _raw_spin_unlock+0x2d/0x50 [ 1088.704781][T24569] try_charge+0xf4b/0x1440 [ 1088.704805][T24569] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1088.704820][T24569] ? find_held_lock+0x35/0x130 [ 1088.704834][T24569] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1088.704854][T24569] ? lock_downgrade+0x920/0x920 [ 1088.734822][T24569] ? percpu_ref_tryget_live+0x111/0x290 [ 1088.740390][T24569] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1088.745861][T24569] ? memcg_kmem_put_cache+0x50/0x50 [ 1088.751071][T24569] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1088.756642][T24569] __memcg_kmem_charge+0x13a/0x3a0 [ 1088.761768][T24569] __alloc_pages_nodemask+0x4f7/0x900 [ 1088.767154][T24569] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1088.772708][T24569] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1088.778433][T24569] ? percpu_ref_put_many+0xb6/0x190 [ 1088.783650][T24569] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1088.788939][T24569] ? trace_hardirqs_on+0x67/0x240 22:33:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}]}, 0x40}}, 0x0) 22:33:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) [ 1088.793964][T24569] ? __kasan_check_read+0x11/0x20 [ 1088.798999][T24569] copy_process+0x3f8/0x6830 [ 1088.803620][T24569] ? psi_memstall_leave+0x12e/0x180 [ 1088.808837][T24569] ? __cleanup_sighand+0x60/0x60 [ 1088.813783][T24569] ? __kasan_check_read+0x11/0x20 [ 1088.818804][T24569] ? __lock_acquire+0x8a0/0x4a00 [ 1088.823729][T24569] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1088.828936][T24569] _do_fork+0x146/0xfa0 [ 1088.833103][T24569] ? copy_init_mm+0x20/0x20 [ 1088.837623][T24569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1088.843869][T24569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1088.850102][T24569] ? debug_smp_processor_id+0x3c/0x214 [ 1088.855642][T24569] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1088.855663][T24569] __x64_sys_clone+0x1ab/0x270 [ 1088.855677][T24569] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1088.855693][T24569] ? __ia32_sys_vfork+0xd0/0xd0 [ 1088.877468][T24569] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1088.883719][T24569] ? do_syscall_64+0x26/0x760 [ 1088.888401][T24569] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1088.893704][T24569] ? trace_hardirqs_on+0x67/0x240 [ 1088.898736][T24569] do_syscall_64+0xfa/0x760 [ 1088.903266][T24569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1088.909170][T24569] RIP: 0033:0x45c2b9 [ 1088.913070][T24569] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1088.932759][T24569] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 22:33:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}]}, 0x40}}, 0x0) 22:33:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x81000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 1088.941170][T24569] RAX: ffffffffffffffda RBX: 00007f4724895700 RCX: 000000000045c2b9 [ 1088.949147][T24569] RDX: 00007f47248959d0 RSI: 00007f4724894db0 RDI: 00000000003d0f00 [ 1088.957120][T24569] RBP: 00007ffcdbf51a60 R08: 00007f4724895700 R09: 00007f4724895700 [ 1088.965098][T24569] R10: 00007f47248959d0 R11: 0000000000000202 R12: 0000000000000000 [ 1088.974192][T24569] R13: 00007ffcdbf518ff R14: 00007f47248959c0 R15: 000000000075bf2c 22:33:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x88a8ffff, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}}]}, 0x40}}, 0x0) 22:33:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}}]}, 0x40}}, 0x0) [ 1089.151968][T24569] memory: usage 307196kB, limit 307200kB, failcnt 12410 [ 1089.160106][T24569] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1089.167706][T24569] Memory cgroup stats for /syz3: [ 1089.167810][T24569] anon 222375936 [ 1089.167810][T24569] file 36864 [ 1089.167810][T24569] kernel_stack 13107200 [ 1089.167810][T24569] slab 20267008 [ 1089.167810][T24569] sock 0 [ 1089.167810][T24569] shmem 0 [ 1089.167810][T24569] file_mapped 0 [ 1089.167810][T24569] file_dirty 0 [ 1089.167810][T24569] file_writeback 0 [ 1089.167810][T24569] anon_thp 178257920 [ 1089.167810][T24569] inactive_anon 0 [ 1089.167810][T24569] active_anon 222375936 [ 1089.167810][T24569] inactive_file 57344 [ 1089.167810][T24569] active_file 61440 [ 1089.167810][T24569] unevictable 0 [ 1089.167810][T24569] slab_reclaimable 3784704 [ 1089.167810][T24569] slab_unreclaimable 16482304 [ 1089.167810][T24569] pgfault 92334 [ 1089.167810][T24569] pgmajfault 0 [ 1089.167810][T24569] workingset_refault 528 [ 1089.167810][T24569] workingset_activate 330 [ 1089.167810][T24569] workingset_nodereclaim 0 [ 1089.167810][T24569] pgrefill 4465 [ 1089.167810][T24569] pgscan 4915 [ 1089.167810][T24569] pgsteal 847 [ 1089.478246][T24569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24561,uid=0 [ 1089.514219][T24569] Memory cgroup out of memory: Killed process 24561 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 22:33:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f000}, 0x1c) 22:33:34 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x50d801, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492967, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x408040, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x10000, 0xfffffffffffffefd) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x200000, 0x0, 0xb012, r0, 0x80000000) pipe(&(0x7f0000000380)) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x5b8, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x2}, &(0x7f0000000000)={0x0, r3+30000000}, 0x0) 22:33:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x9effffff, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}}]}, 0x40}}, 0x0) 22:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}}]}, 0x40}}, 0x0) [ 1089.577580][T24636] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? 22:33:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xb20a0000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 22:33:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}]}, 0x40}}, 0x0) [ 1089.720489][T24656] kasan: CONFIG_KASAN_INLINE enabled [ 1089.738565][T24654] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 22:33:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x602000000000000]}}]}, 0x40}}, 0x0) [ 1089.767735][T24654] CPU: 0 PID: 24654 Comm: syz-executor.3 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1089.776872][T24654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.776878][T24654] Call Trace: [ 1089.776899][T24654] dump_stack+0x172/0x1f0 [ 1089.776919][T24654] dump_header+0x177/0x1152 [ 1089.776935][T24654] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1089.776946][T24654] ? ___ratelimit+0x2c8/0x595 [ 1089.776960][T24654] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1089.776980][T24654] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1089.776998][T24654] ? trace_hardirqs_on+0x67/0x240 [ 1089.802095][T24656] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1089.804913][T24654] ? pagefault_out_of_memory+0x11c/0x11c [ 1089.804932][T24654] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1089.804946][T24654] ? ___ratelimit+0x60/0x595 [ 1089.804959][T24654] ? do_raw_spin_unlock+0x57/0x270 [ 1089.804978][T24654] oom_kill_process.cold+0x10/0x15 [ 1089.819203][ T3891] kobject: 'loop2' (00000000492d0724): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1089.820703][T24654] out_of_memory+0x334/0x1340 [ 1089.820721][T24654] ? lock_downgrade+0x920/0x920 [ 1089.820741][T24654] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1089.832642][T24656] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1089.833790][T24654] ? oom_killer_disable+0x280/0x280 [ 1089.839398][T24656] CPU: 1 PID: 24656 Comm: syz-executor.5 Not tainted 5.3.0-rc6-next-20190830 #75 [ 1089.845356][T24654] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1089.849910][T24656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1089.855002][T24654] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1089.860085][T24656] RIP: 0010:xsk_poll+0x95/0x540 [ 1089.870198][T24654] ? do_raw_spin_unlock+0x57/0x270 [ 1089.874848][T24656] Code: 80 3c 02 00 0f 85 70 04 00 00 4c 8b a3 88 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 96 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 bf 03 00 00 [ 1089.879672][T24654] ? _raw_spin_unlock+0x2d/0x50 [ 1089.885448][T24656] RSP: 0018:ffff88809b387690 EFLAGS: 00010207 [ 1089.892360][T24654] try_charge+0xf4b/0x1440 [ 1089.897719][T24656] RAX: dffffc0000000000 RBX: ffff88805c958000 RCX: ffffc90010bcf000 [ 1089.906813][T24654] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1089.912480][T24656] RDX: 0000000000000012 RSI: ffffffff859b6684 RDI: 0000000000000096 [ 1089.922510][T24654] ? find_held_lock+0x35/0x130 [ 1089.928110][T24656] RBP: ffff88809b3876c0 R08: ffff888058c04340 R09: ffffed100b92b049 [ 1089.932939][T24654] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1089.938018][T24656] R10: ffffed100b92b048 R11: ffff88805c958247 R12: 0000000000000000 [ 1089.957775][T24654] ? lock_downgrade+0x920/0x920 [ 1089.962591][T24656] R13: 0000000000000304 R14: ffff88809fa88780 R15: ffff8880947f00a0 [ 1089.968632][T24654] ? percpu_ref_tryget_live+0x111/0x290 [ 1089.973026][T24656] FS: 00007f64ff71b700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1089.981769][T24654] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1089.987279][T24656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1089.995227][T24654] ? memcg_kmem_put_cache+0x50/0x50 [ 1089.999965][T24656] CR2: 00007ffc5fcbd208 CR3: 000000009fb27000 CR4: 00000000001406e0 [ 1090.007932][T24654] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1090.013455][T24656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1090.021406][T24654] __memcg_kmem_charge+0x13a/0x3a0 [ 1090.026230][T24656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1090.034181][T24654] __alloc_pages_nodemask+0x4f7/0x900 [ 1090.039692][T24656] Call Trace: [ 1090.048609][T24654] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1090.054036][T24656] ? xsk_setsockopt+0x680/0x680 [ 1090.060622][T24654] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1090.065800][T24656] sock_poll+0x15e/0x480 [ 1090.073834][T24654] ? percpu_ref_put_many+0xb6/0x190 [ 1090.079364][T24656] ? __sock_recv_wifi_status+0x1d0/0x1d0 [ 1090.087317][T24654] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1090.092399][T24656] do_select+0x927/0x16f0 [ 1090.100346][T24654] ? trace_hardirqs_on+0x67/0x240 [ 1090.105716][T24656] ? select_estimate_accuracy+0x330/0x330 [ 1090.108983][T24654] ? __kasan_check_read+0x11/0x20 [ 1090.114510][T24656] ? __schedule+0x776/0x17a0 [ 1090.119338][T24654] copy_process+0x3f8/0x6830 [ 1090.125040][T24656] ? poll_initwait+0x180/0x180 [ 1090.129251][T24654] ? psi_memstall_leave+0x12e/0x180 [ 1090.134507][T24656] ? set_fd_set.part.0+0x70/0x70 [ 1090.140219][T24654] ? __cleanup_sighand+0x60/0x60 [ 1090.145472][T24656] ? set_fd_set.part.0+0x70/0x70 [ 1090.149771][T24654] ? __kasan_check_read+0x11/0x20 [ 1090.154766][T24656] ? set_fd_set.part.0+0x70/0x70 [ 1090.160458][T24654] ? __lock_acquire+0x8a0/0x4a00 [ 1090.165451][T24656] ? set_fd_set.part.0+0x70/0x70 [ 1090.170033][T24654] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1090.174618][T24656] ? set_fd_set.part.0+0x70/0x70 [ 1090.179359][T24654] _do_fork+0x146/0xfa0 [ 1090.184530][T24656] ? __might_fault+0x12b/0x1e0 [ 1090.189473][T24654] ? copy_init_mm+0x20/0x20 [ 1090.194392][T24656] ? find_held_lock+0x35/0x130 [ 1090.199310][T24654] ? lock_downgrade+0x920/0x920 [ 1090.204315][T24656] ? __might_fault+0x12b/0x1e0 [ 1090.209232][T24654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1090.214146][T24656] ? core_sys_select+0x212/0x890 [ 1090.219063][T24654] __x64_sys_clone+0x1ab/0x270 [ 1090.224233][T24656] ? lock_downgrade+0x920/0x920 [ 1090.229146][T24654] ? __ia32_sys_vfork+0xd0/0xd0 [ 1090.233287][T24656] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1090.238022][T24654] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1090.242510][T24656] core_sys_select+0x564/0x890 [ 1090.247249][T24654] ? do_syscall_64+0x26/0x760 [ 1090.253992][T24656] ? core_sys_select+0x564/0x890 [ 1090.258745][T24654] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1090.265044][T24656] ? do_compat_pselect+0x230/0x230 [ 1090.269965][T24654] ? trace_hardirqs_on+0x67/0x240 [ 1090.274715][T24656] ? poll_select_set_timeout+0xd4/0x130 [ 1090.279541][T24654] do_syscall_64+0xfa/0x760 [ 1090.284374][T24656] ? poll_select_set_timeout+0xd4/0x130 [ 1090.290617][T24654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1090.296849][T24656] ? lock_downgrade+0x920/0x920 [ 1090.301581][T24654] RIP: 0033:0x45c2b9 [ 1090.306248][T24656] ? ktime_get_ts64+0x115/0x3f0 [ 1090.311158][T24654] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1090.316416][T24656] ? poll_select_set_timeout+0xd4/0x130 [ 1090.321500][T24654] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1090.326506][T24656] ? ktime_get_ts64+0x115/0x3f0 [ 1090.332020][T24654] RAX: ffffffffffffffda RBX: 00007f4724895700 RCX: 000000000045c2b9 [ 1090.336502][T24656] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1090.342017][T24654] RDX: 00007f47248959d0 RSI: 00007f4724894db0 RDI: 00000000003d0f00 [ 1090.347906][T24656] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1090.352734][T24654] RBP: 00007ffcdbf51a60 R08: 00007f4724895700 R09: 00007f4724895700 [ 1090.356703][T24656] ? timespec64_add_safe+0x189/0x210 [ 1090.361522][T24654] R10: 00007f47248959d0 R11: 0000000000000202 R12: 0000000000000000 [ 1090.381209][T24656] ? nsec_to_clock_t+0x30/0x30 [ 1090.386724][T24654] R13: 00007ffcdbf518ff R14: 00007f47248959c0 R15: 000000000075bf2c [ 1090.395117][T24656] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1090.450736][T24654] memory: usage 307196kB, limit 307200kB, failcnt 12440 [ 1090.452724][T24656] ? set_user_sigmask+0x166/0x1e0 [ 1090.452741][T24656] ? sigprocmask+0x2b0/0x2b0 [ 1090.461065][T24654] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1090.466920][T24656] __x64_sys_pselect6+0x3df/0x490 [ 1090.466935][T24656] ? __ia32_sys_select+0x150/0x150 [ 1090.466948][T24656] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1090.466965][T24656] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1090.466976][T24656] ? do_syscall_64+0x26/0x760 [ 1090.466994][T24656] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1090.474945][T24654] Memory cgroup stats for /syz3: [ 1090.475035][T24654] anon 222375936 [ 1090.475035][T24654] file 36864 [ 1090.475035][T24654] kernel_stack 13107200 [ 1090.475035][T24654] slab 20267008 [ 1090.475035][T24654] sock 0 [ 1090.475035][T24654] shmem 0 [ 1090.475035][T24654] file_mapped 0 [ 1090.475035][T24654] file_dirty 0 [ 1090.475035][T24654] file_writeback 0 [ 1090.475035][T24654] anon_thp 178257920 [ 1090.475035][T24654] inactive_anon 0 [ 1090.475035][T24654] active_anon 222375936 [ 1090.475035][T24654] inactive_file 57344 22:33:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0xc7000000, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) 22:33:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4000000}, 0x1c) [ 1090.475035][T24654] active_file 61440 [ 1090.475035][T24654] unevictable 0 [ 1090.475035][T24654] slab_reclaimable 3784704 [ 1090.475035][T24654] slab_unreclaimable 16482304 [ 1090.475035][T24654] pgfault 92400 [ 1090.475035][T24654] pgmajfault 0 [ 1090.475035][T24654] workingset_refault 528 [ 1090.475035][T24654] workingset_activate 330 [ 1090.475035][T24654] workingset_nodereclaim 0 [ 1090.475035][T24654] pgrefill 4465 [ 1090.475035][T24654] pgscan 4915 [ 1090.475035][T24654] pgsteal 847 [ 1090.478904][T24656] ? trace_hardirqs_on+0x67/0x240 [ 1090.478922][T24656] do_syscall_64+0xfa/0x760 [ 1090.484169][T24654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24637,uid=0 [ 1090.490304][T24656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1090.490314][T24656] RIP: 0033:0x4598e9 [ 1090.490327][T24656] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1090.490333][T24656] RSP: 002b:00007f64ff71ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1090.490351][T24656] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 1090.496975][T24654] Memory cgroup out of memory: Killed process 24637 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1090.500429][T24656] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 1090.500437][T24656] RBP: 000000000075bfc8 R08: 0000000020000000 R09: 0000000000000000 22:33:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x2, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}}]}, 0x40}}, 0x0) [ 1090.500450][T24656] R10: 0000000020000140 R11: 0000000000000246 R12: 00007f64ff71b6d4 [ 1090.520439][T24664] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1090.521839][T24656] R13: 00000000004c6c05 R14: 00000000004dbe68 R15: 00000000ffffffff [ 1090.521852][T24656] Modules linked in: [ 1090.587108][ T3891] kobject: 'loop4' (00000000272c4ff2): kobject_uevent_env [ 1090.645006][T24656] ---[ end trace 8bcfbbcbc928723b ]--- [ 1090.759708][T24679] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 1090.803093][T24687] kasan: CONFIG_KASAN_INLINE enabled [ 1090.815491][T24687] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1090.829989][T24687] general protection fault: 0000 [#2] PREEMPT SMP KASAN [ 1090.836963][T24687] CPU: 1 PID: 24687 Comm: syz-executor.5 Tainted: G D 5.3.0-rc6-next-20190830 #75 [ 1090.837177][T24679] CPU: 0 PID: 24679 Comm: syz-executor.3 Tainted: G D 5.3.0-rc6-next-20190830 #75 [ 1090.847450][T24687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.857938][T24679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1090.867988][T24687] RIP: 0010:xsk_poll+0x95/0x540 [ 1090.878003][T24679] Call Trace: [ 1090.882830][T24687] Code: 80 3c 02 00 0f 85 70 04 00 00 4c 8b a3 88 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 96 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 bf 03 00 00 [ 1090.886091][T24679] dump_stack+0x172/0x1f0 [ 1090.905652][T24687] RSP: 0018:ffff888059e7f690 EFLAGS: 00010207 [ 1090.909971][T24679] dump_header+0x177/0x1152 [ 1090.916003][T24687] RAX: dffffc0000000000 RBX: ffff888098ce4000 RCX: ffffc90010fd1000 [ 1090.920479][T24679] ? ___ratelimit+0xf8/0x595 [ 1090.928421][T24687] RDX: 0000000000000012 RSI: ffffffff859b6684 RDI: 0000000000000096 [ 1090.932989][T24679] ? trace_hardirqs_on+0x67/0x240 [ 1090.940931][T24687] RBP: ffff888059e7f6c0 R08: ffff88803a362480 R09: ffffed101319c849 [ 1090.945933][T24679] ? pagefault_out_of_memory+0x11c/0x11c [ 1090.953874][T24687] R10: ffffed101319c848 R11: ffff888098ce4247 R12: 0000000000000000 [ 1090.959481][T24679] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1090.967420][T24687] R13: 0000000000000304 R14: ffff8880a4196a00 R15: ffff8880349ac060 [ 1090.973199][T24679] ? ___ratelimit+0x60/0x595 [ 1090.981142][T24687] FS: 00007f64ff6d9700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1090.985715][T24679] ? do_raw_spin_unlock+0x57/0x270 [ 1090.994620][T24687] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1090.999705][T24679] oom_kill_process.cold+0x10/0x15 [ 1091.006265][T24687] CR2: 00000000007126b4 CR3: 000000009fb27000 CR4: 00000000001406e0 [ 1091.011348][T24679] out_of_memory+0x334/0x1340 [ 1091.019297][T24687] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1091.023961][T24679] ? lock_downgrade+0x920/0x920 [ 1091.031900][T24687] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1091.036725][T24679] ? oom_killer_disable+0x280/0x280 [ 1091.044660][T24687] Call Trace: [ 1091.049839][T24679] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1091.053099][T24687] ? xsk_setsockopt+0x680/0x680 [ 1091.058616][T24679] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 1091.063438][T24687] sock_poll+0x15e/0x480 [ 1091.069039][T24679] ? do_raw_spin_unlock+0x57/0x270 [ 1091.073254][T24687] ? __sock_recv_wifi_status+0x1d0/0x1d0 [ 1091.078341][T24679] ? _raw_spin_unlock+0x2d/0x50 [ 1091.083944][T24687] do_select+0x927/0x16f0 [ 1091.088767][T24679] try_charge+0xf4b/0x1440 [ 1091.093081][T24687] ? select_estimate_accuracy+0x330/0x330 [ 1091.097464][T24679] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1091.103159][T24687] ? __schedule+0x776/0x17a0 [ 1091.108676][T24679] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1091.113235][T24687] ? poll_initwait+0x180/0x180 [ 1091.118748][T24679] ? __kasan_check_read+0x11/0x20 [ 1091.123485][T24687] ? set_fd_set.part.0+0x70/0x70 [ 1091.128482][T24679] ? lock_downgrade+0x920/0x920 [ 1091.133386][T24687] ? set_fd_set.part.0+0x70/0x70 [ 1091.138230][T24679] ? percpu_ref_tryget_live+0x111/0x290 [ 1091.143149][T24687] ? set_fd_set.part.0+0x70/0x70 [ 1091.148704][T24679] __memcg_kmem_charge_memcg+0x71/0xf0 [ 1091.153620][T24687] ? set_fd_set.part.0+0x70/0x70 [ 1091.159054][T24679] ? memcg_kmem_put_cache+0x50/0x50 [ 1091.163985][T24687] ? set_fd_set.part.0+0x70/0x70 [ 1091.169154][T24679] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1091.174067][T24687] ? refcount_sub_and_test_checked+0x154/0x200 [ 1091.179644][T24679] __memcg_kmem_charge+0x13a/0x3a0 [ 1091.185789][T24687] ? refcount_dec_not_one+0x1f0/0x1f0 [ 1091.190876][T24679] __alloc_pages_nodemask+0x4f7/0x900 [ 1091.196230][T24687] ? migrate_swap_stop+0x9b0/0x9b0 [ 1091.201579][T24679] ? __alloc_pages_slowpath+0x2540/0x2540 [ 1091.206679][T24687] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1091.212377][T24679] ? percpu_ref_put_many+0xb6/0x190 [ 1091.218595][T24687] ? __might_fault+0x12b/0x1e0 [ 1091.223767][T24679] ? trace_hardirqs_on+0x67/0x240 [ 1091.228520][T24687] ? __kasan_check_read+0x11/0x20 [ 1091.233517][T24679] ? __kasan_check_read+0x11/0x20 [ 1091.238521][T24687] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1091.243516][T24679] copy_process+0x3f8/0x6830 [ 1091.249481][T24687] ? lock_downgrade+0x920/0x920 [ 1091.254043][T24679] ? psi_memstall_leave+0x12e/0x180 [ 1091.258872][T24687] ? __might_fault+0xfb/0x1e0 [ 1091.264139][T24679] ? __kasan_check_read+0x11/0x20 [ 1091.268796][T24687] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1091.273788][T24679] ? record_times+0x1e/0x2b0 [ 1091.280005][T24687] core_sys_select+0x564/0x890 [ 1091.284572][T24679] ? __cleanup_sighand+0x60/0x60 [ 1091.289309][T24687] ? core_sys_select+0x564/0x890 [ 1091.294219][T24679] ? trace_hardirqs_on+0x67/0x240 [ 1091.299568][T24687] ? do_compat_pselect+0x230/0x230 [ 1091.304578][T24679] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1091.309661][T24687] ? __kasan_check_read+0x11/0x20 [ 1091.314837][T24679] _do_fork+0x146/0xfa0 [ 1091.319840][T24687] ? poll_select_set_timeout+0xd4/0x130 [ 1091.323971][T24679] ? copy_init_mm+0x20/0x20 [ 1091.329490][T24687] ? __kasan_check_read+0x11/0x20 [ 1091.333970][T24679] ? __kasan_check_read+0x11/0x20 [ 1091.339075][T24687] ? lock_downgrade+0x920/0x920 [ 1091.344113][T24679] ? lock_downgrade+0x920/0x920 [ 1091.348959][T24687] ? lock_acquire+0x190/0x410 [ 1091.353802][T24679] ? percpu_ref_tryget_live+0x290/0x290 [ 1091.358456][T24687] ? poll_select_set_timeout+0xd4/0x130 [ 1091.363980][T24679] __x64_sys_clone+0x1ab/0x270 [ 1091.369586][T24687] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1091.374320][T24679] ? __ia32_sys_vfork+0xd0/0xd0 [ 1091.380008][T24687] ? timespec64_add_safe+0x189/0x210 [ 1091.384832][T24679] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1091.390085][T24687] ? nsec_to_clock_t+0x30/0x30 [ 1091.396405][T24679] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1091.401140][T24687] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1091.407176][T24679] ? trace_hardirqs_off_caller+0x65/0x230 [ 1091.413386][T24687] ? set_user_sigmask+0x166/0x1e0 [ 1091.419078][T24679] ? trace_hardirqs_on+0x67/0x240 [ 1091.424071][T24687] ? sigprocmask+0x2b0/0x2b0 [ 1091.429081][T24679] do_syscall_64+0xfa/0x760 [ 1091.433656][T24687] __x64_sys_pselect6+0x3df/0x490 [ 1091.438129][T24679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1091.443121][T24687] ? __ia32_sys_select+0x150/0x150 [ 1091.448991][T24679] RIP: 0033:0x45c2b9 [ 1091.454074][T24687] ? __x64_sys_clock_gettime+0x16d/0x240 [ 1091.457939][T24679] Code: ff 48 85 f6 0f 84 27 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 1091.463546][T24687] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1091.483112][T24679] RSP: 002b:00007ffcdbf51848 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 1091.489168][T24687] ? trace_hardirqs_off_caller+0x65/0x230 [ 1091.497552][T24679] RAX: ffffffffffffffda RBX: 00007f4724895700 RCX: 000000000045c2b9 [ 1091.503245][T24687] ? trace_hardirqs_on+0x67/0x240 [ 1091.511182][T24679] RDX: 00007f47248959d0 RSI: 00007f4724894db0 RDI: 00000000003d0f00 [ 1091.511194][T24679] RBP: 00007ffcdbf51a60 R08: 00007f4724895700 R09: 00007f4724895700 [ 1091.516202][T24687] do_syscall_64+0xfa/0x760 [ 1091.524165][T24679] R10: 00007f47248959d0 R11: 0000000000000202 R12: 0000000000000000 [ 1091.532147][T24687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1091.536625][T24679] R13: 00007ffcdbf518ff R14: 00007f47248959c0 R15: 000000000075bf2c [ 1091.544577][T24687] RIP: 0033:0x4598e9 [ 1091.556126][T24679] memory: usage 307192kB, limit 307200kB, failcnt 12472 [ 1091.558412][T24687] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1091.558425][T24687] RSP: 002b:00007f64ff6d8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1091.562439][T24679] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1091.569211][T24687] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9 [ 1091.569218][T24687] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000040 [ 1091.569225][T24687] RBP: 000000000075c118 R08: 0000000020000000 R09: 0000000000000000 [ 1091.569231][T24687] R10: 0000000020000140 R11: 0000000000000246 R12: 00007f64ff6d96d4 [ 1091.569238][T24687] R13: 00000000004c6c05 R14: 00000000004dbe68 R15: 00000000ffffffff [ 1091.569249][T24687] Modules linked in: [ 1091.573150][ T3891] kobject: 'loop4' (00000000272c4ff2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1091.591580][T24679] Memory cgroup stats for /syz3: [ 1091.591695][T24679] anon 222375936 [ 1091.591695][T24679] file 36864 [ 1091.591695][T24679] kernel_stack 13107200 [ 1091.591695][T24679] slab 20267008 [ 1091.591695][T24679] sock 0 [ 1091.591695][T24679] shmem 0 [ 1091.591695][T24679] file_mapped 0 [ 1091.591695][T24679] file_dirty 0 [ 1091.591695][T24679] file_writeback 0 [ 1091.591695][T24679] anon_thp 178257920 [ 1091.591695][T24679] inactive_anon 0 [ 1091.591695][T24679] active_anon 222375936 [ 1091.591695][T24679] inactive_file 57344 [ 1091.591695][T24679] active_file 61440 [ 1091.591695][T24679] unevictable 0 [ 1091.591695][T24679] slab_reclaimable 3784704 [ 1091.591695][T24679] slab_unreclaimable 16482304 [ 1091.591695][T24679] pgfault 92466 [ 1091.591695][T24679] pgmajfault 0 [ 1091.591695][T24679] workingset_refault 528 [ 1091.591695][T24679] workingset_activate 330 [ 1091.591695][T24679] workingset_nodereclaim 0 [ 1091.591695][T24679] pgrefill 4465 [ 1091.591695][T24679] pgscan 4915 [ 1091.591695][T24679] pgsteal 847 [ 1091.600794][ T3891] kobject: 'loop4' (00000000272c4ff2): kobject_uevent_env [ 1091.614240][T24679] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24665,uid=0 [ 1091.628343][ T3891] kobject: 'loop4' (00000000272c4ff2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1091.636762][T24679] Memory cgroup out of memory: Killed process 24665 (syz-executor.3) total-vm:72708kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 1091.639026][ T3891] kobject: 'loop3' (000000002abefd02): kobject_uevent_env [ 1091.660805][T24690] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 1091.664548][ T3891] kobject: 'loop3' (000000002abefd02): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1091.757363][T24656] RIP: 0010:xsk_poll+0x95/0x540 [ 1091.762255][ T3891] kobject: 'loop0' (00000000754fda10): kobject_uevent_env [ 1091.778544][T24656] Code: 80 3c 02 00 0f 85 70 04 00 00 4c 8b a3 88 04 00 00 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 96 00 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 bf 03 00 00 [ 1091.786342][ T3891] kobject: 'loop0' (00000000754fda10): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1091.812968][T24656] RSP: 0018:ffff88809b387690 EFLAGS: 00010207 [ 1091.822172][ T3891] kobject: 'loop1' (000000008e72b758): kobject_uevent_env [ 1091.832956][T24656] RAX: dffffc0000000000 RBX: ffff88805c958000 RCX: ffffc90010bcf000 [ 1091.835619][ T3891] kobject: 'loop1' (000000008e72b758): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1091.842513][T24656] RDX: 0000000000000012 RSI: ffffffff859b6684 RDI: 0000000000000096 [ 1091.863667][ T3891] kobject: 'loop2' (00000000492d0724): kobject_uevent_env [ 1091.875052][T24656] RBP: ffff88809b3876c0 R08: ffff888058c04340 R09: ffffed100b92b049 [ 1091.878772][ T3891] kobject: 'loop2' (00000000492d0724): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1091.888191][T24656] R10: ffffed100b92b048 R11: ffff88805c958247 R12: 0000000000000000 [ 1091.899876][ T3891] kobject: 'loop3' (000000002abefd02): kobject_uevent_env [ 1091.915310][T24656] R13: 0000000000000304 R14: ffff88809fa88780 R15: ffff8880947f00a0 [ 1091.916405][ T3891] kobject: 'loop3' (000000002abefd02): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1091.930607][T24656] FS: 00007f64ff71b700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1091.997338][T24656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1092.004020][T24656] CR2: 00007fffffe7bb90 CR3: 000000009fb27000 CR4: 00000000001406f0 [ 1092.012085][T24656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1092.013396][T24687] ---[ end trace 8bcfbbcbc928723c ]--- [ 1092.026879][T24656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1092.035360][T24656] Kernel panic - not syncing: Fatal exception [ 1092.035768][T24687] RIP: 0010:xsk_poll+0x95/0x540 [ 1092.042876][T24656] Kernel Offset: disabled [ 1092.052011][T24656] Rebooting in 86400 seconds..