.604303][T19567] RIP: 0033:0x7ffae188d591 [ 2535.608746][T19567] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2535.628381][T19567] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2535.636828][T19567] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2535.644828][T19567] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2535.652826][T19567] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2535.660820][T19567] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2535.668811][T19567] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2535.676910][T19567] [ 2535.685465][T19567] memory: usage 307184kB, limit 307200kB, failcnt 23114 [ 2535.698025][T19567] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2535.706774][T19567] Memory cgroup stats for /syz3: [ 2535.707111][T19567] anon 90112 [ 2535.707111][T19567] file 733184 [ 2535.707111][T19567] kernel 313733120 [ 2535.707111][T19567] kernel_stack 65536 [ 2535.707111][T19567] pagetables 69632 [ 2535.707111][T19567] sec_pagetables 0 [ 2535.707111][T19567] percpu 5375488 [ 2535.707111][T19567] sock 0 [ 2535.707111][T19567] vmalloc 8192 [ 2535.707111][T19567] shmem 733184 [ 2535.707111][T19567] zswap 0 [ 2535.707111][T19567] zswapped 0 [ 2535.707111][T19567] file_mapped 667648 [ 2535.707111][T19567] file_dirty 0 [ 2535.707111][T19567] file_writeback 0 [ 2535.707111][T19567] swapcached 0 [ 2535.707111][T19567] anon_thp 0 [ 2535.707111][T19567] file_thp 0 [ 2535.707111][T19567] shmem_thp 0 [ 2535.707111][T19567] inactive_anon 0 [ 2535.707111][T19567] active_anon 823296 [ 2535.707111][T19567] inactive_file 0 [ 2535.707111][T19567] active_file 0 [ 2535.707111][T19567] unevictable 0 [ 2535.707111][T19567] slab_reclaimable 1215536 [ 2535.707111][T19567] slab_unreclaimable 306963192 [ 2535.707111][T19567] slab 308178728 [ 2535.707111][T19567] workingset_refault_anon 0 [ 2535.707111][T19567] workingset_refault_file 130 [ 2535.707111][T19567] workingset_activate_anon 0 [ 2535.707111][T19567] workingset_activate_file 0 [ 2535.707111][T19567] workingset_restore_anon 0 [ 2535.707111][T19567] workingset_restore_file 0 [ 2535.707111][T19567] workingset_nodereclaim 0 [ 2535.707111][T19567] pgscan 2951 [ 2535.707111][T19567] pgsteal 938 [ 2535.707111][T19567] pgscan_kswapd 0 [ 2535.707111][T19567] pgscan_direct 2951 [ 2535.707111][T19567] pgscan_khugepaged 0 [ 2535.707111][T19567] pgsteal_kswapd 0 [ 2535.707111][T19567] pgsteal_direct 938 [ 2535.707111][T19567] pgsteal_khugepaged 0 [ 2535.707111][T19567] pgfault 573945 [ 2535.707111][T19567] pgmajfault 0 [ 2535.707111][T19567] pgrefill 79949 [ 2535.707111][T19567] pgactivate 697 [ 2535.707111][T19567] pgdeactivate 0 [ 2535.707111][T19567] pglazyfree 0 05:55:49 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf402}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:55:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x2, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:55:49 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8526a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:55:50 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x802, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2535.707111][T19567] pglazyfreed 0 [ 2535.707111][T19567] zswpin 0 [ 2535.707111][T19567] zswpout 0 [ 2535.897035][T19567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19567,uid=0 05:55:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x3, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2535.949455][T19573] wireguard71: entered allmulticast mode 05:55:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x4, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:55:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0xf000000) [ 2535.994605][T19567] Memory cgroup out of memory: Killed process 19567 (syz-executor.3) total-vm:54548kB, anon-rss:396kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2536.076885][T19568] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2536.107276][T19568] CPU: 1 PID: 19568 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2536.117794][T19568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2536.127898][T19568] Call Trace: [ 2536.131225][T19568] [ 2536.134213][T19568] dump_stack_lvl+0x136/0x150 [ 2536.138950][T19568] dump_header+0x10a/0xd70 [ 2536.143408][T19568] oom_kill_process+0x25d/0x600 [ 2536.148300][T19568] out_of_memory+0x35c/0x1660 [ 2536.153301][T19568] ? find_held_lock+0x2d/0x110 [ 2536.158155][T19568] ? oom_killer_disable+0x2b0/0x2b0 [ 2536.163409][T19568] ? rcu_read_unlock+0x9/0x60 [ 2536.168170][T19568] ? find_held_lock+0x2d/0x110 [ 2536.173076][T19568] mem_cgroup_out_of_memory+0x206/0x270 [ 2536.178674][T19568] ? mem_cgroup_margin+0x130/0x130 [ 2536.183838][T19568] ? lock_downgrade+0x690/0x690 [ 2536.188748][T19568] try_charge_memcg+0xf9b/0x13b0 [ 2536.193822][T19568] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2536.199846][T19568] ? rcu_read_unlock+0x9/0x60 [ 2536.204568][T19568] ? lock_downgrade+0x690/0x690 [ 2536.209473][T19568] charge_memcg+0x90/0x3b0 [ 2536.213941][T19568] __mem_cgroup_charge+0x2b/0x90 [ 2536.219134][T19568] do_wp_page+0x8eb/0x3530 [ 2536.223719][T19568] ? lock_release+0x670/0x670 [ 2536.228454][T19568] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2536.233893][T19568] ? do_raw_spin_lock+0x124/0x2b0 [ 2536.239142][T19568] ? spin_bug+0x1c0/0x1c0 [ 2536.243526][T19568] ? lock_downgrade+0x690/0x690 [ 2536.248454][T19568] __handle_mm_fault+0x19a1/0x3e60 [ 2536.253829][T19568] ? vm_iomap_memory+0x190/0x190 [ 2536.259038][T19568] handle_mm_fault+0x2ba/0x9c0 [ 2536.264270][T19568] do_user_addr_fault+0x47e/0x1240 [ 2536.269705][T19568] ? rcu_is_watching+0x12/0xb0 [ 2536.274526][T19568] exc_page_fault+0x98/0x170 [ 2536.279169][T19568] asm_exc_page_fault+0x26/0x30 [ 2536.284060][T19568] RIP: 0033:0x7f4933239610 [ 2536.288507][T19568] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2536.308146][T19568] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2536.314244][T19568] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 05:55:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x5, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2536.322352][T19568] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2536.330402][T19568] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2536.338410][T19568] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2536.346443][T19568] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2536.354543][T19568] ? apparmor_socket_create+0x13c/0x670 [ 2536.360158][T19568] [ 2536.386146][T19568] memory: usage 307184kB, limit 307200kB, failcnt 11788 [ 2536.415054][T19568] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2536.426413][T19568] Memory cgroup stats for /syz2: [ 2536.426768][T19568] anon 126976 05:55:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x6, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2536.426768][T19568] file 684032 [ 2536.426768][T19568] kernel 313745408 [ 2536.426768][T19568] kernel_stack 65536 [ 2536.426768][T19568] pagetables 73728 [ 2536.426768][T19568] sec_pagetables 0 [ 2536.426768][T19568] percpu 5387328 [ 2536.426768][T19568] sock 0 [ 2536.426768][T19568] vmalloc 8192 [ 2536.426768][T19568] shmem 679936 [ 2536.426768][T19568] zswap 0 [ 2536.426768][T19568] zswapped 0 [ 2536.426768][T19568] file_mapped 630784 [ 2536.426768][T19568] file_dirty 0 [ 2536.426768][T19568] file_writeback 0 [ 2536.426768][T19568] swapcached 0 05:55:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x7, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2536.426768][T19568] anon_thp 0 [ 2536.426768][T19568] file_thp 0 [ 2536.426768][T19568] shmem_thp 0 [ 2536.426768][T19568] inactive_anon 0 [ 2536.426768][T19568] active_anon 806912 [ 2536.426768][T19568] inactive_file 4096 [ 2536.426768][T19568] active_file 0 [ 2536.426768][T19568] unevictable 0 [ 2536.426768][T19568] slab_reclaimable 512264 [ 2536.426768][T19568] slab_unreclaimable 307665392 [ 2536.426768][T19568] slab 308177656 [ 2536.426768][T19568] workingset_refault_anon 0 [ 2536.426768][T19568] workingset_refault_file 2 [ 2536.426768][T19568] workingset_activate_anon 0 05:55:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x8, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2536.426768][T19568] workingset_activate_file 0 [ 2536.426768][T19568] workingset_restore_anon 0 [ 2536.426768][T19568] workingset_restore_file 1 [ 2536.426768][T19568] workingset_nodereclaim 0 [ 2536.426768][T19568] pgscan 1525 [ 2536.426768][T19568] pgsteal 129 [ 2536.426768][T19568] pgscan_kswapd 109 [ 2536.426768][T19568] pgscan_direct 1416 [ 2536.426768][T19568] pgscan_khugepaged 0 [ 2536.426768][T19568] pgsteal_kswapd 108 [ 2536.426768][T19568] pgsteal_direct 21 [ 2536.426768][T19568] pgsteal_khugepaged 0 [ 2536.426768][T19568] pgfault 1007856 [ 2536.426768][T19568] pgmajfault 0 [ 2536.426768][T19568] pgrefill 9825 [ 2536.426768][T19568] pgactivate 1373 [ 2536.426768][T19568] pgdeactivate 0 [ 2536.426768][T19568] pglazyfree 0 [ 2536.426768][T19568] pglazyfreed 0 [ 2536.426768][T19568] zswpin 0 [ 2536.426768][T19568] zswpout 0 [ 2536.615576][T19568] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19568,uid=0 [ 2536.632460][T19568] Memory cgroup out of memory: Killed process 19568 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:55:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 05:55:50 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf403}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:55:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x9, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:55:50 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8526b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2536.693755][T19596] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 05:55:50 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2536.766106][T19596] CPU: 1 PID: 19596 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2536.776644][T19596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2536.786748][T19596] Call Trace: [ 2536.790072][T19596] [ 2536.793050][T19596] dump_stack_lvl+0x136/0x150 [ 2536.797806][T19596] dump_header+0x10a/0xd70 [ 2536.802392][T19596] oom_kill_process+0x25d/0x600 [ 2536.807326][T19596] out_of_memory+0x35c/0x1660 [ 2536.812086][T19596] ? find_held_lock+0x2d/0x110 [ 2536.816941][T19596] ? oom_killer_disable+0x2b0/0x2b0 [ 2536.822216][T19596] ? rcu_read_unlock+0x9/0x60 [ 2536.826977][T19596] ? find_held_lock+0x2d/0x110 [ 2536.831832][T19596] mem_cgroup_out_of_memory+0x206/0x270 [ 2536.837457][T19596] ? mem_cgroup_margin+0x130/0x130 [ 2536.842639][T19596] ? lock_downgrade+0x690/0x690 [ 2536.847563][T19596] try_charge_memcg+0xf9b/0x13b0 [ 2536.852563][T19596] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2536.858611][T19596] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2536.864424][T19596] ? lock_downgrade+0x690/0x690 [ 2536.869355][T19596] ? lock_downgrade+0x690/0x690 [ 2536.874270][T19596] ? rcu_read_unlock+0x9/0x60 [ 2536.879036][T19596] obj_cgroup_charge+0x2af/0x5e0 [ 2536.884056][T19596] __kmem_cache_alloc_node+0xa3/0x320 [ 2536.889514][T19596] ? copy_semundo+0x18b/0x300 [ 2536.894271][T19596] kmalloc_trace+0x26/0xe0 [ 2536.898772][T19596] copy_semundo+0x18b/0x300 [ 2536.903339][T19596] copy_process+0x24a2/0x7580 [ 2536.908052][T19596] ? free_swap_cache+0x1b5/0x3d0 [ 2536.913066][T19596] ? __cleanup_sighand+0xb0/0xb0 [ 2536.918084][T19596] ? spin_bug+0x1c0/0x1c0 [ 2536.922457][T19596] ? lock_downgrade+0x690/0x690 [ 2536.927376][T19596] kernel_clone+0xeb/0x890 [ 2536.931849][T19596] ? create_io_thread+0xf0/0xf0 [ 2536.936754][T19596] ? vm_iomap_memory+0x190/0x190 [ 2536.941757][T19596] ? find_held_lock+0x2d/0x110 [ 2536.946613][T19596] __do_sys_clone+0xba/0x100 [ 2536.951232][T19596] ? kernel_clone+0x890/0x890 [ 2536.955968][T19596] ? syscall_enter_from_user_mode+0x26/0x80 [ 2536.961924][T19596] do_syscall_64+0x39/0xb0 [ 2536.966416][T19596] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2536.972374][T19596] RIP: 0033:0x7ffae188d591 [ 2536.976911][T19596] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2536.996664][T19596] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2537.005114][T19596] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 05:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0xa, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2537.013140][T19596] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2537.021164][T19596] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2537.029202][T19596] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2537.037272][T19596] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2537.045334][T19596] [ 2537.051044][T19596] memory: usage 307184kB, limit 307200kB, failcnt 23212 [ 2537.058066][T19596] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2537.065259][T19596] Memory cgroup stats for /syz3: [ 2537.065544][T19596] anon 90112 [ 2537.065544][T19596] file 733184 [ 2537.065544][T19596] kernel 313733120 [ 2537.065544][T19596] kernel_stack 65536 [ 2537.065544][T19596] pagetables 69632 [ 2537.065544][T19596] sec_pagetables 0 [ 2537.065544][T19596] percpu 5375488 [ 2537.065544][T19596] sock 0 [ 2537.065544][T19596] vmalloc 8192 [ 2537.065544][T19596] shmem 733184 [ 2537.065544][T19596] zswap 0 [ 2537.065544][T19596] zswapped 0 [ 2537.065544][T19596] file_mapped 667648 [ 2537.065544][T19596] file_dirty 0 [ 2537.065544][T19596] file_writeback 0 [ 2537.065544][T19596] swapcached 0 [ 2537.065544][T19596] anon_thp 0 [ 2537.065544][T19596] file_thp 0 [ 2537.065544][T19596] shmem_thp 0 [ 2537.065544][T19596] inactive_anon 0 [ 2537.065544][T19596] active_anon 823296 [ 2537.065544][T19596] inactive_file 0 [ 2537.065544][T19596] active_file 0 [ 2537.065544][T19596] unevictable 0 [ 2537.065544][T19596] slab_reclaimable 1215536 [ 2537.065544][T19596] slab_unreclaimable 306963192 [ 2537.065544][T19596] slab 308178728 [ 2537.065544][T19596] workingset_refault_anon 0 [ 2537.065544][T19596] workingset_refault_file 130 [ 2537.065544][T19596] workingset_activate_anon 0 [ 2537.065544][T19596] workingset_activate_file 0 [ 2537.065544][T19596] workingset_restore_anon 0 [ 2537.065544][T19596] workingset_restore_file 0 [ 2537.065544][T19596] workingset_nodereclaim 0 [ 2537.065544][T19596] pgscan 2951 [ 2537.065544][T19596] pgsteal 938 [ 2537.065544][T19596] pgscan_kswapd 0 [ 2537.065544][T19596] pgscan_direct 2951 [ 2537.065544][T19596] pgscan_khugepaged 0 [ 2537.065544][T19596] pgsteal_kswapd 0 [ 2537.065544][T19596] pgsteal_direct 938 [ 2537.065544][T19596] pgsteal_khugepaged 0 [ 2537.065544][T19596] pgfault 573982 [ 2537.065544][T19596] pgmajfault 0 [ 2537.065544][T19596] pgrefill 79949 [ 2537.065544][T19596] pgactivate 697 [ 2537.065544][T19596] pgdeactivate 0 [ 2537.065544][T19596] pglazyfree 0 [ 2537.065544][T19596] pglazyfreed 0 [ 2537.065544][T19596] zswpin 0 [ 2537.065544][T19596] zswpout 0 05:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0xb, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:55:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x12000000) [ 2537.257323][T19596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19596,uid=0 [ 2537.286480][T19596] Memory cgroup out of memory: Killed process 19596 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2537.341654][T19610] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2537.367718][T19624] wireguard71: entered allmulticast mode [ 2537.396393][T19610] CPU: 1 PID: 19610 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2537.406933][T19610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2537.417150][T19610] Call Trace: [ 2537.420684][T19610] [ 2537.423660][T19610] dump_stack_lvl+0x136/0x150 [ 2537.428410][T19610] dump_header+0x10a/0xd70 [ 2537.432913][T19610] oom_kill_process+0x25d/0x600 [ 2537.437820][T19610] out_of_memory+0x35c/0x1660 [ 2537.442572][T19610] ? find_held_lock+0x2d/0x110 [ 2537.447421][T19610] ? oom_killer_disable+0x2b0/0x2b0 [ 2537.452695][T19610] ? rcu_read_unlock+0x9/0x60 [ 2537.457473][T19610] ? find_held_lock+0x2d/0x110 [ 2537.462340][T19610] mem_cgroup_out_of_memory+0x206/0x270 [ 2537.468021][T19610] ? mem_cgroup_margin+0x130/0x130 [ 2537.473180][T19610] ? lock_downgrade+0x690/0x690 [ 2537.478106][T19610] try_charge_memcg+0xf9b/0x13b0 [ 2537.483121][T19610] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2537.489162][T19610] ? rcu_read_unlock+0x9/0x60 [ 2537.493901][T19610] ? lock_downgrade+0x690/0x690 [ 2537.498826][T19610] charge_memcg+0x90/0x3b0 [ 2537.503306][T19610] __mem_cgroup_charge+0x2b/0x90 [ 2537.508305][T19610] do_wp_page+0x8eb/0x3530 [ 2537.512778][T19610] ? lock_release+0x670/0x670 [ 2537.517492][T19610] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2537.522908][T19610] ? do_raw_spin_lock+0x124/0x2b0 [ 2537.527964][T19610] ? spin_bug+0x1c0/0x1c0 [ 2537.532319][T19610] ? lock_downgrade+0x690/0x690 [ 2537.537206][T19610] __handle_mm_fault+0x19a1/0x3e60 [ 2537.542455][T19610] ? vm_iomap_memory+0x190/0x190 [ 2537.547460][T19610] handle_mm_fault+0x2ba/0x9c0 [ 2537.552277][T19610] do_user_addr_fault+0x47e/0x1240 [ 2537.557479][T19610] ? rcu_is_watching+0x12/0xb0 [ 2537.562388][T19610] exc_page_fault+0x98/0x170 [ 2537.567030][T19610] asm_exc_page_fault+0x26/0x30 [ 2537.571945][T19610] RIP: 0033:0x7f4933239610 [ 2537.576387][T19610] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2537.596036][T19610] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2537.602149][T19610] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2537.610147][T19610] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2537.618147][T19610] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2537.626145][T19610] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2537.634157][T19610] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2537.642186][T19610] ? apparmor_socket_create+0x13c/0x670 05:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0xc, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2537.647849][T19610] 05:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0xd, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2537.673470][T19610] memory: usage 307188kB, limit 307200kB, failcnt 11891 [ 2537.684461][T19610] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2537.692165][T19610] Memory cgroup stats for /syz2: [ 2537.692454][T19610] anon 126976 [ 2537.692454][T19610] file 684032 [ 2537.692454][T19610] kernel 313745408 [ 2537.692454][T19610] kernel_stack 65536 [ 2537.692454][T19610] pagetables 73728 [ 2537.692454][T19610] sec_pagetables 0 [ 2537.692454][T19610] percpu 5387328 [ 2537.692454][T19610] sock 0 [ 2537.692454][T19610] vmalloc 8192 [ 2537.692454][T19610] shmem 679936 [ 2537.692454][T19610] zswap 0 [ 2537.692454][T19610] zswapped 0 [ 2537.692454][T19610] file_mapped 630784 [ 2537.692454][T19610] file_dirty 0 [ 2537.692454][T19610] file_writeback 0 [ 2537.692454][T19610] swapcached 0 [ 2537.692454][T19610] anon_thp 0 [ 2537.692454][T19610] file_thp 0 [ 2537.692454][T19610] shmem_thp 0 [ 2537.692454][T19610] inactive_anon 708608 [ 2537.692454][T19610] active_anon 98304 [ 2537.692454][T19610] inactive_file 4096 [ 2537.692454][T19610] active_file 0 05:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0xe, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2537.692454][T19610] unevictable 0 [ 2537.692454][T19610] slab_reclaimable 512264 [ 2537.692454][T19610] slab_unreclaimable 307665392 [ 2537.692454][T19610] slab 308177656 [ 2537.692454][T19610] workingset_refault_anon 0 [ 2537.692454][T19610] workingset_refault_file 2 [ 2537.692454][T19610] workingset_activate_anon 0 [ 2537.692454][T19610] workingset_activate_file 0 [ 2537.692454][T19610] workingset_restore_anon 0 [ 2537.692454][T19610] workingset_restore_file 1 [ 2537.692454][T19610] workingset_nodereclaim 0 [ 2537.692454][T19610] pgscan 1558 05:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0xf, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2537.692454][T19610] pgsteal 129 [ 2537.692454][T19610] pgscan_kswapd 109 [ 2537.692454][T19610] pgscan_direct 1449 [ 2537.692454][T19610] pgscan_khugepaged 0 [ 2537.692454][T19610] pgsteal_kswapd 108 [ 2537.692454][T19610] pgsteal_direct 21 [ 2537.692454][T19610] pgsteal_khugepaged 0 [ 2537.692454][T19610] pgfault 1007911 [ 2537.692454][T19610] pgmajfault 0 [ 2537.692454][T19610] pgrefill 9825 [ 2537.692454][T19610] pgactivate 1406 [ 2537.692454][T19610] pgdeactivate 0 [ 2537.692454][T19610] pglazyfree 0 [ 2537.692454][T19610] pglazyfreed 0 [ 2537.692454][T19610] zswpin 0 [ 2537.692454][T19610] zswpout 0 [ 2537.888736][T19610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19610,uid=0 [ 2537.925156][T19610] Memory cgroup out of memory: Killed process 19610 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2537.975920][T19638] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2537.993977][T19638] CPU: 0 PID: 19638 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2538.004568][T19638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2538.014685][T19638] Call Trace: [ 2538.018001][T19638] [ 2538.020977][T19638] dump_stack_lvl+0x136/0x150 [ 2538.025737][T19638] dump_header+0x10a/0xd70 [ 2538.030225][T19638] oom_kill_process+0x25d/0x600 [ 2538.035139][T19638] out_of_memory+0x35c/0x1660 [ 2538.039880][T19638] ? find_held_lock+0x2d/0x110 [ 2538.044721][T19638] ? oom_killer_disable+0x2b0/0x2b0 [ 2538.050002][T19638] ? rcu_read_unlock+0x9/0x60 [ 2538.054748][T19638] ? find_held_lock+0x2d/0x110 [ 2538.059594][T19638] mem_cgroup_out_of_memory+0x206/0x270 [ 2538.065254][T19638] ? mem_cgroup_margin+0x130/0x130 [ 2538.070446][T19638] ? lock_downgrade+0x690/0x690 05:55:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24010700}, 0x0) [ 2538.075377][T19638] try_charge_memcg+0xf9b/0x13b0 [ 2538.080388][T19638] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2538.086418][T19638] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2538.092187][T19638] ? lock_downgrade+0x690/0x690 [ 2538.097094][T19638] ? lock_downgrade+0x690/0x690 [ 2538.102012][T19638] ? rcu_read_unlock+0x9/0x60 [ 2538.106748][T19638] obj_cgroup_charge+0x2af/0x5e0 [ 2538.111728][T19638] __kmem_cache_alloc_node+0xa3/0x320 [ 2538.117149][T19638] ? copy_semundo+0x18b/0x300 [ 2538.121904][T19638] kmalloc_trace+0x26/0xe0 [ 2538.126370][T19638] copy_semundo+0x18b/0x300 [ 2538.130915][T19638] copy_process+0x24a2/0x7580 [ 2538.135640][T19638] ? __lock_acquire+0xbc5/0x5d40 [ 2538.140620][T19638] ? __cleanup_sighand+0xb0/0xb0 [ 2538.145590][T19638] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2538.151604][T19638] ? psi_memstall_leave+0x174/0x250 [ 2538.156842][T19638] ? lock_downgrade+0x690/0x690 [ 2538.161775][T19638] kernel_clone+0xeb/0x890 [ 2538.166248][T19638] ? create_io_thread+0xf0/0xf0 [ 2538.171152][T19638] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2538.177469][T19638] ? lock_downgrade+0x690/0x690 [ 2538.182405][T19638] __do_sys_clone+0xba/0x100 [ 2538.187061][T19638] ? kernel_clone+0x890/0x890 [ 2538.191797][T19638] ? syscall_enter_from_user_mode+0x26/0x80 [ 2538.197751][T19638] do_syscall_64+0x39/0xb0 [ 2538.202290][T19638] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2538.208301][T19638] RIP: 0033:0x7ffae188d591 [ 2538.212748][T19638] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2538.232385][T19638] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2538.240829][T19638] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2538.248822][T19638] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2538.256815][T19638] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2538.264814][T19638] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2538.272810][T19638] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2538.280825][T19638] [ 2538.311829][T19638] memory: usage 307184kB, limit 307200kB, failcnt 23307 [ 2538.319159][T19638] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:55:52 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf600}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:55:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x11, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2538.333933][T19638] Memory cgroup stats for /syz3: [ 2538.334215][T19638] anon 90112 [ 2538.334215][T19638] file 733184 [ 2538.334215][T19638] kernel 313733120 [ 2538.334215][T19638] kernel_stack 65536 [ 2538.334215][T19638] pagetables 69632 [ 2538.334215][T19638] sec_pagetables 0 [ 2538.334215][T19638] percpu 5375488 [ 2538.334215][T19638] sock 0 [ 2538.334215][T19638] vmalloc 8192 [ 2538.334215][T19638] shmem 733184 [ 2538.334215][T19638] zswap 0 [ 2538.334215][T19638] zswapped 0 [ 2538.334215][T19638] file_mapped 667648 [ 2538.334215][T19638] file_dirty 0 [ 2538.334215][T19638] file_writeback 0 [ 2538.334215][T19638] swapcached 0 [ 2538.334215][T19638] anon_thp 0 [ 2538.334215][T19638] file_thp 0 [ 2538.334215][T19638] shmem_thp 0 [ 2538.334215][T19638] inactive_anon 0 [ 2538.334215][T19638] active_anon 823296 [ 2538.334215][T19638] inactive_file 0 [ 2538.334215][T19638] active_file 0 [ 2538.334215][T19638] unevictable 0 [ 2538.334215][T19638] slab_reclaimable 1215536 [ 2538.334215][T19638] slab_unreclaimable 306962888 [ 2538.334215][T19638] slab 308178424 [ 2538.334215][T19638] workingset_refault_anon 0 [ 2538.334215][T19638] workingset_refault_file 130 [ 2538.334215][T19638] workingset_activate_anon 0 [ 2538.334215][T19638] workingset_activate_file 0 [ 2538.334215][T19638] workingset_restore_anon 0 [ 2538.334215][T19638] workingset_restore_file 0 [ 2538.334215][T19638] workingset_nodereclaim 0 [ 2538.334215][T19638] pgscan 2951 [ 2538.334215][T19638] pgsteal 938 [ 2538.334215][T19638] pgscan_kswapd 0 [ 2538.334215][T19638] pgscan_direct 2951 [ 2538.334215][T19638] pgscan_khugepaged 0 [ 2538.334215][T19638] pgsteal_kswapd 0 [ 2538.334215][T19638] pgsteal_direct 938 [ 2538.334215][T19638] pgsteal_khugepaged 0 [ 2538.334215][T19638] pgfault 574019 [ 2538.334215][T19638] pgmajfault 0 [ 2538.334215][T19638] pgrefill 79949 [ 2538.334215][T19638] pgactivate 697 [ 2538.334215][T19638] pgdeactivate 0 [ 2538.334215][T19638] pglazyfree 0 [ 2538.334215][T19638] pglazyfreed 0 [ 2538.334215][T19638] zswpin 0 [ 2538.334215][T19638] zswpout 0 [ 2538.405442][T19660] wireguard53: entered allmulticast mode [ 2538.544456][T19638] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19638,uid=0 [ 2538.561141][T19638] Memory cgroup out of memory: Killed process 19638 (syz-executor.3) total-vm:54548kB, anon-rss:456kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2538.625797][T19657] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2538.636847][T19657] CPU: 1 PID: 19657 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2538.647334][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2538.657441][T19657] Call Trace: [ 2538.660768][T19657] [ 2538.663743][T19657] dump_stack_lvl+0x136/0x150 [ 2538.668499][T19657] dump_header+0x10a/0xd70 [ 2538.672998][T19657] oom_kill_process+0x25d/0x600 [ 2538.677940][T19657] out_of_memory+0x35c/0x1660 [ 2538.682692][T19657] ? find_held_lock+0x2d/0x110 [ 2538.687519][T19657] ? oom_killer_disable+0x2b0/0x2b0 [ 2538.692778][T19657] ? rcu_read_unlock+0x9/0x60 [ 2538.697507][T19657] ? find_held_lock+0x2d/0x110 [ 2538.702362][T19657] mem_cgroup_out_of_memory+0x206/0x270 [ 2538.707992][T19657] ? mem_cgroup_margin+0x130/0x130 [ 2538.713172][T19657] ? lock_downgrade+0x690/0x690 [ 2538.718089][T19657] try_charge_memcg+0xf9b/0x13b0 [ 2538.723084][T19657] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2538.729560][T19657] ? rcu_read_unlock+0x9/0x60 [ 2538.734291][T19657] ? lock_downgrade+0x690/0x690 [ 2538.739280][T19657] charge_memcg+0x90/0x3b0 [ 2538.743733][T19657] __mem_cgroup_charge+0x2b/0x90 [ 2538.748705][T19657] do_wp_page+0x8eb/0x3530 [ 2538.753170][T19657] ? lock_release+0x670/0x670 [ 2538.757876][T19657] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2538.763285][T19657] ? do_raw_spin_lock+0x124/0x2b0 [ 2538.768429][T19657] ? spin_bug+0x1c0/0x1c0 [ 2538.772797][T19657] ? lock_downgrade+0x690/0x690 [ 2538.777783][T19657] __handle_mm_fault+0x19a1/0x3e60 [ 2538.782948][T19657] ? vm_iomap_memory+0x190/0x190 [ 2538.787946][T19657] handle_mm_fault+0x2ba/0x9c0 [ 2538.792841][T19657] do_user_addr_fault+0x47e/0x1240 [ 2538.797996][T19657] ? rcu_is_watching+0x12/0xb0 [ 2538.802812][T19657] exc_page_fault+0x98/0x170 [ 2538.807448][T19657] asm_exc_page_fault+0x26/0x30 [ 2538.812337][T19657] RIP: 0033:0x7f4933239610 [ 2538.816784][T19657] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2538.836415][T19657] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2538.842508][T19657] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2538.850504][T19657] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2538.858518][T19657] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2538.866599][T19657] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 05:55:52 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8526c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:55:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x12, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:55:52 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:55:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x12020000) [ 2538.874591][T19657] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2538.882672][T19657] ? apparmor_socket_create+0xb7/0x670 [ 2538.888196][T19657] [ 2538.908957][T19657] memory: usage 307184kB, limit 307200kB, failcnt 12001 05:55:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x14, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2538.943256][T19657] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2538.987690][T19657] Memory cgroup stats for /syz2: [ 2538.987983][T19657] anon 122880 [ 2538.987983][T19657] file 684032 [ 2538.987983][T19657] kernel 313745408 [ 2538.987983][T19657] kernel_stack 65536 [ 2538.987983][T19657] pagetables 73728 [ 2538.987983][T19657] sec_pagetables 0 [ 2538.987983][T19657] percpu 5387328 [ 2538.987983][T19657] sock 0 [ 2538.987983][T19657] vmalloc 8192 [ 2538.987983][T19657] shmem 679936 [ 2538.987983][T19657] zswap 0 [ 2538.987983][T19657] zswapped 0 [ 2538.987983][T19657] file_mapped 630784 05:55:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x18, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2538.987983][T19657] file_dirty 4096 [ 2538.987983][T19657] file_writeback 0 [ 2538.987983][T19657] swapcached 0 [ 2538.987983][T19657] anon_thp 0 [ 2538.987983][T19657] file_thp 0 [ 2538.987983][T19657] shmem_thp 0 [ 2538.987983][T19657] inactive_anon 708608 [ 2538.987983][T19657] active_anon 94208 [ 2538.987983][T19657] inactive_file 4096 [ 2538.987983][T19657] active_file 0 [ 2538.987983][T19657] unevictable 0 [ 2538.987983][T19657] slab_reclaimable 512264 [ 2538.987983][T19657] slab_unreclaimable 307665392 [ 2538.987983][T19657] slab 308177656 05:55:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x2f, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2538.987983][T19657] workingset_refault_anon 0 [ 2538.987983][T19657] workingset_refault_file 2 [ 2538.987983][T19657] workingset_activate_anon 0 [ 2538.987983][T19657] workingset_activate_file 0 [ 2538.987983][T19657] workingset_restore_anon 0 [ 2538.987983][T19657] workingset_restore_file 1 [ 2538.987983][T19657] workingset_nodereclaim 0 [ 2538.987983][T19657] pgscan 1594 [ 2538.987983][T19657] pgsteal 129 [ 2538.987983][T19657] pgscan_kswapd 109 [ 2538.987983][T19657] pgscan_direct 1485 [ 2538.987983][T19657] pgscan_khugepaged 0 [ 2538.987983][T19657] pgsteal_kswapd 108 [ 2538.987983][T19657] pgsteal_direct 21 [ 2538.987983][T19657] pgsteal_khugepaged 0 [ 2538.987983][T19657] pgfault 1007969 [ 2538.987983][T19657] pgmajfault 0 [ 2538.987983][T19657] pgrefill 9825 [ 2538.987983][T19657] pgactivate 1442 [ 2538.987983][T19657] pgdeactivate 0 [ 2538.987983][T19657] pglazyfree 0 [ 2538.987983][T19657] pglazyfreed 0 [ 2538.987983][T19657] zswpin 0 [ 2538.987983][T19657] zswpout 0 05:55:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x39, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2539.178957][T19657] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19657,uid=0 [ 2539.196201][T19657] Memory cgroup out of memory: Killed process 19657 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:55:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x25010700}, 0x0) [ 2539.229446][T19677] wireguard71: entered allmulticast mode 05:55:53 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf601}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2539.265708][T19676] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2539.293524][T19676] CPU: 1 PID: 19676 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2539.304025][T19676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2539.314380][T19676] Call Trace: [ 2539.317684][T19676] [ 2539.320637][T19676] dump_stack_lvl+0x136/0x150 [ 2539.325365][T19676] dump_header+0x10a/0xd70 [ 2539.329838][T19676] oom_kill_process+0x25d/0x600 [ 2539.334766][T19676] out_of_memory+0x35c/0x1660 [ 2539.339504][T19676] ? find_held_lock+0x2d/0x110 [ 2539.344360][T19676] ? oom_killer_disable+0x2b0/0x2b0 [ 2539.349616][T19676] ? rcu_read_unlock+0x9/0x60 [ 2539.354339][T19676] ? find_held_lock+0x2d/0x110 [ 2539.359176][T19676] mem_cgroup_out_of_memory+0x206/0x270 [ 2539.364791][T19676] ? mem_cgroup_margin+0x130/0x130 [ 2539.369962][T19676] ? lock_downgrade+0x690/0x690 [ 2539.374873][T19676] try_charge_memcg+0xf9b/0x13b0 [ 2539.379866][T19676] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2539.385905][T19676] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2539.391690][T19676] ? lock_downgrade+0x690/0x690 [ 2539.396596][T19676] ? lock_downgrade+0x690/0x690 [ 2539.401487][T19676] ? rcu_read_unlock+0x9/0x60 [ 2539.406235][T19676] obj_cgroup_charge+0x2af/0x5e0 [ 2539.411231][T19676] __kmem_cache_alloc_node+0xa3/0x320 [ 2539.417973][T19676] ? copy_semundo+0x18b/0x300 [ 2539.423221][T19676] kmalloc_trace+0x26/0xe0 [ 2539.427673][T19676] copy_semundo+0x18b/0x300 [ 2539.432211][T19676] copy_process+0x24a2/0x7580 [ 2539.436944][T19676] ? __lock_acquire+0xbc5/0x5d40 [ 2539.442019][T19676] ? __cleanup_sighand+0xb0/0xb0 [ 2539.446993][T19676] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2539.453011][T19676] ? psi_memstall_leave+0x174/0x250 [ 2539.458256][T19676] ? lock_downgrade+0x690/0x690 [ 2539.463142][T19676] kernel_clone+0xeb/0x890 [ 2539.467594][T19676] ? create_io_thread+0xf0/0xf0 [ 2539.472481][T19676] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2539.478783][T19676] ? lock_downgrade+0x690/0x690 [ 2539.483674][T19676] __do_sys_clone+0xba/0x100 [ 2539.488309][T19676] ? kernel_clone+0x890/0x890 [ 2539.493124][T19676] ? syscall_enter_from_user_mode+0x26/0x80 [ 2539.499069][T19676] do_syscall_64+0x39/0xb0 [ 2539.503533][T19676] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2539.509470][T19676] RIP: 0033:0x7ffae188d591 [ 2539.513921][T19676] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2539.533559][T19676] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2539.542003][T19676] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2539.550003][T19676] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2539.558004][T19676] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2539.566000][T19676] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e 05:55:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x63, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2539.573998][T19676] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2539.582013][T19676] [ 2539.609353][T19676] memory: usage 307184kB, limit 307200kB, failcnt 23401 [ 2539.622301][T19676] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2539.629475][T19699] wireguard53: entered allmulticast mode [ 2539.642519][T19676] Memory cgroup stats for /syz3: [ 2539.642809][T19676] anon 90112 [ 2539.642809][T19676] file 733184 [ 2539.642809][T19676] kernel 313733120 [ 2539.642809][T19676] kernel_stack 65536 [ 2539.642809][T19676] pagetables 69632 [ 2539.642809][T19676] sec_pagetables 0 [ 2539.642809][T19676] percpu 5375488 [ 2539.642809][T19676] sock 0 [ 2539.642809][T19676] vmalloc 8192 [ 2539.642809][T19676] shmem 733184 [ 2539.642809][T19676] zswap 0 [ 2539.642809][T19676] zswapped 0 [ 2539.642809][T19676] file_mapped 667648 [ 2539.642809][T19676] file_dirty 0 [ 2539.642809][T19676] file_writeback 0 [ 2539.642809][T19676] swapcached 0 [ 2539.642809][T19676] anon_thp 0 [ 2539.642809][T19676] file_thp 0 [ 2539.642809][T19676] shmem_thp 0 [ 2539.642809][T19676] inactive_anon 0 [ 2539.642809][T19676] active_anon 823296 [ 2539.642809][T19676] inactive_file 0 [ 2539.642809][T19676] active_file 0 [ 2539.642809][T19676] unevictable 0 [ 2539.642809][T19676] slab_reclaimable 1215536 [ 2539.642809][T19676] slab_unreclaimable 306962888 [ 2539.642809][T19676] slab 308178424 [ 2539.642809][T19676] workingset_refault_anon 0 [ 2539.642809][T19676] workingset_refault_file 130 [ 2539.642809][T19676] workingset_activate_anon 0 [ 2539.642809][T19676] workingset_activate_file 0 [ 2539.642809][T19676] workingset_restore_anon 0 [ 2539.642809][T19676] workingset_restore_file 0 [ 2539.642809][T19676] workingset_nodereclaim 0 [ 2539.642809][T19676] pgscan 2951 [ 2539.642809][T19676] pgsteal 938 [ 2539.642809][T19676] pgscan_kswapd 0 [ 2539.642809][T19676] pgscan_direct 2951 [ 2539.642809][T19676] pgscan_khugepaged 0 [ 2539.642809][T19676] pgsteal_kswapd 0 [ 2539.642809][T19676] pgsteal_direct 938 [ 2539.642809][T19676] pgsteal_khugepaged 0 [ 2539.642809][T19676] pgfault 574056 [ 2539.642809][T19676] pgmajfault 0 [ 2539.642809][T19676] pgrefill 79949 [ 2539.642809][T19676] pgactivate 697 [ 2539.642809][T19676] pgdeactivate 0 [ 2539.642809][T19676] pglazyfree 0 [ 2539.642809][T19676] pglazyfreed 0 [ 2539.642809][T19676] zswpin 0 [ 2539.642809][T19676] zswpout 0 [ 2539.844273][T19676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19676,uid=0 05:55:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x7b, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2539.860535][T19676] Memory cgroup out of memory: Killed process 19676 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2539.945233][T19703] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2539.980361][T19703] CPU: 1 PID: 19703 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2539.990888][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2540.000987][T19703] Call Trace: [ 2540.004286][T19703] [ 2540.007241][T19703] dump_stack_lvl+0x136/0x150 [ 2540.012055][T19703] dump_header+0x10a/0xd70 [ 2540.016586][T19703] oom_kill_process+0x25d/0x600 [ 2540.021460][T19703] out_of_memory+0x35c/0x1660 [ 2540.026165][T19703] ? oom_killer_disable+0x2b0/0x2b0 [ 2540.031387][T19703] ? rcu_read_unlock+0x9/0x60 [ 2540.036179][T19703] ? find_held_lock+0x2d/0x110 [ 2540.040999][T19703] mem_cgroup_out_of_memory+0x206/0x270 [ 2540.046698][T19703] ? mem_cgroup_margin+0x130/0x130 [ 2540.051863][T19703] ? lock_downgrade+0x690/0x690 [ 2540.056759][T19703] try_charge_memcg+0xf9b/0x13b0 [ 2540.061729][T19703] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2540.067743][T19703] ? rcu_read_unlock+0x9/0x60 [ 2540.072475][T19703] ? lock_downgrade+0x690/0x690 [ 2540.077359][T19703] charge_memcg+0x90/0x3b0 [ 2540.081824][T19703] __mem_cgroup_charge+0x2b/0x90 [ 2540.086783][T19703] do_wp_page+0x8eb/0x3530 [ 2540.091269][T19703] ? lock_release+0x670/0x670 [ 2540.096026][T19703] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2540.101479][T19703] ? do_raw_spin_lock+0x124/0x2b0 [ 2540.107514][T19703] ? spin_bug+0x1c0/0x1c0 [ 2540.111884][T19703] ? lock_downgrade+0x690/0x690 [ 2540.116957][T19703] __handle_mm_fault+0x19a1/0x3e60 [ 2540.122197][T19703] ? vm_iomap_memory+0x190/0x190 [ 2540.127180][T19703] handle_mm_fault+0x2ba/0x9c0 [ 2540.132005][T19703] do_user_addr_fault+0x47e/0x1240 [ 2540.137513][T19703] ? rcu_is_watching+0x12/0xb0 [ 2540.142331][T19703] exc_page_fault+0x98/0x170 [ 2540.146999][T19703] asm_exc_page_fault+0x26/0x30 [ 2540.151943][T19703] RIP: 0033:0x7f4933239610 [ 2540.156387][T19703] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2540.176030][T19703] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2540.182136][T19703] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2540.190147][T19703] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2540.198267][T19703] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2540.206276][T19703] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2540.214267][T19703] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2540.222257][T19703] ? apparmor_socket_create+0xb7/0x670 [ 2540.227791][T19703] [ 2540.234209][T19703] memory: usage 307200kB, limit 307200kB, failcnt 12090 05:55:54 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8526d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:55:54 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:55:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x14000000) 05:55:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x90, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2540.242186][T19703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2540.274620][T19703] Memory cgroup stats for /syz2: [ 2540.274911][T19703] anon 122880 [ 2540.274911][T19703] file 688128 [ 2540.274911][T19703] kernel 313749504 [ 2540.274911][T19703] kernel_stack 65536 [ 2540.274911][T19703] pagetables 73728 [ 2540.274911][T19703] sec_pagetables 0 [ 2540.274911][T19703] percpu 5387328 [ 2540.274911][T19703] sock 0 [ 2540.274911][T19703] vmalloc 8192 [ 2540.274911][T19703] shmem 679936 [ 2540.274911][T19703] zswap 0 [ 2540.274911][T19703] zswapped 0 [ 2540.274911][T19703] file_mapped 630784 05:55:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0xc6, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2540.274911][T19703] file_dirty 4096 [ 2540.274911][T19703] file_writeback 0 [ 2540.274911][T19703] swapcached 0 [ 2540.274911][T19703] anon_thp 0 [ 2540.274911][T19703] file_thp 0 [ 2540.274911][T19703] shmem_thp 0 [ 2540.274911][T19703] inactive_anon 36864 [ 2540.274911][T19703] active_anon 765952 [ 2540.274911][T19703] inactive_file 4096 [ 2540.274911][T19703] active_file 4096 [ 2540.274911][T19703] unevictable 0 [ 2540.274911][T19703] slab_reclaimable 512504 [ 2540.274911][T19703] slab_unreclaimable 307665696 [ 2540.274911][T19703] slab 308178200 [ 2540.274911][T19703] workingset_refault_anon 0 [ 2540.274911][T19703] workingset_refault_file 2 [ 2540.274911][T19703] workingset_activate_anon 0 [ 2540.274911][T19703] workingset_activate_file 0 [ 2540.274911][T19703] workingset_restore_anon 0 [ 2540.274911][T19703] workingset_restore_file 1 [ 2540.274911][T19703] workingset_nodereclaim 0 [ 2540.274911][T19703] pgscan 1632 [ 2540.274911][T19703] pgsteal 129 [ 2540.274911][T19703] pgscan_kswapd 109 [ 2540.274911][T19703] pgscan_direct 1523 [ 2540.274911][T19703] pgscan_khugepaged 0 [ 2540.274911][T19703] pgsteal_kswapd 108 [ 2540.274911][T19703] pgsteal_direct 21 [ 2540.274911][T19703] pgsteal_khugepaged 0 [ 2540.274911][T19703] pgfault 1008024 [ 2540.274911][T19703] pgmajfault 0 [ 2540.274911][T19703] pgrefill 9904 [ 2540.274911][T19703] pgactivate 1480 [ 2540.274911][T19703] pgdeactivate 0 [ 2540.274911][T19703] pglazyfree 0 [ 2540.274911][T19703] pglazyfreed 0 [ 2540.274911][T19703] zswpin 0 [ 2540.274911][T19703] zswpout 0 05:55:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x1f00, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:55:54 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf602}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2540.470734][T19703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19703,uid=0 05:55:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x2000, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2540.532522][T19703] Memory cgroup out of memory: Killed process 19703 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2540.565360][T19725] wireguard71: entered allmulticast mode 05:55:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x26010700}, 0x0) 05:55:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xff09, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2540.642931][T19736] wireguard53: entered allmulticast mode [ 2540.653240][T19714] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2540.682741][T19714] CPU: 0 PID: 19714 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2540.693248][T19714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2540.703364][T19714] Call Trace: [ 2540.706686][T19714] [ 2540.709652][T19714] dump_stack_lvl+0x136/0x150 [ 2540.714392][T19714] dump_header+0x10a/0xd70 [ 2540.718883][T19714] oom_kill_process+0x25d/0x600 [ 2540.723780][T19714] out_of_memory+0x35c/0x1660 [ 2540.728525][T19714] ? find_held_lock+0x2d/0x110 [ 2540.733355][T19714] ? oom_killer_disable+0x2b0/0x2b0 [ 2540.738601][T19714] ? rcu_read_unlock+0x9/0x60 [ 2540.743324][T19714] ? find_held_lock+0x2d/0x110 [ 2540.748138][T19714] mem_cgroup_out_of_memory+0x206/0x270 [ 2540.753731][T19714] ? mem_cgroup_margin+0x130/0x130 [ 2540.758907][T19714] ? lock_downgrade+0x690/0x690 [ 2540.763891][T19714] try_charge_memcg+0xf9b/0x13b0 [ 2540.768873][T19714] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2540.774888][T19714] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2540.780747][T19714] ? lock_downgrade+0x690/0x690 [ 2540.785637][T19714] ? lock_downgrade+0x690/0x690 [ 2540.790519][T19714] ? rcu_read_unlock+0x9/0x60 [ 2540.795245][T19714] obj_cgroup_charge+0x2af/0x5e0 [ 2540.800221][T19714] __kmem_cache_alloc_node+0xa3/0x320 [ 2540.805642][T19714] ? copy_semundo+0x18b/0x300 [ 2540.810379][T19714] kmalloc_trace+0x26/0xe0 [ 2540.814837][T19714] copy_semundo+0x18b/0x300 [ 2540.819385][T19714] copy_process+0x24a2/0x7580 [ 2540.824191][T19714] ? __lock_acquire+0xbc5/0x5d40 [ 2540.829178][T19714] ? __cleanup_sighand+0xb0/0xb0 [ 2540.834151][T19714] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2540.840163][T19714] ? psi_memstall_leave+0x174/0x250 [ 2540.845427][T19714] ? lock_downgrade+0x690/0x690 [ 2540.850326][T19714] kernel_clone+0xeb/0x890 [ 2540.854784][T19714] ? create_io_thread+0xf0/0xf0 [ 2540.859719][T19714] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2540.866017][T19714] ? lock_downgrade+0x690/0x690 [ 2540.870914][T19714] __do_sys_clone+0xba/0x100 [ 2540.875542][T19714] ? kernel_clone+0x890/0x890 [ 2540.880278][T19714] ? syscall_enter_from_user_mode+0x26/0x80 [ 2540.886231][T19714] do_syscall_64+0x39/0xb0 [ 2540.890700][T19714] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2540.896632][T19714] RIP: 0033:0x7ffae188d591 [ 2540.901089][T19714] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2540.920734][T19714] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2540.929272][T19714] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2540.937293][T19714] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2540.945291][T19714] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2540.953302][T19714] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2540.961300][T19714] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2540.969579][T19714] 05:55:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xff0a, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2541.013649][T19714] memory: usage 307184kB, limit 307200kB, failcnt 23494 [ 2541.029197][T19714] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2541.088888][T19714] Memory cgroup stats for /syz3: [ 2541.089166][T19714] anon 90112 [ 2541.089166][T19714] file 733184 [ 2541.089166][T19714] kernel 313733120 [ 2541.089166][T19714] kernel_stack 65536 [ 2541.089166][T19714] pagetables 69632 [ 2541.089166][T19714] sec_pagetables 0 [ 2541.089166][T19714] percpu 5375488 [ 2541.089166][T19714] sock 0 [ 2541.089166][T19714] vmalloc 8192 [ 2541.089166][T19714] shmem 733184 [ 2541.089166][T19714] zswap 0 [ 2541.089166][T19714] zswapped 0 [ 2541.089166][T19714] file_mapped 667648 [ 2541.089166][T19714] file_dirty 0 [ 2541.089166][T19714] file_writeback 0 [ 2541.089166][T19714] swapcached 0 [ 2541.089166][T19714] anon_thp 0 [ 2541.089166][T19714] file_thp 0 [ 2541.089166][T19714] shmem_thp 0 [ 2541.089166][T19714] inactive_anon 0 [ 2541.089166][T19714] active_anon 823296 [ 2541.089166][T19714] inactive_file 0 [ 2541.089166][T19714] active_file 0 [ 2541.089166][T19714] unevictable 0 [ 2541.089166][T19714] slab_reclaimable 1215536 [ 2541.089166][T19714] slab_unreclaimable 306962888 [ 2541.089166][T19714] slab 308178424 05:55:55 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2541.089166][T19714] workingset_refault_anon 0 [ 2541.089166][T19714] workingset_refault_file 130 [ 2541.089166][T19714] workingset_activate_anon 0 [ 2541.089166][T19714] workingset_activate_file 0 [ 2541.089166][T19714] workingset_restore_anon 0 [ 2541.089166][T19714] workingset_restore_file 0 [ 2541.089166][T19714] workingset_nodereclaim 0 [ 2541.089166][T19714] pgscan 2951 [ 2541.089166][T19714] pgsteal 938 [ 2541.089166][T19714] pgscan_kswapd 0 [ 2541.089166][T19714] pgscan_direct 2951 [ 2541.089166][T19714] pgscan_khugepaged 0 [ 2541.089166][T19714] pgsteal_kswapd 0 [ 2541.089166][T19714] pgsteal_direct 938 [ 2541.089166][T19714] pgsteal_khugepaged 0 [ 2541.089166][T19714] pgfault 574093 [ 2541.089166][T19714] pgmajfault 0 [ 2541.089166][T19714] pgrefill 79949 [ 2541.089166][T19714] pgactivate 697 [ 2541.089166][T19714] pgdeactivate 0 [ 2541.089166][T19714] pglazyfree 0 [ 2541.089166][T19714] pglazyfreed 0 [ 2541.089166][T19714] zswpin 0 [ 2541.089166][T19714] zswpout 0 [ 2541.278468][T19714] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19714,uid=0 [ 2541.294270][T19714] Memory cgroup out of memory: Killed process 19714 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2541.341470][T19744] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2541.359888][T19744] CPU: 0 PID: 19744 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2541.370467][T19744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2541.380574][T19744] Call Trace: [ 2541.383884][T19744] [ 2541.386836][T19744] dump_stack_lvl+0x136/0x150 [ 2541.391563][T19744] dump_header+0x10a/0xd70 [ 2541.396039][T19744] oom_kill_process+0x25d/0x600 [ 2541.400932][T19744] out_of_memory+0x35c/0x1660 [ 2541.405653][T19744] ? find_held_lock+0x2d/0x110 [ 2541.410729][T19744] ? oom_killer_disable+0x2b0/0x2b0 [ 2541.416405][T19744] ? rcu_read_unlock+0x9/0x60 [ 2541.421431][T19744] ? find_held_lock+0x2d/0x110 [ 2541.426334][T19744] mem_cgroup_out_of_memory+0x206/0x270 [ 2541.432051][T19744] ? mem_cgroup_margin+0x130/0x130 [ 2541.437301][T19744] ? lock_downgrade+0x690/0x690 [ 2541.442210][T19744] try_charge_memcg+0xf9b/0x13b0 [ 2541.447287][T19744] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2541.453309][T19744] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2541.459082][T19744] ? lock_downgrade+0x690/0x690 [ 2541.463987][T19744] ? lock_downgrade+0x690/0x690 [ 2541.469075][T19744] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2541.474749][T19744] __alloc_pages+0x1f3/0x4a0 [ 2541.479426][T19744] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2541.486345][T19744] ? __lock_acquire+0xbc5/0x5d40 [ 2541.491395][T19744] alloc_pages+0x1aa/0x270 [ 2541.495861][T19744] __pmd_alloc+0x3f/0x5d0 [ 2541.500234][T19744] __handle_mm_fault+0x932/0x3e60 [ 2541.505316][T19744] ? vm_iomap_memory+0x190/0x190 [ 2541.510324][T19744] handle_mm_fault+0x2ba/0x9c0 [ 2541.515140][T19744] do_user_addr_fault+0x47e/0x1240 [ 2541.520298][T19744] ? rcu_is_watching+0x12/0xb0 [ 2541.525114][T19744] exc_page_fault+0x98/0x170 [ 2541.529759][T19744] asm_exc_page_fault+0x26/0x30 [ 2541.534902][T19744] RIP: 0033:0x7f493322bde9 [ 2541.539359][T19744] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2541.558998][T19744] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2541.565097][T19744] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2541.573102][T19744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2541.581103][T19744] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 05:55:55 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8526e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:55:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xff39, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:55:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x16030000) 05:55:55 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf603}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2541.589102][T19744] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000026bde0 [ 2541.597182][T19744] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2541.605197][T19744] [ 2541.616086][T19744] memory: usage 307200kB, limit 307200kB, failcnt 12196 [ 2541.660914][T19744] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2541.688413][T19744] Memory cgroup stats for /syz2: [ 2541.688736][T19744] anon 135168 [ 2541.688736][T19744] file 688128 [ 2541.688736][T19744] kernel 313749504 [ 2541.688736][T19744] kernel_stack 65536 [ 2541.688736][T19744] pagetables 73728 [ 2541.688736][T19744] sec_pagetables 0 [ 2541.688736][T19744] percpu 5387328 [ 2541.688736][T19744] sock 0 [ 2541.688736][T19744] vmalloc 8192 [ 2541.688736][T19744] shmem 679936 [ 2541.688736][T19744] zswap 0 [ 2541.688736][T19744] zswapped 0 [ 2541.688736][T19744] file_mapped 630784 [ 2541.688736][T19744] file_dirty 4096 [ 2541.688736][T19744] file_writeback 0 [ 2541.688736][T19744] swapcached 0 [ 2541.688736][T19744] anon_thp 0 [ 2541.688736][T19744] file_thp 0 [ 2541.688736][T19744] shmem_thp 0 [ 2541.688736][T19744] inactive_anon 753664 [ 2541.688736][T19744] active_anon 61440 [ 2541.688736][T19744] inactive_file 4096 [ 2541.688736][T19744] active_file 4096 [ 2541.688736][T19744] unevictable 0 [ 2541.688736][T19744] slab_reclaimable 512504 [ 2541.688736][T19744] slab_unreclaimable 307665392 [ 2541.688736][T19744] slab 308177896 [ 2541.688736][T19744] workingset_refault_anon 0 [ 2541.688736][T19744] workingset_refault_file 2 [ 2541.688736][T19744] workingset_activate_anon 0 [ 2541.688736][T19744] workingset_activate_file 0 [ 2541.688736][T19744] workingset_restore_anon 0 [ 2541.688736][T19744] workingset_restore_file 1 [ 2541.688736][T19744] workingset_nodereclaim 0 [ 2541.688736][T19744] pgscan 1667 [ 2541.688736][T19744] pgsteal 129 [ 2541.688736][T19744] pgscan_kswapd 109 [ 2541.688736][T19744] pgscan_direct 1558 [ 2541.688736][T19744] pgscan_khugepaged 0 [ 2541.688736][T19744] pgsteal_kswapd 108 [ 2541.688736][T19744] pgsteal_direct 21 [ 2541.688736][T19744] pgsteal_khugepaged 0 [ 2541.688736][T19744] pgfault 1008082 [ 2541.688736][T19744] pgmajfault 0 [ 2541.688736][T19744] pgrefill 9974 [ 2541.688736][T19744] pgactivate 1515 05:55:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xff63, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2541.688736][T19744] pgdeactivate 0 [ 2541.688736][T19744] pglazyfree 0 [ 2541.688736][T19744] pglazyfreed 0 [ 2541.688736][T19744] zswpin 0 [ 2541.688736][T19744] zswpout 0 [ 2541.912404][T19744] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19744,uid=0 [ 2541.935811][T19767] wireguard53: entered allmulticast mode [ 2541.938871][T19744] Memory cgroup out of memory: Killed process 19744 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2541.984170][T19760] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2541.997718][T19760] CPU: 0 PID: 19760 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2542.008202][T19760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2542.019520][T19760] Call Trace: [ 2542.022830][T19760] [ 2542.025786][T19760] dump_stack_lvl+0x136/0x150 [ 2542.030511][T19760] dump_header+0x10a/0xd70 [ 2542.034971][T19760] oom_kill_process+0x25d/0x600 [ 2542.039864][T19760] out_of_memory+0x35c/0x1660 [ 2542.044583][T19760] ? find_held_lock+0x2d/0x110 [ 2542.049397][T19760] ? oom_killer_disable+0x2b0/0x2b0 [ 2542.054662][T19760] ? rcu_read_unlock+0x9/0x60 [ 2542.059403][T19760] ? find_held_lock+0x2d/0x110 [ 2542.064226][T19760] mem_cgroup_out_of_memory+0x206/0x270 [ 2542.069840][T19760] ? mem_cgroup_margin+0x130/0x130 [ 2542.075001][T19760] ? lock_downgrade+0x690/0x690 [ 2542.079897][T19760] try_charge_memcg+0xf9b/0x13b0 [ 2542.084870][T19760] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2542.090896][T19760] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2542.096667][T19760] ? lock_downgrade+0x690/0x690 [ 2542.101569][T19760] ? lock_downgrade+0x690/0x690 [ 2542.106451][T19760] ? rcu_read_unlock+0x9/0x60 [ 2542.111181][T19760] obj_cgroup_charge+0x2af/0x5e0 [ 2542.116166][T19760] __kmem_cache_alloc_node+0xa3/0x320 [ 2542.121588][T19760] ? copy_semundo+0x18b/0x300 [ 2542.126314][T19760] kmalloc_trace+0x26/0xe0 [ 2542.130770][T19760] copy_semundo+0x18b/0x300 [ 2542.135323][T19760] copy_process+0x24a2/0x7580 [ 2542.140040][T19760] ? __lock_acquire+0xbc5/0x5d40 [ 2542.145050][T19760] ? __cleanup_sighand+0xb0/0xb0 [ 2542.150045][T19760] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2542.156096][T19760] ? psi_memstall_leave+0x174/0x250 [ 2542.161350][T19760] ? lock_downgrade+0x690/0x690 [ 2542.166263][T19760] kernel_clone+0xeb/0x890 [ 2542.170741][T19760] ? create_io_thread+0xf0/0xf0 [ 2542.175643][T19760] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2542.181941][T19760] ? lock_downgrade+0x690/0x690 [ 2542.186841][T19760] __do_sys_clone+0xba/0x100 [ 2542.191472][T19760] ? kernel_clone+0x890/0x890 [ 2542.196213][T19760] ? syscall_enter_from_user_mode+0x26/0x80 [ 2542.202168][T19760] do_syscall_64+0x39/0xb0 [ 2542.206629][T19760] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2542.212571][T19760] RIP: 0033:0x7ffae188d591 [ 2542.217014][T19760] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2542.236825][T19760] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2542.245272][T19760] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2542.253274][T19760] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2542.261272][T19760] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2542.269266][T19760] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2542.277437][T19760] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2542.285469][T19760] [ 2542.291764][T19760] memory: usage 307200kB, limit 307200kB, failcnt 23594 [ 2542.299167][T19760] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2542.306781][T19760] Memory cgroup stats for /syz3: [ 2542.307014][T19760] anon 90112 [ 2542.307014][T19760] file 733184 [ 2542.307014][T19760] kernel 313733120 [ 2542.307014][T19760] kernel_stack 65536 [ 2542.307014][T19760] pagetables 69632 [ 2542.307014][T19760] sec_pagetables 0 [ 2542.307014][T19760] percpu 5375488 [ 2542.307014][T19760] sock 0 [ 2542.307014][T19760] vmalloc 8192 [ 2542.307014][T19760] shmem 733184 [ 2542.307014][T19760] zswap 0 [ 2542.307014][T19760] zswapped 0 [ 2542.307014][T19760] file_mapped 667648 [ 2542.307014][T19760] file_dirty 0 [ 2542.307014][T19760] file_writeback 0 [ 2542.307014][T19760] swapcached 0 [ 2542.307014][T19760] anon_thp 0 [ 2542.307014][T19760] file_thp 0 [ 2542.307014][T19760] shmem_thp 0 [ 2542.307014][T19760] inactive_anon 0 [ 2542.307014][T19760] active_anon 823296 [ 2542.307014][T19760] inactive_file 0 [ 2542.307014][T19760] active_file 0 [ 2542.307014][T19760] unevictable 0 [ 2542.307014][T19760] slab_reclaimable 1215536 [ 2542.307014][T19760] slab_unreclaimable 306965568 [ 2542.307014][T19760] slab 308181104 [ 2542.307014][T19760] workingset_refault_anon 0 [ 2542.307014][T19760] workingset_refault_file 130 [ 2542.307014][T19760] workingset_activate_anon 0 [ 2542.307014][T19760] workingset_activate_file 0 [ 2542.307014][T19760] workingset_restore_anon 0 [ 2542.307014][T19760] workingset_restore_file 0 [ 2542.307014][T19760] workingset_nodereclaim 0 [ 2542.307014][T19760] pgscan 2951 [ 2542.307014][T19760] pgsteal 938 [ 2542.307014][T19760] pgscan_kswapd 0 [ 2542.307014][T19760] pgscan_direct 2951 [ 2542.307014][T19760] pgscan_khugepaged 0 [ 2542.307014][T19760] pgsteal_kswapd 0 [ 2542.307014][T19760] pgsteal_direct 938 [ 2542.307014][T19760] pgsteal_khugepaged 0 [ 2542.307014][T19760] pgfault 574130 [ 2542.307014][T19760] pgmajfault 0 [ 2542.307014][T19760] pgrefill 79949 [ 2542.307014][T19760] pgactivate 697 [ 2542.307014][T19760] pgdeactivate 0 [ 2542.307014][T19760] pglazyfree 0 [ 2542.307014][T19760] pglazyfreed 0 05:55:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x27010700}, 0x0) 05:55:56 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1400, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2542.307014][T19760] zswpin 0 [ 2542.307014][T19760] zswpout 0 [ 2542.336096][T19766] wireguard71: entered allmulticast mode 05:55:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x1f000000) 05:55:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2542.540107][T19760] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19760,uid=0 [ 2542.556308][T19760] Memory cgroup out of memory: Killed process 19760 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2542.716976][T19786] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2542.727587][T19786] CPU: 0 PID: 19786 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2542.738067][T19786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2542.748157][T19786] Call Trace: [ 2542.751628][T19786] [ 2542.754580][T19786] dump_stack_lvl+0x136/0x150 [ 2542.759304][T19786] dump_header+0x10a/0xd70 [ 2542.763764][T19786] oom_kill_process+0x25d/0x600 [ 2542.768660][T19786] out_of_memory+0x35c/0x1660 [ 2542.773383][T19786] ? find_held_lock+0x2d/0x110 [ 2542.778195][T19786] ? oom_killer_disable+0x2b0/0x2b0 [ 2542.783432][T19786] ? rcu_read_unlock+0x9/0x60 [ 2542.788170][T19786] ? find_held_lock+0x2d/0x110 [ 2542.793029][T19786] mem_cgroup_out_of_memory+0x206/0x270 [ 2542.798622][T19786] ? mem_cgroup_margin+0x130/0x130 [ 2542.803778][T19786] ? lock_downgrade+0x690/0x690 [ 2542.808676][T19786] try_charge_memcg+0xf9b/0x13b0 [ 2542.813654][T19786] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2542.819672][T19786] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2542.825445][T19786] ? lock_downgrade+0x690/0x690 [ 2542.830332][T19786] ? lock_downgrade+0x690/0x690 [ 2542.835240][T19786] obj_cgroup_charge+0x2af/0x5e0 [ 2542.840213][T19786] ? __anon_vma_prepare+0x2c6/0x580 [ 2542.845454][T19786] kmem_cache_alloc+0xb1/0x3b0 [ 2542.850272][T19786] __anon_vma_prepare+0x2c6/0x580 [ 2542.855334][T19786] ? __pmd_alloc+0x30c/0x5d0 [ 2542.859969][T19786] __handle_mm_fault+0x3a8f/0x3e60 [ 2542.865232][T19786] ? vm_iomap_memory+0x190/0x190 [ 2542.870411][T19786] handle_mm_fault+0x2ba/0x9c0 [ 2542.875238][T19786] do_user_addr_fault+0x47e/0x1240 [ 2542.880414][T19786] ? rcu_is_watching+0x12/0xb0 [ 2542.885222][T19786] exc_page_fault+0x98/0x170 [ 2542.889890][T19786] asm_exc_page_fault+0x26/0x30 [ 2542.894798][T19786] RIP: 0033:0x7f493322bde9 [ 2542.899241][T19786] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2542.918887][T19786] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2542.924986][T19786] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2542.933000][T19786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2542.941003][T19786] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2542.948998][T19786] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000026c596 [ 2542.956998][T19786] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2542.965012][T19786] 05:55:57 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:55:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2542.998648][T19786] memory: usage 307200kB, limit 307200kB, failcnt 12279 [ 2543.007609][T19786] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2543.023293][T19786] Memory cgroup stats for /syz2: [ 2543.023596][T19786] anon 135168 [ 2543.023596][T19786] file 684032 [ 2543.023596][T19786] kernel 313753600 [ 2543.023596][T19786] kernel_stack 65536 [ 2543.023596][T19786] pagetables 81920 05:55:57 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8526f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2543.023596][T19786] sec_pagetables 0 [ 2543.023596][T19786] percpu 5387328 [ 2543.023596][T19786] sock 0 [ 2543.023596][T19786] vmalloc 8192 [ 2543.023596][T19786] shmem 679936 [ 2543.023596][T19786] zswap 0 [ 2543.023596][T19786] zswapped 0 [ 2543.023596][T19786] file_mapped 630784 [ 2543.023596][T19786] file_dirty 4096 [ 2543.023596][T19786] file_writeback 0 [ 2543.023596][T19786] swapcached 0 [ 2543.023596][T19786] anon_thp 0 [ 2543.023596][T19786] file_thp 0 [ 2543.023596][T19786] shmem_thp 0 [ 2543.023596][T19786] inactive_anon 716800 05:55:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2543.023596][T19786] active_anon 98304 [ 2543.023596][T19786] inactive_file 0 [ 2543.023596][T19786] active_file 4096 [ 2543.023596][T19786] unevictable 0 [ 2543.023596][T19786] slab_reclaimable 512264 [ 2543.023596][T19786] slab_unreclaimable 307665512 [ 2543.023596][T19786] slab 308177776 [ 2543.023596][T19786] workingset_refault_anon 0 [ 2543.023596][T19786] workingset_refault_file 2 [ 2543.023596][T19786] workingset_activate_anon 0 [ 2543.023596][T19786] workingset_activate_file 0 [ 2543.023596][T19786] workingset_restore_anon 0 [ 2543.023596][T19786] workingset_restore_file 1 [ 2543.023596][T19786] workingset_nodereclaim 0 [ 2543.023596][T19786] pgscan 1675 [ 2543.023596][T19786] pgsteal 130 [ 2543.023596][T19786] pgscan_kswapd 109 [ 2543.023596][T19786] pgscan_direct 1566 [ 2543.023596][T19786] pgscan_khugepaged 0 [ 2543.023596][T19786] pgsteal_kswapd 108 [ 2543.023596][T19786] pgsteal_direct 22 [ 2543.023596][T19786] pgsteal_khugepaged 0 [ 2543.023596][T19786] pgfault 1008140 [ 2543.023596][T19786] pgmajfault 0 [ 2543.023596][T19786] pgrefill 10047 [ 2543.023596][T19786] pgactivate 1522 [ 2543.023596][T19786] pgdeactivate 0 [ 2543.023596][T19786] pglazyfree 0 [ 2543.023596][T19786] pglazyfreed 0 [ 2543.023596][T19786] zswpin 0 [ 2543.023596][T19786] zswpout 0 [ 2543.221845][T19786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19786,uid=0 [ 2543.237862][T19804] wireguard71: entered allmulticast mode [ 2543.238430][T19786] Memory cgroup out of memory: Killed process 19786 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2543.263931][T19781] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2543.311796][T19781] CPU: 0 PID: 19781 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2543.322305][T19781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2543.332412][T19781] Call Trace: [ 2543.335737][T19781] [ 2543.338711][T19781] dump_stack_lvl+0x136/0x150 [ 2543.343463][T19781] dump_header+0x10a/0xd70 [ 2543.347959][T19781] oom_kill_process+0x25d/0x600 [ 2543.352883][T19781] out_of_memory+0x35c/0x1660 05:55:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x27020000}, 0x0) [ 2543.357643][T19781] ? oom_killer_disable+0x2b0/0x2b0 [ 2543.362914][T19781] ? rcu_read_unlock+0x9/0x60 [ 2543.367662][T19781] ? find_held_lock+0x2d/0x110 [ 2543.372509][T19781] mem_cgroup_out_of_memory+0x206/0x270 [ 2543.378155][T19781] ? mem_cgroup_margin+0x130/0x130 [ 2543.383342][T19781] ? lock_downgrade+0x690/0x690 [ 2543.388287][T19781] try_charge_memcg+0xf9b/0x13b0 [ 2543.393311][T19781] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2543.399362][T19781] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2543.405171][T19781] ? lock_downgrade+0x690/0x690 [ 2543.410102][T19781] ? lock_downgrade+0x690/0x690 [ 2543.415026][T19781] ? rcu_read_unlock+0x9/0x60 [ 2543.419886][T19781] obj_cgroup_charge+0x2af/0x5e0 [ 2543.424899][T19781] __kmem_cache_alloc_node+0xa3/0x320 [ 2543.430353][T19781] ? copy_semundo+0x18b/0x300 [ 2543.435103][T19781] kmalloc_trace+0x26/0xe0 [ 2543.439596][T19781] copy_semundo+0x18b/0x300 [ 2543.444176][T19781] copy_process+0x24a2/0x7580 [ 2543.448924][T19781] ? __lock_acquire+0xbc5/0x5d40 [ 2543.453944][T19781] ? __cleanup_sighand+0xb0/0xb0 [ 2543.458955][T19781] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2543.465009][T19781] ? psi_memstall_leave+0x174/0x250 [ 2543.470284][T19781] ? lock_downgrade+0x690/0x690 [ 2543.475199][T19781] kernel_clone+0xeb/0x890 [ 2543.479693][T19781] ? create_io_thread+0xf0/0xf0 [ 2543.484613][T19781] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2543.490940][T19781] ? lock_downgrade+0x690/0x690 [ 2543.495880][T19781] __do_sys_clone+0xba/0x100 [ 2543.500549][T19781] ? kernel_clone+0x890/0x890 [ 2543.505326][T19781] ? syscall_enter_from_user_mode+0x26/0x80 [ 2543.511488][T19781] do_syscall_64+0x39/0xb0 [ 2543.515968][T19781] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2543.521926][T19781] RIP: 0033:0x7ffae188d591 [ 2543.526406][T19781] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2543.546052][T19781] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2543.554795][T19781] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2543.562839][T19781] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2543.570867][T19781] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2543.578892][T19781] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2543.586888][T19781] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2543.594934][T19781] [ 2543.610301][T19781] memory: usage 307188kB, limit 307200kB, failcnt 23672 [ 2543.622848][T19781] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2543.630643][T19781] Memory cgroup stats for /syz3: [ 2543.630923][T19781] anon 90112 [ 2543.630923][T19781] file 733184 [ 2543.630923][T19781] kernel 313733120 [ 2543.630923][T19781] kernel_stack 65536 [ 2543.630923][T19781] pagetables 69632 [ 2543.630923][T19781] sec_pagetables 0 [ 2543.630923][T19781] percpu 5375488 [ 2543.630923][T19781] sock 0 05:55:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x4, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2543.630923][T19781] vmalloc 8192 [ 2543.630923][T19781] shmem 733184 [ 2543.630923][T19781] zswap 0 [ 2543.630923][T19781] zswapped 0 [ 2543.630923][T19781] file_mapped 667648 [ 2543.630923][T19781] file_dirty 0 [ 2543.630923][T19781] file_writeback 0 [ 2543.630923][T19781] swapcached 0 [ 2543.630923][T19781] anon_thp 0 [ 2543.630923][T19781] file_thp 0 [ 2543.630923][T19781] shmem_thp 0 [ 2543.630923][T19781] inactive_anon 0 [ 2543.630923][T19781] active_anon 823296 [ 2543.630923][T19781] inactive_file 0 [ 2543.630923][T19781] active_file 0 [ 2543.630923][T19781] unevictable 0 [ 2543.630923][T19781] slab_reclaimable 1215536 [ 2543.630923][T19781] slab_unreclaimable 306963192 [ 2543.630923][T19781] slab 308178728 [ 2543.630923][T19781] workingset_refault_anon 0 [ 2543.630923][T19781] workingset_refault_file 130 [ 2543.630923][T19781] workingset_activate_anon 0 [ 2543.630923][T19781] workingset_activate_file 0 [ 2543.630923][T19781] workingset_restore_anon 0 [ 2543.630923][T19781] workingset_restore_file 0 [ 2543.630923][T19781] workingset_nodereclaim 0 [ 2543.630923][T19781] pgscan 2951 [ 2543.630923][T19781] pgsteal 938 [ 2543.630923][T19781] pgscan_kswapd 0 [ 2543.630923][T19781] pgscan_direct 2951 [ 2543.630923][T19781] pgscan_khugepaged 0 [ 2543.630923][T19781] pgsteal_kswapd 0 [ 2543.630923][T19781] pgsteal_direct 938 [ 2543.630923][T19781] pgsteal_khugepaged 0 [ 2543.630923][T19781] pgfault 574167 [ 2543.630923][T19781] pgmajfault 0 [ 2543.630923][T19781] pgrefill 79949 [ 2543.630923][T19781] pgactivate 697 [ 2543.630923][T19781] pgdeactivate 0 [ 2543.630923][T19781] pglazyfree 0 [ 2543.630923][T19781] pglazyfreed 0 [ 2543.630923][T19781] zswpin 0 05:55:57 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1401, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2543.630923][T19781] zswpout 0 05:55:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x20000000) 05:55:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x5, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2543.838008][T19781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19781,uid=0 [ 2543.862649][T19781] Memory cgroup out of memory: Killed process 19781 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2543.952817][T19814] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2543.963193][T19814] CPU: 1 PID: 19814 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2543.973677][T19814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2543.983786][T19814] Call Trace: [ 2543.987103][T19814] [ 2543.990078][T19814] dump_stack_lvl+0x136/0x150 [ 2543.994832][T19814] dump_header+0x10a/0xd70 [ 2543.999289][T19814] oom_kill_process+0x25d/0x600 [ 2544.004182][T19814] out_of_memory+0x35c/0x1660 [ 2544.008900][T19814] ? find_held_lock+0x2d/0x110 [ 2544.013706][T19814] ? oom_killer_disable+0x2b0/0x2b0 [ 2544.019057][T19814] ? rcu_read_unlock+0x9/0x60 [ 2544.023789][T19814] ? find_held_lock+0x2d/0x110 [ 2544.028624][T19814] mem_cgroup_out_of_memory+0x206/0x270 [ 2544.034212][T19814] ? mem_cgroup_margin+0x130/0x130 [ 2544.039465][T19814] ? lock_downgrade+0x690/0x690 [ 2544.044388][T19814] try_charge_memcg+0xf9b/0x13b0 [ 2544.049363][T19814] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2544.055391][T19814] ? rcu_read_unlock+0x9/0x60 [ 2544.060106][T19814] ? lock_downgrade+0x690/0x690 [ 2544.064998][T19814] charge_memcg+0x90/0x3b0 [ 2544.069446][T19814] __mem_cgroup_charge+0x2b/0x90 [ 2544.074441][T19814] do_wp_page+0x8eb/0x3530 [ 2544.079019][T19814] ? lock_release+0x670/0x670 [ 2544.083761][T19814] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2544.089165][T19814] ? do_raw_spin_lock+0x124/0x2b0 [ 2544.094218][T19814] ? spin_bug+0x1c0/0x1c0 [ 2544.098571][T19814] ? lock_downgrade+0x690/0x690 [ 2544.103455][T19814] __handle_mm_fault+0x19a1/0x3e60 [ 2544.108628][T19814] ? vm_iomap_memory+0x190/0x190 [ 2544.113623][T19814] handle_mm_fault+0x2ba/0x9c0 [ 2544.118441][T19814] do_user_addr_fault+0x47e/0x1240 [ 2544.123634][T19814] ? rcu_is_watching+0x12/0xb0 [ 2544.128501][T19814] exc_page_fault+0x98/0x170 [ 2544.133241][T19814] asm_exc_page_fault+0x26/0x30 [ 2544.138212][T19814] RIP: 0033:0x7f4933239610 [ 2544.142661][T19814] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2544.162319][T19814] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2544.168462][T19814] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2544.176504][T19814] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2544.184535][T19814] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2544.192555][T19814] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2544.200930][T19814] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2544.208946][T19814] ? apparmor_socket_create+0xb7/0x670 [ 2544.214552][T19814] [ 2544.230150][T19814] memory: usage 307188kB, limit 307200kB, failcnt 12395 [ 2544.237174][T19814] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:55:58 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85270}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2544.252343][T19814] Memory cgroup stats for /syz2: [ 2544.252630][T19814] anon 122880 [ 2544.252630][T19814] file 688128 [ 2544.252630][T19814] kernel 313749504 [ 2544.252630][T19814] kernel_stack 65536 [ 2544.252630][T19814] pagetables 73728 [ 2544.252630][T19814] sec_pagetables 0 [ 2544.252630][T19814] percpu 5387328 [ 2544.252630][T19814] sock 0 [ 2544.252630][T19814] vmalloc 8192 [ 2544.252630][T19814] shmem 679936 [ 2544.252630][T19814] zswap 0 [ 2544.252630][T19814] zswapped 0 [ 2544.252630][T19814] file_mapped 630784 [ 2544.252630][T19814] file_dirty 8192 [ 2544.252630][T19814] file_writeback 0 [ 2544.252630][T19814] swapcached 0 [ 2544.252630][T19814] anon_thp 0 [ 2544.252630][T19814] file_thp 0 [ 2544.252630][T19814] shmem_thp 0 [ 2544.252630][T19814] inactive_anon 45056 [ 2544.252630][T19814] active_anon 757760 [ 2544.252630][T19814] inactive_file 4096 [ 2544.252630][T19814] active_file 4096 [ 2544.252630][T19814] unevictable 0 [ 2544.252630][T19814] slab_reclaimable 512504 [ 2544.252630][T19814] slab_unreclaimable 307665696 [ 2544.252630][T19814] slab 308178200 [ 2544.252630][T19814] workingset_refault_anon 0 [ 2544.252630][T19814] workingset_refault_file 2 [ 2544.252630][T19814] workingset_activate_anon 0 [ 2544.252630][T19814] workingset_activate_file 0 [ 2544.252630][T19814] workingset_restore_anon 0 [ 2544.252630][T19814] workingset_restore_file 1 [ 2544.252630][T19814] workingset_nodereclaim 0 [ 2544.252630][T19814] pgscan 1707 [ 2544.252630][T19814] pgsteal 130 [ 2544.252630][T19814] pgscan_kswapd 109 [ 2544.252630][T19814] pgscan_direct 1598 [ 2544.252630][T19814] pgscan_khugepaged 0 [ 2544.252630][T19814] pgsteal_kswapd 108 [ 2544.252630][T19814] pgsteal_direct 22 [ 2544.252630][T19814] pgsteal_khugepaged 0 [ 2544.252630][T19814] pgfault 1008195 [ 2544.252630][T19814] pgmajfault 0 [ 2544.252630][T19814] pgrefill 10128 [ 2544.252630][T19814] pgactivate 1554 [ 2544.252630][T19814] pgdeactivate 0 [ 2544.252630][T19814] pglazyfree 0 [ 2544.252630][T19814] pglazyfreed 0 [ 2544.252630][T19814] zswpin 0 [ 2544.252630][T19814] zswpout 0 05:55:58 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfa00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:55:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x28010700}, 0x0) [ 2544.448286][T19814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19814,uid=0 [ 2544.465805][T19814] Memory cgroup out of memory: Killed process 19814 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2544.544731][T19826] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2544.564402][T19839] wireguard71: entered allmulticast mode [ 2544.590637][T19826] CPU: 1 PID: 19826 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2544.601149][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2544.611260][T19826] Call Trace: [ 2544.614585][T19826] [ 2544.617566][T19826] dump_stack_lvl+0x136/0x150 [ 2544.622328][T19826] dump_header+0x10a/0xd70 [ 2544.626818][T19826] oom_kill_process+0x25d/0x600 [ 2544.631758][T19826] out_of_memory+0x35c/0x1660 [ 2544.636500][T19826] ? find_held_lock+0x2d/0x110 [ 2544.641358][T19826] ? oom_killer_disable+0x2b0/0x2b0 [ 2544.646626][T19826] ? rcu_read_unlock+0x9/0x60 [ 2544.651383][T19826] ? find_held_lock+0x2d/0x110 [ 2544.656230][T19826] mem_cgroup_out_of_memory+0x206/0x270 [ 2544.661851][T19826] ? mem_cgroup_margin+0x130/0x130 [ 2544.667025][T19826] ? lock_downgrade+0x690/0x690 [ 2544.671945][T19826] try_charge_memcg+0xf9b/0x13b0 [ 2544.677029][T19826] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2544.683056][T19826] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2544.690688][T19826] ? lock_downgrade+0x690/0x690 [ 2544.695592][T19826] ? lock_downgrade+0x690/0x690 [ 2544.700497][T19826] ? rcu_read_unlock+0x9/0x60 [ 2544.705258][T19826] obj_cgroup_charge+0x2af/0x5e0 [ 2544.710281][T19826] __kmem_cache_alloc_node+0xa3/0x320 [ 2544.715734][T19826] ? copy_semundo+0x18b/0x300 [ 2544.720480][T19826] kmalloc_trace+0x26/0xe0 [ 2544.724960][T19826] copy_semundo+0x18b/0x300 [ 2544.729523][T19826] copy_process+0x24a2/0x7580 [ 2544.734266][T19826] ? __lock_acquire+0xbc5/0x5d40 05:55:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x6, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2544.739267][T19826] ? __cleanup_sighand+0xb0/0xb0 [ 2544.744260][T19826] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2544.750294][T19826] ? psi_memstall_leave+0x174/0x250 [ 2544.755554][T19826] ? lock_downgrade+0x690/0x690 [ 2544.760486][T19826] kernel_clone+0xeb/0x890 [ 2544.764973][T19826] ? create_io_thread+0xf0/0xf0 [ 2544.769887][T19826] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2544.776199][T19826] ? lock_downgrade+0x690/0x690 [ 2544.781117][T19826] __do_sys_clone+0xba/0x100 [ 2544.785761][T19826] ? kernel_clone+0x890/0x890 [ 2544.790523][T19826] ? syscall_enter_from_user_mode+0x26/0x80 [ 2544.796506][T19826] do_syscall_64+0x39/0xb0 [ 2544.800982][T19826] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2544.806938][T19826] RIP: 0033:0x7ffae188d591 [ 2544.811444][T19826] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2544.831113][T19826] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2544.839587][T19826] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2544.847779][T19826] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2544.855805][T19826] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2544.863913][T19826] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2544.871928][T19826] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2544.880081][T19826] [ 2544.890295][T19826] memory: usage 307184kB, limit 307200kB, failcnt 23758 [ 2544.910272][T19826] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2544.935750][T19826] Memory cgroup stats for /syz3: [ 2544.936031][T19826] anon 90112 [ 2544.936031][T19826] file 733184 [ 2544.936031][T19826] kernel 313733120 [ 2544.936031][T19826] kernel_stack 65536 [ 2544.936031][T19826] pagetables 69632 [ 2544.936031][T19826] sec_pagetables 0 [ 2544.936031][T19826] percpu 5375488 [ 2544.936031][T19826] sock 0 [ 2544.936031][T19826] vmalloc 8192 [ 2544.936031][T19826] shmem 733184 [ 2544.936031][T19826] zswap 0 [ 2544.936031][T19826] zswapped 0 [ 2544.936031][T19826] file_mapped 667648 [ 2544.936031][T19826] file_dirty 0 [ 2544.936031][T19826] file_writeback 0 [ 2544.936031][T19826] swapcached 0 [ 2544.936031][T19826] anon_thp 0 [ 2544.936031][T19826] file_thp 0 [ 2544.936031][T19826] shmem_thp 0 [ 2544.936031][T19826] inactive_anon 0 [ 2544.936031][T19826] active_anon 823296 [ 2544.936031][T19826] inactive_file 0 [ 2544.936031][T19826] active_file 0 [ 2544.936031][T19826] unevictable 0 [ 2544.936031][T19826] slab_reclaimable 1215536 [ 2544.936031][T19826] slab_unreclaimable 306962888 [ 2544.936031][T19826] slab 308178424 [ 2544.936031][T19826] workingset_refault_anon 0 [ 2544.936031][T19826] workingset_refault_file 130 [ 2544.936031][T19826] workingset_activate_anon 0 [ 2544.936031][T19826] workingset_activate_file 0 [ 2544.936031][T19826] workingset_restore_anon 0 [ 2544.936031][T19826] workingset_restore_file 0 [ 2544.936031][T19826] workingset_nodereclaim 0 [ 2544.936031][T19826] pgscan 2951 [ 2544.936031][T19826] pgsteal 938 [ 2544.936031][T19826] pgscan_kswapd 0 [ 2544.936031][T19826] pgscan_direct 2951 [ 2544.936031][T19826] pgscan_khugepaged 0 [ 2544.936031][T19826] pgsteal_kswapd 0 [ 2544.936031][T19826] pgsteal_direct 938 [ 2544.936031][T19826] pgsteal_khugepaged 0 [ 2544.936031][T19826] pgfault 574204 [ 2544.936031][T19826] pgmajfault 0 [ 2544.936031][T19826] pgrefill 79949 [ 2544.936031][T19826] pgactivate 697 [ 2544.936031][T19826] pgdeactivate 0 [ 2544.936031][T19826] pglazyfree 0 [ 2544.936031][T19826] pglazyfreed 0 [ 2544.936031][T19826] zswpin 0 [ 2544.936031][T19826] zswpout 0 [ 2544.949103][T19843] wireguard53: entered allmulticast mode 05:55:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x22030000) [ 2545.160499][T19826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19826,uid=0 [ 2545.177614][T19826] Memory cgroup out of memory: Killed process 19826 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:55:59 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x181e, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2545.271805][T19845] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2545.374556][T19845] CPU: 1 PID: 19845 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2545.385154][T19845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2545.395255][T19845] Call Trace: [ 2545.398572][T19845] [ 2545.401539][T19845] dump_stack_lvl+0x136/0x150 [ 2545.406290][T19845] dump_header+0x10a/0xd70 [ 2545.410772][T19845] oom_kill_process+0x25d/0x600 [ 2545.415771][T19845] out_of_memory+0x35c/0x1660 05:55:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2545.420512][T19845] ? find_held_lock+0x2d/0x110 [ 2545.425345][T19845] ? oom_killer_disable+0x2b0/0x2b0 [ 2545.430604][T19845] ? rcu_read_unlock+0x9/0x60 [ 2545.435355][T19845] ? find_held_lock+0x2d/0x110 [ 2545.440219][T19845] mem_cgroup_out_of_memory+0x206/0x270 [ 2545.445866][T19845] ? mem_cgroup_margin+0x130/0x130 [ 2545.451057][T19845] ? lock_downgrade+0x690/0x690 [ 2545.455990][T19845] try_charge_memcg+0xf9b/0x13b0 [ 2545.460996][T19845] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2545.467044][T19845] ? rcu_read_unlock+0x9/0x60 [ 2545.471799][T19845] ? lock_downgrade+0x690/0x690 [ 2545.476728][T19845] charge_memcg+0x90/0x3b0 [ 2545.481205][T19845] __mem_cgroup_charge+0x2b/0x90 [ 2545.486202][T19845] do_wp_page+0x8eb/0x3530 [ 2545.490689][T19845] ? lock_release+0x670/0x670 [ 2545.495414][T19845] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2545.500846][T19845] ? do_raw_spin_lock+0x124/0x2b0 [ 2545.505939][T19845] ? spin_bug+0x1c0/0x1c0 [ 2545.510327][T19845] ? lock_downgrade+0x690/0x690 [ 2545.515297][T19845] __handle_mm_fault+0x19a1/0x3e60 [ 2545.520488][T19845] ? vm_iomap_memory+0x190/0x190 [ 2545.525521][T19845] handle_mm_fault+0x2ba/0x9c0 [ 2545.530375][T19845] do_user_addr_fault+0x47e/0x1240 [ 2545.535557][T19845] ? rcu_is_watching+0x12/0xb0 [ 2545.540388][T19845] exc_page_fault+0x98/0x170 [ 2545.545054][T19845] asm_exc_page_fault+0x26/0x30 [ 2545.549961][T19845] RIP: 0033:0x7f4933239610 [ 2545.554420][T19845] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2545.574078][T19845] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2545.580197][T19845] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2545.588333][T19845] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2545.596361][T19845] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2545.604414][T19845] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2545.612425][T19845] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2545.620437][T19845] ? apparmor_socket_create+0xb7/0x670 [ 2545.625946][T19845] [ 2545.649117][T19845] memory: usage 307188kB, limit 307200kB, failcnt 12506 [ 2545.661797][T19845] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2545.668926][T19845] Memory cgroup stats for /syz2: [ 2545.669208][T19845] anon 122880 [ 2545.669208][T19845] file 688128 [ 2545.669208][T19845] kernel 313749504 [ 2545.669208][T19845] kernel_stack 65536 [ 2545.669208][T19845] pagetables 73728 [ 2545.669208][T19845] sec_pagetables 0 [ 2545.669208][T19845] percpu 5387328 [ 2545.669208][T19845] sock 0 [ 2545.669208][T19845] vmalloc 8192 [ 2545.669208][T19845] shmem 679936 [ 2545.669208][T19845] zswap 0 [ 2545.669208][T19845] zswapped 0 [ 2545.669208][T19845] file_mapped 630784 [ 2545.669208][T19845] file_dirty 8192 [ 2545.669208][T19845] file_writeback 0 [ 2545.669208][T19845] swapcached 0 [ 2545.669208][T19845] anon_thp 0 [ 2545.669208][T19845] file_thp 0 [ 2545.669208][T19845] shmem_thp 0 [ 2545.669208][T19845] inactive_anon 753664 [ 2545.669208][T19845] active_anon 49152 [ 2545.669208][T19845] inactive_file 0 [ 2545.669208][T19845] active_file 8192 [ 2545.669208][T19845] unevictable 0 [ 2545.669208][T19845] slab_reclaimable 512504 [ 2545.669208][T19845] slab_unreclaimable 307665392 [ 2545.669208][T19845] slab 308177896 [ 2545.669208][T19845] workingset_refault_anon 0 [ 2545.669208][T19845] workingset_refault_file 2 [ 2545.669208][T19845] workingset_activate_anon 0 [ 2545.669208][T19845] workingset_activate_file 0 [ 2545.669208][T19845] workingset_restore_anon 0 [ 2545.669208][T19845] workingset_restore_file 1 [ 2545.669208][T19845] workingset_nodereclaim 0 [ 2545.669208][T19845] pgscan 1707 [ 2545.669208][T19845] pgsteal 130 [ 2545.669208][T19845] pgscan_kswapd 109 [ 2545.669208][T19845] pgscan_direct 1598 [ 2545.669208][T19845] pgscan_khugepaged 0 [ 2545.669208][T19845] pgsteal_kswapd 108 [ 2545.669208][T19845] pgsteal_direct 22 [ 2545.669208][T19845] pgsteal_khugepaged 0 [ 2545.669208][T19845] pgfault 1008247 [ 2545.669208][T19845] pgmajfault 0 [ 2545.669208][T19845] pgrefill 10278 [ 2545.669208][T19845] pgactivate 1554 [ 2545.669208][T19845] pgdeactivate 0 [ 2545.669208][T19845] pglazyfree 0 [ 2545.669208][T19845] pglazyfreed 0 05:55:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x8, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:55:59 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85271}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2545.669208][T19845] zswpin 0 [ 2545.669208][T19845] zswpout 0 [ 2545.857706][T19845] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19845,uid=0 05:56:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x9, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:00 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfa01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2545.912022][T19845] Memory cgroup out of memory: Killed process 19845 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2545.953348][T19875] wireguard71: entered allmulticast mode 05:56:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x28020000}, 0x0) [ 2545.998082][T19862] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2546.010187][T19862] CPU: 1 PID: 19862 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2546.020704][T19862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2546.030803][T19862] Call Trace: [ 2546.034227][T19862] [ 2546.037209][T19862] dump_stack_lvl+0x136/0x150 [ 2546.041971][T19862] dump_header+0x10a/0xd70 [ 2546.046465][T19862] oom_kill_process+0x25d/0x600 [ 2546.051394][T19862] out_of_memory+0x35c/0x1660 [ 2546.056157][T19862] ? find_held_lock+0x2d/0x110 [ 2546.061021][T19862] ? oom_killer_disable+0x2b0/0x2b0 [ 2546.066285][T19862] ? rcu_read_unlock+0x9/0x60 [ 2546.071028][T19862] ? find_held_lock+0x2d/0x110 [ 2546.075888][T19862] mem_cgroup_out_of_memory+0x206/0x270 [ 2546.081519][T19862] ? mem_cgroup_margin+0x130/0x130 [ 2546.086710][T19862] ? lock_downgrade+0x690/0x690 [ 2546.091648][T19862] try_charge_memcg+0xf9b/0x13b0 05:56:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xa, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2546.096653][T19862] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2546.102726][T19862] ? rcu_read_unlock+0x9/0x60 [ 2546.107471][T19862] ? lock_downgrade+0x690/0x690 [ 2546.112395][T19862] charge_memcg+0x90/0x3b0 [ 2546.116878][T19862] __mem_cgroup_charge+0x2b/0x90 [ 2546.121883][T19862] do_wp_page+0x8eb/0x3530 [ 2546.126391][T19862] ? lock_release+0x670/0x670 [ 2546.131130][T19862] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2546.136577][T19862] ? do_raw_spin_lock+0x124/0x2b0 [ 2546.141670][T19862] ? spin_bug+0x1c0/0x1c0 [ 2546.146062][T19862] ? lock_downgrade+0x690/0x690 [ 2546.150982][T19862] __handle_mm_fault+0x19a1/0x3e60 [ 2546.156201][T19862] ? vm_iomap_memory+0x190/0x190 [ 2546.161238][T19862] handle_mm_fault+0x2ba/0x9c0 [ 2546.166071][T19862] do_user_addr_fault+0x47e/0x1240 [ 2546.171252][T19862] ? rcu_is_watching+0x12/0xb0 [ 2546.176094][T19862] exc_page_fault+0x98/0x170 [ 2546.180755][T19862] asm_exc_page_fault+0x26/0x30 [ 2546.185731][T19862] RIP: 0033:0x7ffae1839610 [ 2546.190167][T19862] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2546.209829][T19862] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2546.216041][T19862] RAX: 00000000475432eb RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2546.224241][T19862] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 0000000000000022 [ 2546.232285][T19862] RBP: 00000000475432eb R08: 00000000000012eb R09: 00000000475432ef [ 2546.240296][T19862] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2546.248302][T19862] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87fd7b81 [ 2546.256308][T19862] ? __x64_sys_socket+0x11/0xb0 [ 2546.261242][T19862] [ 2546.273599][T19862] memory: usage 307196kB, limit 307200kB, failcnt 23855 [ 2546.282165][T19862] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2546.289123][T19862] Memory cgroup stats for /syz3: [ 2546.289412][T19862] anon 102400 [ 2546.289412][T19862] file 733184 [ 2546.289412][T19862] kernel 313733120 [ 2546.289412][T19862] kernel_stack 65536 [ 2546.289412][T19862] pagetables 69632 [ 2546.289412][T19862] sec_pagetables 0 [ 2546.289412][T19862] percpu 5375488 [ 2546.289412][T19862] sock 0 [ 2546.289412][T19862] vmalloc 8192 [ 2546.289412][T19862] shmem 733184 [ 2546.289412][T19862] zswap 0 [ 2546.289412][T19862] zswapped 0 [ 2546.289412][T19862] file_mapped 667648 [ 2546.289412][T19862] file_dirty 0 [ 2546.289412][T19862] file_writeback 0 [ 2546.289412][T19862] swapcached 0 [ 2546.289412][T19862] anon_thp 0 [ 2546.289412][T19862] file_thp 0 [ 2546.289412][T19862] shmem_thp 0 [ 2546.289412][T19862] inactive_anon 0 [ 2546.289412][T19862] active_anon 835584 [ 2546.289412][T19862] inactive_file 0 [ 2546.289412][T19862] active_file 0 [ 2546.289412][T19862] unevictable 0 [ 2546.289412][T19862] slab_reclaimable 1217464 [ 2546.289412][T19862] slab_unreclaimable 306964000 [ 2546.289412][T19862] slab 308181464 [ 2546.289412][T19862] workingset_refault_anon 0 [ 2546.289412][T19862] workingset_refault_file 130 [ 2546.289412][T19862] workingset_activate_anon 0 [ 2546.289412][T19862] workingset_activate_file 0 [ 2546.289412][T19862] workingset_restore_anon 0 [ 2546.289412][T19862] workingset_restore_file 0 [ 2546.289412][T19862] workingset_nodereclaim 0 [ 2546.289412][T19862] pgscan 2951 [ 2546.289412][T19862] pgsteal 938 [ 2546.289412][T19862] pgscan_kswapd 0 [ 2546.289412][T19862] pgscan_direct 2951 [ 2546.289412][T19862] pgscan_khugepaged 0 [ 2546.289412][T19862] pgsteal_kswapd 0 [ 2546.289412][T19862] pgsteal_direct 938 [ 2546.289412][T19862] pgsteal_khugepaged 0 [ 2546.289412][T19862] pgfault 574246 [ 2546.289412][T19862] pgmajfault 0 [ 2546.289412][T19862] pgrefill 79949 [ 2546.289412][T19862] pgactivate 697 [ 2546.289412][T19862] pgdeactivate 0 [ 2546.289412][T19862] pglazyfree 0 [ 2546.289412][T19862] pglazyfreed 0 [ 2546.289412][T19862] zswpin 0 [ 2546.289412][T19862] zswpout 0 [ 2546.481275][T19862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19862,uid=0 05:56:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x24000000) [ 2546.497081][T19862] Memory cgroup out of memory: Killed process 19862 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2546.530319][T19882] wireguard53: entered allmulticast mode 05:56:00 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1e18, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2546.643358][T19887] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2546.665738][T19887] CPU: 0 PID: 19887 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2546.676239][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2546.686375][T19887] Call Trace: [ 2546.689681][T19887] [ 2546.692664][T19887] dump_stack_lvl+0x136/0x150 [ 2546.697394][T19887] dump_header+0x10a/0xd70 [ 2546.701863][T19887] oom_kill_process+0x25d/0x600 [ 2546.706764][T19887] out_of_memory+0x35c/0x1660 [ 2546.711486][T19887] ? find_held_lock+0x2d/0x110 [ 2546.716297][T19887] ? oom_killer_disable+0x2b0/0x2b0 [ 2546.721545][T19887] ? rcu_read_unlock+0x9/0x60 [ 2546.726260][T19887] ? find_held_lock+0x2d/0x110 [ 2546.731076][T19887] mem_cgroup_out_of_memory+0x206/0x270 [ 2546.736674][T19887] ? mem_cgroup_margin+0x130/0x130 [ 2546.741825][T19887] ? lock_downgrade+0x690/0x690 [ 2546.746718][T19887] try_charge_memcg+0xf9b/0x13b0 [ 2546.751692][T19887] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2546.757703][T19887] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2546.763468][T19887] ? lock_downgrade+0x690/0x690 [ 2546.768354][T19887] ? lock_downgrade+0x690/0x690 [ 2546.773275][T19887] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2546.778862][T19887] __alloc_pages+0x1f3/0x4a0 [ 2546.783515][T19887] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2546.790334][T19887] ? __lock_acquire+0xbc5/0x5d40 [ 2546.795324][T19887] alloc_pages+0x1aa/0x270 [ 2546.799771][T19887] __pmd_alloc+0x3f/0x5d0 [ 2546.804143][T19887] __handle_mm_fault+0x932/0x3e60 [ 2546.809213][T19887] ? vm_iomap_memory+0x190/0x190 [ 2546.814227][T19887] handle_mm_fault+0x2ba/0x9c0 [ 2546.819043][T19887] do_user_addr_fault+0x47e/0x1240 [ 2546.824195][T19887] ? rcu_is_watching+0x12/0xb0 [ 2546.829003][T19887] exc_page_fault+0x98/0x170 [ 2546.833642][T19887] asm_exc_page_fault+0x26/0x30 [ 2546.838609][T19887] RIP: 0033:0x7f493322bde9 [ 2546.843048][T19887] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2546.862781][T19887] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2546.868876][T19887] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2546.876881][T19887] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2546.884875][T19887] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 05:56:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xc, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2546.892959][T19887] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000026d4e1 [ 2546.901052][T19887] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2546.909071][T19887] [ 2546.971045][T19887] memory: usage 307200kB, limit 307200kB, failcnt 12611 [ 2546.987351][T19887] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2546.998377][T19887] Memory cgroup stats for /syz2: [ 2546.998786][T19887] anon 135168 [ 2546.998786][T19887] file 688128 [ 2546.998786][T19887] kernel 313749504 [ 2546.998786][T19887] kernel_stack 65536 [ 2546.998786][T19887] pagetables 73728 [ 2546.998786][T19887] sec_pagetables 0 [ 2546.998786][T19887] percpu 5387328 [ 2546.998786][T19887] sock 0 [ 2546.998786][T19887] vmalloc 8192 [ 2546.998786][T19887] shmem 679936 [ 2546.998786][T19887] zswap 0 [ 2546.998786][T19887] zswapped 0 [ 2546.998786][T19887] file_mapped 630784 [ 2546.998786][T19887] file_dirty 8192 [ 2546.998786][T19887] file_writeback 0 [ 2546.998786][T19887] swapcached 0 [ 2546.998786][T19887] anon_thp 0 [ 2546.998786][T19887] file_thp 0 [ 2546.998786][T19887] shmem_thp 0 [ 2546.998786][T19887] inactive_anon 57344 [ 2546.998786][T19887] active_anon 757760 [ 2546.998786][T19887] inactive_file 0 [ 2546.998786][T19887] active_file 8192 [ 2546.998786][T19887] unevictable 0 [ 2546.998786][T19887] slab_reclaimable 512504 [ 2546.998786][T19887] slab_unreclaimable 307665392 [ 2546.998786][T19887] slab 308177896 [ 2546.998786][T19887] workingset_refault_anon 0 [ 2546.998786][T19887] workingset_refault_file 2 [ 2546.998786][T19887] workingset_activate_anon 0 [ 2546.998786][T19887] workingset_activate_file 0 [ 2546.998786][T19887] workingset_restore_anon 0 [ 2546.998786][T19887] workingset_restore_file 1 [ 2546.998786][T19887] workingset_nodereclaim 0 [ 2546.998786][T19887] pgscan 1707 [ 2546.998786][T19887] pgsteal 130 [ 2546.998786][T19887] pgscan_kswapd 109 [ 2546.998786][T19887] pgscan_direct 1598 [ 2546.998786][T19887] pgscan_khugepaged 0 [ 2546.998786][T19887] pgsteal_kswapd 108 [ 2546.998786][T19887] pgsteal_direct 22 [ 2546.998786][T19887] pgsteal_khugepaged 0 [ 2546.998786][T19887] pgfault 1008308 [ 2546.998786][T19887] pgmajfault 0 [ 2546.998786][T19887] pgrefill 10416 [ 2546.998786][T19887] pgactivate 1554 05:56:01 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfa02}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2546.998786][T19887] pgdeactivate 0 [ 2546.998786][T19887] pglazyfree 0 [ 2546.998786][T19887] pglazyfreed 0 [ 2546.998786][T19887] zswpin 0 [ 2546.998786][T19887] zswpout 0 [ 2547.194750][T19887] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19887,uid=0 05:56:01 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85272}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xe, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2547.213928][T19887] Memory cgroup out of memory: Killed process 19887 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x29010700}, 0x0) [ 2547.279456][T19911] wireguard53: entered allmulticast mode [ 2547.310512][T19898] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2547.321107][T19898] CPU: 0 PID: 19898 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2547.331823][T19898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2547.341931][T19898] Call Trace: [ 2547.345344][T19898] [ 2547.348323][T19898] dump_stack_lvl+0x136/0x150 [ 2547.353086][T19898] dump_header+0x10a/0xd70 [ 2547.357627][T19898] oom_kill_process+0x25d/0x600 [ 2547.362556][T19898] out_of_memory+0x35c/0x1660 [ 2547.367315][T19898] ? find_held_lock+0x2d/0x110 [ 2547.372156][T19898] ? oom_killer_disable+0x2b0/0x2b0 [ 2547.377439][T19898] ? rcu_read_unlock+0x9/0x60 [ 2547.382203][T19898] ? find_held_lock+0x2d/0x110 [ 2547.387058][T19898] mem_cgroup_out_of_memory+0x206/0x270 [ 2547.392698][T19898] ? mem_cgroup_margin+0x130/0x130 [ 2547.398060][T19898] ? lock_downgrade+0x690/0x690 [ 2547.402993][T19898] try_charge_memcg+0xf9b/0x13b0 [ 2547.408052][T19898] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2547.414104][T19898] ? rcu_read_unlock+0x9/0x60 [ 2547.418836][T19898] ? lock_downgrade+0x690/0x690 [ 2547.423731][T19898] charge_memcg+0x90/0x3b0 [ 2547.428197][T19898] __mem_cgroup_charge+0x2b/0x90 [ 2547.433256][T19898] do_wp_page+0x8eb/0x3530 [ 2547.437719][T19898] ? lock_release+0x670/0x670 [ 2547.442443][T19898] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2547.447853][T19898] ? do_raw_spin_lock+0x124/0x2b0 [ 2547.452931][T19898] ? spin_bug+0x1c0/0x1c0 [ 2547.457294][T19898] ? lock_downgrade+0x690/0x690 [ 2547.462211][T19898] __handle_mm_fault+0x19a1/0x3e60 [ 2547.467389][T19898] ? vm_iomap_memory+0x190/0x190 [ 2547.472390][T19898] handle_mm_fault+0x2ba/0x9c0 [ 2547.477207][T19898] do_user_addr_fault+0x47e/0x1240 [ 2547.482360][T19898] ? rcu_is_watching+0x12/0xb0 [ 2547.487250][T19898] exc_page_fault+0x98/0x170 [ 2547.491890][T19898] asm_exc_page_fault+0x26/0x30 [ 2547.496776][T19898] RIP: 0033:0x7ffae1839610 [ 2547.501212][T19898] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2547.520847][T19898] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2547.526943][T19898] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2547.534935][T19898] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2547.542931][T19898] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2547.550922][T19898] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2547.558914][T19898] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2547.566996][T19898] ? __sys_socket+0x7c/0x250 [ 2547.571644][T19898] [ 2547.597853][T19898] memory: usage 307200kB, limit 307200kB, failcnt 23968 [ 2547.612804][T19918] wireguard71: entered allmulticast mode [ 2547.640242][T19898] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2547.647442][T19898] Memory cgroup stats for /syz3: [ 2547.647729][T19898] anon 106496 [ 2547.647729][T19898] file 733184 [ 2547.647729][T19898] kernel 313733120 [ 2547.647729][T19898] kernel_stack 65536 [ 2547.647729][T19898] pagetables 69632 [ 2547.647729][T19898] sec_pagetables 0 [ 2547.647729][T19898] percpu 5375488 [ 2547.647729][T19898] sock 0 [ 2547.647729][T19898] vmalloc 8192 [ 2547.647729][T19898] shmem 733184 [ 2547.647729][T19898] zswap 0 [ 2547.647729][T19898] zswapped 0 [ 2547.647729][T19898] file_mapped 667648 [ 2547.647729][T19898] file_dirty 0 [ 2547.647729][T19898] file_writeback 0 [ 2547.647729][T19898] swapcached 0 [ 2547.647729][T19898] anon_thp 0 [ 2547.647729][T19898] file_thp 0 [ 2547.647729][T19898] shmem_thp 0 [ 2547.647729][T19898] inactive_anon 0 [ 2547.647729][T19898] active_anon 839680 [ 2547.647729][T19898] inactive_file 0 [ 2547.647729][T19898] active_file 0 [ 2547.647729][T19898] unevictable 0 [ 2547.647729][T19898] slab_reclaimable 1217464 [ 2547.647729][T19898] slab_unreclaimable 306964000 [ 2547.647729][T19898] slab 308181464 [ 2547.647729][T19898] workingset_refault_anon 0 [ 2547.647729][T19898] workingset_refault_file 130 [ 2547.647729][T19898] workingset_activate_anon 0 [ 2547.647729][T19898] workingset_activate_file 0 [ 2547.647729][T19898] workingset_restore_anon 0 [ 2547.647729][T19898] workingset_restore_file 0 [ 2547.647729][T19898] workingset_nodereclaim 0 [ 2547.647729][T19898] pgscan 2951 [ 2547.647729][T19898] pgsteal 938 [ 2547.647729][T19898] pgscan_kswapd 0 [ 2547.647729][T19898] pgscan_direct 2951 [ 2547.647729][T19898] pgscan_khugepaged 0 [ 2547.647729][T19898] pgsteal_kswapd 0 [ 2547.647729][T19898] pgsteal_direct 938 [ 2547.647729][T19898] pgsteal_khugepaged 0 [ 2547.647729][T19898] pgfault 574290 [ 2547.647729][T19898] pgmajfault 0 [ 2547.647729][T19898] pgrefill 79949 [ 2547.647729][T19898] pgactivate 697 [ 2547.647729][T19898] pgdeactivate 0 [ 2547.647729][T19898] pglazyfree 0 [ 2547.647729][T19898] pglazyfreed 0 [ 2547.647729][T19898] zswpin 0 [ 2547.647729][T19898] zswpout 0 05:56:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x10, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2547.839952][T19898] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19898,uid=0 [ 2547.856351][T19898] Memory cgroup out of memory: Killed process 19898 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x26170000) [ 2547.920689][T19919] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2547.955762][T19919] CPU: 0 PID: 19919 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2547.966268][T19919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2547.976550][T19919] Call Trace: [ 2547.979875][T19919] [ 2547.982865][T19919] dump_stack_lvl+0x136/0x150 [ 2547.987623][T19919] dump_header+0x10a/0xd70 [ 2547.992132][T19919] oom_kill_process+0x25d/0x600 [ 2547.997074][T19919] out_of_memory+0x35c/0x1660 [ 2548.001859][T19919] ? find_held_lock+0x2d/0x110 [ 2548.006723][T19919] ? oom_killer_disable+0x2b0/0x2b0 [ 2548.012008][T19919] ? rcu_read_unlock+0x9/0x60 05:56:02 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1f00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2548.016778][T19919] ? find_held_lock+0x2d/0x110 [ 2548.021651][T19919] mem_cgroup_out_of_memory+0x206/0x270 [ 2548.027296][T19919] ? mem_cgroup_margin+0x130/0x130 [ 2548.032501][T19919] ? lock_downgrade+0x690/0x690 [ 2548.037453][T19919] try_charge_memcg+0xf9b/0x13b0 [ 2548.042472][T19919] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2548.048534][T19919] ? rcu_read_unlock+0x9/0x60 [ 2548.053286][T19919] ? lock_downgrade+0x690/0x690 [ 2548.058225][T19919] charge_memcg+0x90/0x3b0 [ 2548.062714][T19919] __mem_cgroup_charge+0x2b/0x90 [ 2548.067762][T19919] do_wp_page+0x8eb/0x3530 [ 2548.072258][T19919] ? lock_release+0x670/0x670 [ 2548.076999][T19919] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2548.082445][T19919] ? do_raw_spin_lock+0x124/0x2b0 [ 2548.087535][T19919] ? spin_bug+0x1c0/0x1c0 [ 2548.091944][T19919] ? lock_downgrade+0x690/0x690 [ 2548.096862][T19919] __handle_mm_fault+0x19a1/0x3e60 [ 2548.102051][T19919] ? vm_iomap_memory+0x190/0x190 [ 2548.107188][T19919] handle_mm_fault+0x2ba/0x9c0 [ 2548.112023][T19919] do_user_addr_fault+0x47e/0x1240 05:56:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x12, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2548.117247][T19919] ? rcu_is_watching+0x12/0xb0 [ 2548.122095][T19919] exc_page_fault+0x98/0x170 [ 2548.126765][T19919] asm_exc_page_fault+0x26/0x30 [ 2548.131679][T19919] RIP: 0033:0x7f4933239610 [ 2548.136151][T19919] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2548.155821][T19919] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2548.162073][T19919] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2548.170111][T19919] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2548.178131][T19919] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2548.186139][T19919] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2548.194229][T19919] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2548.202228][T19919] ? apparmor_socket_create+0xb7/0x670 [ 2548.207741][T19919] [ 2548.220165][T19919] memory: usage 307188kB, limit 307200kB, failcnt 12732 [ 2548.227366][T19919] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2548.234631][T19919] Memory cgroup stats for /syz2: [ 2548.234917][T19919] anon 122880 [ 2548.234917][T19919] file 688128 [ 2548.234917][T19919] kernel 313749504 [ 2548.234917][T19919] kernel_stack 65536 [ 2548.234917][T19919] pagetables 73728 [ 2548.234917][T19919] sec_pagetables 0 [ 2548.234917][T19919] percpu 5387328 [ 2548.234917][T19919] sock 0 [ 2548.234917][T19919] vmalloc 8192 [ 2548.234917][T19919] shmem 679936 [ 2548.234917][T19919] zswap 0 [ 2548.234917][T19919] zswapped 0 [ 2548.234917][T19919] file_mapped 630784 [ 2548.234917][T19919] file_dirty 8192 [ 2548.234917][T19919] file_writeback 0 [ 2548.234917][T19919] swapcached 0 [ 2548.234917][T19919] anon_thp 0 [ 2548.234917][T19919] file_thp 0 [ 2548.234917][T19919] shmem_thp 0 [ 2548.234917][T19919] inactive_anon 757760 [ 2548.234917][T19919] active_anon 45056 [ 2548.234917][T19919] inactive_file 0 [ 2548.234917][T19919] active_file 8192 [ 2548.234917][T19919] unevictable 0 [ 2548.234917][T19919] slab_reclaimable 512504 [ 2548.234917][T19919] slab_unreclaimable 307665696 [ 2548.234917][T19919] slab 308178200 [ 2548.234917][T19919] workingset_refault_anon 0 [ 2548.234917][T19919] workingset_refault_file 2 [ 2548.234917][T19919] workingset_activate_anon 0 [ 2548.234917][T19919] workingset_activate_file 0 [ 2548.234917][T19919] workingset_restore_anon 0 [ 2548.234917][T19919] workingset_restore_file 1 [ 2548.234917][T19919] workingset_nodereclaim 0 [ 2548.234917][T19919] pgscan 1707 [ 2548.234917][T19919] pgsteal 130 [ 2548.234917][T19919] pgscan_kswapd 109 [ 2548.234917][T19919] pgscan_direct 1598 [ 2548.234917][T19919] pgscan_khugepaged 0 [ 2548.234917][T19919] pgsteal_kswapd 108 [ 2548.234917][T19919] pgsteal_direct 22 [ 2548.234917][T19919] pgsteal_khugepaged 0 [ 2548.234917][T19919] pgfault 1008364 [ 2548.234917][T19919] pgmajfault 0 [ 2548.234917][T19919] pgrefill 10582 [ 2548.234917][T19919] pgactivate 1554 [ 2548.234917][T19919] pgdeactivate 0 [ 2548.234917][T19919] pglazyfree 0 [ 2548.234917][T19919] pglazyfreed 0 [ 2548.234917][T19919] zswpin 0 [ 2548.234917][T19919] zswpout 0 [ 2548.424585][T19919] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19919,uid=0 [ 2548.444626][T19919] Memory cgroup out of memory: Killed process 19919 (syz-executor.2) total-vm:54548kB, anon-rss:360kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:02 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfa03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x14, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2a010700}, 0x0) 05:56:02 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85273}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x32, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:02 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2548.620486][T19947] wireguard53: entered allmulticast mode [ 2548.695169][T19928] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2548.723005][T19928] CPU: 1 PID: 19928 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2548.733507][T19928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2548.743634][T19928] Call Trace: [ 2548.746962][T19928] [ 2548.749932][T19928] dump_stack_lvl+0x136/0x150 [ 2548.754648][T19928] dump_header+0x10a/0xd70 [ 2548.759100][T19928] oom_kill_process+0x25d/0x600 [ 2548.764047][T19928] out_of_memory+0x35c/0x1660 [ 2548.768761][T19928] ? find_held_lock+0x2d/0x110 [ 2548.773564][T19928] ? oom_killer_disable+0x2b0/0x2b0 [ 2548.778797][T19928] ? rcu_read_unlock+0x9/0x60 [ 2548.783625][T19928] ? find_held_lock+0x2d/0x110 [ 2548.788455][T19928] mem_cgroup_out_of_memory+0x206/0x270 [ 2548.794055][T19928] ? mem_cgroup_margin+0x130/0x130 [ 2548.799218][T19928] ? lock_downgrade+0x690/0x690 [ 2548.804140][T19928] try_charge_memcg+0xf9b/0x13b0 [ 2548.809222][T19928] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2548.815799][T19928] ? rcu_read_unlock+0x9/0x60 [ 2548.821048][T19928] ? lock_downgrade+0x690/0x690 [ 2548.825943][T19928] charge_memcg+0x90/0x3b0 [ 2548.830405][T19928] __mem_cgroup_charge+0x2b/0x90 [ 2548.835392][T19928] ? copy_mc_to_kernel+0x3e/0x90 [ 2548.840369][T19928] do_wp_page+0x8eb/0x3530 [ 2548.844933][T19928] ? lock_release+0x670/0x670 [ 2548.849641][T19928] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2548.855058][T19928] ? do_raw_spin_lock+0x124/0x2b0 [ 2548.861182][T19928] ? spin_bug+0x1c0/0x1c0 [ 2548.865541][T19928] ? lock_downgrade+0x690/0x690 [ 2548.870437][T19928] __handle_mm_fault+0x19a1/0x3e60 [ 2548.875638][T19928] ? vm_iomap_memory+0x190/0x190 [ 2548.880755][T19928] handle_mm_fault+0x2ba/0x9c0 [ 2548.885698][T19928] do_user_addr_fault+0x47e/0x1240 [ 2548.890861][T19928] ? rcu_is_watching+0x12/0xb0 [ 2548.895737][T19928] exc_page_fault+0x98/0x170 [ 2548.900639][T19928] asm_exc_page_fault+0x26/0x30 [ 2548.905644][T19928] RIP: 0033:0x7ffae18366e5 [ 2548.910241][T19928] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 2548.929916][T19928] RSP: 002b:00007ffdc9b41380 EFLAGS: 00010206 [ 2548.936038][T19928] RAX: 0000000000000003 RBX: 00007ffae19abf80 RCX: 00007ffae19a80c0 [ 2548.944041][T19928] RDX: 00007ffae19a80c0 RSI: 0000000000000080 RDI: 00007ffae19abf80 [ 2548.952057][T19928] RBP: 00007ffae19abf80 R08: 00007ffdc9be7080 R09: 0000000000000000 [ 2548.960085][T19928] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 000000000026dce8 [ 2548.968182][T19928] R13: 00007ffdc9b41490 R14: 00007ffae19abf80 R15: 0000000000000032 [ 2548.976194][T19928] [ 2548.986802][T19928] memory: usage 307200kB, limit 307200kB, failcnt 24087 [ 2548.994105][T19928] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2549.001262][T19928] Memory cgroup stats for /syz3: [ 2549.001557][T19928] anon 98304 [ 2549.001557][T19928] file 737280 [ 2549.001557][T19928] kernel 313737216 [ 2549.001557][T19928] kernel_stack 65536 [ 2549.001557][T19928] pagetables 69632 [ 2549.001557][T19928] sec_pagetables 0 [ 2549.001557][T19928] percpu 5375488 [ 2549.001557][T19928] sock 0 [ 2549.001557][T19928] vmalloc 8192 [ 2549.001557][T19928] shmem 733184 [ 2549.001557][T19928] zswap 0 [ 2549.001557][T19928] zswapped 0 [ 2549.001557][T19928] file_mapped 667648 [ 2549.001557][T19928] file_dirty 0 [ 2549.001557][T19928] file_writeback 0 [ 2549.001557][T19928] swapcached 0 [ 2549.001557][T19928] anon_thp 0 [ 2549.001557][T19928] file_thp 0 [ 2549.001557][T19928] shmem_thp 0 [ 2549.001557][T19928] inactive_anon 28672 [ 2549.001557][T19928] active_anon 802816 [ 2549.001557][T19928] inactive_file 4096 [ 2549.001557][T19928] active_file 0 [ 2549.001557][T19928] unevictable 0 [ 2549.001557][T19928] slab_reclaimable 1217704 [ 2549.001557][T19928] slab_unreclaimable 306964000 [ 2549.001557][T19928] slab 308181704 [ 2549.001557][T19928] workingset_refault_anon 0 [ 2549.001557][T19928] workingset_refault_file 130 [ 2549.001557][T19928] workingset_activate_anon 0 [ 2549.001557][T19928] workingset_activate_file 0 [ 2549.001557][T19928] workingset_restore_anon 0 [ 2549.001557][T19928] workingset_restore_file 0 [ 2549.001557][T19928] workingset_nodereclaim 0 [ 2549.001557][T19928] pgscan 2991 [ 2549.001557][T19928] pgsteal 938 [ 2549.001557][T19928] pgscan_kswapd 0 [ 2549.001557][T19928] pgscan_direct 2991 [ 2549.001557][T19928] pgscan_khugepaged 0 [ 2549.001557][T19928] pgsteal_kswapd 0 [ 2549.001557][T19928] pgsteal_direct 938 [ 2549.001557][T19928] pgsteal_khugepaged 0 [ 2549.001557][T19928] pgfault 574330 [ 2549.001557][T19928] pgmajfault 0 [ 2549.001557][T19928] pgrefill 79949 [ 2549.001557][T19928] pgactivate 737 [ 2549.001557][T19928] pgdeactivate 0 [ 2549.001557][T19928] pglazyfree 0 [ 2549.001557][T19928] pglazyfreed 0 [ 2549.001557][T19928] zswpin 0 [ 2549.001557][T19928] zswpout 0 [ 2549.192884][T19928] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19928,uid=0 [ 2549.228453][T19928] Memory cgroup out of memory: Killed process 19928 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x27020000) [ 2549.247024][T19969] wireguard71: entered allmulticast mode [ 2549.254134][T19949] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2549.280040][T19949] CPU: 1 PID: 19949 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2549.290539][T19949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2549.300609][T19949] Call Trace: [ 2549.303897][T19949] [ 2549.306836][T19949] dump_stack_lvl+0x136/0x150 [ 2549.312346][T19949] dump_header+0x10a/0xd70 [ 2549.316810][T19949] oom_kill_process+0x25d/0x600 [ 2549.321798][T19949] out_of_memory+0x35c/0x1660 [ 2549.326535][T19949] ? oom_killer_disable+0x2b0/0x2b0 [ 2549.331784][T19949] ? rcu_read_unlock+0x9/0x60 [ 2549.336529][T19949] ? find_held_lock+0x2d/0x110 [ 2549.341358][T19949] mem_cgroup_out_of_memory+0x206/0x270 [ 2549.346941][T19949] ? mem_cgroup_margin+0x130/0x130 [ 2549.352091][T19949] ? lock_downgrade+0x690/0x690 [ 2549.356989][T19949] try_charge_memcg+0xf9b/0x13b0 [ 2549.361964][T19949] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2549.367994][T19949] ? rcu_read_unlock+0x9/0x60 [ 2549.372699][T19949] ? lock_downgrade+0x690/0x690 [ 2549.377596][T19949] charge_memcg+0x90/0x3b0 [ 2549.382059][T19949] __mem_cgroup_charge+0x2b/0x90 [ 2549.387049][T19949] do_wp_page+0x8eb/0x3530 [ 2549.391513][T19949] ? lock_release+0x670/0x670 [ 2549.396226][T19949] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2549.401639][T19949] ? do_raw_spin_lock+0x124/0x2b0 [ 2549.406982][T19949] ? spin_bug+0x1c0/0x1c0 [ 2549.411434][T19949] ? lock_downgrade+0x690/0x690 [ 2549.416328][T19949] __handle_mm_fault+0x19a1/0x3e60 [ 2549.421522][T19949] ? vm_iomap_memory+0x190/0x190 [ 2549.426561][T19949] handle_mm_fault+0x2ba/0x9c0 [ 2549.431376][T19949] do_user_addr_fault+0x47e/0x1240 [ 2549.436538][T19949] ? rcu_is_watching+0x12/0xb0 [ 2549.441437][T19949] exc_page_fault+0x98/0x170 [ 2549.446253][T19949] asm_exc_page_fault+0x26/0x30 [ 2549.451137][T19949] RIP: 0033:0x7f4933239610 [ 2549.455583][T19949] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2549.475239][T19949] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2549.481338][T19949] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2549.489444][T19949] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2549.497532][T19949] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2549.505530][T19949] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2549.513700][T19949] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2549.521786][T19949] ? apparmor_socket_create+0xb7/0x670 [ 2549.527334][T19949] 05:56:03 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfc00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2549.565975][T19949] memory: usage 307188kB, limit 307200kB, failcnt 12780 [ 2549.577581][T19949] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2549.600896][T19949] Memory cgroup stats for /syz2: [ 2549.601337][T19949] anon 122880 [ 2549.601337][T19949] file 688128 [ 2549.601337][T19949] kernel 313749504 [ 2549.601337][T19949] kernel_stack 65536 [ 2549.601337][T19949] pagetables 73728 [ 2549.601337][T19949] sec_pagetables 0 [ 2549.601337][T19949] percpu 5387328 [ 2549.601337][T19949] sock 0 [ 2549.601337][T19949] vmalloc 8192 [ 2549.601337][T19949] shmem 679936 [ 2549.601337][T19949] zswap 0 [ 2549.601337][T19949] zswapped 0 [ 2549.601337][T19949] file_mapped 630784 [ 2549.601337][T19949] file_dirty 8192 [ 2549.601337][T19949] file_writeback 0 [ 2549.601337][T19949] swapcached 0 [ 2549.601337][T19949] anon_thp 0 [ 2549.601337][T19949] file_thp 0 [ 2549.601337][T19949] shmem_thp 0 [ 2549.601337][T19949] inactive_anon 737280 [ 2549.601337][T19949] active_anon 65536 [ 2549.601337][T19949] inactive_file 0 [ 2549.601337][T19949] active_file 8192 [ 2549.601337][T19949] unevictable 0 [ 2549.601337][T19949] slab_reclaimable 512504 [ 2549.601337][T19949] slab_unreclaimable 307665392 [ 2549.601337][T19949] slab 308177896 [ 2549.601337][T19949] workingset_refault_anon 0 [ 2549.601337][T19949] workingset_refault_file 2 [ 2549.601337][T19949] workingset_activate_anon 0 [ 2549.601337][T19949] workingset_activate_file 0 [ 2549.601337][T19949] workingset_restore_anon 0 [ 2549.601337][T19949] workingset_restore_file 1 [ 2549.601337][T19949] workingset_nodereclaim 0 [ 2549.601337][T19949] pgscan 1707 [ 2549.601337][T19949] pgsteal 130 [ 2549.601337][T19949] pgscan_kswapd 109 [ 2549.601337][T19949] pgscan_direct 1598 [ 2549.601337][T19949] pgscan_khugepaged 0 [ 2549.601337][T19949] pgsteal_kswapd 108 [ 2549.601337][T19949] pgsteal_direct 22 [ 2549.601337][T19949] pgsteal_khugepaged 0 [ 2549.601337][T19949] pgfault 1008419 [ 2549.601337][T19949] pgmajfault 0 [ 2549.601337][T19949] pgrefill 10676 [ 2549.601337][T19949] pgactivate 1554 [ 2549.601337][T19949] pgdeactivate 0 [ 2549.601337][T19949] pglazyfree 0 [ 2549.601337][T19949] pglazyfreed 0 [ 2549.601337][T19949] zswpin 0 [ 2549.601337][T19949] zswpout 0 05:56:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x36, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2549.805739][T19949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19949,uid=0 [ 2549.830511][T19949] Memory cgroup out of memory: Killed process 19949 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:04 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2451, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2549.923287][T19972] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2549.934379][T19972] CPU: 0 PID: 19972 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2549.944891][T19972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2549.955187][T19972] Call Trace: [ 2549.958514][T19972] [ 2549.961666][T19972] dump_stack_lvl+0x136/0x150 [ 2549.966426][T19972] dump_header+0x10a/0xd70 [ 2549.970956][T19972] oom_kill_process+0x25d/0x600 [ 2549.975891][T19972] out_of_memory+0x35c/0x1660 [ 2549.980667][T19972] ? find_held_lock+0x2d/0x110 [ 2549.985605][T19972] ? oom_killer_disable+0x2b0/0x2b0 [ 2549.990893][T19972] ? rcu_read_unlock+0x9/0x60 [ 2549.995660][T19972] ? find_held_lock+0x2d/0x110 [ 2550.000523][T19972] mem_cgroup_out_of_memory+0x206/0x270 [ 2550.006164][T19972] ? mem_cgroup_margin+0x130/0x130 [ 2550.011369][T19972] ? lock_downgrade+0x690/0x690 [ 2550.016358][T19972] try_charge_memcg+0xf9b/0x13b0 [ 2550.021371][T19972] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2550.027424][T19972] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2550.033238][T19972] ? lock_downgrade+0x690/0x690 [ 2550.038163][T19972] ? lock_downgrade+0x690/0x690 [ 2550.043092][T19972] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2550.048686][T19972] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2550.054884][T19972] copy_process+0x4e3/0x7580 [ 2550.059512][T19972] ? __lock_acquire+0xbc5/0x5d40 [ 2550.064496][T19972] ? __cleanup_sighand+0xb0/0xb0 [ 2550.069469][T19972] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2550.075614][T19972] ? psi_memstall_leave+0x174/0x250 [ 2550.080859][T19972] ? lock_downgrade+0x690/0x690 [ 2550.085764][T19972] kernel_clone+0xeb/0x890 [ 2550.090654][T19972] ? create_io_thread+0xf0/0xf0 [ 2550.095543][T19972] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2550.101834][T19972] ? lock_downgrade+0x690/0x690 [ 2550.106902][T19972] __do_sys_clone+0xba/0x100 [ 2550.111555][T19972] ? kernel_clone+0x890/0x890 [ 2550.116396][T19972] ? syscall_enter_from_user_mode+0x26/0x80 [ 2550.122388][T19972] do_syscall_64+0x39/0xb0 [ 2550.126841][T19972] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2550.132777][T19972] RIP: 0033:0x7ffae188d591 [ 2550.137738][T19972] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2550.157393][T19972] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2550.165842][T19972] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 05:56:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2b010700}, 0x0) 05:56:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3c, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2550.173849][T19972] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2550.181850][T19972] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2550.190021][T19972] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2550.198019][T19972] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2550.206033][T19972] 05:56:04 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85274}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2550.257314][T19972] memory: usage 307184kB, limit 307200kB, failcnt 24166 [ 2550.278085][T19972] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2550.308794][T19972] Memory cgroup stats for /syz3: [ 2550.309059][T19972] anon 90112 [ 2550.309059][T19972] file 737280 [ 2550.309059][T19972] kernel 313729024 [ 2550.309059][T19972] kernel_stack 32768 [ 2550.309059][T19972] pagetables 69632 [ 2550.309059][T19972] sec_pagetables 0 [ 2550.309059][T19972] percpu 5375488 [ 2550.309059][T19972] sock 0 [ 2550.309059][T19972] vmalloc 8192 [ 2550.309059][T19972] shmem 733184 [ 2550.309059][T19972] zswap 0 [ 2550.309059][T19972] zswapped 0 [ 2550.309059][T19972] file_mapped 667648 [ 2550.309059][T19972] file_dirty 0 [ 2550.309059][T19972] file_writeback 0 [ 2550.309059][T19972] swapcached 0 [ 2550.309059][T19972] anon_thp 0 [ 2550.309059][T19972] file_thp 0 [ 2550.309059][T19972] shmem_thp 0 [ 2550.309059][T19972] inactive_anon 36864 [ 2550.309059][T19972] active_anon 786432 [ 2550.309059][T19972] inactive_file 0 [ 2550.309059][T19972] active_file 4096 [ 2550.309059][T19972] unevictable 0 [ 2550.309059][T19972] slab_reclaimable 1215776 [ 2550.309059][T19972] slab_unreclaimable 306962888 [ 2550.309059][T19972] slab 308178664 [ 2550.309059][T19972] workingset_refault_anon 0 [ 2550.309059][T19972] workingset_refault_file 130 [ 2550.309059][T19972] workingset_activate_anon 0 [ 2550.309059][T19972] workingset_activate_file 0 [ 2550.309059][T19972] workingset_restore_anon 0 [ 2550.309059][T19972] workingset_restore_file 0 [ 2550.309059][T19972] workingset_nodereclaim 0 [ 2550.309059][T19972] pgscan 3019 [ 2550.309059][T19972] pgsteal 938 [ 2550.309059][T19972] pgscan_kswapd 0 [ 2550.309059][T19972] pgscan_direct 3019 [ 2550.309059][T19972] pgscan_khugepaged 0 [ 2550.309059][T19972] pgsteal_kswapd 0 [ 2550.309059][T19972] pgsteal_direct 938 [ 2550.309059][T19972] pgsteal_khugepaged 0 [ 2550.309059][T19972] pgfault 574367 [ 2550.309059][T19972] pgmajfault 0 [ 2550.309059][T19972] pgrefill 79949 [ 2550.309059][T19972] pgactivate 765 [ 2550.309059][T19972] pgdeactivate 0 [ 2550.309059][T19972] pglazyfree 0 [ 2550.309059][T19972] pglazyfreed 0 [ 2550.309059][T19972] zswpin 0 [ 2550.309059][T19972] zswpout 0 [ 2550.510299][T19972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19972,uid=0 [ 2550.526684][T19972] Memory cgroup out of memory: Killed process 19972 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:04 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfc01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2550.556753][T19990] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2550.560648][T19999] wireguard71: entered allmulticast mode [ 2550.591700][T19990] CPU: 1 PID: 19990 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 05:56:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x48, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2550.602201][T19990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2550.612321][T19990] Call Trace: [ 2550.615647][T19990] [ 2550.618629][T19990] dump_stack_lvl+0x136/0x150 [ 2550.623393][T19990] dump_header+0x10a/0xd70 [ 2550.627918][T19990] oom_kill_process+0x25d/0x600 [ 2550.632853][T19990] out_of_memory+0x35c/0x1660 [ 2550.637613][T19990] ? oom_killer_disable+0x2b0/0x2b0 [ 2550.642876][T19990] ? rcu_read_unlock+0x9/0x60 [ 2550.647601][T19990] ? find_held_lock+0x2d/0x110 [ 2550.652416][T19990] mem_cgroup_out_of_memory+0x206/0x270 [ 2550.658013][T19990] ? mem_cgroup_margin+0x130/0x130 [ 2550.663170][T19990] ? lock_downgrade+0x690/0x690 [ 2550.668097][T19990] try_charge_memcg+0xf9b/0x13b0 [ 2550.673077][T19990] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2550.679098][T19990] ? rcu_read_unlock+0x9/0x60 [ 2550.683816][T19990] ? lock_downgrade+0x690/0x690 [ 2550.688714][T19990] charge_memcg+0x90/0x3b0 [ 2550.693253][T19990] __mem_cgroup_charge+0x2b/0x90 [ 2550.698229][T19990] do_wp_page+0x8eb/0x3530 [ 2550.702688][T19990] ? lock_release+0x670/0x670 [ 2550.707415][T19990] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2550.712835][T19990] ? do_raw_spin_lock+0x124/0x2b0 [ 2550.717900][T19990] ? spin_bug+0x1c0/0x1c0 [ 2550.722869][T19990] ? lock_downgrade+0x690/0x690 [ 2550.727758][T19990] __handle_mm_fault+0x19a1/0x3e60 [ 2550.732931][T19990] ? vm_iomap_memory+0x190/0x190 [ 2550.737932][T19990] handle_mm_fault+0x2ba/0x9c0 [ 2550.742742][T19990] do_user_addr_fault+0x47e/0x1240 [ 2550.747895][T19990] ? rcu_is_watching+0x12/0xb0 [ 2550.752701][T19990] exc_page_fault+0x98/0x170 [ 2550.757337][T19990] asm_exc_page_fault+0x26/0x30 [ 2550.762217][T19990] RIP: 0033:0x7f4933239610 [ 2550.766655][T19990] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2550.786378][T19990] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2550.792485][T19990] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2550.800492][T19990] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 05:56:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x27030000) [ 2550.808508][T19990] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2550.816508][T19990] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2550.824505][T19990] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2550.832504][T19990] ? apparmor_socket_create+0xb7/0x670 [ 2550.838025][T19990] [ 2550.852352][T19990] memory: usage 307188kB, limit 307200kB, failcnt 12878 [ 2550.882932][T19990] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2550.902267][T19990] Memory cgroup stats for /syz2: [ 2550.902570][T19990] anon 122880 [ 2550.902570][T19990] file 688128 [ 2550.902570][T19990] kernel 313749504 [ 2550.902570][T19990] kernel_stack 65536 [ 2550.902570][T19990] pagetables 73728 [ 2550.902570][T19990] sec_pagetables 0 [ 2550.902570][T19990] percpu 5387328 [ 2550.902570][T19990] sock 0 [ 2550.902570][T19990] vmalloc 8192 [ 2550.902570][T19990] shmem 679936 [ 2550.902570][T19990] zswap 0 [ 2550.902570][T19990] zswapped 0 [ 2550.902570][T19990] file_mapped 630784 [ 2550.902570][T19990] file_dirty 8192 [ 2550.902570][T19990] file_writeback 0 [ 2550.902570][T19990] swapcached 0 [ 2550.902570][T19990] anon_thp 0 [ 2550.902570][T19990] file_thp 0 [ 2550.902570][T19990] shmem_thp 0 [ 2550.902570][T19990] inactive_anon 57344 [ 2550.902570][T19990] active_anon 745472 [ 2550.902570][T19990] inactive_file 0 [ 2550.902570][T19990] active_file 8192 [ 2550.902570][T19990] unevictable 0 [ 2550.902570][T19990] slab_reclaimable 512504 [ 2550.902570][T19990] slab_unreclaimable 307665392 [ 2550.902570][T19990] slab 308177896 [ 2550.902570][T19990] workingset_refault_anon 0 [ 2550.902570][T19990] workingset_refault_file 2 [ 2550.902570][T19990] workingset_activate_anon 0 [ 2550.902570][T19990] workingset_activate_file 0 [ 2550.902570][T19990] workingset_restore_anon 0 [ 2550.902570][T19990] workingset_restore_file 1 [ 2550.902570][T19990] workingset_nodereclaim 0 [ 2550.902570][T19990] pgscan 1707 [ 2550.902570][T19990] pgsteal 130 [ 2550.902570][T19990] pgscan_kswapd 109 [ 2550.902570][T19990] pgscan_direct 1598 [ 2550.902570][T19990] pgscan_khugepaged 0 [ 2550.902570][T19990] pgsteal_kswapd 108 [ 2550.902570][T19990] pgsteal_direct 22 [ 2550.902570][T19990] pgsteal_khugepaged 0 [ 2550.902570][T19990] pgfault 1008471 [ 2550.902570][T19990] pgmajfault 0 [ 2550.902570][T19990] pgrefill 10794 [ 2550.902570][T19990] pgactivate 1554 [ 2550.902570][T19990] pgdeactivate 0 [ 2550.902570][T19990] pglazyfree 0 [ 2550.902570][T19990] pglazyfreed 0 [ 2550.902570][T19990] zswpin 0 [ 2550.902570][T19990] zswpout 0 [ 2551.095799][T19990] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19990,uid=0 [ 2551.112375][T19990] Memory cgroup out of memory: Killed process 19990 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2551.132925][T20013] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2551.143677][T20013] CPU: 1 PID: 20013 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2551.154337][T20013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2551.164437][T20013] Call Trace: [ 2551.167761][T20013] [ 2551.170760][T20013] dump_stack_lvl+0x136/0x150 [ 2551.175588][T20013] dump_header+0x10a/0xd70 [ 2551.180063][T20013] oom_kill_process+0x25d/0x600 [ 2551.184984][T20013] out_of_memory+0x35c/0x1660 [ 2551.189713][T20013] ? oom_killer_disable+0x2b0/0x2b0 [ 2551.194969][T20013] ? rcu_read_unlock+0x9/0x60 [ 2551.199703][T20013] ? find_held_lock+0x2d/0x110 [ 2551.204548][T20013] mem_cgroup_out_of_memory+0x206/0x270 [ 2551.210155][T20013] ? mem_cgroup_margin+0x130/0x130 [ 2551.215325][T20013] ? lock_downgrade+0x690/0x690 [ 2551.220268][T20013] try_charge_memcg+0xf9b/0x13b0 [ 2551.225259][T20013] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2551.231382][T20013] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2551.237149][T20013] ? lock_downgrade+0x690/0x690 [ 2551.242053][T20013] ? lock_downgrade+0x690/0x690 [ 2551.246984][T20013] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2551.252598][T20013] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2551.258820][T20013] copy_process+0x4e3/0x7580 [ 2551.263459][T20013] ? __lock_acquire+0xbc5/0x5d40 [ 2551.268443][T20013] ? __cleanup_sighand+0xb0/0xb0 [ 2551.273419][T20013] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2551.279463][T20013] ? psi_memstall_leave+0x174/0x250 [ 2551.284734][T20013] ? lock_downgrade+0x690/0x690 [ 2551.289625][T20013] kernel_clone+0xeb/0x890 [ 2551.294082][T20013] ? create_io_thread+0xf0/0xf0 [ 2551.299000][T20013] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2551.305326][T20013] ? lock_downgrade+0x690/0x690 [ 2551.310320][T20013] __do_sys_clone+0xba/0x100 [ 2551.314958][T20013] ? kernel_clone+0x890/0x890 [ 2551.319682][T20013] ? syscall_enter_from_user_mode+0x26/0x80 [ 2551.325636][T20013] do_syscall_64+0x39/0xb0 [ 2551.330087][T20013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2551.336012][T20013] RIP: 0033:0x7ffae188d591 [ 2551.340461][T20013] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2551.360104][T20013] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2551.368674][T20013] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2551.376674][T20013] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 05:56:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2c010700}, 0x0) [ 2551.384693][T20013] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2551.392689][T20013] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2551.400856][T20013] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2551.408883][T20013] [ 2551.420444][T20013] memory: usage 307200kB, limit 307200kB, failcnt 24244 [ 2551.427470][T20013] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2551.449059][T20013] Memory cgroup stats for /syz3: [ 2551.449344][T20013] anon 90112 [ 2551.449344][T20013] file 737280 [ 2551.449344][T20013] kernel 313716736 [ 2551.449344][T20013] kernel_stack 32768 [ 2551.449344][T20013] pagetables 69632 [ 2551.449344][T20013] sec_pagetables 0 [ 2551.449344][T20013] percpu 5375488 [ 2551.449344][T20013] sock 0 [ 2551.449344][T20013] vmalloc 8192 [ 2551.449344][T20013] shmem 733184 [ 2551.449344][T20013] zswap 0 [ 2551.449344][T20013] zswapped 0 [ 2551.449344][T20013] file_mapped 667648 [ 2551.449344][T20013] file_dirty 0 [ 2551.449344][T20013] file_writeback 0 [ 2551.449344][T20013] swapcached 0 [ 2551.449344][T20013] anon_thp 0 [ 2551.449344][T20013] file_thp 0 [ 2551.449344][T20013] shmem_thp 0 [ 2551.449344][T20013] inactive_anon 32768 [ 2551.449344][T20013] active_anon 790528 [ 2551.449344][T20013] inactive_file 4096 [ 2551.449344][T20013] active_file 0 [ 2551.449344][T20013] unevictable 0 [ 2551.449344][T20013] slab_reclaimable 1215776 [ 2551.449344][T20013] slab_unreclaimable 306962888 [ 2551.449344][T20013] slab 308178664 [ 2551.449344][T20013] workingset_refault_anon 0 [ 2551.449344][T20013] workingset_refault_file 130 [ 2551.449344][T20013] workingset_activate_anon 0 [ 2551.449344][T20013] workingset_activate_file 0 [ 2551.449344][T20013] workingset_restore_anon 0 [ 2551.449344][T20013] workingset_restore_file 0 [ 2551.449344][T20013] workingset_nodereclaim 0 [ 2551.449344][T20013] pgscan 3042 [ 2551.449344][T20013] pgsteal 938 [ 2551.449344][T20013] pgscan_kswapd 0 [ 2551.449344][T20013] pgscan_direct 3042 [ 2551.449344][T20013] pgscan_khugepaged 0 [ 2551.449344][T20013] pgsteal_kswapd 0 [ 2551.449344][T20013] pgsteal_direct 938 [ 2551.449344][T20013] pgsteal_khugepaged 0 [ 2551.449344][T20013] pgfault 574404 [ 2551.449344][T20013] pgmajfault 0 [ 2551.449344][T20013] pgrefill 79949 [ 2551.449344][T20013] pgactivate 788 [ 2551.449344][T20013] pgdeactivate 0 [ 2551.449344][T20013] pglazyfree 0 [ 2551.449344][T20013] pglazyfreed 0 [ 2551.449344][T20013] zswpin 0 [ 2551.449344][T20013] zswpout 0 [ 2551.659878][T20013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20013,uid=0 [ 2551.676081][T20013] Memory cgroup out of memory: Killed process 20013 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2551.698471][T20016] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2551.710493][T20016] CPU: 0 PID: 20016 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2551.721033][T20016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2551.731181][T20016] Call Trace: [ 2551.734513][T20016] [ 2551.737503][T20016] dump_stack_lvl+0x136/0x150 [ 2551.742268][T20016] dump_header+0x10a/0xd70 [ 2551.746763][T20016] oom_kill_process+0x25d/0x600 [ 2551.751734][T20016] out_of_memory+0x35c/0x1660 05:56:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x2a170000) 05:56:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x4c, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2551.756505][T20016] ? oom_killer_disable+0x2b0/0x2b0 [ 2551.761773][T20016] ? rcu_read_unlock+0x9/0x60 [ 2551.766517][T20016] ? find_held_lock+0x2d/0x110 [ 2551.771363][T20016] mem_cgroup_out_of_memory+0x206/0x270 [ 2551.776981][T20016] ? mem_cgroup_margin+0x130/0x130 [ 2551.782162][T20016] ? lock_downgrade+0x690/0x690 [ 2551.787094][T20016] try_charge_memcg+0xf9b/0x13b0 [ 2551.792102][T20016] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2551.798152][T20016] ? rcu_read_unlock+0x9/0x60 [ 2551.802904][T20016] ? lock_downgrade+0x690/0x690 [ 2551.807820][T20016] charge_memcg+0x90/0x3b0 [ 2551.812289][T20016] __mem_cgroup_charge+0x2b/0x90 [ 2551.817291][T20016] ? copy_mc_to_kernel+0x3e/0x90 [ 2551.822385][T20016] do_wp_page+0x8eb/0x3530 [ 2551.826873][T20016] ? lock_release+0x670/0x670 [ 2551.831604][T20016] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2551.837047][T20016] ? do_raw_spin_lock+0x124/0x2b0 [ 2551.842147][T20016] ? spin_bug+0x1c0/0x1c0 [ 2551.846534][T20016] ? lock_downgrade+0x690/0x690 [ 2551.851461][T20016] __handle_mm_fault+0x19a1/0x3e60 [ 2551.856658][T20016] ? vm_iomap_memory+0x190/0x190 05:56:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x54, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2551.861709][T20016] handle_mm_fault+0x2ba/0x9c0 [ 2551.866547][T20016] do_user_addr_fault+0x47e/0x1240 [ 2551.871734][T20016] ? rcu_is_watching+0x12/0xb0 [ 2551.876577][T20016] exc_page_fault+0x98/0x170 [ 2551.881251][T20016] asm_exc_page_fault+0x26/0x30 [ 2551.886163][T20016] RIP: 0033:0x7f4933236fdd [ 2551.890626][T20016] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 2551.910383][T20016] RSP: 002b:00007fff741ea370 EFLAGS: 00010217 [ 2551.916515][T20016] RAX: 0000000000000000 RBX: 00007f49333abf8c RCX: 00007f493328c169 [ 2551.924538][T20016] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49333abf88 [ 2551.932565][T20016] RBP: 00007f49333abf80 R08: 00007f493404d700 R09: 0000000000000000 [ 2551.940594][T20016] R10: 00007f493404d700 R11: 0000000000000246 R12: 00007f49333abf8c [ 2551.948622][T20016] R13: 00007f4932e00060 R14: 00007f49333abf80 R15: 0000000000000000 [ 2551.956677][T20016] [ 2551.983954][T20016] memory: usage 307160kB, limit 307200kB, failcnt 12964 [ 2551.994567][T20016] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2552.002316][T20016] Memory cgroup stats for /syz2: [ 2552.002577][T20016] anon 94208 [ 2552.002577][T20016] file 688128 [ 2552.002577][T20016] kernel 313749504 [ 2552.002577][T20016] kernel_stack 65536 [ 2552.002577][T20016] pagetables 73728 [ 2552.002577][T20016] sec_pagetables 0 [ 2552.002577][T20016] percpu 5387328 [ 2552.002577][T20016] sock 0 05:56:06 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2801, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2552.002577][T20016] vmalloc 8192 [ 2552.002577][T20016] shmem 679936 [ 2552.002577][T20016] zswap 0 [ 2552.002577][T20016] zswapped 0 [ 2552.002577][T20016] file_mapped 630784 [ 2552.002577][T20016] file_dirty 8192 [ 2552.002577][T20016] file_writeback 0 [ 2552.002577][T20016] swapcached 0 [ 2552.002577][T20016] anon_thp 0 [ 2552.002577][T20016] file_thp 0 [ 2552.002577][T20016] shmem_thp 0 [ 2552.002577][T20016] inactive_anon 737280 [ 2552.002577][T20016] active_anon 36864 [ 2552.002577][T20016] inactive_file 0 [ 2552.002577][T20016] active_file 8192 [ 2552.002577][T20016] unevictable 0 [ 2552.002577][T20016] slab_reclaimable 512504 [ 2552.002577][T20016] slab_unreclaimable 307665392 [ 2552.002577][T20016] slab 308177896 [ 2552.002577][T20016] workingset_refault_anon 0 [ 2552.002577][T20016] workingset_refault_file 2 [ 2552.002577][T20016] workingset_activate_anon 0 [ 2552.002577][T20016] workingset_activate_file 0 [ 2552.002577][T20016] workingset_restore_anon 0 [ 2552.002577][T20016] workingset_restore_file 1 [ 2552.002577][T20016] workingset_nodereclaim 0 [ 2552.002577][T20016] pgscan 1707 [ 2552.002577][T20016] pgsteal 130 [ 2552.002577][T20016] pgscan_kswapd 109 [ 2552.002577][T20016] pgscan_direct 1598 [ 2552.002577][T20016] pgscan_khugepaged 0 [ 2552.002577][T20016] pgsteal_kswapd 108 [ 2552.002577][T20016] pgsteal_direct 22 [ 2552.002577][T20016] pgsteal_khugepaged 0 [ 2552.002577][T20016] pgfault 1008513 [ 2552.002577][T20016] pgmajfault 0 [ 2552.002577][T20016] pgrefill 10892 [ 2552.002577][T20016] pgactivate 1554 [ 2552.002577][T20016] pgdeactivate 0 [ 2552.002577][T20016] pglazyfree 0 [ 2552.002577][T20016] pglazyfreed 0 05:56:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x60, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2552.002577][T20016] zswpin 0 [ 2552.002577][T20016] zswpout 0 05:56:06 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfc03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2d010700}, 0x0) [ 2552.227102][T20016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20016,uid=0 [ 2552.246736][T20016] Memory cgroup out of memory: Killed process 20016 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:06 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85275}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x68, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2552.383992][T20022] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2552.414567][T20022] CPU: 0 PID: 20022 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2552.425067][T20022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2552.435177][T20022] Call Trace: [ 2552.438496][T20022] [ 2552.441469][T20022] dump_stack_lvl+0x136/0x150 [ 2552.446232][T20022] dump_header+0x10a/0xd70 [ 2552.450721][T20022] oom_kill_process+0x25d/0x600 [ 2552.455638][T20022] out_of_memory+0x35c/0x1660 [ 2552.460402][T20022] ? find_held_lock+0x2d/0x110 [ 2552.465249][T20022] ? oom_killer_disable+0x2b0/0x2b0 [ 2552.470544][T20022] ? rcu_read_unlock+0x9/0x60 [ 2552.475303][T20022] ? find_held_lock+0x2d/0x110 05:56:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x6c, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2552.480159][T20022] mem_cgroup_out_of_memory+0x206/0x270 [ 2552.485795][T20022] ? mem_cgroup_margin+0x130/0x130 [ 2552.490979][T20022] ? lock_downgrade+0x690/0x690 [ 2552.495974][T20022] try_charge_memcg+0xf9b/0x13b0 [ 2552.500962][T20022] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2552.507016][T20022] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2552.512789][T20022] ? lock_downgrade+0x690/0x690 [ 2552.517674][T20022] ? lock_downgrade+0x690/0x690 [ 2552.522578][T20022] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2552.528159][T20022] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2552.534531][T20022] copy_process+0x139b/0x7580 [ 2552.539251][T20022] ? __lock_acquire+0xbc5/0x5d40 [ 2552.544418][T20022] ? __cleanup_sighand+0xb0/0xb0 [ 2552.549388][T20022] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2552.555434][T20022] ? psi_memstall_leave+0x174/0x250 [ 2552.560673][T20022] ? lock_downgrade+0x690/0x690 [ 2552.565565][T20022] kernel_clone+0xeb/0x890 [ 2552.570016][T20022] ? create_io_thread+0xf0/0xf0 [ 2552.574906][T20022] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2552.581387][T20022] ? lock_downgrade+0x690/0x690 [ 2552.586309][T20022] __do_sys_clone+0xba/0x100 [ 2552.590934][T20022] ? kernel_clone+0x890/0x890 [ 2552.595659][T20022] ? syscall_enter_from_user_mode+0x26/0x80 [ 2552.601611][T20022] do_syscall_64+0x39/0xb0 [ 2552.606067][T20022] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2552.612091][T20022] RIP: 0033:0x7ffae188d591 [ 2552.616542][T20022] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2552.636178][T20022] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2552.644622][T20022] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2552.652623][T20022] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2552.660724][T20022] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2552.668722][T20022] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2552.676718][T20022] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2552.684730][T20022] [ 2552.710012][T20022] memory: usage 307184kB, limit 307200kB, failcnt 24349 [ 2552.719497][T20022] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2552.752795][T20047] wireguard71: entered allmulticast mode [ 2552.758909][T20022] Memory cgroup stats for /syz3: [ 2552.759183][T20022] anon 90112 [ 2552.759183][T20022] file 737280 [ 2552.759183][T20022] kernel 313729024 [ 2552.759183][T20022] kernel_stack 32768 [ 2552.759183][T20022] pagetables 69632 [ 2552.759183][T20022] sec_pagetables 0 [ 2552.759183][T20022] percpu 5375488 [ 2552.759183][T20022] sock 0 [ 2552.759183][T20022] vmalloc 8192 [ 2552.759183][T20022] shmem 733184 [ 2552.759183][T20022] zswap 0 [ 2552.759183][T20022] zswapped 0 [ 2552.759183][T20022] file_mapped 667648 [ 2552.759183][T20022] file_dirty 0 [ 2552.759183][T20022] file_writeback 0 [ 2552.759183][T20022] swapcached 0 [ 2552.759183][T20022] anon_thp 0 [ 2552.759183][T20022] file_thp 0 [ 2552.759183][T20022] shmem_thp 0 [ 2552.759183][T20022] inactive_anon 28672 [ 2552.759183][T20022] active_anon 794624 [ 2552.759183][T20022] inactive_file 4096 [ 2552.759183][T20022] active_file 0 [ 2552.759183][T20022] unevictable 0 [ 2552.759183][T20022] slab_reclaimable 1215776 [ 2552.759183][T20022] slab_unreclaimable 306962888 [ 2552.759183][T20022] slab 308178664 [ 2552.759183][T20022] workingset_refault_anon 0 [ 2552.759183][T20022] workingset_refault_file 130 [ 2552.759183][T20022] workingset_activate_anon 0 [ 2552.759183][T20022] workingset_activate_file 0 [ 2552.759183][T20022] workingset_restore_anon 0 [ 2552.759183][T20022] workingset_restore_file 0 [ 2552.759183][T20022] workingset_nodereclaim 0 [ 2552.759183][T20022] pgscan 3074 [ 2552.759183][T20022] pgsteal 938 [ 2552.759183][T20022] pgscan_kswapd 0 [ 2552.759183][T20022] pgscan_direct 3074 05:56:06 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2552.759183][T20022] pgscan_khugepaged 0 [ 2552.759183][T20022] pgsteal_kswapd 0 [ 2552.759183][T20022] pgsteal_direct 938 [ 2552.759183][T20022] pgsteal_khugepaged 0 [ 2552.759183][T20022] pgfault 574441 [ 2552.759183][T20022] pgmajfault 0 [ 2552.759183][T20022] pgrefill 79949 [ 2552.759183][T20022] pgactivate 820 [ 2552.759183][T20022] pgdeactivate 0 [ 2552.759183][T20022] pglazyfree 0 [ 2552.759183][T20022] pglazyfreed 0 [ 2552.759183][T20022] zswpin 0 [ 2552.759183][T20022] zswpout 0 05:56:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x2e120000) [ 2552.949215][T20022] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20022,uid=0 [ 2552.965573][T20022] Memory cgroup out of memory: Killed process 20022 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:07 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe02}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x70, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2553.084290][T20052] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2553.100371][T20052] CPU: 1 PID: 20052 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2553.111509][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2553.122922][T20052] Call Trace: [ 2553.126245][T20052] [ 2553.129223][T20052] dump_stack_lvl+0x136/0x150 [ 2553.133986][T20052] dump_header+0x10a/0xd70 [ 2553.138487][T20052] oom_kill_process+0x25d/0x600 [ 2553.143417][T20052] out_of_memory+0x35c/0x1660 [ 2553.148186][T20052] ? find_held_lock+0x2d/0x110 [ 2553.153088][T20052] ? oom_killer_disable+0x2b0/0x2b0 [ 2553.158384][T20052] ? rcu_read_unlock+0x9/0x60 [ 2553.163140][T20052] ? find_held_lock+0x2d/0x110 [ 2553.167966][T20052] mem_cgroup_out_of_memory+0x206/0x270 [ 2553.173574][T20052] ? mem_cgroup_margin+0x130/0x130 [ 2553.178735][T20052] ? lock_downgrade+0x690/0x690 [ 2553.183895][T20052] try_charge_memcg+0xf9b/0x13b0 [ 2553.188876][T20052] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2553.194897][T20052] ? rcu_read_unlock+0x9/0x60 [ 2553.199618][T20052] ? lock_downgrade+0x690/0x690 [ 2553.204517][T20052] charge_memcg+0x90/0x3b0 [ 2553.208977][T20052] __mem_cgroup_charge+0x2b/0x90 [ 2553.213964][T20052] do_wp_page+0x8eb/0x3530 [ 2553.218522][T20052] ? lock_release+0x670/0x670 [ 2553.223246][T20052] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2553.228664][T20052] ? do_raw_spin_lock+0x124/0x2b0 [ 2553.233816][T20052] ? spin_bug+0x1c0/0x1c0 [ 2553.238178][T20052] ? lock_downgrade+0x690/0x690 [ 2553.243073][T20052] __handle_mm_fault+0x19a1/0x3e60 [ 2553.248239][T20052] ? vm_iomap_memory+0x190/0x190 [ 2553.253335][T20052] handle_mm_fault+0x2ba/0x9c0 [ 2553.258237][T20052] do_user_addr_fault+0x47e/0x1240 [ 2553.263403][T20052] ? rcu_is_watching+0x12/0xb0 [ 2553.268214][T20052] exc_page_fault+0x98/0x170 [ 2553.272945][T20052] asm_exc_page_fault+0x26/0x30 [ 2553.277833][T20052] RIP: 0033:0x7f4933239610 [ 2553.282276][T20052] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2553.301931][T20052] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2553.308032][T20052] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2553.316121][T20052] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2553.324155][T20052] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2553.332159][T20052] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2553.340161][T20052] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2553.348184][T20052] ? apparmor_socket_create+0xb7/0x670 [ 2553.353719][T20052] [ 2553.384499][T20052] memory: usage 307188kB, limit 307200kB, failcnt 13034 [ 2553.392232][T20052] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2553.399463][T20052] Memory cgroup stats for /syz2: [ 2553.399952][T20052] anon 122880 [ 2553.399952][T20052] file 688128 [ 2553.399952][T20052] kernel 313749504 [ 2553.399952][T20052] kernel_stack 65536 [ 2553.399952][T20052] pagetables 73728 [ 2553.399952][T20052] sec_pagetables 0 [ 2553.399952][T20052] percpu 5387328 [ 2553.399952][T20052] sock 0 [ 2553.399952][T20052] vmalloc 8192 [ 2553.399952][T20052] shmem 679936 [ 2553.399952][T20052] zswap 0 [ 2553.399952][T20052] zswapped 0 [ 2553.399952][T20052] file_mapped 630784 [ 2553.399952][T20052] file_dirty 8192 [ 2553.399952][T20052] file_writeback 0 [ 2553.399952][T20052] swapcached 0 [ 2553.399952][T20052] anon_thp 0 [ 2553.399952][T20052] file_thp 0 [ 2553.399952][T20052] shmem_thp 0 [ 2553.399952][T20052] inactive_anon 24576 [ 2553.399952][T20052] active_anon 778240 [ 2553.399952][T20052] inactive_file 0 [ 2553.399952][T20052] active_file 8192 [ 2553.399952][T20052] unevictable 0 [ 2553.399952][T20052] slab_reclaimable 512504 [ 2553.399952][T20052] slab_unreclaimable 307665656 [ 2553.399952][T20052] slab 308178160 [ 2553.399952][T20052] workingset_refault_anon 0 [ 2553.399952][T20052] workingset_refault_file 2 [ 2553.399952][T20052] workingset_activate_anon 0 [ 2553.399952][T20052] workingset_activate_file 0 [ 2553.399952][T20052] workingset_restore_anon 0 [ 2553.399952][T20052] workingset_restore_file 1 [ 2553.399952][T20052] workingset_nodereclaim 0 [ 2553.399952][T20052] pgscan 1707 [ 2553.399952][T20052] pgsteal 130 [ 2553.399952][T20052] pgscan_kswapd 109 [ 2553.399952][T20052] pgscan_direct 1598 [ 2553.399952][T20052] pgscan_khugepaged 0 [ 2553.399952][T20052] pgsteal_kswapd 108 [ 2553.399952][T20052] pgsteal_direct 22 [ 2553.399952][T20052] pgsteal_khugepaged 0 [ 2553.399952][T20052] pgfault 1008565 [ 2553.399952][T20052] pgmajfault 0 [ 2553.399952][T20052] pgrefill 11018 [ 2553.399952][T20052] pgactivate 1554 [ 2553.399952][T20052] pgdeactivate 0 [ 2553.399952][T20052] pglazyfree 0 [ 2553.399952][T20052] pglazyfreed 0 [ 2553.399952][T20052] zswpin 0 [ 2553.399952][T20052] zswpout 0 [ 2553.415420][T20073] wireguard53: entered allmulticast mode [ 2553.589127][T20052] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20052,uid=0 05:56:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2e010700}, 0x0) [ 2553.619057][T20052] Memory cgroup out of memory: Killed process 20052 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2553.688214][T20064] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2553.703396][T20064] CPU: 0 PID: 20064 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2553.713921][T20064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2553.724032][T20064] Call Trace: [ 2553.727356][T20064] [ 2553.730352][T20064] dump_stack_lvl+0x136/0x150 [ 2553.735201][T20064] dump_header+0x10a/0xd70 [ 2553.739700][T20064] oom_kill_process+0x25d/0x600 [ 2553.744635][T20064] out_of_memory+0x35c/0x1660 [ 2553.749397][T20064] ? find_held_lock+0x2d/0x110 [ 2553.754242][T20064] ? oom_killer_disable+0x2b0/0x2b0 [ 2553.759518][T20064] ? rcu_read_unlock+0x9/0x60 [ 2553.764266][T20064] ? find_held_lock+0x2d/0x110 [ 2553.769117][T20064] mem_cgroup_out_of_memory+0x206/0x270 [ 2553.774744][T20064] ? mem_cgroup_margin+0x130/0x130 [ 2553.779944][T20064] ? lock_downgrade+0x690/0x690 05:56:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x72, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2553.784877][T20064] try_charge_memcg+0xf9b/0x13b0 [ 2553.789884][T20064] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2553.796041][T20064] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2553.801845][T20064] ? lock_downgrade+0x690/0x690 [ 2553.806774][T20064] ? lock_downgrade+0x690/0x690 [ 2553.811705][T20064] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2553.817333][T20064] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2553.823562][T20064] copy_process+0x139b/0x7580 [ 2553.828311][T20064] ? __lock_acquire+0xbc5/0x5d40 [ 2553.833330][T20064] ? __cleanup_sighand+0xb0/0xb0 [ 2553.838328][T20064] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2553.844376][T20064] ? psi_memstall_leave+0x174/0x250 [ 2553.849652][T20064] ? lock_downgrade+0x690/0x690 [ 2553.854575][T20064] kernel_clone+0xeb/0x890 [ 2553.859062][T20064] ? create_io_thread+0xf0/0xf0 [ 2553.863991][T20064] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2553.870316][T20064] ? lock_downgrade+0x690/0x690 [ 2553.875244][T20064] __do_sys_clone+0xba/0x100 [ 2553.879899][T20064] ? kernel_clone+0x890/0x890 05:56:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x74, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2553.884660][T20064] ? syscall_enter_from_user_mode+0x26/0x80 [ 2553.890670][T20064] do_syscall_64+0x39/0xb0 [ 2553.895161][T20064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2553.901121][T20064] RIP: 0033:0x7ffae188d591 [ 2553.905590][T20064] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2553.925260][T20064] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2553.933749][T20064] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2553.941870][T20064] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2553.949901][T20064] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2553.957930][T20064] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2553.966050][T20064] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2553.974105][T20064] [ 2553.994513][T20064] memory: usage 307184kB, limit 307200kB, failcnt 24451 [ 2554.002005][T20064] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2554.009061][T20064] Memory cgroup stats for /syz3: [ 2554.009346][T20064] anon 90112 [ 2554.009346][T20064] file 737280 [ 2554.009346][T20064] kernel 313729024 [ 2554.009346][T20064] kernel_stack 32768 [ 2554.009346][T20064] pagetables 69632 [ 2554.009346][T20064] sec_pagetables 0 [ 2554.009346][T20064] percpu 5375488 [ 2554.009346][T20064] sock 0 [ 2554.009346][T20064] vmalloc 8192 [ 2554.009346][T20064] shmem 733184 [ 2554.009346][T20064] zswap 0 [ 2554.009346][T20064] zswapped 0 [ 2554.009346][T20064] file_mapped 667648 [ 2554.009346][T20064] file_dirty 0 [ 2554.009346][T20064] file_writeback 0 [ 2554.009346][T20064] swapcached 0 [ 2554.009346][T20064] anon_thp 0 [ 2554.009346][T20064] file_thp 0 [ 2554.009346][T20064] shmem_thp 0 [ 2554.009346][T20064] inactive_anon 32768 [ 2554.009346][T20064] active_anon 790528 [ 2554.009346][T20064] inactive_file 0 [ 2554.009346][T20064] active_file 4096 [ 2554.009346][T20064] unevictable 0 [ 2554.009346][T20064] slab_reclaimable 1215776 [ 2554.009346][T20064] slab_unreclaimable 306963192 [ 2554.009346][T20064] slab 308178968 [ 2554.009346][T20064] workingset_refault_anon 0 [ 2554.009346][T20064] workingset_refault_file 130 [ 2554.009346][T20064] workingset_activate_anon 0 [ 2554.009346][T20064] workingset_activate_file 0 [ 2554.009346][T20064] workingset_restore_anon 0 [ 2554.009346][T20064] workingset_restore_file 0 [ 2554.009346][T20064] workingset_nodereclaim 0 [ 2554.009346][T20064] pgscan 3106 [ 2554.009346][T20064] pgsteal 938 [ 2554.009346][T20064] pgscan_kswapd 0 [ 2554.009346][T20064] pgscan_direct 3106 [ 2554.009346][T20064] pgscan_khugepaged 0 [ 2554.009346][T20064] pgsteal_kswapd 0 [ 2554.009346][T20064] pgsteal_direct 938 [ 2554.009346][T20064] pgsteal_khugepaged 0 [ 2554.009346][T20064] pgfault 574478 [ 2554.009346][T20064] pgmajfault 0 [ 2554.009346][T20064] pgrefill 79949 [ 2554.009346][T20064] pgactivate 852 [ 2554.009346][T20064] pgdeactivate 0 [ 2554.009346][T20064] pglazyfree 0 [ 2554.009346][T20064] pglazyfreed 0 [ 2554.009346][T20064] zswpin 0 [ 2554.009346][T20064] zswpout 0 05:56:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x2f120000) 05:56:08 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85276}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2554.198470][T20064] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20064,uid=0 [ 2554.224779][T20064] Memory cgroup out of memory: Killed process 20064 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x76, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:08 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3201, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:08 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe03}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2554.386957][T20093] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2554.409567][T20104] wireguard71: entered allmulticast mode [ 2554.410966][T20093] CPU: 1 PID: 20093 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2554.425718][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2554.435825][T20093] Call Trace: [ 2554.439145][T20093] [ 2554.442123][T20093] dump_stack_lvl+0x136/0x150 [ 2554.446875][T20093] dump_header+0x10a/0xd70 [ 2554.451370][T20093] oom_kill_process+0x25d/0x600 [ 2554.456378][T20093] out_of_memory+0x35c/0x1660 [ 2554.461128][T20093] ? find_held_lock+0x2d/0x110 [ 2554.465957][T20093] ? oom_killer_disable+0x2b0/0x2b0 [ 2554.471198][T20093] ? rcu_read_unlock+0x9/0x60 [ 2554.475917][T20093] ? find_held_lock+0x2d/0x110 [ 2554.480851][T20093] mem_cgroup_out_of_memory+0x206/0x270 [ 2554.486528][T20093] ? mem_cgroup_margin+0x130/0x130 [ 2554.491680][T20093] ? lock_downgrade+0x690/0x690 [ 2554.496608][T20093] try_charge_memcg+0xf9b/0x13b0 [ 2554.501588][T20093] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2554.507701][T20093] ? rcu_read_unlock+0x9/0x60 [ 2554.512426][T20093] ? lock_downgrade+0x690/0x690 [ 2554.517326][T20093] charge_memcg+0x90/0x3b0 [ 2554.521780][T20093] __mem_cgroup_charge+0x2b/0x90 [ 2554.526750][T20093] ? copy_mc_to_kernel+0x3e/0x90 [ 2554.531730][T20093] do_wp_page+0x8eb/0x3530 [ 2554.536189][T20093] ? lock_release+0x670/0x670 [ 2554.540895][T20093] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2554.546304][T20093] ? do_raw_spin_lock+0x124/0x2b0 [ 2554.551364][T20093] ? spin_bug+0x1c0/0x1c0 [ 2554.555726][T20093] ? lock_downgrade+0x690/0x690 [ 2554.560619][T20093] __handle_mm_fault+0x19a1/0x3e60 [ 2554.565773][T20093] ? vm_iomap_memory+0x190/0x190 [ 2554.570771][T20093] handle_mm_fault+0x2ba/0x9c0 [ 2554.575611][T20093] do_user_addr_fault+0x47e/0x1240 [ 2554.580770][T20093] ? rcu_is_watching+0x12/0xb0 [ 2554.585575][T20093] exc_page_fault+0x98/0x170 [ 2554.590217][T20093] asm_exc_page_fault+0x26/0x30 [ 2554.595211][T20093] RIP: 0033:0x7ffae1836f7e [ 2554.599659][T20093] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2554.619383][T20093] RSP: 002b:00007ffdc9b413b0 EFLAGS: 00010246 [ 2554.625496][T20093] RAX: 00007ffae19abf80 RBX: 00007ffae19abf8c RCX: 0000000000000000 05:56:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7a, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2554.633862][T20093] RDX: 0000000000000000 RSI: 00007ffae19abf88 RDI: 0000000000000000 [ 2554.641862][T20093] RBP: 00007ffae19abf80 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2554.649857][T20093] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffae19abf8c [ 2554.657851][T20093] R13: 00007ffae1400060 R14: 00007ffae19abf80 R15: 0000000000000000 [ 2554.665890][T20093] [ 2554.694269][T20093] memory: usage 307200kB, limit 307200kB, failcnt 24525 [ 2554.712416][T20093] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2554.719561][T20093] Memory cgroup stats for /syz3: [ 2554.720367][T20093] anon 90112 [ 2554.720367][T20093] file 733184 [ 2554.720367][T20093] kernel 313749504 [ 2554.720367][T20093] kernel_stack 65536 [ 2554.720367][T20093] pagetables 69632 [ 2554.720367][T20093] sec_pagetables 0 [ 2554.720367][T20093] percpu 5375552 [ 2554.720367][T20093] sock 0 [ 2554.720367][T20093] vmalloc 8192 [ 2554.720367][T20093] shmem 733184 [ 2554.720367][T20093] zswap 0 [ 2554.720367][T20093] zswapped 0 [ 2554.720367][T20093] file_mapped 667648 [ 2554.720367][T20093] file_dirty 0 [ 2554.720367][T20093] file_writeback 0 [ 2554.720367][T20093] swapcached 0 [ 2554.720367][T20093] anon_thp 0 [ 2554.720367][T20093] file_thp 0 [ 2554.720367][T20093] shmem_thp 0 [ 2554.720367][T20093] inactive_anon 20480 [ 2554.720367][T20093] active_anon 802816 [ 2554.720367][T20093] inactive_file 0 [ 2554.720367][T20093] active_file 0 [ 2554.720367][T20093] unevictable 0 [ 2554.720367][T20093] slab_reclaimable 1215536 [ 2554.720367][T20093] slab_unreclaimable 306975264 [ 2554.720367][T20093] slab 308190800 [ 2554.720367][T20093] workingset_refault_anon 0 [ 2554.720367][T20093] workingset_refault_file 130 [ 2554.720367][T20093] workingset_activate_anon 0 [ 2554.720367][T20093] workingset_activate_file 0 [ 2554.720367][T20093] workingset_restore_anon 0 [ 2554.720367][T20093] workingset_restore_file 0 [ 2554.720367][T20093] workingset_nodereclaim 0 [ 2554.720367][T20093] pgscan 3117 [ 2554.720367][T20093] pgsteal 939 [ 2554.720367][T20093] pgscan_kswapd 0 [ 2554.720367][T20093] pgscan_direct 3117 [ 2554.720367][T20093] pgscan_khugepaged 0 [ 2554.720367][T20093] pgsteal_kswapd 0 [ 2554.720367][T20093] pgsteal_direct 939 [ 2554.720367][T20093] pgsteal_khugepaged 0 [ 2554.720367][T20093] pgfault 574516 [ 2554.720367][T20093] pgmajfault 0 [ 2554.720367][T20093] pgrefill 79949 [ 2554.720367][T20093] pgactivate 862 [ 2554.720367][T20093] pgdeactivate 0 [ 2554.720367][T20093] pglazyfree 0 [ 2554.720367][T20093] pglazyfreed 0 [ 2554.720367][T20093] zswpin 0 [ 2554.720367][T20093] zswpout 0 [ 2554.910025][T20093] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20093,uid=0 [ 2554.926062][T20093] Memory cgroup out of memory: Killed process 20093 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2554.946463][T20078] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2554.960274][T20078] CPU: 1 PID: 20078 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2554.970764][T20078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2554.980949][T20078] Call Trace: [ 2554.984242][T20078] [ 2554.987185][T20078] dump_stack_lvl+0x136/0x150 [ 2554.991899][T20078] dump_header+0x10a/0xd70 [ 2554.996344][T20078] oom_kill_process+0x25d/0x600 [ 2555.001220][T20078] out_of_memory+0x35c/0x1660 [ 2555.005925][T20078] ? oom_killer_disable+0x2b0/0x2b0 [ 2555.011148][T20078] ? rcu_read_unlock+0x9/0x60 [ 2555.015856][T20078] ? find_held_lock+0x2d/0x110 [ 2555.020669][T20078] mem_cgroup_out_of_memory+0x206/0x270 [ 2555.026294][T20078] ? mem_cgroup_margin+0x130/0x130 [ 2555.031457][T20078] ? lock_downgrade+0x690/0x690 [ 2555.036337][T20078] try_charge_memcg+0xf9b/0x13b0 [ 2555.041294][T20078] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2555.047297][T20078] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2555.053046][T20078] ? lock_downgrade+0x690/0x690 [ 2555.057936][T20078] ? lock_downgrade+0x690/0x690 [ 2555.062822][T20078] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2555.068394][T20078] __alloc_pages+0x1f3/0x4a0 [ 2555.073023][T20078] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2555.079849][T20078] ? __lock_acquire+0xbc5/0x5d40 [ 2555.084845][T20078] alloc_pages+0x1aa/0x270 [ 2555.089277][T20078] __pmd_alloc+0x3f/0x5d0 [ 2555.093631][T20078] __handle_mm_fault+0x932/0x3e60 [ 2555.098698][T20078] ? vm_iomap_memory+0x190/0x190 [ 2555.103681][T20078] handle_mm_fault+0x2ba/0x9c0 [ 2555.108476][T20078] do_user_addr_fault+0x47e/0x1240 [ 2555.113613][T20078] ? rcu_is_watching+0x12/0xb0 [ 2555.118401][T20078] exc_page_fault+0x98/0x170 [ 2555.123041][T20078] asm_exc_page_fault+0x26/0x30 [ 2555.127955][T20078] RIP: 0033:0x7f493322bde9 [ 2555.132383][T20078] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2555.152020][T20078] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2555.158105][T20078] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2555.166097][T20078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2555.174102][T20078] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2555.182109][T20078] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000026f2ec [ 2555.190095][T20078] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 05:56:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x32000000) [ 2555.198091][T20078] [ 2555.203397][T20113] wireguard53: entered allmulticast mode [ 2555.210578][T20078] memory: usage 307200kB, limit 307200kB, failcnt 13158 [ 2555.217644][T20078] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2555.226430][T20078] Memory cgroup stats for /syz2: [ 2555.226688][T20078] anon 135168 [ 2555.226688][T20078] file 688128 [ 2555.226688][T20078] kernel 313749504 [ 2555.226688][T20078] kernel_stack 65536 [ 2555.226688][T20078] pagetables 73728 [ 2555.226688][T20078] sec_pagetables 0 [ 2555.226688][T20078] percpu 5387328 [ 2555.226688][T20078] sock 0 [ 2555.226688][T20078] vmalloc 8192 [ 2555.226688][T20078] shmem 679936 [ 2555.226688][T20078] zswap 0 [ 2555.226688][T20078] zswapped 0 [ 2555.226688][T20078] file_mapped 630784 [ 2555.226688][T20078] file_dirty 8192 [ 2555.226688][T20078] file_writeback 0 [ 2555.226688][T20078] swapcached 0 [ 2555.226688][T20078] anon_thp 0 [ 2555.226688][T20078] file_thp 0 [ 2555.226688][T20078] shmem_thp 0 [ 2555.226688][T20078] inactive_anon 770048 [ 2555.226688][T20078] active_anon 45056 [ 2555.226688][T20078] inactive_file 0 [ 2555.226688][T20078] active_file 8192 [ 2555.226688][T20078] unevictable 0 [ 2555.226688][T20078] slab_reclaimable 512504 [ 2555.226688][T20078] slab_unreclaimable 307665392 [ 2555.226688][T20078] slab 308177896 [ 2555.226688][T20078] workingset_refault_anon 0 [ 2555.226688][T20078] workingset_refault_file 2 [ 2555.226688][T20078] workingset_activate_anon 0 [ 2555.226688][T20078] workingset_activate_file 0 [ 2555.226688][T20078] workingset_restore_anon 0 [ 2555.226688][T20078] workingset_restore_file 1 [ 2555.226688][T20078] workingset_nodereclaim 0 [ 2555.226688][T20078] pgscan 1707 [ 2555.226688][T20078] pgsteal 130 [ 2555.226688][T20078] pgscan_kswapd 109 [ 2555.226688][T20078] pgscan_direct 1598 [ 2555.226688][T20078] pgscan_khugepaged 0 [ 2555.226688][T20078] pgsteal_kswapd 108 [ 2555.226688][T20078] pgsteal_direct 22 [ 2555.226688][T20078] pgsteal_khugepaged 0 [ 2555.226688][T20078] pgfault 1008625 [ 2555.226688][T20078] pgmajfault 0 [ 2555.226688][T20078] pgrefill 11190 [ 2555.226688][T20078] pgactivate 1554 [ 2555.226688][T20078] pgdeactivate 0 [ 2555.226688][T20078] pglazyfree 0 [ 2555.226688][T20078] pglazyfreed 0 [ 2555.226688][T20078] zswpin 0 [ 2555.226688][T20078] zswpout 0 [ 2555.433760][T20078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20078,uid=0 05:56:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2e120000}, 0x0) [ 2555.450494][T20078] Memory cgroup out of memory: Killed process 20078 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x8a, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2555.599386][T20120] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2555.619604][T20120] CPU: 1 PID: 20120 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2555.630113][T20120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2555.640224][T20120] Call Trace: [ 2555.643552][T20120] [ 2555.646530][T20120] dump_stack_lvl+0x136/0x150 [ 2555.651288][T20120] dump_header+0x10a/0xd70 [ 2555.655787][T20120] oom_kill_process+0x25d/0x600 [ 2555.660707][T20120] out_of_memory+0x35c/0x1660 [ 2555.665462][T20120] ? find_held_lock+0x2d/0x110 [ 2555.670304][T20120] ? oom_killer_disable+0x2b0/0x2b0 [ 2555.675573][T20120] ? rcu_read_unlock+0x9/0x60 [ 2555.680323][T20120] ? find_held_lock+0x2d/0x110 [ 2555.685167][T20120] mem_cgroup_out_of_memory+0x206/0x270 [ 2555.690793][T20120] ? mem_cgroup_margin+0x130/0x130 05:56:09 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85277}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xca, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2555.696003][T20120] ? lock_downgrade+0x690/0x690 [ 2555.700958][T20120] try_charge_memcg+0xf9b/0x13b0 [ 2555.705971][T20120] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2555.712083][T20120] ? rcu_read_unlock+0x9/0x60 [ 2555.716834][T20120] ? lock_downgrade+0x690/0x690 [ 2555.722025][T20120] charge_memcg+0x90/0x3b0 [ 2555.726514][T20120] __mem_cgroup_charge+0x2b/0x90 [ 2555.731523][T20120] ? copy_mc_to_kernel+0x3e/0x90 [ 2555.736542][T20120] do_wp_page+0x8eb/0x3530 [ 2555.741061][T20120] ? lock_release+0x670/0x670 05:56:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xce, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2555.745799][T20120] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2555.751248][T20120] ? do_raw_spin_lock+0x124/0x2b0 [ 2555.756350][T20120] ? spin_bug+0x1c0/0x1c0 [ 2555.760807][T20120] ? lock_downgrade+0x690/0x690 [ 2555.765733][T20120] __handle_mm_fault+0x19a1/0x3e60 [ 2555.770914][T20120] ? vm_iomap_memory+0x190/0x190 [ 2555.775943][T20120] handle_mm_fault+0x2ba/0x9c0 [ 2555.780787][T20120] do_user_addr_fault+0x47e/0x1240 [ 2555.786056][T20120] ? rcu_is_watching+0x12/0xb0 [ 2555.790895][T20120] exc_page_fault+0x98/0x170 [ 2555.795569][T20120] asm_exc_page_fault+0x26/0x30 [ 2555.800493][T20120] RIP: 0033:0x7ffae1836f7e [ 2555.804962][T20120] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2555.824625][T20120] RSP: 002b:00007ffdc9b413b0 EFLAGS: 00010246 [ 2555.830738][T20120] RAX: 00007ffae19abf80 RBX: 00007ffae19abf8c RCX: 0000000000000000 [ 2555.838760][T20120] RDX: 0000000000000000 RSI: 00007ffae19abf88 RDI: 0000000000000000 [ 2555.846756][T20120] RBP: 00007ffae19abf80 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2555.854749][T20120] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffae19abf8c [ 2555.862831][T20120] R13: 00007ffae1400060 R14: 00007ffae19abf80 R15: 0000000000000000 [ 2555.870869][T20120] [ 2555.877243][T20120] memory: usage 307200kB, limit 307200kB, failcnt 24602 [ 2555.885286][T20135] wireguard71: entered allmulticast mode [ 2555.885487][T20120] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2555.898159][T20120] Memory cgroup stats for /syz3: [ 2555.898452][T20120] anon 90112 [ 2555.898452][T20120] file 733184 [ 2555.898452][T20120] kernel 313749504 [ 2555.898452][T20120] kernel_stack 65536 [ 2555.898452][T20120] pagetables 69632 [ 2555.898452][T20120] sec_pagetables 0 [ 2555.898452][T20120] percpu 5375552 [ 2555.898452][T20120] sock 0 [ 2555.898452][T20120] vmalloc 8192 [ 2555.898452][T20120] shmem 733184 [ 2555.898452][T20120] zswap 0 [ 2555.898452][T20120] zswapped 0 [ 2555.898452][T20120] file_mapped 667648 [ 2555.898452][T20120] file_dirty 0 [ 2555.898452][T20120] file_writeback 0 [ 2555.898452][T20120] swapcached 0 [ 2555.898452][T20120] anon_thp 0 [ 2555.898452][T20120] file_thp 0 [ 2555.898452][T20120] shmem_thp 0 [ 2555.898452][T20120] inactive_anon 8192 [ 2555.898452][T20120] active_anon 815104 [ 2555.898452][T20120] inactive_file 0 [ 2555.898452][T20120] active_file 0 [ 2555.898452][T20120] unevictable 0 [ 2555.898452][T20120] slab_reclaimable 1215536 [ 2555.898452][T20120] slab_unreclaimable 306975264 [ 2555.898452][T20120] slab 308190800 [ 2555.898452][T20120] workingset_refault_anon 0 [ 2555.898452][T20120] workingset_refault_file 130 [ 2555.898452][T20120] workingset_activate_anon 0 [ 2555.898452][T20120] workingset_activate_file 0 [ 2555.898452][T20120] workingset_restore_anon 0 [ 2555.898452][T20120] workingset_restore_file 0 [ 2555.898452][T20120] workingset_nodereclaim 0 [ 2555.898452][T20120] pgscan 3117 [ 2555.898452][T20120] pgsteal 939 [ 2555.898452][T20120] pgscan_kswapd 0 [ 2555.898452][T20120] pgscan_direct 3117 [ 2555.898452][T20120] pgscan_khugepaged 0 [ 2555.898452][T20120] pgsteal_kswapd 0 [ 2555.898452][T20120] pgsteal_direct 939 [ 2555.898452][T20120] pgsteal_khugepaged 0 [ 2555.898452][T20120] pgfault 574557 [ 2555.898452][T20120] pgmajfault 0 [ 2555.898452][T20120] pgrefill 79949 [ 2555.898452][T20120] pgactivate 862 [ 2555.898452][T20120] pgdeactivate 0 [ 2555.898452][T20120] pglazyfree 0 [ 2555.898452][T20120] pglazyfreed 0 [ 2555.898452][T20120] zswpin 0 [ 2555.898452][T20120] zswpout 0 05:56:10 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2556.094622][T20120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20120,uid=0 05:56:10 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3601, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2556.155932][T20120] Memory cgroup out of memory: Killed process 20120 (syz-executor.3) total-vm:54548kB, anon-rss:432kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2556.186959][T20145] wireguard53: entered allmulticast mode 05:56:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x32020000) [ 2556.228794][T20127] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2556.288541][T20127] CPU: 0 PID: 20127 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2556.301483][T20127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2556.311679][T20127] Call Trace: [ 2556.314981][T20127] [ 2556.317935][T20127] dump_stack_lvl+0x136/0x150 [ 2556.322664][T20127] dump_header+0x10a/0xd70 [ 2556.328688][T20127] oom_kill_process+0x25d/0x600 [ 2556.333583][T20127] out_of_memory+0x35c/0x1660 [ 2556.338300][T20127] ? find_held_lock+0x2d/0x110 [ 2556.343112][T20127] ? oom_killer_disable+0x2b0/0x2b0 [ 2556.348358][T20127] ? rcu_read_unlock+0x9/0x60 [ 2556.353102][T20127] ? find_held_lock+0x2d/0x110 [ 2556.357933][T20127] mem_cgroup_out_of_memory+0x206/0x270 [ 2556.363629][T20127] ? mem_cgroup_margin+0x130/0x130 [ 2556.368787][T20127] ? lock_downgrade+0x690/0x690 [ 2556.373688][T20127] try_charge_memcg+0xf9b/0x13b0 [ 2556.378680][T20127] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2556.384701][T20127] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2556.390469][T20127] ? lock_downgrade+0x690/0x690 [ 2556.395448][T20127] ? lock_downgrade+0x690/0x690 [ 2556.400343][T20127] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2556.405930][T20127] __alloc_pages+0x1f3/0x4a0 [ 2556.410557][T20127] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2556.417447][T20127] ? __lock_acquire+0xbc5/0x5d40 [ 2556.422431][T20127] alloc_pages+0x1aa/0x270 [ 2556.426881][T20127] __pmd_alloc+0x3f/0x5d0 [ 2556.431256][T20127] __handle_mm_fault+0x932/0x3e60 [ 2556.436353][T20127] ? vm_iomap_memory+0x190/0x190 [ 2556.441356][T20127] handle_mm_fault+0x2ba/0x9c0 [ 2556.446166][T20127] do_user_addr_fault+0x47e/0x1240 [ 2556.451317][T20127] ? rcu_is_watching+0x12/0xb0 [ 2556.456128][T20127] exc_page_fault+0x98/0x170 [ 2556.460764][T20127] asm_exc_page_fault+0x26/0x30 [ 2556.465659][T20127] RIP: 0033:0x7f493322bde9 [ 2556.470100][T20127] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2556.489743][T20127] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2556.495839][T20127] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2556.504005][T20127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2556.511999][T20127] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2556.519988][T20127] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000026f883 [ 2556.527988][T20127] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2556.536001][T20127] 05:56:10 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85278}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2556.569941][T20127] memory: usage 307200kB, limit 307200kB, failcnt 13276 [ 2556.593734][T20127] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2556.621095][T20127] Memory cgroup stats for /syz2: [ 2556.621362][T20127] anon 135168 [ 2556.621362][T20127] file 688128 [ 2556.621362][T20127] kernel 313749504 [ 2556.621362][T20127] kernel_stack 65536 [ 2556.621362][T20127] pagetables 73728 [ 2556.621362][T20127] sec_pagetables 0 [ 2556.621362][T20127] percpu 5387328 [ 2556.621362][T20127] sock 0 [ 2556.621362][T20127] vmalloc 8192 [ 2556.621362][T20127] shmem 679936 [ 2556.621362][T20127] zswap 0 [ 2556.621362][T20127] zswapped 0 [ 2556.621362][T20127] file_mapped 630784 [ 2556.621362][T20127] file_dirty 8192 [ 2556.621362][T20127] file_writeback 0 [ 2556.621362][T20127] swapcached 0 [ 2556.621362][T20127] anon_thp 0 [ 2556.621362][T20127] file_thp 0 [ 2556.621362][T20127] shmem_thp 0 [ 2556.621362][T20127] inactive_anon 765952 [ 2556.621362][T20127] active_anon 49152 [ 2556.621362][T20127] inactive_file 0 [ 2556.621362][T20127] active_file 8192 [ 2556.621362][T20127] unevictable 0 [ 2556.621362][T20127] slab_reclaimable 512504 [ 2556.621362][T20127] slab_unreclaimable 307665392 [ 2556.621362][T20127] slab 308177896 [ 2556.621362][T20127] workingset_refault_anon 0 [ 2556.621362][T20127] workingset_refault_file 2 [ 2556.621362][T20127] workingset_activate_anon 0 [ 2556.621362][T20127] workingset_activate_file 0 [ 2556.621362][T20127] workingset_restore_anon 0 [ 2556.621362][T20127] workingset_restore_file 1 [ 2556.621362][T20127] workingset_nodereclaim 0 [ 2556.621362][T20127] pgscan 1707 [ 2556.621362][T20127] pgsteal 130 [ 2556.621362][T20127] pgscan_kswapd 109 [ 2556.621362][T20127] pgscan_direct 1598 [ 2556.621362][T20127] pgscan_khugepaged 0 [ 2556.621362][T20127] pgsteal_kswapd 108 05:56:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf2, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2556.621362][T20127] pgsteal_direct 22 [ 2556.621362][T20127] pgsteal_khugepaged 0 [ 2556.621362][T20127] pgfault 1008686 [ 2556.621362][T20127] pgmajfault 0 [ 2556.621362][T20127] pgrefill 11347 [ 2556.621362][T20127] pgactivate 1554 [ 2556.621362][T20127] pgdeactivate 0 [ 2556.621362][T20127] pglazyfree 0 [ 2556.621362][T20127] pglazyfreed 0 [ 2556.621362][T20127] zswpin 0 [ 2556.621362][T20127] zswpout 0 [ 2556.831524][T20162] wireguard71: entered allmulticast mode 05:56:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf4, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2556.870576][T20127] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20127,uid=0 [ 2556.899104][T20127] Memory cgroup out of memory: Killed process 20127 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2f010700}, 0x0) 05:56:11 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2556.923860][T20159] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2556.934804][T20159] CPU: 0 PID: 20159 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2556.945299][T20159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2556.955405][T20159] Call Trace: [ 2556.958733][T20159] [ 2556.961709][T20159] dump_stack_lvl+0x136/0x150 [ 2556.966471][T20159] dump_header+0x10a/0xd70 [ 2556.970992][T20159] oom_kill_process+0x25d/0x600 [ 2556.975924][T20159] out_of_memory+0x35c/0x1660 [ 2556.980709][T20159] ? oom_killer_disable+0x2b0/0x2b0 [ 2556.985993][T20159] ? rcu_read_unlock+0x9/0x60 [ 2556.990836][T20159] ? find_held_lock+0x2d/0x110 [ 2556.995779][T20159] mem_cgroup_out_of_memory+0x206/0x270 [ 2557.001416][T20159] ? mem_cgroup_margin+0x130/0x130 [ 2557.006612][T20159] ? lock_downgrade+0x690/0x690 [ 2557.011552][T20159] try_charge_memcg+0xf9b/0x13b0 [ 2557.016564][T20159] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2557.022612][T20159] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2557.028503][T20159] ? lock_downgrade+0x690/0x690 [ 2557.033426][T20159] ? lock_downgrade+0x690/0x690 [ 2557.038355][T20159] ? rcu_read_unlock+0x9/0x60 [ 2557.043111][T20159] obj_cgroup_charge+0x2af/0x5e0 [ 2557.048113][T20159] ? alloc_pid+0xd3/0xd70 [ 2557.052513][T20159] kmem_cache_alloc+0xb1/0x3b0 [ 2557.057349][T20159] alloc_pid+0xd3/0xd70 [ 2557.061580][T20159] ? copy_thread+0x5e0/0xa00 [ 2557.066251][T20159] ? copy_namespaces+0x1e3/0x500 [ 2557.071280][T20159] copy_process+0x40fd/0x7580 [ 2557.076056][T20159] ? __cleanup_sighand+0xb0/0xb0 05:56:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf8, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2557.081055][T20159] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2557.087101][T20159] ? psi_memstall_leave+0x174/0x250 [ 2557.092368][T20159] ? lock_downgrade+0x690/0x690 [ 2557.097286][T20159] kernel_clone+0xeb/0x890 [ 2557.101771][T20159] ? create_io_thread+0xf0/0xf0 [ 2557.106698][T20159] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2557.113017][T20159] ? lock_downgrade+0x690/0x690 [ 2557.117944][T20159] __do_sys_clone+0xba/0x100 [ 2557.122600][T20159] ? kernel_clone+0x890/0x890 [ 2557.127366][T20159] ? syscall_enter_from_user_mode+0x26/0x80 [ 2557.133371][T20159] do_syscall_64+0x39/0xb0 [ 2557.137866][T20159] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2557.143830][T20159] RIP: 0033:0x7ffae188d591 [ 2557.148325][T20159] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2557.167981][T20159] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2557.176435][T20159] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2557.184461][T20159] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2557.192490][T20159] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2557.200519][T20159] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2557.208561][T20159] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2557.216599][T20159] [ 2557.222575][T20174] wireguard53: entered promiscuous mode 05:56:11 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3802, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2557.238474][T20174] wireguard53: entered allmulticast mode [ 2557.297478][T20159] memory: usage 307184kB, limit 307200kB, failcnt 24680 [ 2557.305171][T20159] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2557.325653][T20159] Memory cgroup stats for /syz3: [ 2557.326039][T20159] anon 90112 [ 2557.326039][T20159] file 733184 [ 2557.326039][T20159] kernel 313733120 [ 2557.326039][T20159] kernel_stack 65536 [ 2557.326039][T20159] pagetables 69632 [ 2557.326039][T20159] sec_pagetables 0 [ 2557.326039][T20159] percpu 5375488 [ 2557.326039][T20159] sock 0 [ 2557.326039][T20159] vmalloc 8192 [ 2557.326039][T20159] shmem 733184 [ 2557.326039][T20159] zswap 0 [ 2557.326039][T20159] zswapped 0 [ 2557.326039][T20159] file_mapped 667648 [ 2557.326039][T20159] file_dirty 0 [ 2557.326039][T20159] file_writeback 0 [ 2557.326039][T20159] swapcached 0 [ 2557.326039][T20159] anon_thp 0 [ 2557.326039][T20159] file_thp 0 [ 2557.326039][T20159] shmem_thp 0 [ 2557.326039][T20159] inactive_anon 8192 [ 2557.326039][T20159] active_anon 815104 [ 2557.326039][T20159] inactive_file 0 [ 2557.326039][T20159] active_file 0 [ 2557.326039][T20159] unevictable 0 [ 2557.326039][T20159] slab_reclaimable 1215536 [ 2557.326039][T20159] slab_unreclaimable 306963024 [ 2557.326039][T20159] slab 308178560 [ 2557.326039][T20159] workingset_refault_anon 0 [ 2557.326039][T20159] workingset_refault_file 130 [ 2557.326039][T20159] workingset_activate_anon 0 [ 2557.326039][T20159] workingset_activate_file 0 [ 2557.326039][T20159] workingset_restore_anon 0 [ 2557.326039][T20159] workingset_restore_file 0 [ 2557.326039][T20159] workingset_nodereclaim 0 [ 2557.326039][T20159] pgscan 3117 [ 2557.326039][T20159] pgsteal 939 [ 2557.326039][T20159] pgscan_kswapd 0 [ 2557.326039][T20159] pgscan_direct 3117 [ 2557.326039][T20159] pgscan_khugepaged 0 [ 2557.326039][T20159] pgsteal_kswapd 0 [ 2557.326039][T20159] pgsteal_direct 939 [ 2557.326039][T20159] pgsteal_khugepaged 0 [ 2557.326039][T20159] pgfault 574594 [ 2557.326039][T20159] pgmajfault 0 [ 2557.326039][T20159] pgrefill 79949 [ 2557.326039][T20159] pgactivate 862 [ 2557.326039][T20159] pgdeactivate 0 [ 2557.326039][T20159] pglazyfree 0 [ 2557.326039][T20159] pglazyfreed 0 [ 2557.326039][T20159] zswpin 0 [ 2557.326039][T20159] zswpout 0 05:56:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfa, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2557.533668][T20159] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20159,uid=0 [ 2557.550783][T20159] Memory cgroup out of memory: Killed process 20159 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:11 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85279}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x3e030000) [ 2557.607558][T20180] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2557.635993][T20180] CPU: 1 PID: 20180 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2557.646500][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2557.656618][T20180] Call Trace: [ 2557.659951][T20180] [ 2557.662942][T20180] dump_stack_lvl+0x136/0x150 [ 2557.667693][T20180] dump_header+0x10a/0xd70 [ 2557.672184][T20180] oom_kill_process+0x25d/0x600 [ 2557.677145][T20180] out_of_memory+0x35c/0x1660 [ 2557.681890][T20180] ? find_held_lock+0x2d/0x110 [ 2557.686781][T20180] ? oom_killer_disable+0x2b0/0x2b0 [ 2557.692047][T20180] ? rcu_read_unlock+0x9/0x60 [ 2557.696798][T20180] ? find_held_lock+0x2d/0x110 [ 2557.701633][T20180] mem_cgroup_out_of_memory+0x206/0x270 [ 2557.707239][T20180] ? mem_cgroup_margin+0x130/0x130 [ 2557.712393][T20180] ? lock_downgrade+0x690/0x690 [ 2557.717312][T20180] try_charge_memcg+0xf9b/0x13b0 [ 2557.722308][T20180] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2557.728323][T20180] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2557.734092][T20180] ? lock_downgrade+0x690/0x690 [ 2557.738975][T20180] ? lock_downgrade+0x690/0x690 [ 2557.743871][T20180] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2557.749458][T20180] __alloc_pages+0x1f3/0x4a0 [ 2557.754081][T20180] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2557.760883][T20180] ? __lock_acquire+0xbc5/0x5d40 [ 2557.765866][T20180] alloc_pages+0x1aa/0x270 [ 2557.770314][T20180] __pmd_alloc+0x3f/0x5d0 [ 2557.774680][T20180] __handle_mm_fault+0x932/0x3e60 [ 2557.779761][T20180] ? vm_iomap_memory+0x190/0x190 [ 2557.784764][T20180] handle_mm_fault+0x2ba/0x9c0 [ 2557.789572][T20180] do_user_addr_fault+0x47e/0x1240 [ 2557.794725][T20180] ? rcu_is_watching+0x12/0xb0 [ 2557.799532][T20180] exc_page_fault+0x98/0x170 [ 2557.804171][T20180] asm_exc_page_fault+0x26/0x30 [ 2557.809055][T20180] RIP: 0033:0x7f493322bde9 [ 2557.813495][T20180] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2557.833131][T20180] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2557.839226][T20180] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2557.847233][T20180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 05:56:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfc, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2557.855230][T20180] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2557.863224][T20180] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000026feaf [ 2557.871222][T20180] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2557.879499][T20180] [ 2557.923389][T20180] memory: usage 307200kB, limit 307200kB, failcnt 13407 [ 2557.935247][T20198] wireguard71: entered allmulticast mode [ 2557.945058][T20180] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2557.954515][T20180] Memory cgroup stats for /syz2: [ 2557.954889][T20180] anon 135168 [ 2557.954889][T20180] file 688128 [ 2557.954889][T20180] kernel 313749504 [ 2557.954889][T20180] kernel_stack 65536 [ 2557.954889][T20180] pagetables 73728 [ 2557.954889][T20180] sec_pagetables 0 [ 2557.954889][T20180] percpu 5387328 [ 2557.954889][T20180] sock 0 [ 2557.954889][T20180] vmalloc 8192 [ 2557.954889][T20180] shmem 679936 [ 2557.954889][T20180] zswap 0 [ 2557.954889][T20180] zswapped 0 [ 2557.954889][T20180] file_mapped 630784 [ 2557.954889][T20180] file_dirty 8192 [ 2557.954889][T20180] file_writeback 0 [ 2557.954889][T20180] swapcached 0 [ 2557.954889][T20180] anon_thp 0 [ 2557.954889][T20180] file_thp 0 [ 2557.954889][T20180] shmem_thp 0 [ 2557.954889][T20180] inactive_anon 774144 [ 2557.954889][T20180] active_anon 40960 [ 2557.954889][T20180] inactive_file 0 [ 2557.954889][T20180] active_file 8192 [ 2557.954889][T20180] unevictable 0 [ 2557.954889][T20180] slab_reclaimable 512504 [ 2557.954889][T20180] slab_unreclaimable 307665392 [ 2557.954889][T20180] slab 308177896 [ 2557.954889][T20180] workingset_refault_anon 0 [ 2557.954889][T20180] workingset_refault_file 2 [ 2557.954889][T20180] workingset_activate_anon 0 [ 2557.954889][T20180] workingset_activate_file 0 [ 2557.954889][T20180] workingset_restore_anon 0 [ 2557.954889][T20180] workingset_restore_file 1 [ 2557.954889][T20180] workingset_nodereclaim 0 [ 2557.954889][T20180] pgscan 1707 [ 2557.954889][T20180] pgsteal 130 [ 2557.954889][T20180] pgscan_kswapd 109 [ 2557.954889][T20180] pgscan_direct 1598 [ 2557.954889][T20180] pgscan_khugepaged 0 [ 2557.954889][T20180] pgsteal_kswapd 108 [ 2557.954889][T20180] pgsteal_direct 22 [ 2557.954889][T20180] pgsteal_khugepaged 0 [ 2557.954889][T20180] pgfault 1008749 [ 2557.954889][T20180] pgmajfault 0 [ 2557.954889][T20180] pgrefill 11533 [ 2557.954889][T20180] pgactivate 1554 [ 2557.954889][T20180] pgdeactivate 0 [ 2557.954889][T20180] pglazyfree 0 [ 2557.954889][T20180] pglazyfreed 0 [ 2557.954889][T20180] zswpin 0 [ 2557.954889][T20180] zswpout 0 05:56:12 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2558.159650][T20180] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20180,uid=0 [ 2558.190188][T20180] Memory cgroup out of memory: Killed process 20180 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x132, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2f120000}, 0x0) 05:56:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x136, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2558.362246][T20219] wireguard53: entered promiscuous mode [ 2558.371338][T20203] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2558.378749][T20219] wireguard53: entered allmulticast mode [ 2558.393098][T20203] CPU: 0 PID: 20203 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2558.403688][T20203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2558.413805][T20203] Call Trace: [ 2558.417123][T20203] [ 2558.420090][T20203] dump_stack_lvl+0x136/0x150 [ 2558.424829][T20203] dump_header+0x10a/0xd70 [ 2558.429295][T20203] oom_kill_process+0x25d/0x600 [ 2558.434197][T20203] out_of_memory+0x35c/0x1660 [ 2558.438953][T20203] ? find_held_lock+0x2d/0x110 [ 2558.443767][T20203] ? oom_killer_disable+0x2b0/0x2b0 [ 2558.449005][T20203] ? rcu_read_unlock+0x9/0x60 [ 2558.453724][T20203] ? find_held_lock+0x2d/0x110 [ 2558.458542][T20203] mem_cgroup_out_of_memory+0x206/0x270 [ 2558.464139][T20203] ? mem_cgroup_margin+0x130/0x130 [ 2558.469296][T20203] ? lock_downgrade+0x690/0x690 [ 2558.474194][T20203] try_charge_memcg+0xf9b/0x13b0 [ 2558.479172][T20203] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2558.485192][T20203] ? rcu_read_unlock+0x9/0x60 [ 2558.489999][T20203] ? lock_downgrade+0x690/0x690 [ 2558.494898][T20203] charge_memcg+0x90/0x3b0 [ 2558.499348][T20203] __mem_cgroup_charge+0x2b/0x90 [ 2558.504321][T20203] do_wp_page+0x8eb/0x3530 [ 2558.508782][T20203] ? lock_release+0x670/0x670 [ 2558.513489][T20203] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2558.518901][T20203] ? do_raw_spin_lock+0x124/0x2b0 [ 2558.523960][T20203] ? spin_bug+0x1c0/0x1c0 [ 2558.528322][T20203] ? lock_downgrade+0x690/0x690 [ 2558.533214][T20203] __handle_mm_fault+0x19a1/0x3e60 [ 2558.538369][T20203] ? vm_iomap_memory+0x190/0x190 [ 2558.543370][T20203] handle_mm_fault+0x2ba/0x9c0 [ 2558.548182][T20203] do_user_addr_fault+0x47e/0x1240 [ 2558.553340][T20203] ? rcu_is_watching+0x12/0xb0 [ 2558.558140][T20203] exc_page_fault+0x98/0x170 [ 2558.562775][T20203] asm_exc_page_fault+0x26/0x30 [ 2558.567657][T20203] RIP: 0033:0x7ffae1839610 [ 2558.572103][T20203] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2558.591823][T20203] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2558.598008][T20203] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2558.606005][T20203] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2558.614011][T20203] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2558.622007][T20203] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2558.630000][T20203] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2558.638006][T20203] ? __sys_socket+0x7c/0x250 [ 2558.642644][T20203] 05:56:12 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8527a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:12 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3a02, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2558.665259][T20203] memory: usage 307200kB, limit 307200kB, failcnt 24796 [ 2558.694064][T20203] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2558.707686][T20203] Memory cgroup stats for /syz3: [ 2558.708065][T20203] anon 106496 [ 2558.708065][T20203] file 733184 [ 2558.708065][T20203] kernel 313733120 [ 2558.708065][T20203] kernel_stack 65536 [ 2558.708065][T20203] pagetables 69632 [ 2558.708065][T20203] sec_pagetables 0 [ 2558.708065][T20203] percpu 5375488 [ 2558.708065][T20203] sock 0 [ 2558.708065][T20203] vmalloc 8192 [ 2558.708065][T20203] shmem 733184 [ 2558.708065][T20203] zswap 0 [ 2558.708065][T20203] zswapped 0 [ 2558.708065][T20203] file_mapped 667648 [ 2558.708065][T20203] file_dirty 0 [ 2558.708065][T20203] file_writeback 0 [ 2558.708065][T20203] swapcached 0 [ 2558.708065][T20203] anon_thp 0 [ 2558.708065][T20203] file_thp 0 [ 2558.708065][T20203] shmem_thp 0 [ 2558.708065][T20203] inactive_anon 0 [ 2558.708065][T20203] active_anon 839680 [ 2558.708065][T20203] inactive_file 0 [ 2558.708065][T20203] active_file 0 [ 2558.708065][T20203] unevictable 0 [ 2558.708065][T20203] slab_reclaimable 1217464 [ 2558.708065][T20203] slab_unreclaimable 306964000 [ 2558.708065][T20203] slab 308181464 [ 2558.708065][T20203] workingset_refault_anon 0 [ 2558.708065][T20203] workingset_refault_file 130 [ 2558.708065][T20203] workingset_activate_anon 0 [ 2558.708065][T20203] workingset_activate_file 0 [ 2558.708065][T20203] workingset_restore_anon 0 [ 2558.708065][T20203] workingset_restore_file 0 [ 2558.708065][T20203] workingset_nodereclaim 0 [ 2558.708065][T20203] pgscan 3117 [ 2558.708065][T20203] pgsteal 939 [ 2558.708065][T20203] pgscan_kswapd 0 [ 2558.708065][T20203] pgscan_direct 3117 [ 2558.708065][T20203] pgscan_khugepaged 0 [ 2558.708065][T20203] pgsteal_kswapd 0 [ 2558.708065][T20203] pgsteal_direct 939 [ 2558.708065][T20203] pgsteal_khugepaged 0 [ 2558.708065][T20203] pgfault 574638 [ 2558.708065][T20203] pgmajfault 0 [ 2558.708065][T20203] pgrefill 79949 [ 2558.708065][T20203] pgactivate 862 [ 2558.708065][T20203] pgdeactivate 0 [ 2558.708065][T20203] pglazyfree 0 [ 2558.708065][T20203] pglazyfreed 0 [ 2558.708065][T20203] zswpin 0 [ 2558.708065][T20203] zswpout 0 [ 2558.758456][T20231] wireguard71: entered allmulticast mode 05:56:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x3f000000) [ 2558.901714][T20203] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20203,uid=0 [ 2558.930798][T20203] Memory cgroup out of memory: Killed process 20203 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x14a, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2559.060097][T20240] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2559.070487][T20240] CPU: 0 PID: 20240 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2559.080964][T20240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2559.091069][T20240] Call Trace: [ 2559.094384][T20240] [ 2559.097354][T20240] dump_stack_lvl+0x136/0x150 [ 2559.102106][T20240] dump_header+0x10a/0xd70 [ 2559.106593][T20240] oom_kill_process+0x25d/0x600 [ 2559.111515][T20240] out_of_memory+0x35c/0x1660 [ 2559.116264][T20240] ? find_held_lock+0x2d/0x110 [ 2559.121107][T20240] ? oom_killer_disable+0x2b0/0x2b0 [ 2559.126398][T20240] ? rcu_read_unlock+0x9/0x60 [ 2559.131124][T20240] ? find_held_lock+0x2d/0x110 [ 2559.136147][T20240] mem_cgroup_out_of_memory+0x206/0x270 [ 2559.141782][T20240] ? mem_cgroup_margin+0x130/0x130 [ 2559.146965][T20240] ? lock_downgrade+0x690/0x690 [ 2559.151892][T20240] try_charge_memcg+0xf9b/0x13b0 [ 2559.156874][T20240] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2559.162896][T20240] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2559.168683][T20240] ? lock_downgrade+0x690/0x690 [ 2559.173592][T20240] ? lock_downgrade+0x690/0x690 [ 2559.178501][T20240] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2559.184085][T20240] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2559.190290][T20240] copy_process+0x139b/0x7580 [ 2559.195006][T20240] ? __lock_acquire+0xbc5/0x5d40 [ 2559.199982][T20240] ? __cleanup_sighand+0xb0/0xb0 [ 2559.205221][T20240] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2559.211581][T20240] ? psi_memstall_leave+0x174/0x250 [ 2559.216823][T20240] ? lock_downgrade+0x690/0x690 [ 2559.221709][T20240] kernel_clone+0xeb/0x890 [ 2559.226248][T20240] ? create_io_thread+0xf0/0xf0 [ 2559.231139][T20240] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2559.237519][T20240] ? lock_downgrade+0x690/0x690 [ 2559.242435][T20240] __do_sys_clone+0xba/0x100 [ 2559.247056][T20240] ? kernel_clone+0x890/0x890 [ 2559.251798][T20240] ? syscall_enter_from_user_mode+0x26/0x80 [ 2559.257744][T20240] do_syscall_64+0x39/0xb0 [ 2559.262196][T20240] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2559.268123][T20240] RIP: 0033:0x7ffae188d591 [ 2559.272567][T20240] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2559.292304][T20240] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2559.300794][T20240] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2559.308814][T20240] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2559.316817][T20240] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2559.324839][T20240] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2559.332836][T20240] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2559.340863][T20240] [ 2559.351663][T20240] memory: usage 307196kB, limit 307200kB, failcnt 24866 [ 2559.359091][T20240] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2559.367430][T20240] Memory cgroup stats for /syz3: [ 2559.367721][T20240] anon 90112 [ 2559.367721][T20240] file 733184 [ 2559.367721][T20240] kernel 313745408 [ 2559.367721][T20240] kernel_stack 32768 [ 2559.367721][T20240] pagetables 69632 [ 2559.367721][T20240] sec_pagetables 0 [ 2559.367721][T20240] percpu 5375552 [ 2559.367721][T20240] sock 0 [ 2559.367721][T20240] vmalloc 8192 [ 2559.367721][T20240] shmem 733184 [ 2559.367721][T20240] zswap 0 [ 2559.367721][T20240] zswapped 0 [ 2559.367721][T20240] file_mapped 667648 [ 2559.367721][T20240] file_dirty 0 [ 2559.367721][T20240] file_writeback 0 [ 2559.367721][T20240] swapcached 0 [ 2559.367721][T20240] anon_thp 0 [ 2559.367721][T20240] file_thp 0 [ 2559.367721][T20240] shmem_thp 0 [ 2559.367721][T20240] inactive_anon 0 [ 2559.367721][T20240] active_anon 823296 [ 2559.367721][T20240] inactive_file 0 [ 2559.367721][T20240] active_file 0 [ 2559.367721][T20240] unevictable 0 [ 2559.367721][T20240] slab_reclaimable 1227376 [ 2559.367721][T20240] slab_unreclaimable 306975448 [ 2559.367721][T20240] slab 308202824 [ 2559.367721][T20240] workingset_refault_anon 0 [ 2559.367721][T20240] workingset_refault_file 130 [ 2559.367721][T20240] workingset_activate_anon 0 [ 2559.367721][T20240] workingset_activate_file 0 [ 2559.367721][T20240] workingset_restore_anon 0 [ 2559.367721][T20240] workingset_restore_file 0 [ 2559.367721][T20240] workingset_nodereclaim 0 [ 2559.367721][T20240] pgscan 3117 [ 2559.367721][T20240] pgsteal 939 [ 2559.367721][T20240] pgscan_kswapd 0 [ 2559.367721][T20240] pgscan_direct 3117 [ 2559.367721][T20240] pgscan_khugepaged 0 [ 2559.367721][T20240] pgsteal_kswapd 0 [ 2559.367721][T20240] pgsteal_direct 939 [ 2559.367721][T20240] pgsteal_khugepaged 0 [ 2559.367721][T20240] pgfault 574675 [ 2559.367721][T20240] pgmajfault 0 [ 2559.367721][T20240] pgrefill 79949 [ 2559.367721][T20240] pgactivate 862 [ 2559.367721][T20240] pgdeactivate 0 [ 2559.367721][T20240] pglazyfree 0 [ 2559.367721][T20240] pglazyfreed 0 [ 2559.367721][T20240] zswpin 0 [ 2559.367721][T20240] zswpout 0 05:56:13 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2559.560127][T20240] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20240,uid=0 [ 2559.593807][T20240] Memory cgroup out of memory: Killed process 20240 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2559.626437][T20213] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2559.644787][T20213] CPU: 1 PID: 20213 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2559.655288][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2559.665392][T20213] Call Trace: [ 2559.668717][T20213] [ 2559.671698][T20213] dump_stack_lvl+0x136/0x150 [ 2559.676455][T20213] dump_header+0x10a/0xd70 [ 2559.680948][T20213] oom_kill_process+0x25d/0x600 [ 2559.685888][T20213] out_of_memory+0x35c/0x1660 [ 2559.690643][T20213] ? oom_killer_disable+0x2b0/0x2b0 [ 2559.695997][T20213] ? rcu_read_unlock+0x9/0x60 [ 2559.700747][T20213] ? find_held_lock+0x2d/0x110 [ 2559.705593][T20213] mem_cgroup_out_of_memory+0x206/0x270 [ 2559.711233][T20213] ? mem_cgroup_margin+0x130/0x130 [ 2559.716431][T20213] ? lock_downgrade+0x690/0x690 [ 2559.721325][T20213] try_charge_memcg+0xf9b/0x13b0 [ 2559.726295][T20213] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2559.732296][T20213] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2559.738097][T20213] ? lock_downgrade+0x690/0x690 [ 2559.743009][T20213] ? lock_downgrade+0x690/0x690 [ 2559.748007][T20213] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2559.753624][T20213] __alloc_pages+0x1f3/0x4a0 [ 2559.758286][T20213] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2559.765119][T20213] ? __lock_acquire+0xbc5/0x5d40 [ 2559.770137][T20213] alloc_pages+0x1aa/0x270 05:56:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x40000000) [ 2559.774615][T20213] __pmd_alloc+0x3f/0x5d0 [ 2559.779000][T20213] __handle_mm_fault+0x932/0x3e60 [ 2559.784075][T20213] ? vm_iomap_memory+0x190/0x190 [ 2559.789064][T20213] handle_mm_fault+0x2ba/0x9c0 [ 2559.793887][T20213] do_user_addr_fault+0x47e/0x1240 [ 2559.799067][T20213] ? rcu_is_watching+0x12/0xb0 [ 2559.803901][T20213] exc_page_fault+0x98/0x170 [ 2559.808586][T20213] asm_exc_page_fault+0x26/0x30 [ 2559.813511][T20213] RIP: 0033:0x7f493322bde9 [ 2559.817989][T20213] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2559.837747][T20213] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2559.843878][T20213] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2559.851899][T20213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2559.859926][T20213] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2559.867931][T20213] R10: 00007f4932e00068 R11: 0000000000000246 R12: 00000000002702ed [ 2559.875941][T20213] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2559.883977][T20213] 05:56:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x170, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:14 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8527b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2559.921588][T20213] memory: usage 307200kB, limit 307200kB, failcnt 13522 [ 2559.946849][T20250] wireguard53: entered promiscuous mode [ 2559.955179][T20250] wireguard53: entered allmulticast mode [ 2559.965090][T20213] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2559.980143][T20213] Memory cgroup stats for /syz2: [ 2559.980471][T20213] anon 135168 [ 2559.980471][T20213] file 688128 [ 2559.980471][T20213] kernel 313749504 [ 2559.980471][T20213] kernel_stack 65536 [ 2559.980471][T20213] pagetables 73728 [ 2559.980471][T20213] sec_pagetables 0 [ 2559.980471][T20213] percpu 5387328 [ 2559.980471][T20213] sock 0 [ 2559.980471][T20213] vmalloc 8192 [ 2559.980471][T20213] shmem 679936 [ 2559.980471][T20213] zswap 0 [ 2559.980471][T20213] zswapped 0 [ 2559.980471][T20213] file_mapped 630784 [ 2559.980471][T20213] file_dirty 8192 [ 2559.980471][T20213] file_writeback 0 [ 2559.980471][T20213] swapcached 0 [ 2559.980471][T20213] anon_thp 0 [ 2559.980471][T20213] file_thp 0 [ 2559.980471][T20213] shmem_thp 0 [ 2559.980471][T20213] inactive_anon 36864 [ 2559.980471][T20213] active_anon 778240 [ 2559.980471][T20213] inactive_file 0 [ 2559.980471][T20213] active_file 8192 [ 2559.980471][T20213] unevictable 0 [ 2559.980471][T20213] slab_reclaimable 512504 [ 2559.980471][T20213] slab_unreclaimable 307665392 [ 2559.980471][T20213] slab 308177896 [ 2559.980471][T20213] workingset_refault_anon 0 [ 2559.980471][T20213] workingset_refault_file 2 [ 2559.980471][T20213] workingset_activate_anon 0 [ 2559.980471][T20213] workingset_activate_file 0 [ 2559.980471][T20213] workingset_restore_anon 0 [ 2559.980471][T20213] workingset_restore_file 1 [ 2559.980471][T20213] workingset_nodereclaim 0 [ 2559.980471][T20213] pgscan 1707 [ 2559.980471][T20213] pgsteal 130 [ 2559.980471][T20213] pgscan_kswapd 109 [ 2559.980471][T20213] pgscan_direct 1598 [ 2559.980471][T20213] pgscan_khugepaged 0 [ 2559.980471][T20213] pgsteal_kswapd 108 05:56:14 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x3c01, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2559.980471][T20213] pgsteal_direct 22 [ 2559.980471][T20213] pgsteal_khugepaged 0 [ 2559.980471][T20213] pgfault 1008806 [ 2559.980471][T20213] pgmajfault 0 [ 2559.980471][T20213] pgrefill 11697 [ 2559.980471][T20213] pgactivate 1554 [ 2559.980471][T20213] pgdeactivate 0 [ 2559.980471][T20213] pglazyfree 0 [ 2559.980471][T20213] pglazyfreed 0 [ 2559.980471][T20213] zswpin 0 [ 2559.980471][T20213] zswpout 0 05:56:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30010700}, 0x0) [ 2560.172027][T20213] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20213,uid=0 [ 2560.197982][T20213] Memory cgroup out of memory: Killed process 20213 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2560.267521][T20248] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2560.278706][T20248] CPU: 0 PID: 20248 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2560.289280][T20248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2560.299428][T20248] Call Trace: [ 2560.302758][T20248] [ 2560.305743][T20248] dump_stack_lvl+0x136/0x150 [ 2560.310505][T20248] dump_header+0x10a/0xd70 [ 2560.315006][T20248] oom_kill_process+0x25d/0x600 [ 2560.319942][T20248] out_of_memory+0x35c/0x1660 [ 2560.324730][T20248] ? find_held_lock+0x2d/0x110 [ 2560.329587][T20248] ? oom_killer_disable+0x2b0/0x2b0 [ 2560.334861][T20248] ? rcu_read_unlock+0x9/0x60 [ 2560.339701][T20248] ? find_held_lock+0x2d/0x110 [ 2560.344549][T20248] mem_cgroup_out_of_memory+0x206/0x270 [ 2560.350182][T20248] ? mem_cgroup_margin+0x130/0x130 [ 2560.355383][T20248] ? lock_downgrade+0x690/0x690 [ 2560.360308][T20248] try_charge_memcg+0xf9b/0x13b0 [ 2560.365320][T20248] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2560.371433][T20248] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2560.377238][T20248] ? lock_downgrade+0x690/0x690 [ 2560.382593][T20248] ? lock_downgrade+0x690/0x690 [ 2560.387715][T20248] ? rcu_read_unlock+0x9/0x60 [ 2560.392594][T20248] obj_cgroup_charge+0x2af/0x5e0 [ 2560.397613][T20248] ? alloc_pid+0xd3/0xd70 [ 2560.402049][T20248] kmem_cache_alloc+0xb1/0x3b0 [ 2560.407035][T20248] alloc_pid+0xd3/0xd70 [ 2560.411322][T20248] ? copy_thread+0x5e0/0xa00 05:56:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x172, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2560.416019][T20248] ? copy_namespaces+0x1e3/0x500 [ 2560.421042][T20248] copy_process+0x40fd/0x7580 [ 2560.425811][T20248] ? __cleanup_sighand+0xb0/0xb0 [ 2560.430845][T20248] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2560.436914][T20248] ? psi_memstall_leave+0x174/0x250 [ 2560.442368][T20248] ? lock_downgrade+0x690/0x690 [ 2560.447330][T20248] kernel_clone+0xeb/0x890 [ 2560.451917][T20248] ? create_io_thread+0xf0/0xf0 [ 2560.456857][T20248] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2560.463214][T20248] ? lock_downgrade+0x690/0x690 [ 2560.468186][T20248] __do_sys_clone+0xba/0x100 [ 2560.472856][T20248] ? kernel_clone+0x890/0x890 [ 2560.477610][T20248] ? syscall_enter_from_user_mode+0x26/0x80 [ 2560.483751][T20248] do_syscall_64+0x39/0xb0 [ 2560.488326][T20248] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2560.494278][T20248] RIP: 0033:0x7ffae188d591 [ 2560.498756][T20248] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2560.518501][T20248] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2560.526997][T20248] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2560.535428][T20248] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2560.543713][T20248] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2560.552035][T20248] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2560.560247][T20248] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2560.568690][T20248] [ 2560.575714][T20258] wireguard71: entered allmulticast mode [ 2560.595544][T20248] memory: usage 307200kB, limit 307200kB, failcnt 24964 [ 2560.602966][T20248] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2560.610626][T20248] Memory cgroup stats for /syz3: [ 2560.610924][T20248] anon 90112 [ 2560.610924][T20248] file 733184 [ 2560.610924][T20248] kernel 313749504 [ 2560.610924][T20248] kernel_stack 65536 [ 2560.610924][T20248] pagetables 69632 [ 2560.610924][T20248] sec_pagetables 0 [ 2560.610924][T20248] percpu 5375552 [ 2560.610924][T20248] sock 0 [ 2560.610924][T20248] vmalloc 8192 [ 2560.610924][T20248] shmem 733184 [ 2560.610924][T20248] zswap 0 [ 2560.610924][T20248] zswapped 0 [ 2560.610924][T20248] file_mapped 667648 [ 2560.610924][T20248] file_dirty 0 [ 2560.610924][T20248] file_writeback 0 [ 2560.610924][T20248] swapcached 0 [ 2560.610924][T20248] anon_thp 0 [ 2560.610924][T20248] file_thp 0 [ 2560.610924][T20248] shmem_thp 0 [ 2560.610924][T20248] inactive_anon 0 [ 2560.610924][T20248] active_anon 823296 [ 2560.610924][T20248] inactive_file 0 [ 2560.610924][T20248] active_file 0 [ 2560.610924][T20248] unevictable 0 [ 2560.610924][T20248] slab_reclaimable 1215536 [ 2560.610924][T20248] slab_unreclaimable 306974936 [ 2560.610924][T20248] slab 308190472 [ 2560.610924][T20248] workingset_refault_anon 0 [ 2560.610924][T20248] workingset_refault_file 130 [ 2560.610924][T20248] workingset_activate_anon 0 [ 2560.610924][T20248] workingset_activate_file 0 [ 2560.610924][T20248] workingset_restore_anon 0 [ 2560.610924][T20248] workingset_restore_file 0 [ 2560.610924][T20248] workingset_nodereclaim 0 [ 2560.610924][T20248] pgscan 3117 [ 2560.610924][T20248] pgsteal 939 [ 2560.610924][T20248] pgscan_kswapd 0 [ 2560.610924][T20248] pgscan_direct 3117 [ 2560.610924][T20248] pgscan_khugepaged 0 [ 2560.610924][T20248] pgsteal_kswapd 0 [ 2560.610924][T20248] pgsteal_direct 939 [ 2560.610924][T20248] pgsteal_khugepaged 0 [ 2560.610924][T20248] pgfault 574712 [ 2560.610924][T20248] pgmajfault 0 [ 2560.610924][T20248] pgrefill 79949 [ 2560.610924][T20248] pgactivate 862 [ 2560.610924][T20248] pgdeactivate 0 [ 2560.610924][T20248] pglazyfree 0 [ 2560.610924][T20248] pglazyfreed 0 [ 2560.610924][T20248] zswpin 0 [ 2560.610924][T20248] zswpout 0 [ 2560.802266][T20248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20248,uid=0 [ 2560.828896][T20248] Memory cgroup out of memory: Killed process 20248 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x42010000) [ 2560.914209][T20266] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2560.926552][T20266] CPU: 0 PID: 20266 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2560.937058][T20266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2560.947143][T20266] Call Trace: [ 2560.950442][T20266] [ 2560.953394][T20266] dump_stack_lvl+0x136/0x150 [ 2560.958123][T20266] dump_header+0x10a/0xd70 [ 2560.962594][T20266] oom_kill_process+0x25d/0x600 [ 2560.967754][T20266] out_of_memory+0x35c/0x1660 [ 2560.972667][T20266] ? find_held_lock+0x2d/0x110 [ 2560.977480][T20266] ? oom_killer_disable+0x2b0/0x2b0 [ 2560.982818][T20266] ? rcu_read_unlock+0x9/0x60 [ 2560.987882][T20266] ? find_held_lock+0x2d/0x110 [ 2560.992697][T20266] mem_cgroup_out_of_memory+0x206/0x270 [ 2560.998310][T20266] ? mem_cgroup_margin+0x130/0x130 [ 2561.003478][T20266] ? lock_downgrade+0x690/0x690 [ 2561.008410][T20266] try_charge_memcg+0xf9b/0x13b0 [ 2561.013432][T20266] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2561.019629][T20266] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2561.025400][T20266] ? lock_downgrade+0x690/0x690 [ 2561.030302][T20266] ? lock_downgrade+0x690/0x690 [ 2561.035210][T20266] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2561.041000][T20266] __alloc_pages+0x1f3/0x4a0 [ 2561.045633][T20266] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2561.052543][T20266] ? __lock_acquire+0xbc5/0x5d40 [ 2561.057546][T20266] alloc_pages+0x1aa/0x270 [ 2561.062005][T20266] __pmd_alloc+0x3f/0x5d0 [ 2561.066374][T20266] __handle_mm_fault+0x932/0x3e60 [ 2561.071455][T20266] ? vm_iomap_memory+0x190/0x190 [ 2561.076545][T20266] handle_mm_fault+0x2ba/0x9c0 [ 2561.081364][T20266] do_user_addr_fault+0x47e/0x1240 [ 2561.086532][T20266] ? rcu_is_watching+0x12/0xb0 [ 2561.091372][T20266] exc_page_fault+0x98/0x170 [ 2561.096128][T20266] asm_exc_page_fault+0x26/0x30 [ 2561.101268][T20266] RIP: 0033:0x7f493322bde9 [ 2561.105734][T20266] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2561.125402][T20266] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2561.131612][T20266] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2561.139631][T20266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2561.147638][T20266] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2561.155649][T20266] R10: 00007f4932e00068 R11: 0000000000000246 R12: 0000000000270cb3 [ 2561.163736][T20266] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2561.171752][T20266] [ 2561.191401][T20266] memory: usage 307200kB, limit 307200kB, failcnt 13641 05:56:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x17c, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2561.218184][T20266] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2561.231668][T20266] Memory cgroup stats for /syz2: [ 2561.231986][T20266] anon 135168 [ 2561.231986][T20266] file 688128 [ 2561.231986][T20266] kernel 313749504 [ 2561.231986][T20266] kernel_stack 65536 [ 2561.231986][T20266] pagetables 73728 [ 2561.231986][T20266] sec_pagetables 0 [ 2561.231986][T20266] percpu 5387328 [ 2561.231986][T20266] sock 0 [ 2561.231986][T20266] vmalloc 8192 [ 2561.231986][T20266] shmem 679936 [ 2561.231986][T20266] zswap 0 [ 2561.231986][T20266] zswapped 0 [ 2561.231986][T20266] file_mapped 630784 [ 2561.231986][T20266] file_dirty 8192 [ 2561.231986][T20266] file_writeback 0 [ 2561.231986][T20266] swapcached 0 [ 2561.231986][T20266] anon_thp 0 [ 2561.231986][T20266] file_thp 0 [ 2561.231986][T20266] shmem_thp 0 [ 2561.231986][T20266] inactive_anon 61440 [ 2561.231986][T20266] active_anon 753664 [ 2561.231986][T20266] inactive_file 0 [ 2561.231986][T20266] active_file 8192 [ 2561.231986][T20266] unevictable 0 [ 2561.231986][T20266] slab_reclaimable 512504 [ 2561.231986][T20266] slab_unreclaimable 307665392 [ 2561.231986][T20266] slab 308177896 [ 2561.231986][T20266] workingset_refault_anon 0 [ 2561.231986][T20266] workingset_refault_file 2 [ 2561.231986][T20266] workingset_activate_anon 0 [ 2561.231986][T20266] workingset_activate_file 0 [ 2561.231986][T20266] workingset_restore_anon 0 [ 2561.231986][T20266] workingset_restore_file 1 [ 2561.231986][T20266] workingset_nodereclaim 0 [ 2561.231986][T20266] pgscan 1707 [ 2561.231986][T20266] pgsteal 130 [ 2561.231986][T20266] pgscan_kswapd 109 [ 2561.231986][T20266] pgscan_direct 1598 [ 2561.231986][T20266] pgscan_khugepaged 0 [ 2561.231986][T20266] pgsteal_kswapd 108 [ 2561.231986][T20266] pgsteal_direct 22 [ 2561.231986][T20266] pgsteal_khugepaged 0 [ 2561.231986][T20266] pgfault 1008864 [ 2561.231986][T20266] pgmajfault 0 [ 2561.231986][T20266] pgrefill 11855 [ 2561.231986][T20266] pgactivate 1554 [ 2561.231986][T20266] pgdeactivate 0 [ 2561.231986][T20266] pglazyfree 0 [ 2561.231986][T20266] pglazyfreed 0 [ 2561.231986][T20266] zswpin 0 [ 2561.231986][T20266] zswpout 0 [ 2561.422684][T20266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20266,uid=0 05:56:15 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x190, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:15 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8527c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x31010700}, 0x0) [ 2561.550388][T20266] Memory cgroup out of memory: Killed process 20266 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2561.574745][T20276] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2561.603234][T20276] CPU: 1 PID: 20276 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2561.613740][T20276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2561.623851][T20276] Call Trace: [ 2561.627196][T20276] [ 2561.630170][T20276] dump_stack_lvl+0x136/0x150 [ 2561.634946][T20276] dump_header+0x10a/0xd70 [ 2561.639439][T20276] oom_kill_process+0x25d/0x600 [ 2561.644453][T20276] out_of_memory+0x35c/0x1660 [ 2561.649217][T20276] ? oom_killer_disable+0x2b0/0x2b0 [ 2561.654498][T20276] ? rcu_read_unlock+0x9/0x60 [ 2561.659284][T20276] ? find_held_lock+0x2d/0x110 [ 2561.664135][T20276] mem_cgroup_out_of_memory+0x206/0x270 [ 2561.669750][T20276] ? mem_cgroup_margin+0x130/0x130 [ 2561.674912][T20276] ? lock_downgrade+0x690/0x690 [ 2561.679813][T20276] try_charge_memcg+0xf9b/0x13b0 [ 2561.684798][T20276] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2561.690816][T20276] ? rcu_read_unlock+0x9/0x60 [ 2561.695535][T20276] ? lock_downgrade+0x690/0x690 [ 2561.700428][T20276] charge_memcg+0x90/0x3b0 [ 2561.704965][T20276] __mem_cgroup_charge+0x2b/0x90 [ 2561.709968][T20276] ? copy_mc_to_kernel+0x3e/0x90 [ 2561.715052][T20276] do_wp_page+0x8eb/0x3530 [ 2561.719513][T20276] ? lock_release+0x670/0x670 [ 2561.724221][T20276] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2561.729634][T20276] ? do_raw_spin_lock+0x124/0x2b0 [ 2561.734694][T20276] ? spin_bug+0x1c0/0x1c0 [ 2561.739072][T20276] ? lock_downgrade+0x690/0x690 [ 2561.744141][T20276] __handle_mm_fault+0x19a1/0x3e60 [ 2561.749300][T20276] ? vm_iomap_memory+0x190/0x190 [ 2561.754299][T20276] handle_mm_fault+0x2ba/0x9c0 [ 2561.759105][T20276] do_user_addr_fault+0x47e/0x1240 [ 2561.764260][T20276] ? rcu_is_watching+0x12/0xb0 [ 2561.769067][T20276] exc_page_fault+0x98/0x170 [ 2561.773710][T20276] asm_exc_page_fault+0x26/0x30 [ 2561.778595][T20276] RIP: 0033:0x7ffae1836f7e [ 2561.783032][T20276] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2561.802672][T20276] RSP: 002b:00007ffdc9b413b0 EFLAGS: 00010246 [ 2561.808766][T20276] RAX: 00007ffae19abf80 RBX: 00007ffae19abf8c RCX: 0000000000000000 [ 2561.816788][T20276] RDX: 0000000000000000 RSI: 00007ffae19abf88 RDI: 0000000000000000 [ 2561.824786][T20276] RBP: 00007ffae19abf80 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2561.832784][T20276] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffae19abf8c [ 2561.840781][T20276] R13: 00007ffae1400060 R14: 00007ffae19abf80 R15: 0000000000000000 [ 2561.848794][T20276] 05:56:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x194, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:15 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2561.862306][T20276] memory: usage 307192kB, limit 307200kB, failcnt 25035 [ 2561.876397][T20276] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2561.898430][T20295] wireguard71: entered allmulticast mode [ 2561.913955][T20276] Memory cgroup stats for /syz3: [ 2561.914251][T20276] anon 90112 [ 2561.914251][T20276] file 733184 [ 2561.914251][T20276] kernel 313733120 [ 2561.914251][T20276] kernel_stack 65536 [ 2561.914251][T20276] pagetables 69632 [ 2561.914251][T20276] sec_pagetables 0 [ 2561.914251][T20276] percpu 5375488 [ 2561.914251][T20276] sock 0 [ 2561.914251][T20276] vmalloc 8192 [ 2561.914251][T20276] shmem 733184 [ 2561.914251][T20276] zswap 0 [ 2561.914251][T20276] zswapped 0 [ 2561.914251][T20276] file_mapped 667648 [ 2561.914251][T20276] file_dirty 0 [ 2561.914251][T20276] file_writeback 0 [ 2561.914251][T20276] swapcached 0 [ 2561.914251][T20276] anon_thp 0 [ 2561.914251][T20276] file_thp 0 [ 2561.914251][T20276] shmem_thp 0 [ 2561.914251][T20276] inactive_anon 0 [ 2561.914251][T20276] active_anon 823296 [ 2561.914251][T20276] inactive_file 0 [ 2561.914251][T20276] active_file 0 [ 2561.914251][T20276] unevictable 0 [ 2561.914251][T20276] slab_reclaimable 1215536 [ 2561.914251][T20276] slab_unreclaimable 306963352 [ 2561.914251][T20276] slab 308178888 [ 2561.914251][T20276] workingset_refault_anon 0 [ 2561.914251][T20276] workingset_refault_file 130 [ 2561.914251][T20276] workingset_activate_anon 0 [ 2561.914251][T20276] workingset_activate_file 0 [ 2561.914251][T20276] workingset_restore_anon 0 [ 2561.914251][T20276] workingset_restore_file 0 [ 2561.914251][T20276] workingset_nodereclaim 0 [ 2561.914251][T20276] pgscan 3117 [ 2561.914251][T20276] pgsteal 939 [ 2561.914251][T20276] pgscan_kswapd 0 [ 2561.914251][T20276] pgscan_direct 3117 [ 2561.914251][T20276] pgscan_khugepaged 0 [ 2561.914251][T20276] pgsteal_kswapd 0 [ 2561.914251][T20276] pgsteal_direct 939 [ 2561.914251][T20276] pgsteal_khugepaged 0 [ 2561.914251][T20276] pgfault 574750 [ 2561.914251][T20276] pgmajfault 0 [ 2561.914251][T20276] pgrefill 79949 [ 2561.914251][T20276] pgactivate 862 [ 2561.914251][T20276] pgdeactivate 0 [ 2561.914251][T20276] pglazyfree 0 [ 2561.914251][T20276] pglazyfreed 0 [ 2561.914251][T20276] zswpin 0 [ 2561.914251][T20276] zswpout 0 [ 2562.130520][T20276] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20276,uid=0 [ 2562.152442][T20276] Memory cgroup out of memory: Killed process 20276 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2562.174642][T20303] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2562.187365][T20303] CPU: 0 PID: 20303 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2562.197868][T20303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2562.207986][T20303] Call Trace: [ 2562.211319][T20303] [ 2562.214310][T20303] dump_stack_lvl+0x136/0x150 [ 2562.219078][T20303] dump_header+0x10a/0xd70 [ 2562.223615][T20303] oom_kill_process+0x25d/0x600 [ 2562.228554][T20303] out_of_memory+0x35c/0x1660 [ 2562.233320][T20303] ? oom_killer_disable+0x2b0/0x2b0 [ 2562.238604][T20303] ? rcu_read_unlock+0x9/0x60 [ 2562.243372][T20303] ? find_held_lock+0x2d/0x110 [ 2562.248231][T20303] mem_cgroup_out_of_memory+0x206/0x270 [ 2562.253870][T20303] ? mem_cgroup_margin+0x130/0x130 [ 2562.259067][T20303] ? lock_downgrade+0x690/0x690 [ 2562.264013][T20303] try_charge_memcg+0xf9b/0x13b0 [ 2562.269033][T20303] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2562.275250][T20303] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2562.281137][T20303] ? lock_downgrade+0x690/0x690 [ 2562.286055][T20303] ? lock_downgrade+0x690/0x690 [ 2562.291064][T20303] obj_cgroup_charge+0x2af/0x5e0 [ 2562.296102][T20303] ? sock_alloc_inode+0x27/0x1d0 [ 2562.301207][T20303] kmem_cache_alloc_lru+0x142/0x600 [ 2562.306500][T20303] sock_alloc_inode+0x27/0x1d0 [ 2562.311330][T20303] ? sock_free_inode+0x30/0x30 [ 2562.316167][T20303] alloc_inode+0x61/0x230 [ 2562.320558][T20303] new_inode_pseudo+0x17/0x80 [ 2562.325320][T20303] sock_alloc+0x40/0x270 [ 2562.329646][T20303] __sock_create+0xbd/0x850 [ 2562.334230][T20303] __sys_socket+0x133/0x250 [ 2562.338782][T20303] ? __sys_socket_file+0x1d0/0x1d0 [ 2562.343945][T20303] ? kcov_ioctl+0x384/0x6f0 [ 2562.348516][T20303] __x64_sys_socket+0x73/0xb0 [ 2562.353254][T20303] do_syscall_64+0x39/0xb0 [ 2562.357792][T20303] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2562.363748][T20303] RIP: 0033:0x7f493328c169 [ 2562.368212][T20303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2562.387889][T20303] RSP: 002b:00007f493404d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2562.396428][T20303] RAX: ffffffffffffffda RBX: 00007f49333abf80 RCX: 00007f493328c169 [ 2562.404440][T20303] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2562.412466][T20303] RBP: 00007f49332e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2562.420534][T20303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 05:56:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x42020000) 05:56:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1b4, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2562.428565][T20303] R13: 00007fff741ea2ef R14: 00007f493404d300 R15: 0000000000022000 [ 2562.437108][T20303] [ 2562.497779][T20303] memory: usage 307184kB, limit 307200kB, failcnt 13766 [ 2562.505096][T20303] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2562.518073][T20303] Memory cgroup stats for /syz2: [ 2562.518346][T20303] anon 106496 [ 2562.518346][T20303] file 688128 [ 2562.518346][T20303] kernel 313761792 [ 2562.518346][T20303] kernel_stack 65536 [ 2562.518346][T20303] pagetables 81920 [ 2562.518346][T20303] sec_pagetables 0 [ 2562.518346][T20303] percpu 5387328 [ 2562.518346][T20303] sock 0 [ 2562.518346][T20303] vmalloc 8192 [ 2562.518346][T20303] shmem 679936 [ 2562.518346][T20303] zswap 0 [ 2562.518346][T20303] zswapped 0 [ 2562.518346][T20303] file_mapped 630784 [ 2562.518346][T20303] file_dirty 8192 [ 2562.518346][T20303] file_writeback 0 [ 2562.518346][T20303] swapcached 0 [ 2562.518346][T20303] anon_thp 0 [ 2562.518346][T20303] file_thp 0 [ 2562.518346][T20303] shmem_thp 0 [ 2562.518346][T20303] inactive_anon 753664 [ 2562.518346][T20303] active_anon 32768 [ 2562.518346][T20303] inactive_file 0 [ 2562.518346][T20303] active_file 8192 [ 2562.518346][T20303] unevictable 0 [ 2562.518346][T20303] slab_reclaimable 510576 [ 2562.518346][T20303] slab_unreclaimable 307673504 [ 2562.518346][T20303] slab 308184080 [ 2562.518346][T20303] workingset_refault_anon 0 [ 2562.518346][T20303] workingset_refault_file 2 [ 2562.518346][T20303] workingset_activate_anon 0 [ 2562.518346][T20303] workingset_activate_file 0 [ 2562.518346][T20303] workingset_restore_anon 0 [ 2562.518346][T20303] workingset_restore_file 1 [ 2562.518346][T20303] workingset_nodereclaim 0 [ 2562.518346][T20303] pgscan 1707 [ 2562.518346][T20303] pgsteal 130 [ 2562.518346][T20303] pgscan_kswapd 109 [ 2562.518346][T20303] pgscan_direct 1598 [ 2562.518346][T20303] pgscan_khugepaged 0 [ 2562.518346][T20303] pgsteal_kswapd 108 [ 2562.518346][T20303] pgsteal_direct 22 [ 2562.518346][T20303] pgsteal_khugepaged 0 [ 2562.518346][T20303] pgfault 1008908 [ 2562.518346][T20303] pgmajfault 0 [ 2562.518346][T20303] pgrefill 12013 [ 2562.518346][T20303] pgactivate 1554 [ 2562.518346][T20303] pgdeactivate 0 [ 2562.518346][T20303] pglazyfree 0 05:56:16 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3ffff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2562.518346][T20303] pglazyfreed 0 [ 2562.518346][T20303] zswpin 0 [ 2562.518346][T20303] zswpout 0 [ 2562.720141][T20303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20300,uid=0 05:56:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1ba, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:16 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8527d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2562.754216][T20303] Memory cgroup out of memory: Killed process 20300 (syz-executor.2) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2562.802201][T20314] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2562.837192][T20314] CPU: 0 PID: 20314 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 05:56:16 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4800, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2562.847702][T20314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2562.857811][T20314] Call Trace: [ 2562.861145][T20314] [ 2562.864130][T20314] dump_stack_lvl+0x136/0x150 [ 2562.868920][T20314] dump_header+0x10a/0xd70 [ 2562.873416][T20314] oom_kill_process+0x25d/0x600 [ 2562.878368][T20314] out_of_memory+0x35c/0x1660 [ 2562.883128][T20314] ? find_held_lock+0x2d/0x110 [ 2562.887970][T20314] ? oom_killer_disable+0x2b0/0x2b0 [ 2562.893337][T20314] ? rcu_read_unlock+0x9/0x60 [ 2562.898103][T20314] ? find_held_lock+0x2d/0x110 [ 2562.902968][T20314] mem_cgroup_out_of_memory+0x206/0x270 [ 2562.908596][T20314] ? mem_cgroup_margin+0x130/0x130 [ 2562.913785][T20314] ? lock_downgrade+0x690/0x690 [ 2562.918727][T20314] try_charge_memcg+0xf9b/0x13b0 [ 2562.923827][T20314] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2562.929875][T20314] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2562.935681][T20314] ? lock_downgrade+0x690/0x690 [ 2562.940602][T20314] ? lock_downgrade+0x690/0x690 [ 2562.945518][T20314] ? rcu_read_unlock+0x9/0x60 [ 2562.950293][T20314] obj_cgroup_charge+0x2af/0x5e0 [ 2562.955311][T20314] __kmem_cache_alloc_node+0xa3/0x320 [ 2562.960868][T20314] ? copy_semundo+0x18b/0x300 [ 2562.965628][T20314] kmalloc_trace+0x26/0xe0 [ 2562.970127][T20314] copy_semundo+0x18b/0x300 [ 2562.974705][T20314] copy_process+0x24a2/0x7580 [ 2562.975624][T20303] socket: no more sockets [ 2562.979423][T20314] ? __lock_acquire+0xbc5/0x5d40 [ 2562.979483][T20314] ? __cleanup_sighand+0xb0/0xb0 [ 2562.993789][T20314] ? lockdep_hardirqs_on_prepare+0x410/0x410 05:56:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x32000000}, 0x0) [ 2562.999850][T20314] ? psi_memstall_leave+0x174/0x250 [ 2563.005125][T20314] ? lock_downgrade+0x690/0x690 [ 2563.010057][T20314] kernel_clone+0xeb/0x890 [ 2563.014548][T20314] ? create_io_thread+0xf0/0xf0 [ 2563.019473][T20314] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2563.025795][T20314] ? lock_downgrade+0x690/0x690 [ 2563.030728][T20314] __do_sys_clone+0xba/0x100 [ 2563.035398][T20314] ? kernel_clone+0x890/0x890 [ 2563.040167][T20314] ? syscall_enter_from_user_mode+0x26/0x80 [ 2563.046164][T20314] do_syscall_64+0x39/0xb0 [ 2563.050653][T20314] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2563.056615][T20314] RIP: 0033:0x7ffae188d591 [ 2563.061082][T20314] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2563.080792][T20314] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2563.089269][T20314] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 05:56:17 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2563.097315][T20314] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2563.105344][T20314] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2563.113373][T20314] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2563.121410][T20314] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2563.129462][T20314] [ 2563.134247][T20325] wireguard71: entered allmulticast mode 05:56:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1ca, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2563.212260][T20314] memory: usage 307184kB, limit 307200kB, failcnt 25137 [ 2563.219689][T20314] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2563.233145][T20314] Memory cgroup stats for /syz3: [ 2563.233437][T20314] anon 90112 [ 2563.233437][T20314] file 733184 [ 2563.233437][T20314] kernel 313733120 [ 2563.233437][T20314] kernel_stack 65536 [ 2563.233437][T20314] pagetables 69632 [ 2563.233437][T20314] sec_pagetables 0 [ 2563.233437][T20314] percpu 5375488 [ 2563.233437][T20314] sock 0 [ 2563.233437][T20314] vmalloc 8192 [ 2563.233437][T20314] shmem 733184 [ 2563.233437][T20314] zswap 0 [ 2563.233437][T20314] zswapped 0 [ 2563.233437][T20314] file_mapped 667648 [ 2563.233437][T20314] file_dirty 0 [ 2563.233437][T20314] file_writeback 0 [ 2563.233437][T20314] swapcached 0 [ 2563.233437][T20314] anon_thp 0 [ 2563.233437][T20314] file_thp 0 [ 2563.233437][T20314] shmem_thp 0 [ 2563.233437][T20314] inactive_anon 0 [ 2563.233437][T20314] active_anon 823296 [ 2563.233437][T20314] inactive_file 0 [ 2563.233437][T20314] active_file 0 [ 2563.233437][T20314] unevictable 0 [ 2563.233437][T20314] slab_reclaimable 1215536 [ 2563.233437][T20314] slab_unreclaimable 306962888 [ 2563.233437][T20314] slab 308178424 [ 2563.233437][T20314] workingset_refault_anon 0 [ 2563.233437][T20314] workingset_refault_file 130 [ 2563.233437][T20314] workingset_activate_anon 0 [ 2563.233437][T20314] workingset_activate_file 0 [ 2563.233437][T20314] workingset_restore_anon 0 [ 2563.233437][T20314] workingset_restore_file 0 [ 2563.233437][T20314] workingset_nodereclaim 0 [ 2563.233437][T20314] pgscan 3117 [ 2563.233437][T20314] pgsteal 939 [ 2563.233437][T20314] pgscan_kswapd 0 [ 2563.233437][T20314] pgscan_direct 3117 [ 2563.233437][T20314] pgscan_khugepaged 0 [ 2563.233437][T20314] pgsteal_kswapd 0 [ 2563.233437][T20314] pgsteal_direct 939 [ 2563.233437][T20314] pgsteal_khugepaged 0 [ 2563.233437][T20314] pgfault 574787 [ 2563.233437][T20314] pgmajfault 0 [ 2563.233437][T20314] pgrefill 79949 [ 2563.233437][T20314] pgactivate 862 [ 2563.233437][T20314] pgdeactivate 0 [ 2563.233437][T20314] pglazyfree 0 [ 2563.233437][T20314] pglazyfreed 0 [ 2563.233437][T20314] zswpin 0 [ 2563.233437][T20314] zswpout 0 [ 2563.438327][T20314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20314,uid=0 [ 2563.490124][T20314] Memory cgroup out of memory: Killed process 20314 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2563.512085][T20333] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2563.522928][T20333] CPU: 1 PID: 20333 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2563.533685][T20333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2563.543974][T20333] Call Trace: [ 2563.547297][T20333] [ 2563.550278][T20333] dump_stack_lvl+0x136/0x150 [ 2563.555052][T20333] dump_header+0x10a/0xd70 [ 2563.559551][T20333] oom_kill_process+0x25d/0x600 [ 2563.564488][T20333] out_of_memory+0x35c/0x1660 [ 2563.569249][T20333] ? oom_killer_disable+0x2b0/0x2b0 [ 2563.574520][T20333] ? rcu_read_unlock+0x9/0x60 [ 2563.579283][T20333] ? find_held_lock+0x2d/0x110 [ 2563.584142][T20333] mem_cgroup_out_of_memory+0x206/0x270 [ 2563.589768][T20333] ? mem_cgroup_margin+0x130/0x130 [ 2563.595007][T20333] ? lock_downgrade+0x690/0x690 [ 2563.599963][T20333] try_charge_memcg+0xf9b/0x13b0 [ 2563.604979][T20333] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2563.611130][T20333] ? rcu_read_unlock+0x9/0x60 [ 2563.615890][T20333] ? lock_downgrade+0x690/0x690 [ 2563.620826][T20333] charge_memcg+0x90/0x3b0 [ 2563.625303][T20333] __mem_cgroup_charge+0x2b/0x90 [ 2563.630315][T20333] do_wp_page+0x8eb/0x3530 [ 2563.634810][T20333] ? lock_release+0x670/0x670 05:56:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1de, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x46020000) [ 2563.639542][T20333] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2563.644995][T20333] ? do_raw_spin_lock+0x124/0x2b0 [ 2563.650098][T20333] ? spin_bug+0x1c0/0x1c0 [ 2563.654497][T20333] ? lock_downgrade+0x690/0x690 [ 2563.659429][T20333] __handle_mm_fault+0x19a1/0x3e60 [ 2563.664623][T20333] ? vm_iomap_memory+0x190/0x190 [ 2563.669670][T20333] handle_mm_fault+0x2ba/0x9c0 [ 2563.674514][T20333] do_user_addr_fault+0x47e/0x1240 [ 2563.679784][T20333] ? rcu_is_watching+0x12/0xb0 [ 2563.684621][T20333] exc_page_fault+0x98/0x170 [ 2563.689457][T20333] asm_exc_page_fault+0x26/0x30 [ 2563.694364][T20333] RIP: 0033:0x7f4933239610 [ 2563.698837][T20333] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2563.718508][T20333] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2563.724721][T20333] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2563.732747][T20333] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 05:56:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1f0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2563.740780][T20333] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2563.748813][T20333] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2563.756839][T20333] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2563.764881][T20333] ? apparmor_socket_create+0xb7/0x670 [ 2563.770447][T20333] [ 2563.786910][T20333] memory: usage 307188kB, limit 307200kB, failcnt 13911 [ 2563.799287][T20333] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2563.817992][T20333] Memory cgroup stats for /syz2: [ 2563.818283][T20333] anon 122880 [ 2563.818283][T20333] file 688128 [ 2563.818283][T20333] kernel 313749504 [ 2563.818283][T20333] kernel_stack 65536 [ 2563.818283][T20333] pagetables 73728 05:56:17 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8527e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1f2, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2563.818283][T20333] sec_pagetables 0 [ 2563.818283][T20333] percpu 5387328 [ 2563.818283][T20333] sock 0 [ 2563.818283][T20333] vmalloc 8192 [ 2563.818283][T20333] shmem 679936 [ 2563.818283][T20333] zswap 0 [ 2563.818283][T20333] zswapped 0 [ 2563.818283][T20333] file_mapped 630784 [ 2563.818283][T20333] file_dirty 8192 [ 2563.818283][T20333] file_writeback 0 [ 2563.818283][T20333] swapcached 0 [ 2563.818283][T20333] anon_thp 0 [ 2563.818283][T20333] file_thp 0 [ 2563.818283][T20333] shmem_thp 0 [ 2563.818283][T20333] inactive_anon 765952 [ 2563.818283][T20333] active_anon 36864 [ 2563.818283][T20333] inactive_file 0 [ 2563.818283][T20333] active_file 8192 [ 2563.818283][T20333] unevictable 0 [ 2563.818283][T20333] slab_reclaimable 512504 [ 2563.818283][T20333] slab_unreclaimable 307665392 [ 2563.818283][T20333] slab 308177896 [ 2563.818283][T20333] workingset_refault_anon 0 [ 2563.818283][T20333] workingset_refault_file 2 [ 2563.818283][T20333] workingset_activate_anon 0 [ 2563.818283][T20333] workingset_activate_file 0 [ 2563.818283][T20333] workingset_restore_anon 0 [ 2563.818283][T20333] workingset_restore_file 1 05:56:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1f4, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2563.818283][T20333] workingset_nodereclaim 0 [ 2563.818283][T20333] pgscan 1707 [ 2563.818283][T20333] pgsteal 130 [ 2563.818283][T20333] pgscan_kswapd 109 [ 2563.818283][T20333] pgscan_direct 1598 [ 2563.818283][T20333] pgscan_khugepaged 0 [ 2563.818283][T20333] pgsteal_kswapd 108 [ 2563.818283][T20333] pgsteal_direct 22 [ 2563.818283][T20333] pgsteal_khugepaged 0 [ 2563.818283][T20333] pgfault 1008960 [ 2563.818283][T20333] pgmajfault 0 [ 2563.818283][T20333] pgrefill 12220 [ 2563.818283][T20333] pgactivate 1554 [ 2563.818283][T20333] pgdeactivate 0 [ 2563.818283][T20333] pglazyfree 0 [ 2563.818283][T20333] pglazyfreed 0 [ 2563.818283][T20333] zswpin 0 [ 2563.818283][T20333] zswpout 0 [ 2564.007612][T20333] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20333,uid=0 05:56:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x32010000}, 0x0) [ 2564.038407][T20333] Memory cgroup out of memory: Killed process 20333 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2564.070464][T20366] wireguard71: entered allmulticast mode 05:56:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1f6, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:18 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4802, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:18 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c17e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1fa, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2564.262719][T20391] wireguard53: entered promiscuous mode [ 2564.287338][T20353] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2564.298347][T20353] CPU: 1 PID: 20353 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2564.308836][T20353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2564.318944][T20353] Call Trace: [ 2564.322276][T20353] [ 2564.325246][T20353] dump_stack_lvl+0x136/0x150 [ 2564.329968][T20353] dump_header+0x10a/0xd70 [ 2564.334447][T20353] oom_kill_process+0x25d/0x600 [ 2564.339347][T20353] out_of_memory+0x35c/0x1660 [ 2564.344119][T20353] ? find_held_lock+0x2d/0x110 [ 2564.348954][T20353] ? oom_killer_disable+0x2b0/0x2b0 [ 2564.354219][T20353] ? rcu_read_unlock+0x9/0x60 [ 2564.358990][T20353] ? find_held_lock+0x2d/0x110 [ 2564.363944][T20353] mem_cgroup_out_of_memory+0x206/0x270 [ 2564.369542][T20353] ? mem_cgroup_margin+0x130/0x130 [ 2564.374709][T20353] ? lock_downgrade+0x690/0x690 [ 2564.379624][T20353] try_charge_memcg+0xf9b/0x13b0 [ 2564.384604][T20353] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2564.390824][T20353] ? rcu_read_unlock+0x9/0x60 [ 2564.395542][T20353] ? lock_downgrade+0x690/0x690 [ 2564.400500][T20353] charge_memcg+0x90/0x3b0 [ 2564.404976][T20353] __mem_cgroup_charge+0x2b/0x90 [ 2564.409978][T20353] do_wp_page+0x8eb/0x3530 [ 2564.414456][T20353] ? lock_release+0x670/0x670 [ 2564.419173][T20353] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2564.424601][T20353] ? do_raw_spin_lock+0x124/0x2b0 [ 2564.429672][T20353] ? spin_bug+0x1c0/0x1c0 [ 2564.434039][T20353] ? lock_downgrade+0x690/0x690 [ 2564.438922][T20353] __handle_mm_fault+0x19a1/0x3e60 [ 2564.444161][T20353] ? vm_iomap_memory+0x190/0x190 [ 2564.449172][T20353] handle_mm_fault+0x2ba/0x9c0 [ 2564.453992][T20353] do_user_addr_fault+0x47e/0x1240 [ 2564.459154][T20353] ? rcu_is_watching+0x12/0xb0 [ 2564.463962][T20353] exc_page_fault+0x98/0x170 [ 2564.468622][T20353] asm_exc_page_fault+0x26/0x30 [ 2564.473516][T20353] RIP: 0033:0x7ffae1839610 [ 2564.477957][T20353] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2564.497610][T20353] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2564.503719][T20353] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 05:56:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1fc, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2564.511715][T20353] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2564.519716][T20353] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2564.527733][T20353] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2564.535738][T20353] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2564.543753][T20353] ? __sys_socket+0x7c/0x250 [ 2564.548383][T20353] [ 2564.574905][T20353] memory: usage 307200kB, limit 307200kB, failcnt 25276 [ 2564.592283][T20353] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2564.611815][T20353] Memory cgroup stats for /syz3: [ 2564.612070][T20353] anon 106496 [ 2564.612070][T20353] file 733184 05:56:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x208, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2564.612070][T20353] kernel 313733120 [ 2564.612070][T20353] kernel_stack 65536 [ 2564.612070][T20353] pagetables 69632 [ 2564.612070][T20353] sec_pagetables 0 [ 2564.612070][T20353] percpu 5375488 [ 2564.612070][T20353] sock 0 [ 2564.612070][T20353] vmalloc 8192 [ 2564.612070][T20353] shmem 733184 [ 2564.612070][T20353] zswap 0 [ 2564.612070][T20353] zswapped 0 [ 2564.612070][T20353] file_mapped 667648 [ 2564.612070][T20353] file_dirty 0 [ 2564.612070][T20353] file_writeback 0 [ 2564.612070][T20353] swapcached 0 [ 2564.612070][T20353] anon_thp 0 [ 2564.612070][T20353] file_thp 0 [ 2564.612070][T20353] shmem_thp 0 [ 2564.612070][T20353] inactive_anon 0 [ 2564.612070][T20353] active_anon 839680 [ 2564.612070][T20353] inactive_file 0 [ 2564.612070][T20353] active_file 0 [ 2564.612070][T20353] unevictable 0 [ 2564.612070][T20353] slab_reclaimable 1217464 [ 2564.612070][T20353] slab_unreclaimable 306964000 [ 2564.612070][T20353] slab 308181464 [ 2564.612070][T20353] workingset_refault_anon 0 [ 2564.612070][T20353] workingset_refault_file 130 [ 2564.612070][T20353] workingset_activate_anon 0 [ 2564.612070][T20353] workingset_activate_file 0 [ 2564.612070][T20353] workingset_restore_anon 0 [ 2564.612070][T20353] workingset_restore_file 0 [ 2564.612070][T20353] workingset_nodereclaim 0 [ 2564.612070][T20353] pgscan 3117 [ 2564.612070][T20353] pgsteal 939 [ 2564.612070][T20353] pgscan_kswapd 0 [ 2564.612070][T20353] pgscan_direct 3117 [ 2564.612070][T20353] pgscan_khugepaged 0 [ 2564.612070][T20353] pgsteal_kswapd 0 [ 2564.612070][T20353] pgsteal_direct 939 [ 2564.612070][T20353] pgsteal_khugepaged 0 [ 2564.612070][T20353] pgfault 574831 [ 2564.612070][T20353] pgmajfault 0 [ 2564.612070][T20353] pgrefill 79949 [ 2564.612070][T20353] pgactivate 862 [ 2564.612070][T20353] pgdeactivate 0 [ 2564.612070][T20353] pglazyfree 0 [ 2564.612070][T20353] pglazyfreed 0 [ 2564.612070][T20353] zswpin 0 [ 2564.612070][T20353] zswpout 0 [ 2564.800272][T20353] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20353,uid=0 05:56:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x48000000) 05:56:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x238, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2564.819906][T20353] Memory cgroup out of memory: Killed process 20353 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:18 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8527f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:19 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x4c00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2564.932051][T20381] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 05:56:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x23a, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2565.013896][T20381] CPU: 1 PID: 20381 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2565.024430][T20381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2565.034543][T20381] Call Trace: [ 2565.037868][T20381] [ 2565.040847][T20381] dump_stack_lvl+0x136/0x150 [ 2565.045618][T20381] dump_header+0x10a/0xd70 [ 2565.050211][T20381] oom_kill_process+0x25d/0x600 [ 2565.055105][T20381] out_of_memory+0x35c/0x1660 [ 2565.059827][T20381] ? find_held_lock+0x2d/0x110 [ 2565.064660][T20381] ? oom_killer_disable+0x2b0/0x2b0 [ 2565.069957][T20381] ? rcu_read_unlock+0x9/0x60 [ 2565.074684][T20381] ? find_held_lock+0x2d/0x110 [ 2565.079525][T20381] mem_cgroup_out_of_memory+0x206/0x270 [ 2565.085205][T20381] ? mem_cgroup_margin+0x130/0x130 [ 2565.090371][T20381] ? lock_downgrade+0x690/0x690 [ 2565.095268][T20381] try_charge_memcg+0xf9b/0x13b0 [ 2565.100260][T20381] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2565.106271][T20381] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2565.112035][T20381] ? lock_downgrade+0x690/0x690 [ 2565.116920][T20381] ? lock_downgrade+0x690/0x690 [ 2565.121827][T20381] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2565.127426][T20381] __alloc_pages+0x1f3/0x4a0 [ 2565.132067][T20381] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2565.138878][T20381] ? __lock_acquire+0xbc5/0x5d40 [ 2565.143881][T20381] alloc_pages+0x1aa/0x270 [ 2565.148345][T20381] __pmd_alloc+0x3f/0x5d0 [ 2565.152725][T20381] __handle_mm_fault+0x932/0x3e60 [ 2565.157798][T20381] ? vm_iomap_memory+0x190/0x190 [ 2565.162801][T20381] handle_mm_fault+0x2ba/0x9c0 [ 2565.167617][T20381] do_user_addr_fault+0x47e/0x1240 [ 2565.172773][T20381] ? rcu_is_watching+0x12/0xb0 [ 2565.177583][T20381] exc_page_fault+0x98/0x170 [ 2565.182332][T20381] asm_exc_page_fault+0x26/0x30 [ 2565.187246][T20381] RIP: 0033:0x7f493322bde9 [ 2565.191696][T20381] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2565.211334][T20381] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2565.217426][T20381] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2565.225421][T20381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2565.233418][T20381] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2565.241414][T20381] R10: 00007f4932e00068 R11: 0000000000000246 R12: 00000000002719fc [ 2565.249413][T20381] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2565.257426][T20381] [ 2565.309319][T20417] wireguard71: entered allmulticast mode [ 2565.334790][T20381] memory: usage 307200kB, limit 307200kB, failcnt 14005 [ 2565.346197][T20381] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2565.357758][T20381] Memory cgroup stats for /syz2: [ 2565.358043][T20381] anon 135168 [ 2565.358043][T20381] file 688128 [ 2565.358043][T20381] kernel 313749504 [ 2565.358043][T20381] kernel_stack 65536 [ 2565.358043][T20381] pagetables 73728 [ 2565.358043][T20381] sec_pagetables 0 [ 2565.358043][T20381] percpu 5387328 [ 2565.358043][T20381] sock 0 [ 2565.358043][T20381] vmalloc 8192 [ 2565.358043][T20381] shmem 679936 [ 2565.358043][T20381] zswap 0 [ 2565.358043][T20381] zswapped 0 [ 2565.358043][T20381] file_mapped 630784 [ 2565.358043][T20381] file_dirty 8192 [ 2565.358043][T20381] file_writeback 0 [ 2565.358043][T20381] swapcached 0 [ 2565.358043][T20381] anon_thp 0 [ 2565.358043][T20381] file_thp 0 [ 2565.358043][T20381] shmem_thp 0 [ 2565.358043][T20381] inactive_anon 761856 [ 2565.358043][T20381] active_anon 53248 [ 2565.358043][T20381] inactive_file 0 [ 2565.358043][T20381] active_file 8192 [ 2565.358043][T20381] unevictable 0 [ 2565.358043][T20381] slab_reclaimable 512504 [ 2565.358043][T20381] slab_unreclaimable 307665392 [ 2565.358043][T20381] slab 308177896 [ 2565.358043][T20381] workingset_refault_anon 0 [ 2565.358043][T20381] workingset_refault_file 2 [ 2565.358043][T20381] workingset_activate_anon 0 [ 2565.358043][T20381] workingset_activate_file 0 [ 2565.358043][T20381] workingset_restore_anon 0 [ 2565.358043][T20381] workingset_restore_file 1 [ 2565.358043][T20381] workingset_nodereclaim 0 [ 2565.358043][T20381] pgscan 1707 [ 2565.358043][T20381] pgsteal 130 [ 2565.358043][T20381] pgscan_kswapd 109 [ 2565.358043][T20381] pgscan_direct 1598 [ 2565.358043][T20381] pgscan_khugepaged 0 [ 2565.358043][T20381] pgsteal_kswapd 108 [ 2565.358043][T20381] pgsteal_direct 22 [ 2565.358043][T20381] pgsteal_khugepaged 0 [ 2565.358043][T20381] pgfault 1009018 [ 2565.358043][T20381] pgmajfault 0 [ 2565.358043][T20381] pgrefill 12354 [ 2565.358043][T20381] pgactivate 1554 [ 2565.358043][T20381] pgdeactivate 0 [ 2565.358043][T20381] pglazyfree 0 [ 2565.358043][T20381] pglazyfreed 0 [ 2565.358043][T20381] zswpin 0 [ 2565.358043][T20381] zswpout 0 05:56:19 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c17f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x248, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x32010700}, 0x0) [ 2565.558847][T20381] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20381,uid=0 [ 2565.578495][T20381] Memory cgroup out of memory: Killed process 20381 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2565.626162][T20414] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2565.636697][T20414] CPU: 1 PID: 20414 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2565.647181][T20414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2565.657306][T20414] Call Trace: [ 2565.660644][T20414] [ 2565.663626][T20414] dump_stack_lvl+0x136/0x150 [ 2565.668390][T20414] dump_header+0x10a/0xd70 [ 2565.672891][T20414] oom_kill_process+0x25d/0x600 [ 2565.677818][T20414] out_of_memory+0x35c/0x1660 [ 2565.682584][T20414] ? find_held_lock+0x2d/0x110 [ 2565.687430][T20414] ? oom_killer_disable+0x2b0/0x2b0 [ 2565.692884][T20414] ? rcu_read_unlock+0x9/0x60 [ 2565.697624][T20414] ? find_held_lock+0x2d/0x110 [ 2565.702449][T20414] mem_cgroup_out_of_memory+0x206/0x270 [ 2565.708047][T20414] ? mem_cgroup_margin+0x130/0x130 [ 2565.713213][T20414] ? lock_downgrade+0x690/0x690 [ 2565.718116][T20414] try_charge_memcg+0xf9b/0x13b0 [ 2565.723096][T20414] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2565.729143][T20414] ? rcu_read_unlock+0x9/0x60 [ 2565.733860][T20414] ? lock_downgrade+0x690/0x690 [ 2565.738755][T20414] charge_memcg+0x90/0x3b0 [ 2565.743206][T20414] __mem_cgroup_charge+0x2b/0x90 [ 2565.748179][T20414] do_wp_page+0x8eb/0x3530 [ 2565.752640][T20414] ? lock_release+0x670/0x670 [ 2565.757363][T20414] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2565.762772][T20414] ? do_raw_spin_lock+0x124/0x2b0 [ 2565.767830][T20414] ? spin_bug+0x1c0/0x1c0 [ 2565.772192][T20414] ? lock_downgrade+0x690/0x690 [ 2565.777085][T20414] __handle_mm_fault+0x19a1/0x3e60 [ 2565.782244][T20414] ? vm_iomap_memory+0x190/0x190 [ 2565.787245][T20414] handle_mm_fault+0x2ba/0x9c0 [ 2565.792083][T20414] do_user_addr_fault+0x47e/0x1240 [ 2565.797255][T20414] ? rcu_is_watching+0x12/0xb0 [ 2565.802235][T20414] exc_page_fault+0x98/0x170 [ 2565.806897][T20414] asm_exc_page_fault+0x26/0x30 [ 2565.811780][T20414] RIP: 0033:0x7ffae1839610 [ 2565.816218][T20414] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2565.835863][T20414] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2565.841996][T20414] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2565.850169][T20414] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2565.858164][T20414] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2565.866164][T20414] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2565.874163][T20414] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2565.882257][T20414] ? __sys_socket+0x7c/0x250 [ 2565.886918][T20414] [ 2565.918634][T20432] wireguard53: entered promiscuous mode [ 2565.934696][T20414] memory: usage 307200kB, limit 307200kB, failcnt 25384 [ 2565.946893][T20414] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2565.956719][T20414] Memory cgroup stats for /syz3: [ 2565.957005][T20414] anon 106496 [ 2565.957005][T20414] file 733184 [ 2565.957005][T20414] kernel 313733120 [ 2565.957005][T20414] kernel_stack 65536 [ 2565.957005][T20414] pagetables 69632 [ 2565.957005][T20414] sec_pagetables 0 [ 2565.957005][T20414] percpu 5375488 [ 2565.957005][T20414] sock 0 [ 2565.957005][T20414] vmalloc 8192 [ 2565.957005][T20414] shmem 733184 [ 2565.957005][T20414] zswap 0 [ 2565.957005][T20414] zswapped 0 [ 2565.957005][T20414] file_mapped 667648 [ 2565.957005][T20414] file_dirty 0 [ 2565.957005][T20414] file_writeback 0 [ 2565.957005][T20414] swapcached 0 [ 2565.957005][T20414] anon_thp 0 [ 2565.957005][T20414] file_thp 0 [ 2565.957005][T20414] shmem_thp 0 [ 2565.957005][T20414] inactive_anon 0 [ 2565.957005][T20414] active_anon 839680 [ 2565.957005][T20414] inactive_file 0 [ 2565.957005][T20414] active_file 0 [ 2565.957005][T20414] unevictable 0 [ 2565.957005][T20414] slab_reclaimable 1217464 [ 2565.957005][T20414] slab_unreclaimable 306964000 [ 2565.957005][T20414] slab 308181464 [ 2565.957005][T20414] workingset_refault_anon 0 [ 2565.957005][T20414] workingset_refault_file 130 [ 2565.957005][T20414] workingset_activate_anon 0 05:56:20 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5124, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2565.957005][T20414] workingset_activate_file 0 [ 2565.957005][T20414] workingset_restore_anon 0 [ 2565.957005][T20414] workingset_restore_file 0 [ 2565.957005][T20414] workingset_nodereclaim 0 [ 2565.957005][T20414] pgscan 3117 [ 2565.957005][T20414] pgsteal 939 [ 2565.957005][T20414] pgscan_kswapd 0 [ 2565.957005][T20414] pgscan_direct 3117 [ 2565.957005][T20414] pgscan_khugepaged 0 [ 2565.957005][T20414] pgsteal_kswapd 0 [ 2565.957005][T20414] pgsteal_direct 939 [ 2565.957005][T20414] pgsteal_khugepaged 0 [ 2565.957005][T20414] pgfault 574883 [ 2565.957005][T20414] pgmajfault 0 [ 2565.957005][T20414] pgrefill 79949 [ 2565.957005][T20414] pgactivate 862 [ 2565.957005][T20414] pgdeactivate 0 [ 2565.957005][T20414] pglazyfree 0 [ 2565.957005][T20414] pglazyfreed 0 [ 2565.957005][T20414] zswpin 0 [ 2565.957005][T20414] zswpout 0 05:56:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x4a000000) 05:56:20 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85280}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2566.160590][T20414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20414,uid=0 [ 2566.176592][T20414] Memory cgroup out of memory: Killed process 20414 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x258, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2566.269255][T20446] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2566.281805][T20446] CPU: 1 PID: 20446 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2566.292285][T20446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2566.302500][T20446] Call Trace: [ 2566.305843][T20446] [ 2566.308825][T20446] dump_stack_lvl+0x136/0x150 [ 2566.313589][T20446] dump_header+0x10a/0xd70 [ 2566.318089][T20446] oom_kill_process+0x25d/0x600 [ 2566.323027][T20446] out_of_memory+0x35c/0x1660 [ 2566.327790][T20446] ? find_held_lock+0x2d/0x110 [ 2566.332644][T20446] ? oom_killer_disable+0x2b0/0x2b0 [ 2566.337925][T20446] ? rcu_read_unlock+0x9/0x60 [ 2566.342745][T20446] ? find_held_lock+0x2d/0x110 [ 2566.347690][T20446] mem_cgroup_out_of_memory+0x206/0x270 [ 2566.353321][T20446] ? mem_cgroup_margin+0x130/0x130 [ 2566.358510][T20446] ? lock_downgrade+0x690/0x690 [ 2566.363461][T20446] try_charge_memcg+0xf9b/0x13b0 [ 2566.368481][T20446] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2566.374516][T20446] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2566.380333][T20446] ? lock_downgrade+0x690/0x690 [ 2566.385272][T20446] ? lock_downgrade+0x690/0x690 [ 2566.390168][T20446] ? rcu_read_unlock+0x9/0x60 [ 2566.394942][T20446] obj_cgroup_charge+0x2af/0x5e0 [ 2566.399966][T20446] __kmem_cache_alloc_node+0xa3/0x320 [ 2566.405429][T20446] ? copy_semundo+0x18b/0x300 [ 2566.410199][T20446] kmalloc_trace+0x26/0xe0 [ 2566.414707][T20446] copy_semundo+0x18b/0x300 [ 2566.419293][T20446] copy_process+0x24a2/0x7580 [ 2566.424146][T20446] ? free_swap_cache+0x1b5/0x3d0 [ 2566.429145][T20446] ? __cleanup_sighand+0xb0/0xb0 [ 2566.434148][T20446] ? spin_bug+0x1c0/0x1c0 [ 2566.438529][T20446] ? lock_downgrade+0x690/0x690 [ 2566.443454][T20446] kernel_clone+0xeb/0x890 [ 2566.448055][T20446] ? create_io_thread+0xf0/0xf0 [ 2566.452987][T20446] ? vm_iomap_memory+0x190/0x190 [ 2566.458004][T20446] ? find_held_lock+0x2d/0x110 [ 2566.462853][T20446] __do_sys_clone+0xba/0x100 [ 2566.467497][T20446] ? kernel_clone+0x890/0x890 [ 2566.472222][T20446] ? syscall_enter_from_user_mode+0x26/0x80 [ 2566.478188][T20446] do_syscall_64+0x39/0xb0 [ 2566.482658][T20446] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2566.488593][T20446] RIP: 0033:0x7ffae188d591 [ 2566.493044][T20446] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 05:56:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x270, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2566.512831][T20446] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2566.521274][T20446] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2566.529285][T20446] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2566.537418][T20446] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2566.545471][T20446] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2566.553505][T20446] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2566.561564][T20446] [ 2566.594595][T20446] memory: usage 307200kB, limit 307200kB, failcnt 25452 [ 2566.604538][T20446] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2566.616887][T20446] Memory cgroup stats for /syz3: [ 2566.617187][T20446] anon 90112 [ 2566.617187][T20446] file 733184 [ 2566.617187][T20446] kernel 313749504 [ 2566.617187][T20446] kernel_stack 65536 [ 2566.617187][T20446] pagetables 69632 [ 2566.617187][T20446] sec_pagetables 0 [ 2566.617187][T20446] percpu 5375552 [ 2566.617187][T20446] sock 0 [ 2566.617187][T20446] vmalloc 8192 [ 2566.617187][T20446] shmem 733184 [ 2566.617187][T20446] zswap 0 [ 2566.617187][T20446] zswapped 0 [ 2566.617187][T20446] file_mapped 667648 [ 2566.617187][T20446] file_dirty 0 [ 2566.617187][T20446] file_writeback 0 [ 2566.617187][T20446] swapcached 0 [ 2566.617187][T20446] anon_thp 0 [ 2566.617187][T20446] file_thp 0 [ 2566.617187][T20446] shmem_thp 0 [ 2566.617187][T20446] inactive_anon 0 [ 2566.617187][T20446] active_anon 823296 [ 2566.617187][T20446] inactive_file 0 [ 2566.617187][T20446] active_file 0 [ 2566.617187][T20446] unevictable 0 [ 2566.617187][T20446] slab_reclaimable 1218496 [ 2566.617187][T20446] slab_unreclaimable 306974800 [ 2566.617187][T20446] slab 308193296 [ 2566.617187][T20446] workingset_refault_anon 0 [ 2566.617187][T20446] workingset_refault_file 130 [ 2566.617187][T20446] workingset_activate_anon 0 [ 2566.617187][T20446] workingset_activate_file 0 [ 2566.617187][T20446] workingset_restore_anon 0 [ 2566.617187][T20446] workingset_restore_file 0 [ 2566.617187][T20446] workingset_nodereclaim 0 [ 2566.617187][T20446] pgscan 3117 [ 2566.617187][T20446] pgsteal 939 [ 2566.617187][T20446] pgscan_kswapd 0 [ 2566.617187][T20446] pgscan_direct 3117 [ 2566.617187][T20446] pgscan_khugepaged 0 [ 2566.617187][T20446] pgsteal_kswapd 0 [ 2566.617187][T20446] pgsteal_direct 939 [ 2566.617187][T20446] pgsteal_khugepaged 0 [ 2566.617187][T20446] pgfault 574920 [ 2566.617187][T20446] pgmajfault 0 [ 2566.617187][T20446] pgrefill 79949 [ 2566.617187][T20446] pgactivate 862 [ 2566.617187][T20446] pgdeactivate 0 [ 2566.617187][T20446] pglazyfree 0 [ 2566.617187][T20446] pglazyfreed 0 [ 2566.617187][T20446] zswpin 0 [ 2566.617187][T20446] zswpout 0 [ 2566.628262][T20452] wireguard71: entered allmulticast mode [ 2566.813094][T20446] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20446,uid=0 [ 2566.830624][T20446] Memory cgroup out of memory: Killed process 20446 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2566.858745][T20440] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2566.880191][T20440] CPU: 1 PID: 20440 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2566.890692][T20440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2566.900962][T20440] Call Trace: [ 2566.904262][T20440] [ 2566.907209][T20440] dump_stack_lvl+0x136/0x150 [ 2566.911925][T20440] dump_header+0x10a/0xd70 [ 2566.916395][T20440] oom_kill_process+0x25d/0x600 [ 2566.921316][T20440] out_of_memory+0x35c/0x1660 [ 2566.926050][T20440] ? oom_killer_disable+0x2b0/0x2b0 [ 2566.931376][T20440] ? rcu_read_unlock+0x9/0x60 [ 2566.936132][T20440] ? find_held_lock+0x2d/0x110 05:56:21 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c180}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2566.940957][T20440] mem_cgroup_out_of_memory+0x206/0x270 [ 2566.946678][T20440] ? mem_cgroup_margin+0x130/0x130 [ 2566.951884][T20440] ? lock_downgrade+0x690/0x690 [ 2566.956794][T20440] try_charge_memcg+0xf9b/0x13b0 [ 2566.961810][T20440] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2566.967848][T20440] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2566.973626][T20440] ? lock_downgrade+0x690/0x690 [ 2566.978549][T20440] ? lock_downgrade+0x690/0x690 [ 2566.983487][T20440] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2566.989134][T20440] __alloc_pages+0x1f3/0x4a0 [ 2566.993799][T20440] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2567.000625][T20440] ? __lock_acquire+0xbc5/0x5d40 [ 2567.005602][T20440] alloc_pages+0x1aa/0x270 [ 2567.010048][T20440] __pmd_alloc+0x3f/0x5d0 [ 2567.014411][T20440] __handle_mm_fault+0x932/0x3e60 [ 2567.019483][T20440] ? vm_iomap_memory+0x190/0x190 [ 2567.024604][T20440] handle_mm_fault+0x2ba/0x9c0 [ 2567.029418][T20440] do_user_addr_fault+0x47e/0x1240 [ 2567.034682][T20440] ? rcu_is_watching+0x12/0xb0 [ 2567.039499][T20440] exc_page_fault+0x98/0x170 [ 2567.044175][T20440] asm_exc_page_fault+0x26/0x30 [ 2567.049099][T20440] RIP: 0033:0x7f493322bde9 [ 2567.053553][T20440] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2567.073190][T20440] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2567.079306][T20440] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2567.087390][T20440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 05:56:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x4a030000) [ 2567.095399][T20440] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2567.103452][T20440] R10: 00007f4932e00068 R11: 0000000000000246 R12: 00000000002720cc [ 2567.111485][T20440] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2567.119511][T20440] [ 2567.147099][T20440] memory: usage 307200kB, limit 307200kB, failcnt 14119 [ 2567.166077][T20440] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2567.182776][T20464] wireguard53: entered promiscuous mode [ 2567.190005][T20440] Memory cgroup stats for /syz2: [ 2567.190287][T20440] anon 135168 [ 2567.190287][T20440] file 688128 [ 2567.190287][T20440] kernel 313749504 [ 2567.190287][T20440] kernel_stack 65536 [ 2567.190287][T20440] pagetables 73728 [ 2567.190287][T20440] sec_pagetables 0 [ 2567.190287][T20440] percpu 5387328 [ 2567.190287][T20440] sock 0 [ 2567.190287][T20440] vmalloc 8192 [ 2567.190287][T20440] shmem 679936 [ 2567.190287][T20440] zswap 0 [ 2567.190287][T20440] zswapped 0 [ 2567.190287][T20440] file_mapped 630784 [ 2567.190287][T20440] file_dirty 8192 [ 2567.190287][T20440] file_writeback 0 05:56:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x272, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2567.190287][T20440] swapcached 0 [ 2567.190287][T20440] anon_thp 0 [ 2567.190287][T20440] file_thp 0 [ 2567.190287][T20440] shmem_thp 0 [ 2567.190287][T20440] inactive_anon 65536 [ 2567.190287][T20440] active_anon 749568 [ 2567.190287][T20440] inactive_file 0 [ 2567.190287][T20440] active_file 8192 [ 2567.190287][T20440] unevictable 0 [ 2567.190287][T20440] slab_reclaimable 512504 [ 2567.190287][T20440] slab_unreclaimable 307665392 [ 2567.190287][T20440] slab 308177896 [ 2567.190287][T20440] workingset_refault_anon 0 [ 2567.190287][T20440] workingset_refault_file 2 [ 2567.190287][T20440] workingset_activate_anon 0 [ 2567.190287][T20440] workingset_activate_file 0 [ 2567.190287][T20440] workingset_restore_anon 0 [ 2567.190287][T20440] workingset_restore_file 1 [ 2567.190287][T20440] workingset_nodereclaim 0 [ 2567.190287][T20440] pgscan 1707 [ 2567.190287][T20440] pgsteal 130 [ 2567.190287][T20440] pgscan_kswapd 109 [ 2567.190287][T20440] pgscan_direct 1598 [ 2567.190287][T20440] pgscan_khugepaged 0 [ 2567.190287][T20440] pgsteal_kswapd 108 [ 2567.190287][T20440] pgsteal_direct 22 [ 2567.190287][T20440] pgsteal_khugepaged 0 [ 2567.190287][T20440] pgfault 1009075 [ 2567.190287][T20440] pgmajfault 0 [ 2567.190287][T20440] pgrefill 12504 [ 2567.190287][T20440] pgactivate 1554 [ 2567.190287][T20440] pgdeactivate 0 [ 2567.190287][T20440] pglazyfree 0 [ 2567.190287][T20440] pglazyfreed 0 [ 2567.190287][T20440] zswpin 0 [ 2567.190287][T20440] zswpout 0 05:56:21 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5802, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x274, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x32020000}, 0x0) [ 2567.414449][T20440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20440,uid=0 [ 2567.437245][T20440] Memory cgroup out of memory: Killed process 20440 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2567.527112][T20469] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2567.547504][T20469] CPU: 1 PID: 20469 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2567.558099][T20469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2567.568205][T20469] Call Trace: [ 2567.571529][T20469] [ 2567.574514][T20469] dump_stack_lvl+0x136/0x150 [ 2567.579277][T20469] dump_header+0x10a/0xd70 [ 2567.583779][T20469] oom_kill_process+0x25d/0x600 [ 2567.588717][T20469] out_of_memory+0x35c/0x1660 [ 2567.593475][T20469] ? find_held_lock+0x2d/0x110 [ 2567.598680][T20469] ? oom_killer_disable+0x2b0/0x2b0 [ 2567.603996][T20469] ? rcu_read_unlock+0x9/0x60 [ 2567.608756][T20469] ? find_held_lock+0x2d/0x110 [ 2567.613611][T20469] mem_cgroup_out_of_memory+0x206/0x270 [ 2567.619241][T20469] ? mem_cgroup_margin+0x130/0x130 [ 2567.624430][T20469] ? lock_downgrade+0x690/0x690 [ 2567.629357][T20469] try_charge_memcg+0xf9b/0x13b0 [ 2567.634356][T20469] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2567.640398][T20469] ? rcu_read_unlock+0x9/0x60 [ 2567.645167][T20469] ? lock_downgrade+0x690/0x690 [ 2567.650112][T20469] charge_memcg+0x90/0x3b0 [ 2567.654599][T20469] __mem_cgroup_charge+0x2b/0x90 [ 2567.659608][T20469] ? copy_mc_to_kernel+0x3e/0x90 [ 2567.664618][T20469] do_wp_page+0x8eb/0x3530 [ 2567.669123][T20469] ? lock_release+0x670/0x670 05:56:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x276, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2567.673893][T20469] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2567.679343][T20469] ? do_raw_spin_lock+0x124/0x2b0 [ 2567.684436][T20469] ? spin_bug+0x1c0/0x1c0 [ 2567.688837][T20469] ? lock_downgrade+0x690/0x690 [ 2567.693764][T20469] __handle_mm_fault+0x19a1/0x3e60 [ 2567.698959][T20469] ? vm_iomap_memory+0x190/0x190 [ 2567.704002][T20469] handle_mm_fault+0x2ba/0x9c0 [ 2567.708833][T20469] do_user_addr_fault+0x47e/0x1240 [ 2567.713979][T20469] ? rcu_is_watching+0x12/0xb0 [ 2567.718791][T20469] exc_page_fault+0x98/0x170 [ 2567.723422][T20469] asm_exc_page_fault+0x26/0x30 [ 2567.728311][T20469] RIP: 0033:0x7ffae1836f7e [ 2567.732756][T20469] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2567.752423][T20469] RSP: 002b:00007ffdc9b413b0 EFLAGS: 00010246 [ 2567.758548][T20469] RAX: 00007ffae19abf80 RBX: 00007ffae19abf8c RCX: 0000000000000000 [ 2567.766554][T20469] RDX: 0000000000000000 RSI: 00007ffae19abf88 RDI: 0000000000000000 05:56:21 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85281}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2567.774558][T20469] RBP: 00007ffae19abf80 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2567.782552][T20469] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffae19abf8c [ 2567.790724][T20469] R13: 00007ffae1400060 R14: 00007ffae19abf80 R15: 0000000000000000 [ 2567.798751][T20469] [ 2567.820167][T20469] memory: usage 307200kB, limit 307200kB, failcnt 25570 [ 2567.835824][T20469] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2567.852414][T20469] Memory cgroup stats for /syz3: [ 2567.852706][T20469] anon 90112 [ 2567.852706][T20469] file 733184 [ 2567.852706][T20469] kernel 313749504 05:56:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x27a, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2567.852706][T20469] kernel_stack 65536 [ 2567.852706][T20469] pagetables 69632 [ 2567.852706][T20469] sec_pagetables 0 [ 2567.852706][T20469] percpu 5375552 [ 2567.852706][T20469] sock 0 [ 2567.852706][T20469] vmalloc 8192 [ 2567.852706][T20469] shmem 733184 [ 2567.852706][T20469] zswap 0 [ 2567.852706][T20469] zswapped 0 [ 2567.852706][T20469] file_mapped 667648 [ 2567.852706][T20469] file_dirty 0 [ 2567.852706][T20469] file_writeback 0 [ 2567.852706][T20469] swapcached 0 [ 2567.852706][T20469] anon_thp 0 [ 2567.852706][T20469] file_thp 0 [ 2567.852706][T20469] shmem_thp 0 [ 2567.852706][T20469] inactive_anon 0 [ 2567.852706][T20469] active_anon 823296 [ 2567.852706][T20469] inactive_file 0 [ 2567.852706][T20469] active_file 0 [ 2567.852706][T20469] unevictable 0 [ 2567.852706][T20469] slab_reclaimable 1215536 [ 2567.852706][T20469] slab_unreclaimable 306975264 [ 2567.852706][T20469] slab 308190800 [ 2567.852706][T20469] workingset_refault_anon 0 [ 2567.852706][T20469] workingset_refault_file 130 [ 2567.852706][T20469] workingset_activate_anon 0 [ 2567.852706][T20469] workingset_activate_file 0 [ 2567.852706][T20469] workingset_restore_anon 0 [ 2567.852706][T20469] workingset_restore_file 0 [ 2567.852706][T20469] workingset_nodereclaim 0 [ 2567.852706][T20469] pgscan 3117 [ 2567.852706][T20469] pgsteal 939 [ 2567.852706][T20469] pgscan_kswapd 0 [ 2567.852706][T20469] pgscan_direct 3117 [ 2567.852706][T20469] pgscan_khugepaged 0 [ 2567.852706][T20469] pgsteal_kswapd 0 [ 2567.852706][T20469] pgsteal_direct 939 [ 2567.852706][T20469] pgsteal_khugepaged 0 [ 2567.852706][T20469] pgfault 574958 [ 2567.852706][T20469] pgmajfault 0 [ 2567.852706][T20469] pgrefill 79949 [ 2567.852706][T20469] pgactivate 862 [ 2567.852706][T20469] pgdeactivate 0 [ 2567.852706][T20469] pglazyfree 0 [ 2567.852706][T20469] pglazyfreed 0 [ 2567.852706][T20469] zswpin 0 [ 2567.852706][T20469] zswpout 0 [ 2568.039668][T20492] wireguard71: entered allmulticast mode [ 2568.047797][T20469] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20469,uid=0 05:56:22 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c181}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2568.076285][T20469] Memory cgroup out of memory: Killed process 20469 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x4c000000) [ 2568.191023][T20485] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2568.250901][T20485] CPU: 0 PID: 20485 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2568.261399][T20485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2568.271508][T20485] Call Trace: [ 2568.274823][T20485] [ 2568.277803][T20485] dump_stack_lvl+0x136/0x150 [ 2568.282530][T20485] dump_header+0x10a/0xd70 [ 2568.286991][T20485] oom_kill_process+0x25d/0x600 [ 2568.291880][T20485] out_of_memory+0x35c/0x1660 [ 2568.296598][T20485] ? find_held_lock+0x2d/0x110 [ 2568.301409][T20485] ? oom_killer_disable+0x2b0/0x2b0 [ 2568.306650][T20485] ? rcu_read_unlock+0x9/0x60 [ 2568.311366][T20485] ? find_held_lock+0x2d/0x110 [ 2568.316174][T20485] mem_cgroup_out_of_memory+0x206/0x270 [ 2568.321818][T20485] ? mem_cgroup_margin+0x130/0x130 [ 2568.327003][T20485] ? lock_downgrade+0x690/0x690 [ 2568.331917][T20485] try_charge_memcg+0xf9b/0x13b0 [ 2568.336896][T20485] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2568.342906][T20485] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2568.348677][T20485] ? lock_downgrade+0x690/0x690 [ 2568.353647][T20485] ? lock_downgrade+0x690/0x690 [ 2568.358542][T20485] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2568.364126][T20485] __alloc_pages+0x1f3/0x4a0 [ 2568.368749][T20485] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2568.375562][T20485] ? __lock_acquire+0xbc5/0x5d40 [ 2568.380550][T20485] alloc_pages+0x1aa/0x270 [ 2568.385006][T20485] __pmd_alloc+0x3f/0x5d0 [ 2568.389391][T20485] __handle_mm_fault+0x932/0x3e60 [ 2568.394463][T20485] ? vm_iomap_memory+0x190/0x190 [ 2568.399463][T20485] handle_mm_fault+0x2ba/0x9c0 [ 2568.404285][T20485] do_user_addr_fault+0x47e/0x1240 [ 2568.409437][T20485] ? rcu_is_watching+0x12/0xb0 [ 2568.414241][T20485] exc_page_fault+0x98/0x170 [ 2568.418885][T20485] asm_exc_page_fault+0x26/0x30 [ 2568.423768][T20485] RIP: 0033:0x7f493322bde9 [ 2568.428207][T20485] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 05:56:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x27c, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2568.447850][T20485] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2568.453949][T20485] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2568.461943][T20485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2568.469937][T20485] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2568.478014][T20485] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027290b [ 2568.486009][T20485] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2568.494023][T20485] [ 2568.513788][T20485] memory: usage 307200kB, limit 307200kB, failcnt 14238 [ 2568.527878][T20504] wireguard53: entered promiscuous mode [ 2568.532366][T20485] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2568.546329][T20485] Memory cgroup stats for /syz2: [ 2568.546811][T20485] anon 135168 [ 2568.546811][T20485] file 688128 [ 2568.546811][T20485] kernel 313749504 [ 2568.546811][T20485] kernel_stack 65536 [ 2568.546811][T20485] pagetables 73728 [ 2568.546811][T20485] sec_pagetables 0 [ 2568.546811][T20485] percpu 5387328 [ 2568.546811][T20485] sock 0 [ 2568.546811][T20485] vmalloc 8192 [ 2568.546811][T20485] shmem 679936 [ 2568.546811][T20485] zswap 0 [ 2568.546811][T20485] zswapped 0 [ 2568.546811][T20485] file_mapped 630784 [ 2568.546811][T20485] file_dirty 8192 [ 2568.546811][T20485] file_writeback 0 [ 2568.546811][T20485] swapcached 0 [ 2568.546811][T20485] anon_thp 0 [ 2568.546811][T20485] file_thp 0 [ 2568.546811][T20485] shmem_thp 0 [ 2568.546811][T20485] inactive_anon 53248 [ 2568.546811][T20485] active_anon 761856 [ 2568.546811][T20485] inactive_file 0 [ 2568.546811][T20485] active_file 8192 [ 2568.546811][T20485] unevictable 0 [ 2568.546811][T20485] slab_reclaimable 512504 [ 2568.546811][T20485] slab_unreclaimable 307665392 [ 2568.546811][T20485] slab 308177896 [ 2568.546811][T20485] workingset_refault_anon 0 [ 2568.546811][T20485] workingset_refault_file 2 [ 2568.546811][T20485] workingset_activate_anon 0 [ 2568.546811][T20485] workingset_activate_file 0 [ 2568.546811][T20485] workingset_restore_anon 0 [ 2568.546811][T20485] workingset_restore_file 1 [ 2568.546811][T20485] workingset_nodereclaim 0 [ 2568.546811][T20485] pgscan 1707 [ 2568.546811][T20485] pgsteal 130 [ 2568.546811][T20485] pgscan_kswapd 109 [ 2568.546811][T20485] pgscan_direct 1598 [ 2568.546811][T20485] pgscan_khugepaged 0 [ 2568.546811][T20485] pgsteal_kswapd 108 [ 2568.546811][T20485] pgsteal_direct 22 [ 2568.546811][T20485] pgsteal_khugepaged 0 [ 2568.546811][T20485] pgfault 1009137 [ 2568.546811][T20485] pgmajfault 0 [ 2568.546811][T20485] pgrefill 12662 05:56:22 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85282}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2568.546811][T20485] pgactivate 1554 [ 2568.546811][T20485] pgdeactivate 0 [ 2568.546811][T20485] pglazyfree 0 [ 2568.546811][T20485] pglazyfreed 0 [ 2568.546811][T20485] zswpin 0 [ 2568.546811][T20485] zswpout 0 [ 2568.749512][T20485] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20485,uid=0 05:56:22 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5803, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2568.776300][T20485] Memory cgroup out of memory: Killed process 20485 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x280, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x33010700}, 0x0) [ 2568.850541][T20512] wireguard71: entered allmulticast mode [ 2568.886798][T20506] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2568.900476][T20506] CPU: 0 PID: 20506 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2568.910965][T20506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2568.921049][T20506] Call Trace: [ 2568.924350][T20506] [ 2568.927297][T20506] dump_stack_lvl+0x136/0x150 [ 2568.932023][T20506] dump_header+0x10a/0xd70 [ 2568.936483][T20506] oom_kill_process+0x25d/0x600 [ 2568.941371][T20506] out_of_memory+0x35c/0x1660 [ 2568.946107][T20506] ? find_held_lock+0x2d/0x110 [ 2568.951037][T20506] ? oom_killer_disable+0x2b0/0x2b0 [ 2568.956299][T20506] ? rcu_read_unlock+0x9/0x60 [ 2568.961022][T20506] ? find_held_lock+0x2d/0x110 [ 2568.965834][T20506] mem_cgroup_out_of_memory+0x206/0x270 [ 2568.971431][T20506] ? mem_cgroup_margin+0x130/0x130 [ 2568.976584][T20506] ? lock_downgrade+0x690/0x690 [ 2568.981478][T20506] try_charge_memcg+0xf9b/0x13b0 [ 2568.986454][T20506] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2568.992471][T20506] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2568.998247][T20506] ? lock_downgrade+0x690/0x690 [ 2569.003135][T20506] ? lock_downgrade+0x690/0x690 [ 2569.008015][T20506] ? rcu_read_unlock+0x9/0x60 [ 2569.012742][T20506] obj_cgroup_charge+0x2af/0x5e0 [ 2569.017712][T20506] __kmem_cache_alloc_node+0xa3/0x320 [ 2569.023130][T20506] ? copy_semundo+0x18b/0x300 [ 2569.027843][T20506] kmalloc_trace+0x26/0xe0 [ 2569.032300][T20506] copy_semundo+0x18b/0x300 [ 2569.036854][T20506] copy_process+0x24a2/0x7580 [ 2569.041656][T20506] ? free_swap_cache+0x1b5/0x3d0 [ 2569.046652][T20506] ? __cleanup_sighand+0xb0/0xb0 [ 2569.051628][T20506] ? spin_bug+0x1c0/0x1c0 [ 2569.055985][T20506] ? lock_downgrade+0x690/0x690 [ 2569.060883][T20506] kernel_clone+0xeb/0x890 [ 2569.065334][T20506] ? create_io_thread+0xf0/0xf0 [ 2569.070222][T20506] ? vm_iomap_memory+0x190/0x190 [ 2569.075207][T20506] ? find_held_lock+0x2d/0x110 [ 2569.080044][T20506] __do_sys_clone+0xba/0x100 [ 2569.084686][T20506] ? kernel_clone+0x890/0x890 [ 2569.089432][T20506] ? syscall_enter_from_user_mode+0x26/0x80 [ 2569.095489][T20506] do_syscall_64+0x39/0xb0 [ 2569.099966][T20506] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2569.105889][T20506] RIP: 0033:0x7ffae188d591 [ 2569.110327][T20506] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2569.130129][T20506] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2569.138586][T20506] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2569.146583][T20506] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2569.154671][T20506] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2569.162669][T20506] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2569.170675][T20506] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2569.178682][T20506] [ 2569.186560][T20506] memory: usage 307184kB, limit 307200kB, failcnt 25671 [ 2569.204195][T20506] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2569.232593][T20506] Memory cgroup stats for /syz3: [ 2569.232895][T20506] anon 90112 [ 2569.232895][T20506] file 733184 [ 2569.232895][T20506] kernel 313733120 [ 2569.232895][T20506] kernel_stack 65536 [ 2569.232895][T20506] pagetables 69632 [ 2569.232895][T20506] sec_pagetables 0 [ 2569.232895][T20506] percpu 5375488 [ 2569.232895][T20506] sock 0 [ 2569.232895][T20506] vmalloc 8192 [ 2569.232895][T20506] shmem 733184 [ 2569.232895][T20506] zswap 0 [ 2569.232895][T20506] zswapped 0 [ 2569.232895][T20506] file_mapped 667648 [ 2569.232895][T20506] file_dirty 0 [ 2569.232895][T20506] file_writeback 0 [ 2569.232895][T20506] swapcached 0 [ 2569.232895][T20506] anon_thp 0 [ 2569.232895][T20506] file_thp 0 [ 2569.232895][T20506] shmem_thp 0 [ 2569.232895][T20506] inactive_anon 0 [ 2569.232895][T20506] active_anon 823296 [ 2569.232895][T20506] inactive_file 0 [ 2569.232895][T20506] active_file 0 [ 2569.232895][T20506] unevictable 0 [ 2569.232895][T20506] slab_reclaimable 1215536 [ 2569.232895][T20506] slab_unreclaimable 306962888 [ 2569.232895][T20506] slab 308178424 [ 2569.232895][T20506] workingset_refault_anon 0 [ 2569.232895][T20506] workingset_refault_file 130 [ 2569.232895][T20506] workingset_activate_anon 0 [ 2569.232895][T20506] workingset_activate_file 0 [ 2569.232895][T20506] workingset_restore_anon 0 [ 2569.232895][T20506] workingset_restore_file 0 [ 2569.232895][T20506] workingset_nodereclaim 0 [ 2569.232895][T20506] pgscan 3117 [ 2569.232895][T20506] pgsteal 939 [ 2569.232895][T20506] pgscan_kswapd 0 [ 2569.232895][T20506] pgscan_direct 3117 [ 2569.232895][T20506] pgscan_khugepaged 0 [ 2569.232895][T20506] pgsteal_kswapd 0 [ 2569.232895][T20506] pgsteal_direct 939 [ 2569.232895][T20506] pgsteal_khugepaged 0 [ 2569.232895][T20506] pgfault 574995 [ 2569.232895][T20506] pgmajfault 0 [ 2569.232895][T20506] pgrefill 79949 [ 2569.232895][T20506] pgactivate 862 [ 2569.232895][T20506] pgdeactivate 0 [ 2569.232895][T20506] pglazyfree 0 [ 2569.232895][T20506] pglazyfreed 0 [ 2569.232895][T20506] zswpin 0 [ 2569.232895][T20506] zswpout 0 05:56:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x290, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2569.469994][T20506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20506,uid=0 [ 2569.502337][T20506] Memory cgroup out of memory: Killed process 20506 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2569.530043][T20523] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2569.556190][T20523] CPU: 1 PID: 20523 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2569.566703][T20523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2569.576812][T20523] Call Trace: [ 2569.580124][T20523] [ 2569.583092][T20523] dump_stack_lvl+0x136/0x150 [ 2569.587844][T20523] dump_header+0x10a/0xd70 [ 2569.592338][T20523] oom_kill_process+0x25d/0x600 [ 2569.597350][T20523] out_of_memory+0x35c/0x1660 [ 2569.602119][T20523] ? oom_killer_disable+0x2b0/0x2b0 [ 2569.607396][T20523] ? rcu_read_unlock+0x9/0x60 [ 2569.612146][T20523] ? find_held_lock+0x2d/0x110 [ 2569.616997][T20523] mem_cgroup_out_of_memory+0x206/0x270 [ 2569.622614][T20523] ? mem_cgroup_margin+0x130/0x130 [ 2569.627791][T20523] ? lock_downgrade+0x690/0x690 [ 2569.632731][T20523] try_charge_memcg+0xf9b/0x13b0 [ 2569.637733][T20523] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2569.643769][T20523] ? rcu_read_unlock+0x9/0x60 [ 2569.648481][T20523] ? lock_downgrade+0x690/0x690 [ 2569.653400][T20523] charge_memcg+0x90/0x3b0 [ 2569.657877][T20523] __mem_cgroup_charge+0x2b/0x90 [ 2569.662877][T20523] do_wp_page+0x8eb/0x3530 [ 2569.667367][T20523] ? lock_release+0x670/0x670 [ 2569.672103][T20523] ? finish_mkwrite_fault+0x3d0/0x3d0 05:56:23 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c182}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x52020000) [ 2569.677539][T20523] ? do_raw_spin_lock+0x124/0x2b0 [ 2569.682628][T20523] ? spin_bug+0x1c0/0x1c0 [ 2569.687041][T20523] ? lock_downgrade+0x690/0x690 [ 2569.691961][T20523] __handle_mm_fault+0x19a1/0x3e60 [ 2569.697139][T20523] ? vm_iomap_memory+0x190/0x190 [ 2569.702154][T20523] handle_mm_fault+0x2ba/0x9c0 [ 2569.706982][T20523] do_user_addr_fault+0x47e/0x1240 [ 2569.712145][T20523] ? rcu_is_watching+0x12/0xb0 [ 2569.716985][T20523] exc_page_fault+0x98/0x170 [ 2569.721617][T20523] asm_exc_page_fault+0x26/0x30 [ 2569.726499][T20523] RIP: 0033:0x7f4933239610 [ 2569.730929][T20523] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2569.750581][T20523] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2569.756680][T20523] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2569.764676][T20523] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2569.772672][T20523] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2569.780684][T20523] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2569.788766][T20523] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2569.796755][T20523] ? apparmor_socket_create+0xb7/0x670 [ 2569.802375][T20523] [ 2569.820111][T20523] memory: usage 307188kB, limit 307200kB, failcnt 14336 [ 2569.832088][T20523] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2569.839681][T20523] Memory cgroup stats for /syz2: [ 2569.840603][T20523] anon 122880 [ 2569.840603][T20523] file 688128 [ 2569.840603][T20523] kernel 313749504 [ 2569.840603][T20523] kernel_stack 65536 [ 2569.840603][T20523] pagetables 73728 [ 2569.840603][T20523] sec_pagetables 0 [ 2569.840603][T20523] percpu 5387328 [ 2569.840603][T20523] sock 0 [ 2569.840603][T20523] vmalloc 8192 [ 2569.840603][T20523] shmem 679936 [ 2569.840603][T20523] zswap 0 05:56:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2ba, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2569.840603][T20523] zswapped 0 [ 2569.840603][T20523] file_mapped 630784 [ 2569.840603][T20523] file_dirty 8192 [ 2569.840603][T20523] file_writeback 0 [ 2569.840603][T20523] swapcached 0 [ 2569.840603][T20523] anon_thp 0 [ 2569.840603][T20523] file_thp 0 [ 2569.840603][T20523] shmem_thp 0 [ 2569.840603][T20523] inactive_anon 65536 [ 2569.840603][T20523] active_anon 737280 [ 2569.840603][T20523] inactive_file 0 [ 2569.840603][T20523] active_file 8192 [ 2569.840603][T20523] unevictable 0 [ 2569.840603][T20523] slab_reclaimable 512504 [ 2569.840603][T20523] slab_unreclaimable 307665392 [ 2569.840603][T20523] slab 308177896 [ 2569.840603][T20523] workingset_refault_anon 0 [ 2569.840603][T20523] workingset_refault_file 2 [ 2569.840603][T20523] workingset_activate_anon 0 [ 2569.840603][T20523] workingset_activate_file 0 [ 2569.840603][T20523] workingset_restore_anon 0 [ 2569.840603][T20523] workingset_restore_file 1 [ 2569.840603][T20523] workingset_nodereclaim 0 [ 2569.840603][T20523] pgscan 1707 [ 2569.840603][T20523] pgsteal 130 [ 2569.840603][T20523] pgscan_kswapd 109 [ 2569.840603][T20523] pgscan_direct 1598 [ 2569.840603][T20523] pgscan_khugepaged 0 [ 2569.840603][T20523] pgsteal_kswapd 108 [ 2569.840603][T20523] pgsteal_direct 22 [ 2569.840603][T20523] pgsteal_khugepaged 0 [ 2569.840603][T20523] pgfault 1009189 [ 2569.840603][T20523] pgmajfault 0 [ 2569.840603][T20523] pgrefill 12774 [ 2569.840603][T20523] pgactivate 1554 [ 2569.840603][T20523] pgdeactivate 0 [ 2569.840603][T20523] pglazyfree 0 [ 2569.840603][T20523] pglazyfreed 0 [ 2569.840603][T20523] zswpin 0 [ 2569.840603][T20523] zswpout 0 05:56:24 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85283}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2570.031529][T20523] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20523,uid=0 [ 2570.050027][T20523] Memory cgroup out of memory: Killed process 20523 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:24 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x5865, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x34010700}, 0x0) [ 2570.091807][T20534] wireguard53: entered promiscuous mode [ 2570.115271][T20541] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2570.126486][T20541] CPU: 1 PID: 20541 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2570.136976][T20541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2570.147083][T20541] Call Trace: [ 2570.150403][T20541] [ 2570.153379][T20541] dump_stack_lvl+0x136/0x150 [ 2570.158142][T20541] dump_header+0x10a/0xd70 [ 2570.162728][T20541] oom_kill_process+0x25d/0x600 [ 2570.167661][T20541] out_of_memory+0x35c/0x1660 [ 2570.172509][T20541] ? find_held_lock+0x2d/0x110 [ 2570.177368][T20541] ? oom_killer_disable+0x2b0/0x2b0 [ 2570.182658][T20541] ? rcu_read_unlock+0x9/0x60 [ 2570.187411][T20541] ? find_held_lock+0x2d/0x110 [ 2570.192519][T20541] mem_cgroup_out_of_memory+0x206/0x270 [ 2570.198236][T20541] ? mem_cgroup_margin+0x130/0x130 [ 2570.203432][T20541] ? lock_downgrade+0x690/0x690 [ 2570.208380][T20541] try_charge_memcg+0xf9b/0x13b0 [ 2570.213395][T20541] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2570.219447][T20541] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2570.225250][T20541] ? lock_downgrade+0x690/0x690 [ 2570.230178][T20541] ? lock_downgrade+0x690/0x690 [ 2570.235108][T20541] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2570.240722][T20541] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2570.246952][T20541] copy_process+0x4e3/0x7580 [ 2570.251626][T20541] ? __lock_acquire+0xbc5/0x5d40 [ 2570.256651][T20541] ? __cleanup_sighand+0xb0/0xb0 [ 2570.261673][T20541] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2570.267728][T20541] ? psi_memstall_leave+0x174/0x250 [ 2570.273014][T20541] ? lock_downgrade+0x690/0x690 [ 2570.277952][T20541] kernel_clone+0xeb/0x890 [ 2570.282447][T20541] ? create_io_thread+0xf0/0xf0 [ 2570.287359][T20541] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2570.293684][T20541] ? lock_downgrade+0x690/0x690 [ 2570.298626][T20541] __do_sys_clone+0xba/0x100 [ 2570.303297][T20541] ? kernel_clone+0x890/0x890 [ 2570.308112][T20541] ? syscall_enter_from_user_mode+0x26/0x80 [ 2570.314060][T20541] do_syscall_64+0x39/0xb0 [ 2570.318775][T20541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2570.324728][T20541] RIP: 0033:0x7ffae188d591 [ 2570.329174][T20541] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2570.348834][T20541] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2570.357300][T20541] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2570.365318][T20541] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2570.373313][T20541] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2570.381321][T20541] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2570.389348][T20541] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2570.397377][T20541] [ 2570.404145][T20541] memory: usage 307176kB, limit 307200kB, failcnt 25776 [ 2570.411550][T20541] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2570.419324][T20541] Memory cgroup stats for /syz3: [ 2570.419604][T20541] anon 90112 [ 2570.419604][T20541] file 733184 [ 2570.419604][T20541] kernel 313720832 [ 2570.419604][T20541] kernel_stack 32768 [ 2570.419604][T20541] pagetables 69632 [ 2570.419604][T20541] sec_pagetables 0 [ 2570.419604][T20541] percpu 5375488 [ 2570.419604][T20541] sock 0 [ 2570.419604][T20541] vmalloc 8192 [ 2570.419604][T20541] shmem 733184 [ 2570.419604][T20541] zswap 0 [ 2570.419604][T20541] zswapped 0 [ 2570.419604][T20541] file_mapped 667648 [ 2570.419604][T20541] file_dirty 0 [ 2570.419604][T20541] file_writeback 0 [ 2570.419604][T20541] swapcached 0 [ 2570.419604][T20541] anon_thp 0 [ 2570.419604][T20541] file_thp 0 [ 2570.419604][T20541] shmem_thp 0 [ 2570.419604][T20541] inactive_anon 0 [ 2570.419604][T20541] active_anon 823296 [ 2570.419604][T20541] inactive_file 0 [ 2570.419604][T20541] active_file 0 [ 2570.419604][T20541] unevictable 0 [ 2570.419604][T20541] slab_reclaimable 1215536 [ 2570.419604][T20541] slab_unreclaimable 306965568 [ 2570.419604][T20541] slab 308181104 [ 2570.419604][T20541] workingset_refault_anon 0 [ 2570.419604][T20541] workingset_refault_file 130 [ 2570.419604][T20541] workingset_activate_anon 0 [ 2570.419604][T20541] workingset_activate_file 0 [ 2570.419604][T20541] workingset_restore_anon 0 [ 2570.419604][T20541] workingset_restore_file 0 [ 2570.419604][T20541] workingset_nodereclaim 0 [ 2570.419604][T20541] pgscan 3117 [ 2570.419604][T20541] pgsteal 939 [ 2570.419604][T20541] pgscan_kswapd 0 [ 2570.419604][T20541] pgscan_direct 3117 [ 2570.419604][T20541] pgscan_khugepaged 0 [ 2570.419604][T20541] pgsteal_kswapd 0 [ 2570.419604][T20541] pgsteal_direct 939 [ 2570.419604][T20541] pgsteal_khugepaged 0 [ 2570.419604][T20541] pgfault 575032 [ 2570.419604][T20541] pgmajfault 0 [ 2570.419604][T20541] pgrefill 79949 [ 2570.419604][T20541] pgactivate 862 [ 2570.419604][T20541] pgdeactivate 0 [ 2570.419604][T20541] pglazyfree 0 [ 2570.419604][T20541] pglazyfreed 0 [ 2570.419604][T20541] zswpin 0 [ 2570.419604][T20541] zswpout 0 [ 2570.626537][T20541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20541,uid=0 05:56:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2d0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2570.650582][T20541] Memory cgroup out of memory: Killed process 20541 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x57000000) [ 2570.698770][T20545] wireguard71: entered allmulticast mode [ 2570.771183][T20547] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2570.801463][T20547] CPU: 0 PID: 20547 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2570.811973][T20547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2570.822256][T20547] Call Trace: [ 2570.825637][T20547] [ 2570.828610][T20547] dump_stack_lvl+0x136/0x150 [ 2570.833371][T20547] dump_header+0x10a/0xd70 [ 2570.837873][T20547] oom_kill_process+0x25d/0x600 [ 2570.842799][T20547] out_of_memory+0x35c/0x1660 [ 2570.847526][T20547] ? find_held_lock+0x2d/0x110 [ 2570.852425][T20547] ? oom_killer_disable+0x2b0/0x2b0 [ 2570.857666][T20547] ? rcu_read_unlock+0x9/0x60 [ 2570.862386][T20547] ? find_held_lock+0x2d/0x110 [ 2570.867203][T20547] mem_cgroup_out_of_memory+0x206/0x270 [ 2570.872800][T20547] ? mem_cgroup_margin+0x130/0x130 [ 2570.877959][T20547] ? lock_downgrade+0x690/0x690 [ 2570.882887][T20547] try_charge_memcg+0xf9b/0x13b0 [ 2570.887864][T20547] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2570.893886][T20547] ? rcu_read_unlock+0x9/0x60 [ 2570.898605][T20547] ? lock_downgrade+0x690/0x690 [ 2570.903509][T20547] charge_memcg+0x90/0x3b0 [ 2570.907966][T20547] __mem_cgroup_charge+0x2b/0x90 [ 2570.912942][T20547] do_wp_page+0x8eb/0x3530 [ 2570.917410][T20547] ? lock_release+0x670/0x670 [ 2570.922122][T20547] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2570.927532][T20547] ? do_raw_spin_lock+0x124/0x2b0 [ 2570.932602][T20547] ? spin_bug+0x1c0/0x1c0 [ 2570.936967][T20547] ? lock_downgrade+0x690/0x690 [ 2570.941869][T20547] __handle_mm_fault+0x19a1/0x3e60 [ 2570.947049][T20547] ? vm_iomap_memory+0x190/0x190 [ 2570.952069][T20547] handle_mm_fault+0x2ba/0x9c0 [ 2570.956897][T20547] do_user_addr_fault+0x47e/0x1240 [ 2570.962056][T20547] ? rcu_is_watching+0x12/0xb0 [ 2570.966870][T20547] exc_page_fault+0x98/0x170 [ 2570.971512][T20547] asm_exc_page_fault+0x26/0x30 [ 2570.976418][T20547] RIP: 0033:0x7f4933239610 [ 2570.980889][T20547] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2571.000525][T20547] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2571.006637][T20547] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2571.014657][T20547] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 05:56:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2f0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2571.022672][T20547] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2571.030676][T20547] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2571.038673][T20547] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2571.046698][T20547] ? apparmor_socket_create+0xb7/0x670 [ 2571.052254][T20547] [ 2571.088534][T20547] memory: usage 307188kB, limit 307200kB, failcnt 14457 [ 2571.098288][T20547] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2571.106065][T20547] Memory cgroup stats for /syz2: [ 2571.106351][T20547] anon 122880 [ 2571.106351][T20547] file 688128 [ 2571.106351][T20547] kernel 313749504 [ 2571.106351][T20547] kernel_stack 65536 [ 2571.106351][T20547] pagetables 73728 [ 2571.106351][T20547] sec_pagetables 0 [ 2571.106351][T20547] percpu 5387328 [ 2571.106351][T20547] sock 0 [ 2571.106351][T20547] vmalloc 8192 [ 2571.106351][T20547] shmem 679936 [ 2571.106351][T20547] zswap 0 [ 2571.106351][T20547] zswapped 0 [ 2571.106351][T20547] file_mapped 630784 [ 2571.106351][T20547] file_dirty 8192 [ 2571.106351][T20547] file_writeback 0 [ 2571.106351][T20547] swapcached 0 [ 2571.106351][T20547] anon_thp 0 [ 2571.106351][T20547] file_thp 0 [ 2571.106351][T20547] shmem_thp 0 [ 2571.106351][T20547] inactive_anon 761856 [ 2571.106351][T20547] active_anon 40960 [ 2571.106351][T20547] inactive_file 0 [ 2571.106351][T20547] active_file 8192 [ 2571.106351][T20547] unevictable 0 [ 2571.106351][T20547] slab_reclaimable 512504 [ 2571.106351][T20547] slab_unreclaimable 307665392 [ 2571.106351][T20547] slab 308177896 [ 2571.106351][T20547] workingset_refault_anon 0 [ 2571.106351][T20547] workingset_refault_file 2 [ 2571.106351][T20547] workingset_activate_anon 0 [ 2571.106351][T20547] workingset_activate_file 0 [ 2571.106351][T20547] workingset_restore_anon 0 [ 2571.106351][T20547] workingset_restore_file 1 [ 2571.106351][T20547] workingset_nodereclaim 0 [ 2571.106351][T20547] pgscan 1707 [ 2571.106351][T20547] pgsteal 130 [ 2571.106351][T20547] pgscan_kswapd 109 [ 2571.106351][T20547] pgscan_direct 1598 [ 2571.106351][T20547] pgscan_khugepaged 0 [ 2571.106351][T20547] pgsteal_kswapd 108 [ 2571.106351][T20547] pgsteal_direct 22 [ 2571.106351][T20547] pgsteal_khugepaged 0 [ 2571.106351][T20547] pgfault 1009241 [ 2571.106351][T20547] pgmajfault 0 [ 2571.106351][T20547] pgrefill 12938 [ 2571.106351][T20547] pgactivate 1554 [ 2571.106351][T20547] pgdeactivate 0 [ 2571.106351][T20547] pglazyfree 0 [ 2571.106351][T20547] pglazyfreed 0 05:56:25 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c183}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2571.106351][T20547] zswpin 0 [ 2571.106351][T20547] zswpout 0 [ 2571.339989][T20547] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20547,uid=0 [ 2571.356660][T20547] Memory cgroup out of memory: Killed process 20547 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:25 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2571.388461][T20560] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2571.407099][T20560] CPU: 0 PID: 20560 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2571.418043][T20560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2571.428156][T20560] Call Trace: [ 2571.431911][T20560] [ 2571.434886][T20560] dump_stack_lvl+0x136/0x150 [ 2571.439642][T20560] dump_header+0x10a/0xd70 [ 2571.444140][T20560] oom_kill_process+0x25d/0x600 [ 2571.449077][T20560] out_of_memory+0x35c/0x1660 [ 2571.453833][T20560] ? find_held_lock+0x2d/0x110 [ 2571.458689][T20560] ? oom_killer_disable+0x2b0/0x2b0 [ 2571.463965][T20560] ? rcu_read_unlock+0x9/0x60 [ 2571.468724][T20560] ? find_held_lock+0x2d/0x110 [ 2571.473572][T20560] mem_cgroup_out_of_memory+0x206/0x270 [ 2571.479196][T20560] ? mem_cgroup_margin+0x130/0x130 [ 2571.484381][T20560] ? lock_downgrade+0x690/0x690 [ 2571.489307][T20560] try_charge_memcg+0xf9b/0x13b0 [ 2571.494318][T20560] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2571.500371][T20560] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2571.506178][T20560] ? lock_downgrade+0x690/0x690 [ 2571.511100][T20560] ? lock_downgrade+0x690/0x690 [ 2571.516102][T20560] ? rcu_read_unlock+0x9/0x60 [ 2571.520838][T20560] obj_cgroup_charge+0x2af/0x5e0 [ 2571.525818][T20560] __kmem_cache_alloc_node+0xa3/0x320 [ 2571.531240][T20560] ? copy_semundo+0x18b/0x300 [ 2571.535957][T20560] kmalloc_trace+0x26/0xe0 [ 2571.540421][T20560] copy_semundo+0x18b/0x300 [ 2571.544960][T20560] copy_process+0x24a2/0x7580 [ 2571.549684][T20560] ? __lock_acquire+0xbc5/0x5d40 [ 2571.554715][T20560] ? __cleanup_sighand+0xb0/0xb0 [ 2571.559690][T20560] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2571.565815][T20560] ? psi_memstall_leave+0x174/0x250 [ 2571.571058][T20560] ? lock_downgrade+0x690/0x690 [ 2571.576035][T20560] kernel_clone+0xeb/0x890 [ 2571.580492][T20560] ? create_io_thread+0xf0/0xf0 [ 2571.585383][T20560] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2571.591759][T20560] ? lock_downgrade+0x690/0x690 [ 2571.596655][T20560] __do_sys_clone+0xba/0x100 [ 2571.601302][T20560] ? kernel_clone+0x890/0x890 [ 2571.606053][T20560] ? syscall_enter_from_user_mode+0x26/0x80 [ 2571.612023][T20560] do_syscall_64+0x39/0xb0 [ 2571.616476][T20560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2571.622401][T20560] RIP: 0033:0x7ffae188d591 [ 2571.626841][T20560] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2571.646479][T20560] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2571.655107][T20560] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2571.663130][T20560] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2571.671126][T20560] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2571.679126][T20560] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e 05:56:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2f2, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x35010700}, 0x0) [ 2571.687128][T20560] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2571.695145][T20560] [ 2571.705648][T20560] memory: usage 307184kB, limit 307200kB, failcnt 25873 [ 2571.718326][T20560] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2571.747546][T20560] Memory cgroup stats for /syz3: [ 2571.747823][T20560] anon 90112 [ 2571.747823][T20560] file 733184 [ 2571.747823][T20560] kernel 313733120 [ 2571.747823][T20560] kernel_stack 65536 [ 2571.747823][T20560] pagetables 69632 [ 2571.747823][T20560] sec_pagetables 0 [ 2571.747823][T20560] percpu 5375488 [ 2571.747823][T20560] sock 0 [ 2571.747823][T20560] vmalloc 8192 [ 2571.747823][T20560] shmem 733184 [ 2571.747823][T20560] zswap 0 [ 2571.747823][T20560] zswapped 0 [ 2571.747823][T20560] file_mapped 667648 [ 2571.747823][T20560] file_dirty 0 [ 2571.747823][T20560] file_writeback 0 [ 2571.747823][T20560] swapcached 0 [ 2571.747823][T20560] anon_thp 0 [ 2571.747823][T20560] file_thp 0 [ 2571.747823][T20560] shmem_thp 0 [ 2571.747823][T20560] inactive_anon 0 [ 2571.747823][T20560] active_anon 823296 [ 2571.747823][T20560] inactive_file 0 [ 2571.747823][T20560] active_file 0 [ 2571.747823][T20560] unevictable 0 [ 2571.747823][T20560] slab_reclaimable 1215536 [ 2571.747823][T20560] slab_unreclaimable 306962888 [ 2571.747823][T20560] slab 308178424 [ 2571.747823][T20560] workingset_refault_anon 0 [ 2571.747823][T20560] workingset_refault_file 130 [ 2571.747823][T20560] workingset_activate_anon 0 [ 2571.747823][T20560] workingset_activate_file 0 [ 2571.747823][T20560] workingset_restore_anon 0 [ 2571.747823][T20560] workingset_restore_file 0 [ 2571.747823][T20560] workingset_nodereclaim 0 [ 2571.747823][T20560] pgscan 3117 [ 2571.747823][T20560] pgsteal 939 [ 2571.747823][T20560] pgscan_kswapd 0 [ 2571.747823][T20560] pgscan_direct 3117 [ 2571.747823][T20560] pgscan_khugepaged 0 [ 2571.747823][T20560] pgsteal_kswapd 0 05:56:26 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85284}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2571.747823][T20560] pgsteal_direct 939 [ 2571.747823][T20560] pgsteal_khugepaged 0 [ 2571.747823][T20560] pgfault 575069 [ 2571.747823][T20560] pgmajfault 0 [ 2571.747823][T20560] pgrefill 79949 [ 2571.747823][T20560] pgactivate 862 [ 2571.747823][T20560] pgdeactivate 0 [ 2571.747823][T20560] pglazyfree 0 [ 2571.747823][T20560] pglazyfreed 0 [ 2571.747823][T20560] zswpin 0 [ 2571.747823][T20560] zswpout 0 05:56:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2f6, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x58000000) [ 2571.986452][T20560] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20560,uid=0 [ 2572.002963][T20570] wireguard53: entered promiscuous mode [ 2572.012106][T20560] Memory cgroup out of memory: Killed process 20560 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2572.083332][T20579] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2572.125776][T20579] CPU: 1 PID: 20579 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2572.136292][T20579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2572.139099][T20586] wireguard71: entered allmulticast mode [ 2572.146383][T20579] Call Trace: [ 2572.146398][T20579] [ 2572.146412][T20579] dump_stack_lvl+0x136/0x150 [ 2572.146471][T20579] dump_header+0x10a/0xd70 [ 2572.146527][T20579] oom_kill_process+0x25d/0x600 [ 2572.172464][T20579] out_of_memory+0x35c/0x1660 [ 2572.177211][T20579] ? find_held_lock+0x2d/0x110 [ 2572.182037][T20579] ? oom_killer_disable+0x2b0/0x2b0 [ 2572.187309][T20579] ? rcu_read_unlock+0x9/0x60 [ 2572.192059][T20579] ? find_held_lock+0x2d/0x110 [ 2572.196899][T20579] mem_cgroup_out_of_memory+0x206/0x270 [ 2572.202497][T20579] ? mem_cgroup_margin+0x130/0x130 [ 2572.207661][T20579] ? lock_downgrade+0x690/0x690 [ 2572.212572][T20579] try_charge_memcg+0xf9b/0x13b0 [ 2572.217562][T20579] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2572.223684][T20579] ? rcu_read_unlock+0x9/0x60 [ 2572.228393][T20579] ? lock_downgrade+0x690/0x690 [ 2572.233391][T20579] charge_memcg+0x90/0x3b0 [ 2572.237870][T20579] __mem_cgroup_charge+0x2b/0x90 [ 2572.242877][T20579] do_wp_page+0x8eb/0x3530 [ 2572.247360][T20579] ? lock_release+0x670/0x670 [ 2572.252068][T20579] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2572.257484][T20579] ? do_raw_spin_lock+0x124/0x2b0 [ 2572.262904][T20579] ? spin_bug+0x1c0/0x1c0 [ 2572.267302][T20579] ? lock_downgrade+0x690/0x690 [ 2572.272221][T20579] __handle_mm_fault+0x19a1/0x3e60 [ 2572.277390][T20579] ? vm_iomap_memory+0x190/0x190 [ 2572.282424][T20579] handle_mm_fault+0x2ba/0x9c0 [ 2572.287260][T20579] do_user_addr_fault+0x47e/0x1240 [ 2572.292428][T20579] ? rcu_is_watching+0x12/0xb0 [ 2572.297240][T20579] exc_page_fault+0x98/0x170 [ 2572.301885][T20579] asm_exc_page_fault+0x26/0x30 [ 2572.306775][T20579] RIP: 0033:0x7f4933239610 [ 2572.311240][T20579] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2572.330903][T20579] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2572.337119][T20579] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2572.345133][T20579] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2572.353138][T20579] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2572.361245][T20579] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2572.369380][T20579] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2572.377414][T20579] ? apparmor_socket_create+0x13c/0x670 [ 2572.383061][T20579] [ 2572.389272][T20579] memory: usage 307184kB, limit 307200kB, failcnt 14563 [ 2572.397378][T20579] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2572.404555][T20579] Memory cgroup stats for /syz2: [ 2572.404854][T20579] anon 126976 [ 2572.404854][T20579] file 684032 [ 2572.404854][T20579] kernel 313745408 [ 2572.404854][T20579] kernel_stack 65536 [ 2572.404854][T20579] pagetables 73728 [ 2572.404854][T20579] sec_pagetables 0 [ 2572.404854][T20579] percpu 5387328 [ 2572.404854][T20579] sock 0 [ 2572.404854][T20579] vmalloc 8192 [ 2572.404854][T20579] shmem 679936 [ 2572.404854][T20579] zswap 0 [ 2572.404854][T20579] zswapped 0 [ 2572.404854][T20579] file_mapped 630784 [ 2572.404854][T20579] file_dirty 0 [ 2572.404854][T20579] file_writeback 0 [ 2572.404854][T20579] swapcached 0 [ 2572.404854][T20579] anon_thp 0 [ 2572.404854][T20579] file_thp 0 [ 2572.404854][T20579] shmem_thp 0 [ 2572.404854][T20579] inactive_anon 8192 [ 2572.404854][T20579] active_anon 798720 [ 2572.404854][T20579] inactive_file 0 [ 2572.404854][T20579] active_file 4096 [ 2572.404854][T20579] unevictable 0 [ 2572.404854][T20579] slab_reclaimable 512264 [ 2572.404854][T20579] slab_unreclaimable 307665392 [ 2572.404854][T20579] slab 308177656 [ 2572.404854][T20579] workingset_refault_anon 0 [ 2572.404854][T20579] workingset_refault_file 2 [ 2572.404854][T20579] workingset_activate_anon 0 [ 2572.404854][T20579] workingset_activate_file 0 [ 2572.404854][T20579] workingset_restore_anon 0 [ 2572.404854][T20579] workingset_restore_file 1 [ 2572.404854][T20579] workingset_nodereclaim 0 [ 2572.404854][T20579] pgscan 1742 [ 2572.404854][T20579] pgsteal 131 [ 2572.404854][T20579] pgscan_kswapd 109 [ 2572.404854][T20579] pgscan_direct 1633 [ 2572.404854][T20579] pgscan_khugepaged 0 [ 2572.404854][T20579] pgsteal_kswapd 108 [ 2572.404854][T20579] pgsteal_direct 23 [ 2572.404854][T20579] pgsteal_khugepaged 0 [ 2572.404854][T20579] pgfault 1009295 [ 2572.404854][T20579] pgmajfault 0 [ 2572.404854][T20579] pgrefill 12938 [ 2572.404854][T20579] pgactivate 1588 [ 2572.404854][T20579] pgdeactivate 0 [ 2572.404854][T20579] pglazyfree 0 [ 2572.404854][T20579] pglazyfreed 0 [ 2572.404854][T20579] zswpin 0 [ 2572.404854][T20579] zswpout 0 [ 2572.603894][T20579] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20579,uid=0 05:56:26 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6203, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x36010700}, 0x0) [ 2572.627701][T20579] Memory cgroup out of memory: Killed process 20579 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2fa, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:26 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c184}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2572.750535][T20603] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2572.762036][T20603] CPU: 0 PID: 20603 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2572.772530][T20603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2572.782647][T20603] Call Trace: [ 2572.785990][T20603] [ 2572.788978][T20603] dump_stack_lvl+0x136/0x150 [ 2572.793744][T20603] dump_header+0x10a/0xd70 [ 2572.798239][T20603] oom_kill_process+0x25d/0x600 [ 2572.803180][T20603] out_of_memory+0x35c/0x1660 [ 2572.807953][T20603] ? find_held_lock+0x2d/0x110 [ 2572.812814][T20603] ? oom_killer_disable+0x2b0/0x2b0 [ 2572.818094][T20603] ? rcu_read_unlock+0x9/0x60 [ 2572.822877][T20603] ? find_held_lock+0x2d/0x110 [ 2572.827742][T20603] mem_cgroup_out_of_memory+0x206/0x270 [ 2572.833385][T20603] ? mem_cgroup_margin+0x130/0x130 [ 2572.838757][T20603] ? lock_downgrade+0x690/0x690 [ 2572.843698][T20603] try_charge_memcg+0xf9b/0x13b0 [ 2572.848717][T20603] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2572.854763][T20603] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2572.860546][T20603] ? lock_downgrade+0x690/0x690 [ 2572.865542][T20603] ? lock_downgrade+0x690/0x690 [ 2572.870449][T20603] obj_cgroup_charge+0x2af/0x5e0 [ 2572.875431][T20603] ? __d_alloc+0x32/0x980 [ 2572.879806][T20603] kmem_cache_alloc_lru+0x142/0x600 [ 2572.885085][T20603] __d_alloc+0x32/0x980 [ 2572.889294][T20603] ? alloc_fd+0x2e4/0x750 [ 2572.893682][T20603] d_alloc_pseudo+0x1d/0x70 [ 2572.898285][T20603] alloc_file_pseudo+0xca/0x250 [ 2572.903307][T20603] ? alloc_file+0x800/0x800 [ 2572.907858][T20603] ? do_raw_spin_unlock+0x175/0x230 [ 2572.913098][T20603] ? _raw_spin_unlock+0x28/0x40 [ 2572.918007][T20603] ? alloc_fd+0x2e4/0x750 [ 2572.922723][T20603] sock_alloc_file+0x53/0x190 [ 2572.927537][T20603] __sys_socket+0x1a8/0x250 [ 2572.932073][T20603] ? __sys_socket_file+0x1d0/0x1d0 [ 2572.937216][T20603] ? kcov_ioctl+0x384/0x6f0 [ 2572.941758][T20603] __x64_sys_socket+0x73/0xb0 [ 2572.946555][T20603] do_syscall_64+0x39/0xb0 [ 2572.951013][T20603] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2572.956941][T20603] RIP: 0033:0x7f493328c169 [ 2572.961387][T20603] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2572.981127][T20603] RSP: 002b:00007f493404d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2572.989573][T20603] RAX: ffffffffffffffda RBX: 00007f49333abf80 RCX: 00007f493328c169 [ 2572.997575][T20603] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 2573.005659][T20603] RBP: 00007f49332e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2573.013655][T20603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2573.022521][T20603] R13: 00007fff741ea2ef R14: 00007f493404d300 R15: 0000000000022000 [ 2573.030623][T20603] 05:56:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2fc, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:27 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85285}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2573.109536][T20610] wireguard53: entered promiscuous mode 05:56:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x300, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2573.174705][T20618] wireguard71: entered allmulticast mode [ 2573.210217][T20603] memory: usage 307200kB, limit 307200kB, failcnt 14658 [ 2573.218032][T20603] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2573.233570][T20603] Memory cgroup stats for /syz2: [ 2573.233888][T20603] anon 106496 [ 2573.233888][T20603] file 684032 [ 2573.233888][T20603] kernel 313782272 [ 2573.233888][T20603] kernel_stack 65536 [ 2573.233888][T20603] pagetables 81920 [ 2573.233888][T20603] sec_pagetables 0 [ 2573.233888][T20603] percpu 5387392 [ 2573.233888][T20603] sock 0 [ 2573.233888][T20603] vmalloc 8192 [ 2573.233888][T20603] shmem 679936 [ 2573.233888][T20603] zswap 0 [ 2573.233888][T20603] zswapped 0 [ 2573.233888][T20603] file_mapped 630784 [ 2573.233888][T20603] file_dirty 0 [ 2573.233888][T20603] file_writeback 0 [ 2573.233888][T20603] swapcached 0 [ 2573.233888][T20603] anon_thp 0 [ 2573.233888][T20603] file_thp 0 [ 2573.233888][T20603] shmem_thp 0 [ 2573.233888][T20603] inactive_anon 0 [ 2573.233888][T20603] active_anon 786432 [ 2573.233888][T20603] inactive_file 4096 [ 2573.233888][T20603] active_file 0 [ 2573.233888][T20603] unevictable 0 [ 2573.233888][T20603] slab_reclaimable 511880 [ 2573.233888][T20603] slab_unreclaimable 307685416 [ 2573.233888][T20603] slab 308197296 [ 2573.233888][T20603] workingset_refault_anon 0 [ 2573.233888][T20603] workingset_refault_file 2 [ 2573.233888][T20603] workingset_activate_anon 0 [ 2573.233888][T20603] workingset_activate_file 0 [ 2573.233888][T20603] workingset_restore_anon 0 [ 2573.233888][T20603] workingset_restore_file 1 [ 2573.233888][T20603] workingset_nodereclaim 0 [ 2573.233888][T20603] pgscan 1771 [ 2573.233888][T20603] pgsteal 131 [ 2573.233888][T20603] pgscan_kswapd 109 [ 2573.233888][T20603] pgscan_direct 1662 [ 2573.233888][T20603] pgscan_khugepaged 0 [ 2573.233888][T20603] pgsteal_kswapd 108 [ 2573.233888][T20603] pgsteal_direct 23 [ 2573.233888][T20603] pgsteal_khugepaged 0 [ 2573.233888][T20603] pgfault 1009339 [ 2573.233888][T20603] pgmajfault 0 [ 2573.233888][T20603] pgrefill 12938 [ 2573.233888][T20603] pgactivate 1617 [ 2573.233888][T20603] pgdeactivate 0 [ 2573.233888][T20603] pglazyfree 0 [ 2573.233888][T20603] pglazyfreed 0 [ 2573.233888][T20603] zswpin 0 [ 2573.233888][T20603] zswpout 0 05:56:27 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2573.428927][T20603] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20601,uid=0 [ 2573.445504][T20603] Memory cgroup out of memory: Killed process 20601 (syz-executor.2) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:56:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x37010700}, 0x0) 05:56:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x358, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2573.552705][T20593] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2573.618161][T20593] CPU: 1 PID: 20593 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2573.628644][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2573.638743][T20593] Call Trace: [ 2573.642040][T20593] [ 2573.645005][T20593] dump_stack_lvl+0x136/0x150 [ 2573.649746][T20593] dump_header+0x10a/0xd70 [ 2573.654207][T20593] oom_kill_process+0x25d/0x600 [ 2573.659090][T20593] out_of_memory+0x35c/0x1660 [ 2573.663806][T20593] ? find_held_lock+0x2d/0x110 [ 2573.668611][T20593] ? oom_killer_disable+0x2b0/0x2b0 [ 2573.673854][T20593] ? rcu_read_unlock+0x9/0x60 [ 2573.678670][T20593] ? find_held_lock+0x2d/0x110 [ 2573.683491][T20593] mem_cgroup_out_of_memory+0x206/0x270 [ 2573.689100][T20593] ? mem_cgroup_margin+0x130/0x130 [ 2573.694307][T20593] ? lock_downgrade+0x690/0x690 [ 2573.699207][T20593] try_charge_memcg+0xf9b/0x13b0 [ 2573.704182][T20593] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2573.710244][T20593] ? rcu_read_unlock+0x9/0x60 [ 2573.714979][T20593] ? lock_downgrade+0x690/0x690 [ 2573.719888][T20593] charge_memcg+0x90/0x3b0 [ 2573.724346][T20593] __mem_cgroup_charge+0x2b/0x90 [ 2573.729323][T20593] do_wp_page+0x8eb/0x3530 [ 2573.733790][T20593] ? lock_release+0x670/0x670 [ 2573.738499][T20593] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2573.743911][T20593] ? do_raw_spin_lock+0x124/0x2b0 [ 2573.748976][T20593] ? spin_bug+0x1c0/0x1c0 [ 2573.753341][T20593] ? lock_downgrade+0x690/0x690 [ 2573.758231][T20593] __handle_mm_fault+0x19a1/0x3e60 [ 2573.763391][T20593] ? vm_iomap_memory+0x190/0x190 [ 2573.768394][T20593] handle_mm_fault+0x2ba/0x9c0 [ 2573.773304][T20593] do_user_addr_fault+0x47e/0x1240 [ 2573.778468][T20593] ? rcu_is_watching+0x12/0xb0 [ 2573.783365][T20593] exc_page_fault+0x98/0x170 [ 2573.788013][T20593] asm_exc_page_fault+0x26/0x30 [ 2573.792906][T20593] RIP: 0033:0x7ffae1839610 [ 2573.797348][T20593] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2573.817078][T20593] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2573.823175][T20593] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2573.831195][T20593] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2573.839188][T20593] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2573.847362][T20593] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2573.855360][T20593] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2573.863531][T20593] ? __sys_socket+0x7c/0x250 [ 2573.868167][T20593] [ 2573.881343][T20593] memory: usage 307200kB, limit 307200kB, failcnt 26000 [ 2573.892196][T20593] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2573.910426][T20593] Memory cgroup stats for /syz3: [ 2573.910754][T20593] anon 106496 [ 2573.910754][T20593] file 733184 [ 2573.910754][T20593] kernel 313733120 [ 2573.910754][T20593] kernel_stack 65536 [ 2573.910754][T20593] pagetables 69632 [ 2573.910754][T20593] sec_pagetables 0 [ 2573.910754][T20593] percpu 5375488 [ 2573.910754][T20593] sock 0 [ 2573.910754][T20593] vmalloc 8192 [ 2573.910754][T20593] shmem 733184 [ 2573.910754][T20593] zswap 0 [ 2573.910754][T20593] zswapped 0 [ 2573.910754][T20593] file_mapped 667648 [ 2573.910754][T20593] file_dirty 0 [ 2573.910754][T20593] file_writeback 0 [ 2573.910754][T20593] swapcached 0 [ 2573.910754][T20593] anon_thp 0 [ 2573.910754][T20593] file_thp 0 [ 2573.910754][T20593] shmem_thp 0 [ 2573.910754][T20593] inactive_anon 0 [ 2573.910754][T20593] active_anon 839680 [ 2573.910754][T20593] inactive_file 0 [ 2573.910754][T20593] active_file 0 [ 2573.910754][T20593] unevictable 0 [ 2573.910754][T20593] slab_reclaimable 1217464 [ 2573.910754][T20593] slab_unreclaimable 306964000 [ 2573.910754][T20593] slab 308181464 [ 2573.910754][T20593] workingset_refault_anon 0 [ 2573.910754][T20593] workingset_refault_file 130 [ 2573.910754][T20593] workingset_activate_anon 0 [ 2573.910754][T20593] workingset_activate_file 0 [ 2573.910754][T20593] workingset_restore_anon 0 [ 2573.910754][T20593] workingset_restore_file 0 [ 2573.910754][T20593] workingset_nodereclaim 0 [ 2573.910754][T20593] pgscan 3117 [ 2573.910754][T20593] pgsteal 939 [ 2573.910754][T20593] pgscan_kswapd 0 [ 2573.910754][T20593] pgscan_direct 3117 [ 2573.910754][T20593] pgscan_khugepaged 0 [ 2573.910754][T20593] pgsteal_kswapd 0 [ 2573.910754][T20593] pgsteal_direct 939 [ 2573.910754][T20593] pgsteal_khugepaged 0 [ 2573.910754][T20593] pgfault 575113 [ 2573.910754][T20593] pgmajfault 0 [ 2573.910754][T20593] pgrefill 79949 [ 2573.910754][T20593] pgactivate 862 [ 2573.910754][T20593] pgdeactivate 0 [ 2573.910754][T20593] pglazyfree 0 [ 2573.910754][T20593] pglazyfreed 0 [ 2573.910754][T20593] zswpin 0 [ 2573.910754][T20593] zswpout 0 05:56:28 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85286}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x58110000) 05:56:28 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c185}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2574.109022][T20593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20593,uid=0 [ 2574.140003][T20593] Memory cgroup out of memory: Killed process 20593 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x362, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2574.245319][T20639] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2574.256816][T20639] CPU: 1 PID: 20639 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2574.267322][T20639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2574.277426][T20639] Call Trace: [ 2574.280743][T20639] [ 2574.283726][T20639] dump_stack_lvl+0x136/0x150 [ 2574.288490][T20639] dump_header+0x10a/0xd70 [ 2574.292985][T20639] oom_kill_process+0x25d/0x600 [ 2574.298088][T20639] out_of_memory+0x35c/0x1660 [ 2574.302858][T20639] ? find_held_lock+0x2d/0x110 [ 2574.307707][T20639] ? oom_killer_disable+0x2b0/0x2b0 [ 2574.312976][T20639] ? rcu_read_unlock+0x9/0x60 [ 2574.317717][T20639] ? find_held_lock+0x2d/0x110 [ 2574.322564][T20639] mem_cgroup_out_of_memory+0x206/0x270 [ 2574.328194][T20639] ? mem_cgroup_margin+0x130/0x130 [ 2574.333408][T20639] ? lock_downgrade+0x690/0x690 [ 2574.338346][T20639] try_charge_memcg+0xf9b/0x13b0 [ 2574.343361][T20639] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2574.349409][T20639] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2574.355217][T20639] ? lock_downgrade+0x690/0x690 [ 2574.360135][T20639] ? lock_downgrade+0x690/0x690 [ 2574.365066][T20639] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2574.370681][T20639] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2574.376269][T20645] wireguard71: entered allmulticast mode [ 2574.376924][T20639] copy_process+0x139b/0x7580 [ 2574.376973][T20639] ? free_swap_cache+0x1b5/0x3d0 05:56:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x370, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2574.392407][T20639] ? do_wp_page+0x4be/0x3530 [ 2574.397098][T20639] ? __cleanup_sighand+0xb0/0xb0 [ 2574.402125][T20639] ? spin_bug+0x1c0/0x1c0 [ 2574.406514][T20639] ? lock_downgrade+0x690/0x690 [ 2574.411448][T20639] kernel_clone+0xeb/0x890 [ 2574.415938][T20639] ? create_io_thread+0xf0/0xf0 [ 2574.421122][T20639] ? vm_iomap_memory+0x190/0x190 [ 2574.426140][T20639] ? find_held_lock+0x2d/0x110 [ 2574.431003][T20639] __do_sys_clone+0xba/0x100 [ 2574.435667][T20639] ? kernel_clone+0x890/0x890 [ 2574.440529][T20639] ? syscall_enter_from_user_mode+0x26/0x80 [ 2574.446530][T20639] do_syscall_64+0x39/0xb0 [ 2574.451030][T20639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2574.456980][T20639] RIP: 0033:0x7ffae188d591 [ 2574.461431][T20639] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2574.481152][T20639] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2574.489863][T20639] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2574.497944][T20639] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2574.505953][T20639] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2574.513982][T20639] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2574.522101][T20639] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2574.530159][T20639] [ 2574.539543][T20639] memory: usage 307200kB, limit 307200kB, failcnt 26075 05:56:28 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6800, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2574.554523][T20639] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2574.561780][T20642] wireguard53: entered promiscuous mode [ 2574.564766][T20639] Memory cgroup stats for /syz3: [ 2574.567740][T20639] anon 90112 [ 2574.567740][T20639] file 733184 [ 2574.567740][T20639] kernel 313716736 [ 2574.567740][T20639] kernel_stack 32768 [ 2574.567740][T20639] pagetables 69632 [ 2574.567740][T20639] sec_pagetables 0 [ 2574.567740][T20639] percpu 5375488 [ 2574.567740][T20639] sock 0 [ 2574.567740][T20639] vmalloc 8192 [ 2574.567740][T20639] shmem 733184 [ 2574.567740][T20639] zswap 0 [ 2574.567740][T20639] zswapped 0 [ 2574.567740][T20639] file_mapped 667648 [ 2574.567740][T20639] file_dirty 0 [ 2574.567740][T20639] file_writeback 0 [ 2574.567740][T20639] swapcached 0 [ 2574.567740][T20639] anon_thp 0 [ 2574.567740][T20639] file_thp 0 [ 2574.567740][T20639] shmem_thp 0 [ 2574.567740][T20639] inactive_anon 0 [ 2574.567740][T20639] active_anon 823296 [ 2574.567740][T20639] inactive_file 0 [ 2574.567740][T20639] active_file 0 [ 2574.567740][T20639] unevictable 0 [ 2574.567740][T20639] slab_reclaimable 1215536 [ 2574.567740][T20639] slab_unreclaimable 306963536 [ 2574.567740][T20639] slab 308179072 [ 2574.567740][T20639] workingset_refault_anon 0 [ 2574.567740][T20639] workingset_refault_file 130 [ 2574.567740][T20639] workingset_activate_anon 0 [ 2574.567740][T20639] workingset_activate_file 0 [ 2574.567740][T20639] workingset_restore_anon 0 [ 2574.567740][T20639] workingset_restore_file 0 [ 2574.567740][T20639] workingset_nodereclaim 0 [ 2574.567740][T20639] pgscan 3117 [ 2574.567740][T20639] pgsteal 939 [ 2574.567740][T20639] pgscan_kswapd 0 [ 2574.567740][T20639] pgscan_direct 3117 [ 2574.567740][T20639] pgscan_khugepaged 0 [ 2574.567740][T20639] pgsteal_kswapd 0 [ 2574.567740][T20639] pgsteal_direct 939 [ 2574.567740][T20639] pgsteal_khugepaged 0 [ 2574.567740][T20639] pgfault 575150 [ 2574.567740][T20639] pgmajfault 0 [ 2574.567740][T20639] pgrefill 79949 [ 2574.567740][T20639] pgactivate 862 [ 2574.567740][T20639] pgdeactivate 0 [ 2574.567740][T20639] pglazyfree 0 [ 2574.567740][T20639] pglazyfreed 0 [ 2574.567740][T20639] zswpin 0 [ 2574.567740][T20639] zswpout 0 05:56:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x5a010000) 05:56:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x372, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2574.768408][T20639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20639,uid=0 [ 2574.791248][T20639] Memory cgroup out of memory: Killed process 20639 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2574.856620][T20640] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2574.884711][T20640] CPU: 0 PID: 20640 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2574.895231][T20640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2574.905320][T20640] Call Trace: [ 2574.908622][T20640] [ 2574.911574][T20640] dump_stack_lvl+0x136/0x150 [ 2574.916301][T20640] dump_header+0x10a/0xd70 [ 2574.920770][T20640] oom_kill_process+0x25d/0x600 [ 2574.925682][T20640] out_of_memory+0x35c/0x1660 [ 2574.930412][T20640] ? find_held_lock+0x2d/0x110 [ 2574.935238][T20640] ? oom_killer_disable+0x2b0/0x2b0 [ 2574.940477][T20640] ? rcu_read_unlock+0x9/0x60 [ 2574.945196][T20640] ? find_held_lock+0x2d/0x110 [ 2574.950012][T20640] mem_cgroup_out_of_memory+0x206/0x270 [ 2574.955609][T20640] ? mem_cgroup_margin+0x130/0x130 [ 2574.960768][T20640] ? lock_downgrade+0x690/0x690 [ 2574.965699][T20640] try_charge_memcg+0xf9b/0x13b0 [ 2574.970682][T20640] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2574.976964][T20640] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2574.982735][T20640] ? lock_downgrade+0x690/0x690 [ 2574.987631][T20640] ? lock_downgrade+0x690/0x690 [ 2574.992534][T20640] obj_cgroup_charge+0x2af/0x5e0 [ 2574.997518][T20640] ? __anon_vma_prepare+0x64/0x580 [ 2575.002694][T20640] kmem_cache_alloc+0xb1/0x3b0 [ 2575.007517][T20640] __anon_vma_prepare+0x64/0x580 [ 2575.012494][T20640] ? __pmd_alloc+0x30c/0x5d0 [ 2575.017126][T20640] __handle_mm_fault+0x3a8f/0x3e60 [ 2575.022288][T20640] ? vm_iomap_memory+0x190/0x190 [ 2575.027289][T20640] handle_mm_fault+0x2ba/0x9c0 [ 2575.032360][T20640] do_user_addr_fault+0x47e/0x1240 [ 2575.037518][T20640] ? rcu_is_watching+0x12/0xb0 [ 2575.042323][T20640] exc_page_fault+0x98/0x170 [ 2575.046965][T20640] asm_exc_page_fault+0x26/0x30 [ 2575.051848][T20640] RIP: 0033:0x7f493322bde9 [ 2575.056293][T20640] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2575.075952][T20640] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2575.082136][T20640] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2575.090222][T20640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2575.098226][T20640] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2575.106225][T20640] R10: 00007f4932e00068 R11: 0000000000000246 R12: 0000000000274140 [ 2575.114256][T20640] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2575.122377][T20640] [ 2575.130899][T20640] memory: usage 307200kB, limit 307200kB, failcnt 14805 [ 2575.152011][T20640] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2575.195154][T20640] Memory cgroup stats for /syz2: [ 2575.195463][T20640] anon 135168 [ 2575.195463][T20640] file 684032 [ 2575.195463][T20640] kernel 313753600 [ 2575.195463][T20640] kernel_stack 65536 [ 2575.195463][T20640] pagetables 81920 [ 2575.195463][T20640] sec_pagetables 0 [ 2575.195463][T20640] percpu 5387328 [ 2575.195463][T20640] sock 0 [ 2575.195463][T20640] vmalloc 8192 [ 2575.195463][T20640] shmem 679936 [ 2575.195463][T20640] zswap 0 [ 2575.195463][T20640] zswapped 0 [ 2575.195463][T20640] file_mapped 630784 [ 2575.195463][T20640] file_dirty 4096 [ 2575.195463][T20640] file_writeback 0 [ 2575.195463][T20640] swapcached 0 [ 2575.195463][T20640] anon_thp 0 [ 2575.195463][T20640] file_thp 0 [ 2575.195463][T20640] shmem_thp 0 [ 2575.195463][T20640] inactive_anon 708608 [ 2575.195463][T20640] active_anon 106496 [ 2575.195463][T20640] inactive_file 0 [ 2575.195463][T20640] active_file 4096 [ 2575.195463][T20640] unevictable 0 [ 2575.195463][T20640] slab_reclaimable 512264 [ 2575.195463][T20640] slab_unreclaimable 307665392 [ 2575.195463][T20640] slab 308177656 [ 2575.195463][T20640] workingset_refault_anon 0 [ 2575.195463][T20640] workingset_refault_file 2 [ 2575.195463][T20640] workingset_activate_anon 0 [ 2575.195463][T20640] workingset_activate_file 0 [ 2575.195463][T20640] workingset_restore_anon 0 [ 2575.195463][T20640] workingset_restore_file 1 [ 2575.195463][T20640] workingset_nodereclaim 0 [ 2575.195463][T20640] pgscan 1837 [ 2575.195463][T20640] pgsteal 131 [ 2575.195463][T20640] pgscan_kswapd 109 [ 2575.195463][T20640] pgscan_direct 1728 [ 2575.195463][T20640] pgscan_khugepaged 0 [ 2575.195463][T20640] pgsteal_kswapd 108 05:56:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x374, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2575.195463][T20640] pgsteal_direct 23 [ 2575.195463][T20640] pgsteal_khugepaged 0 [ 2575.195463][T20640] pgfault 1009400 [ 2575.195463][T20640] pgmajfault 0 [ 2575.195463][T20640] pgrefill 12940 [ 2575.195463][T20640] pgactivate 1683 [ 2575.195463][T20640] pgdeactivate 0 [ 2575.195463][T20640] pglazyfree 0 [ 2575.195463][T20640] pglazyfreed 0 [ 2575.195463][T20640] zswpin 0 [ 2575.195463][T20640] zswpout 0 05:56:29 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85287}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2575.420318][T20640] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20640,uid=0 [ 2575.453784][T20640] Memory cgroup out of memory: Killed process 20640 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:56:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x38010700}, 0x0) 05:56:29 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c186}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2575.507781][T20667] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2575.522434][T20667] CPU: 0 PID: 20667 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2575.532929][T20667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2575.543048][T20667] Call Trace: [ 2575.546363][T20667] [ 2575.549338][T20667] dump_stack_lvl+0x136/0x150 [ 2575.554093][T20667] dump_header+0x10a/0xd70 [ 2575.558583][T20667] oom_kill_process+0x25d/0x600 [ 2575.563518][T20667] out_of_memory+0x35c/0x1660 [ 2575.568248][T20667] ? find_held_lock+0x2d/0x110 [ 2575.573061][T20667] ? oom_killer_disable+0x2b0/0x2b0 [ 2575.578311][T20667] ? rcu_read_unlock+0x9/0x60 [ 2575.583026][T20667] ? find_held_lock+0x2d/0x110 [ 2575.587835][T20667] mem_cgroup_out_of_memory+0x206/0x270 [ 2575.593426][T20667] ? mem_cgroup_margin+0x130/0x130 [ 2575.598580][T20667] ? lock_downgrade+0x690/0x690 [ 2575.603476][T20667] try_charge_memcg+0xf9b/0x13b0 [ 2575.608453][T20667] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2575.614467][T20667] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2575.620236][T20667] ? lock_downgrade+0x690/0x690 [ 2575.625116][T20667] ? lock_downgrade+0x690/0x690 [ 2575.629999][T20667] ? rcu_read_unlock+0x9/0x60 [ 2575.634756][T20667] obj_cgroup_charge+0x2af/0x5e0 [ 2575.639733][T20667] __kmem_cache_alloc_node+0xa3/0x320 [ 2575.645163][T20667] ? copy_semundo+0x18b/0x300 [ 2575.649896][T20667] kmalloc_trace+0x26/0xe0 [ 2575.654358][T20667] copy_semundo+0x18b/0x300 [ 2575.658896][T20667] copy_process+0x24a2/0x7580 [ 2575.663609][T20667] ? __lock_acquire+0xbc5/0x5d40 [ 2575.668603][T20667] ? __cleanup_sighand+0xb0/0xb0 [ 2575.673578][T20667] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2575.679591][T20667] ? psi_memstall_leave+0x174/0x250 [ 2575.684826][T20667] ? lock_downgrade+0x690/0x690 [ 2575.689746][T20667] kernel_clone+0xeb/0x890 [ 2575.694202][T20667] ? create_io_thread+0xf0/0xf0 [ 2575.699276][T20667] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2575.705564][T20667] ? lock_downgrade+0x690/0x690 [ 2575.710478][T20667] __do_sys_clone+0xba/0x100 [ 2575.715103][T20667] ? kernel_clone+0x890/0x890 [ 2575.719826][T20667] ? syscall_enter_from_user_mode+0x26/0x80 [ 2575.725773][T20667] do_syscall_64+0x39/0xb0 [ 2575.730224][T20667] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2575.736147][T20667] RIP: 0033:0x7ffae188d591 [ 2575.740586][T20667] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2575.760237][T20667] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2575.768705][T20667] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2575.776711][T20667] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2575.784706][T20667] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2575.792699][T20667] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2575.800690][T20667] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 05:56:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x376, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:29 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2575.808981][T20667] [ 2575.823202][T20667] memory: usage 307200kB, limit 307200kB, failcnt 26176 [ 2575.835951][T20667] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2575.889930][T20667] Memory cgroup stats for /syz3: [ 2575.890226][T20667] anon 90112 [ 2575.890226][T20667] file 733184 [ 2575.890226][T20667] kernel 313749504 [ 2575.890226][T20667] kernel_stack 65536 [ 2575.890226][T20667] pagetables 69632 [ 2575.890226][T20667] sec_pagetables 0 [ 2575.890226][T20667] percpu 5375552 [ 2575.890226][T20667] sock 0 [ 2575.890226][T20667] vmalloc 8192 [ 2575.890226][T20667] shmem 733184 [ 2575.890226][T20667] zswap 0 [ 2575.890226][T20667] zswapped 0 [ 2575.890226][T20667] file_mapped 667648 [ 2575.890226][T20667] file_dirty 0 [ 2575.890226][T20667] file_writeback 0 [ 2575.890226][T20667] swapcached 0 [ 2575.890226][T20667] anon_thp 0 [ 2575.890226][T20667] file_thp 0 [ 2575.890226][T20667] shmem_thp 0 [ 2575.890226][T20667] inactive_anon 0 [ 2575.890226][T20667] active_anon 823296 [ 2575.890226][T20667] inactive_file 0 [ 2575.890226][T20667] active_file 0 [ 2575.890226][T20667] unevictable 0 [ 2575.890226][T20667] slab_reclaimable 1215536 [ 2575.890226][T20667] slab_unreclaimable 306974800 [ 2575.890226][T20667] slab 308190336 [ 2575.890226][T20667] workingset_refault_anon 0 [ 2575.890226][T20667] workingset_refault_file 130 [ 2575.890226][T20667] workingset_activate_anon 0 [ 2575.890226][T20667] workingset_activate_file 0 [ 2575.890226][T20667] workingset_restore_anon 0 [ 2575.890226][T20667] workingset_restore_file 0 [ 2575.890226][T20667] workingset_nodereclaim 0 [ 2575.890226][T20667] pgscan 3117 [ 2575.890226][T20667] pgsteal 939 [ 2575.890226][T20667] pgscan_kswapd 0 [ 2575.890226][T20667] pgscan_direct 3117 [ 2575.890226][T20667] pgscan_khugepaged 0 [ 2575.890226][T20667] pgsteal_kswapd 0 [ 2575.890226][T20667] pgsteal_direct 939 [ 2575.890226][T20667] pgsteal_khugepaged 0 [ 2575.890226][T20667] pgfault 575187 [ 2575.890226][T20667] pgmajfault 0 [ 2575.890226][T20667] pgrefill 79949 [ 2575.890226][T20667] pgactivate 862 [ 2575.890226][T20667] pgdeactivate 0 [ 2575.890226][T20667] pglazyfree 0 [ 2575.890226][T20667] pglazyfreed 0 [ 2575.890226][T20667] zswpin 0 [ 2575.890226][T20667] zswpout 0 [ 2576.080956][T20676] wireguard71: entered allmulticast mode 05:56:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x5a030000) [ 2576.088419][T20667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20667,uid=0 [ 2576.104701][T20667] Memory cgroup out of memory: Killed process 20667 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2576.130279][T20679] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2576.157611][T20679] CPU: 1 PID: 20679 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2576.168199][T20679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2576.178309][T20679] Call Trace: [ 2576.181632][T20679] [ 2576.184605][T20679] dump_stack_lvl+0x136/0x150 [ 2576.189359][T20679] dump_header+0x10a/0xd70 [ 2576.193853][T20679] oom_kill_process+0x25d/0x600 [ 2576.198776][T20679] out_of_memory+0x35c/0x1660 [ 2576.203525][T20679] ? oom_killer_disable+0x2b0/0x2b0 [ 2576.208783][T20679] ? rcu_read_unlock+0x9/0x60 [ 2576.213524][T20679] ? find_held_lock+0x2d/0x110 [ 2576.218369][T20679] mem_cgroup_out_of_memory+0x206/0x270 [ 2576.223978][T20679] ? mem_cgroup_margin+0x130/0x130 [ 2576.229136][T20679] ? lock_downgrade+0x690/0x690 [ 2576.234036][T20679] try_charge_memcg+0xf9b/0x13b0 [ 2576.239011][T20679] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2576.245028][T20679] ? rcu_read_unlock+0x9/0x60 [ 2576.249746][T20679] ? lock_downgrade+0x690/0x690 [ 2576.254730][T20679] charge_memcg+0x90/0x3b0 [ 2576.259200][T20679] __mem_cgroup_charge+0x2b/0x90 [ 2576.264176][T20679] do_wp_page+0x8eb/0x3530 [ 2576.268645][T20679] ? lock_release+0x670/0x670 [ 2576.273353][T20679] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2576.278762][T20679] ? do_raw_spin_lock+0x124/0x2b0 [ 2576.283822][T20679] ? spin_bug+0x1c0/0x1c0 [ 2576.288183][T20679] ? lock_downgrade+0x690/0x690 [ 2576.293076][T20679] __handle_mm_fault+0x19a1/0x3e60 [ 2576.298241][T20679] ? vm_iomap_memory+0x190/0x190 [ 2576.303337][T20679] handle_mm_fault+0x2ba/0x9c0 [ 2576.308148][T20679] do_user_addr_fault+0x47e/0x1240 [ 2576.313301][T20679] ? rcu_is_watching+0x12/0xb0 [ 2576.318207][T20679] exc_page_fault+0x98/0x170 [ 2576.322876][T20679] asm_exc_page_fault+0x26/0x30 [ 2576.327783][T20679] RIP: 0033:0x7f4933239610 [ 2576.332229][T20679] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2576.351953][T20679] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2576.358077][T20679] RAX: 00000000c7f44547 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2576.366073][T20679] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a27574e [ 2576.374065][T20679] RBP: 00000000c7f44547 R08: 0000000000000547 R09: 00000000c7f4454b [ 2576.382058][T20679] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2576.390057][T20679] R13: 0000000000000001 R14: 0000000000000011 R15: ffffffff83d4aab2 [ 2576.398135][T20679] ? apparmor_socket_create+0x232/0x670 [ 2576.403739][T20679] [ 2576.423854][T20679] memory: usage 307188kB, limit 307200kB, failcnt 14901 [ 2576.436444][T20679] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2576.449046][T20681] wireguard53: entered promiscuous mode [ 2576.454971][T20679] Memory cgroup stats for /syz2: [ 2576.455283][T20679] anon 131072 [ 2576.455283][T20679] file 684032 [ 2576.455283][T20679] kernel 313745408 [ 2576.455283][T20679] kernel_stack 65536 [ 2576.455283][T20679] pagetables 73728 [ 2576.455283][T20679] sec_pagetables 0 [ 2576.455283][T20679] percpu 5387328 [ 2576.455283][T20679] sock 0 [ 2576.455283][T20679] vmalloc 8192 [ 2576.455283][T20679] shmem 679936 [ 2576.455283][T20679] zswap 0 [ 2576.455283][T20679] zswapped 0 [ 2576.455283][T20679] file_mapped 630784 [ 2576.455283][T20679] file_dirty 4096 [ 2576.455283][T20679] file_writeback 0 [ 2576.455283][T20679] swapcached 0 [ 2576.455283][T20679] anon_thp 0 [ 2576.455283][T20679] file_thp 0 [ 2576.455283][T20679] shmem_thp 0 [ 2576.455283][T20679] inactive_anon 0 [ 2576.455283][T20679] active_anon 811008 [ 2576.455283][T20679] inactive_file 0 [ 2576.455283][T20679] active_file 4096 [ 2576.455283][T20679] unevictable 0 [ 2576.455283][T20679] slab_reclaimable 512264 [ 2576.455283][T20679] slab_unreclaimable 307665392 [ 2576.455283][T20679] slab 308177656 [ 2576.455283][T20679] workingset_refault_anon 0 [ 2576.455283][T20679] workingset_refault_file 2 [ 2576.455283][T20679] workingset_activate_anon 0 [ 2576.455283][T20679] workingset_activate_file 0 [ 2576.455283][T20679] workingset_restore_anon 0 [ 2576.455283][T20679] workingset_restore_file 1 [ 2576.455283][T20679] workingset_nodereclaim 0 [ 2576.455283][T20679] pgscan 1837 [ 2576.455283][T20679] pgsteal 131 [ 2576.455283][T20679] pgscan_kswapd 109 [ 2576.455283][T20679] pgscan_direct 1728 [ 2576.455283][T20679] pgscan_khugepaged 0 [ 2576.455283][T20679] pgsteal_kswapd 108 [ 2576.455283][T20679] pgsteal_direct 23 [ 2576.455283][T20679] pgsteal_khugepaged 0 [ 2576.455283][T20679] pgfault 1009459 [ 2576.455283][T20679] pgmajfault 0 [ 2576.455283][T20679] pgrefill 12999 [ 2576.455283][T20679] pgactivate 1683 [ 2576.455283][T20679] pgdeactivate 0 [ 2576.455283][T20679] pglazyfree 0 [ 2576.455283][T20679] pglazyfreed 0 [ 2576.455283][T20679] zswpin 0 [ 2576.455283][T20679] zswpout 0 [ 2576.654822][T20679] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20679,uid=0 05:56:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x37a, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x39010700}, 0x0) [ 2576.672344][T20679] Memory cgroup out of memory: Killed process 20679 (syz-executor.2) total-vm:54548kB, anon-rss:360kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2576.778460][T20691] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2576.797912][T20691] CPU: 0 PID: 20691 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2576.808430][T20691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2576.818543][T20691] Call Trace: [ 2576.821876][T20691] [ 2576.824851][T20691] dump_stack_lvl+0x136/0x150 [ 2576.829606][T20691] dump_header+0x10a/0xd70 [ 2576.834084][T20691] oom_kill_process+0x25d/0x600 [ 2576.842827][T20691] out_of_memory+0x35c/0x1660 [ 2576.847595][T20691] ? find_held_lock+0x2d/0x110 [ 2576.852445][T20691] ? oom_killer_disable+0x2b0/0x2b0 [ 2576.857993][T20691] ? rcu_read_unlock+0x9/0x60 [ 2576.862846][T20691] ? find_held_lock+0x2d/0x110 [ 2576.867723][T20691] mem_cgroup_out_of_memory+0x206/0x270 [ 2576.873320][T20691] ? mem_cgroup_margin+0x130/0x130 [ 2576.878488][T20691] ? lock_downgrade+0x690/0x690 [ 2576.883413][T20691] try_charge_memcg+0xf9b/0x13b0 [ 2576.888427][T20691] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2576.894493][T20691] ? rcu_read_unlock+0x9/0x60 [ 2576.899253][T20691] ? lock_downgrade+0x690/0x690 [ 2576.904149][T20691] charge_memcg+0x90/0x3b0 [ 2576.908620][T20691] __mem_cgroup_charge+0x2b/0x90 [ 2576.913593][T20691] ? copy_mc_to_kernel+0x3e/0x90 [ 2576.918581][T20691] do_wp_page+0x8eb/0x3530 [ 2576.923078][T20691] ? lock_release+0x670/0x670 [ 2576.927876][T20691] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2576.933300][T20691] ? do_raw_spin_lock+0x124/0x2b0 [ 2576.938382][T20691] ? spin_bug+0x1c0/0x1c0 [ 2576.942760][T20691] ? lock_downgrade+0x690/0x690 [ 2576.947646][T20691] __handle_mm_fault+0x19a1/0x3e60 [ 2576.952807][T20691] ? vm_iomap_memory+0x190/0x190 [ 2576.957828][T20691] handle_mm_fault+0x2ba/0x9c0 [ 2576.962646][T20691] do_user_addr_fault+0x47e/0x1240 [ 2576.967817][T20691] ? rcu_is_watching+0x12/0xb0 [ 2576.972632][T20691] exc_page_fault+0x98/0x170 [ 2576.977293][T20691] asm_exc_page_fault+0x26/0x30 [ 2576.982203][T20691] RIP: 0033:0x7ffae1836f7e [ 2576.986688][T20691] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2577.006369][T20691] RSP: 002b:00007ffdc9b413b0 EFLAGS: 00010246 [ 2577.012470][T20691] RAX: 00007ffae19abf80 RBX: 00007ffae19abf8c RCX: 0000000000000000 [ 2577.020552][T20691] RDX: 0000000000000000 RSI: 00007ffae19abf88 RDI: 0000000000000000 05:56:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x37c, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2577.028544][T20691] RBP: 00007ffae19abf80 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2577.036748][T20691] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffae19abf8c [ 2577.045112][T20691] R13: 00007ffae1400060 R14: 00007ffae19abf80 R15: 0000000000000000 [ 2577.053130][T20691] [ 2577.080750][T20691] memory: usage 307200kB, limit 307200kB, failcnt 26275 [ 2577.097883][T20691] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2577.109276][T20691] Memory cgroup stats for /syz3: [ 2577.109578][T20691] anon 90112 [ 2577.109578][T20691] file 733184 [ 2577.109578][T20691] kernel 313733120 [ 2577.109578][T20691] kernel_stack 65536 05:56:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x37e, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2577.109578][T20691] pagetables 69632 [ 2577.109578][T20691] sec_pagetables 0 [ 2577.109578][T20691] percpu 5375488 [ 2577.109578][T20691] sock 0 [ 2577.109578][T20691] vmalloc 8192 [ 2577.109578][T20691] shmem 733184 [ 2577.109578][T20691] zswap 0 [ 2577.109578][T20691] zswapped 0 [ 2577.109578][T20691] file_mapped 667648 [ 2577.109578][T20691] file_dirty 0 [ 2577.109578][T20691] file_writeback 0 [ 2577.109578][T20691] swapcached 0 [ 2577.109578][T20691] anon_thp 0 [ 2577.109578][T20691] file_thp 0 [ 2577.109578][T20691] shmem_thp 0 [ 2577.109578][T20691] inactive_anon 0 05:56:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x38a, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2577.109578][T20691] active_anon 823296 [ 2577.109578][T20691] inactive_file 0 [ 2577.109578][T20691] active_file 0 [ 2577.109578][T20691] unevictable 0 [ 2577.109578][T20691] slab_reclaimable 1215536 [ 2577.109578][T20691] slab_unreclaimable 306963656 [ 2577.109578][T20691] slab 308179192 [ 2577.109578][T20691] workingset_refault_anon 0 [ 2577.109578][T20691] workingset_refault_file 130 [ 2577.109578][T20691] workingset_activate_anon 0 [ 2577.109578][T20691] workingset_activate_file 0 [ 2577.109578][T20691] workingset_restore_anon 0 [ 2577.109578][T20691] workingset_restore_file 0 [ 2577.109578][T20691] workingset_nodereclaim 0 [ 2577.109578][T20691] pgscan 3117 [ 2577.109578][T20691] pgsteal 939 [ 2577.109578][T20691] pgscan_kswapd 0 [ 2577.109578][T20691] pgscan_direct 3117 [ 2577.109578][T20691] pgscan_khugepaged 0 [ 2577.109578][T20691] pgsteal_kswapd 0 [ 2577.109578][T20691] pgsteal_direct 939 [ 2577.109578][T20691] pgsteal_khugepaged 0 [ 2577.109578][T20691] pgfault 575225 [ 2577.109578][T20691] pgmajfault 0 [ 2577.109578][T20691] pgrefill 79949 [ 2577.109578][T20691] pgactivate 862 05:56:31 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85288}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2577.109578][T20691] pgdeactivate 0 [ 2577.109578][T20691] pglazyfree 0 [ 2577.109578][T20691] pglazyfreed 0 [ 2577.109578][T20691] zswpin 0 [ 2577.109578][T20691] zswpout 0 [ 2577.313172][T20691] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20691,uid=0 05:56:31 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c187}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3d2, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:31 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7000, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2577.337158][T20691] Memory cgroup out of memory: Killed process 20691 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x5c030000) [ 2577.414289][T20717] wireguard71: entered allmulticast mode [ 2577.462422][T20721] wireguard53: entered promiscuous mode [ 2577.518118][T20701] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2577.537429][T20701] CPU: 1 PID: 20701 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2577.547931][T20701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2577.558657][T20701] Call Trace: [ 2577.562258][T20701] 05:56:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3d8, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2577.565261][T20701] dump_stack_lvl+0x136/0x150 [ 2577.570721][T20701] dump_header+0x10a/0xd70 [ 2577.575222][T20701] oom_kill_process+0x25d/0x600 [ 2577.580187][T20701] out_of_memory+0x35c/0x1660 [ 2577.585039][T20701] ? find_held_lock+0x2d/0x110 [ 2577.590106][T20701] ? oom_killer_disable+0x2b0/0x2b0 [ 2577.595567][T20701] ? rcu_read_unlock+0x9/0x60 [ 2577.600587][T20701] ? find_held_lock+0x2d/0x110 [ 2577.605688][T20701] mem_cgroup_out_of_memory+0x206/0x270 [ 2577.611444][T20701] ? mem_cgroup_margin+0x130/0x130 [ 2577.616863][T20701] ? lock_downgrade+0x690/0x690 [ 2577.621903][T20701] try_charge_memcg+0xf9b/0x13b0 [ 2577.627280][T20701] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2577.633349][T20701] ? rcu_read_unlock+0x9/0x60 [ 2577.638132][T20701] ? lock_downgrade+0x690/0x690 [ 2577.643115][T20701] charge_memcg+0x90/0x3b0 [ 2577.647675][T20701] __mem_cgroup_charge+0x2b/0x90 [ 2577.652750][T20701] do_wp_page+0x8eb/0x3530 [ 2577.657410][T20701] ? lock_release+0x670/0x670 [ 2577.662315][T20701] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2577.667767][T20701] ? do_raw_spin_lock+0x124/0x2b0 [ 2577.672858][T20701] ? spin_bug+0x1c0/0x1c0 [ 2577.677261][T20701] ? lock_downgrade+0x690/0x690 [ 2577.682174][T20701] __handle_mm_fault+0x19a1/0x3e60 [ 2577.687353][T20701] ? vm_iomap_memory+0x190/0x190 [ 2577.692367][T20701] handle_mm_fault+0x2ba/0x9c0 [ 2577.697186][T20701] do_user_addr_fault+0x47e/0x1240 [ 2577.702339][T20701] ? rcu_is_watching+0x12/0xb0 [ 2577.707143][T20701] exc_page_fault+0x98/0x170 [ 2577.711789][T20701] asm_exc_page_fault+0x26/0x30 [ 2577.716671][T20701] RIP: 0033:0x7f4933239610 [ 2577.721113][T20701] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2577.740774][T20701] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2577.746871][T20701] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2577.754876][T20701] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2577.762961][T20701] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2577.770956][T20701] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2577.778957][T20701] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2577.787127][T20701] ? apparmor_socket_create+0x13c/0x670 [ 2577.792741][T20701] [ 2577.816212][T20701] memory: usage 307200kB, limit 307200kB, failcnt 14987 [ 2577.834587][T20701] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2577.842449][T20701] Memory cgroup stats for /syz2: [ 2577.842735][T20701] anon 126976 [ 2577.842735][T20701] file 684032 [ 2577.842735][T20701] kernel 313745408 [ 2577.842735][T20701] kernel_stack 65536 [ 2577.842735][T20701] pagetables 73728 [ 2577.842735][T20701] sec_pagetables 0 [ 2577.842735][T20701] percpu 5387328 [ 2577.842735][T20701] sock 0 [ 2577.842735][T20701] vmalloc 8192 [ 2577.842735][T20701] shmem 679936 [ 2577.842735][T20701] zswap 0 [ 2577.842735][T20701] zswapped 0 [ 2577.842735][T20701] file_mapped 630784 [ 2577.842735][T20701] file_dirty 4096 [ 2577.842735][T20701] file_writeback 0 [ 2577.842735][T20701] swapcached 0 [ 2577.842735][T20701] anon_thp 0 [ 2577.842735][T20701] file_thp 0 [ 2577.842735][T20701] shmem_thp 0 [ 2577.842735][T20701] inactive_anon 0 [ 2577.842735][T20701] active_anon 806912 [ 2577.842735][T20701] inactive_file 0 [ 2577.842735][T20701] active_file 4096 [ 2577.842735][T20701] unevictable 0 [ 2577.842735][T20701] slab_reclaimable 512264 [ 2577.842735][T20701] slab_unreclaimable 307665656 [ 2577.842735][T20701] slab 308177920 [ 2577.842735][T20701] workingset_refault_anon 0 [ 2577.842735][T20701] workingset_refault_file 2 [ 2577.842735][T20701] workingset_activate_anon 0 [ 2577.842735][T20701] workingset_activate_file 0 [ 2577.842735][T20701] workingset_restore_anon 0 [ 2577.842735][T20701] workingset_restore_file 1 [ 2577.842735][T20701] workingset_nodereclaim 0 [ 2577.842735][T20701] pgscan 1837 [ 2577.842735][T20701] pgsteal 131 [ 2577.842735][T20701] pgscan_kswapd 109 [ 2577.842735][T20701] pgscan_direct 1728 [ 2577.842735][T20701] pgscan_khugepaged 0 [ 2577.842735][T20701] pgsteal_kswapd 108 [ 2577.842735][T20701] pgsteal_direct 23 [ 2577.842735][T20701] pgsteal_khugepaged 0 [ 2577.842735][T20701] pgfault 1009516 [ 2577.842735][T20701] pgmajfault 0 [ 2577.842735][T20701] pgrefill 13075 [ 2577.842735][T20701] pgactivate 1683 [ 2577.842735][T20701] pgdeactivate 0 05:56:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3f0, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2577.842735][T20701] pglazyfree 0 [ 2577.842735][T20701] pglazyfreed 0 [ 2577.842735][T20701] zswpin 0 [ 2577.842735][T20701] zswpout 0 [ 2578.071755][T20701] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20701,uid=0 [ 2578.089074][T20701] Memory cgroup out of memory: Killed process 20701 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2578.122411][T20729] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2578.159347][T20729] CPU: 0 PID: 20729 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2578.169861][T20729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2578.179978][T20729] Call Trace: [ 2578.183461][T20729] [ 2578.186508][T20729] dump_stack_lvl+0x136/0x150 [ 2578.191345][T20729] dump_header+0x10a/0xd70 [ 2578.195825][T20729] oom_kill_process+0x25d/0x600 [ 2578.200733][T20729] out_of_memory+0x35c/0x1660 [ 2578.205496][T20729] ? find_held_lock+0x2d/0x110 [ 2578.210318][T20729] ? oom_killer_disable+0x2b0/0x2b0 [ 2578.215572][T20729] ? rcu_read_unlock+0x9/0x60 [ 2578.220292][T20729] ? find_held_lock+0x2d/0x110 [ 2578.225197][T20729] mem_cgroup_out_of_memory+0x206/0x270 [ 2578.230818][T20729] ? mem_cgroup_margin+0x130/0x130 [ 2578.235991][T20729] ? lock_downgrade+0x690/0x690 [ 2578.240988][T20729] try_charge_memcg+0xf9b/0x13b0 [ 2578.245969][T20729] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2578.251990][T20729] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2578.257787][T20729] ? lock_downgrade+0x690/0x690 [ 2578.262672][T20729] ? lock_downgrade+0x690/0x690 [ 2578.267552][T20729] ? rcu_read_unlock+0x9/0x60 [ 2578.272278][T20729] obj_cgroup_charge+0x2af/0x5e0 [ 2578.277257][T20729] __kmem_cache_alloc_node+0xa3/0x320 [ 2578.282675][T20729] ? copy_semundo+0x18b/0x300 [ 2578.287391][T20729] kmalloc_trace+0x26/0xe0 [ 2578.291864][T20729] copy_semundo+0x18b/0x300 [ 2578.296426][T20729] copy_process+0x24a2/0x7580 [ 2578.301271][T20729] ? __lock_acquire+0xbc5/0x5d40 [ 2578.306276][T20729] ? __cleanup_sighand+0xb0/0xb0 [ 2578.311274][T20729] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2578.317305][T20729] ? psi_memstall_leave+0x174/0x250 [ 2578.322550][T20729] ? lock_downgrade+0x690/0x690 [ 2578.327446][T20729] kernel_clone+0xeb/0x890 [ 2578.331906][T20729] ? create_io_thread+0xf0/0xf0 [ 2578.336875][T20729] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2578.343165][T20729] ? lock_downgrade+0x690/0x690 [ 2578.348059][T20729] __do_sys_clone+0xba/0x100 [ 2578.352688][T20729] ? kernel_clone+0x890/0x890 [ 2578.357415][T20729] ? syscall_enter_from_user_mode+0x26/0x80 [ 2578.363418][T20729] do_syscall_64+0x39/0xb0 [ 2578.367990][T20729] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2578.373926][T20729] RIP: 0033:0x7ffae188d591 [ 2578.378378][T20729] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2578.398039][T20729] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2578.406489][T20729] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2578.414573][T20729] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 05:56:32 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x85289}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x3a000000}, 0x0) [ 2578.422568][T20729] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2578.430576][T20729] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2578.438570][T20729] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2578.446584][T20729] [ 2578.454403][T20729] memory: usage 307188kB, limit 307200kB, failcnt 26379 [ 2578.461541][T20729] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2578.468443][T20729] Memory cgroup stats for /syz3: [ 2578.468690][T20729] anon 90112 [ 2578.468690][T20729] file 733184 [ 2578.468690][T20729] kernel 313733120 [ 2578.468690][T20729] kernel_stack 65536 [ 2578.468690][T20729] pagetables 69632 [ 2578.468690][T20729] sec_pagetables 0 [ 2578.468690][T20729] percpu 5375488 [ 2578.468690][T20729] sock 0 [ 2578.468690][T20729] vmalloc 8192 [ 2578.468690][T20729] shmem 733184 [ 2578.468690][T20729] zswap 0 [ 2578.468690][T20729] zswapped 0 [ 2578.468690][T20729] file_mapped 667648 [ 2578.468690][T20729] file_dirty 0 [ 2578.468690][T20729] file_writeback 0 [ 2578.468690][T20729] swapcached 0 [ 2578.468690][T20729] anon_thp 0 [ 2578.468690][T20729] file_thp 0 [ 2578.468690][T20729] shmem_thp 0 [ 2578.468690][T20729] inactive_anon 0 [ 2578.468690][T20729] active_anon 823296 [ 2578.468690][T20729] inactive_file 0 [ 2578.468690][T20729] active_file 0 [ 2578.468690][T20729] unevictable 0 [ 2578.468690][T20729] slab_reclaimable 1215536 [ 2578.468690][T20729] slab_unreclaimable 306963192 [ 2578.468690][T20729] slab 308178728 [ 2578.468690][T20729] workingset_refault_anon 0 [ 2578.468690][T20729] workingset_refault_file 130 [ 2578.468690][T20729] workingset_activate_anon 0 [ 2578.468690][T20729] workingset_activate_file 0 [ 2578.468690][T20729] workingset_restore_anon 0 [ 2578.468690][T20729] workingset_restore_file 0 [ 2578.468690][T20729] workingset_nodereclaim 0 [ 2578.468690][T20729] pgscan 3117 [ 2578.468690][T20729] pgsteal 939 [ 2578.468690][T20729] pgscan_kswapd 0 [ 2578.468690][T20729] pgscan_direct 3117 [ 2578.468690][T20729] pgscan_khugepaged 0 [ 2578.468690][T20729] pgsteal_kswapd 0 [ 2578.468690][T20729] pgsteal_direct 939 [ 2578.468690][T20729] pgsteal_khugepaged 0 05:56:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3f2, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2578.468690][T20729] pgfault 575262 [ 2578.468690][T20729] pgmajfault 0 [ 2578.468690][T20729] pgrefill 79949 [ 2578.468690][T20729] pgactivate 862 [ 2578.468690][T20729] pgdeactivate 0 [ 2578.468690][T20729] pglazyfree 0 [ 2578.468690][T20729] pglazyfreed 0 [ 2578.468690][T20729] zswpin 0 [ 2578.468690][T20729] zswpout 0 05:56:32 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c188}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2578.688979][T20748] wireguard71: entered allmulticast mode [ 2578.716330][T20729] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20729,uid=0 05:56:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x5e0c0000) 05:56:32 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7001, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2578.732482][T20729] Memory cgroup out of memory: Killed process 20729 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8768kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2578.830603][T20746] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2578.847153][T20746] CPU: 0 PID: 20746 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2578.857747][T20746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2578.867962][T20746] Call Trace: [ 2578.871316][T20746] [ 2578.874293][T20746] dump_stack_lvl+0x136/0x150 [ 2578.879050][T20746] dump_header+0x10a/0xd70 [ 2578.883544][T20746] oom_kill_process+0x25d/0x600 [ 2578.888475][T20746] out_of_memory+0x35c/0x1660 [ 2578.893235][T20746] ? find_held_lock+0x2d/0x110 [ 2578.898080][T20746] ? oom_killer_disable+0x2b0/0x2b0 [ 2578.903359][T20746] ? rcu_read_unlock+0x9/0x60 [ 2578.908100][T20746] ? find_held_lock+0x2d/0x110 [ 2578.912920][T20746] mem_cgroup_out_of_memory+0x206/0x270 [ 2578.918521][T20746] ? mem_cgroup_margin+0x130/0x130 [ 2578.923680][T20746] ? lock_downgrade+0x690/0x690 [ 2578.928587][T20746] try_charge_memcg+0xf9b/0x13b0 [ 2578.933563][T20746] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2578.939575][T20746] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2578.945342][T20746] ? lock_downgrade+0x690/0x690 [ 2578.950226][T20746] ? lock_downgrade+0x690/0x690 [ 2578.955120][T20746] obj_cgroup_charge+0x2af/0x5e0 [ 2578.960096][T20746] ? __anon_vma_prepare+0x2c6/0x580 [ 2578.965346][T20746] kmem_cache_alloc+0xb1/0x3b0 [ 2578.970162][T20746] __anon_vma_prepare+0x2c6/0x580 [ 2578.975226][T20746] ? __pmd_alloc+0x30c/0x5d0 [ 2578.979860][T20746] __handle_mm_fault+0x3a8f/0x3e60 [ 2578.985020][T20746] ? vm_iomap_memory+0x190/0x190 [ 2578.990023][T20746] handle_mm_fault+0x2ba/0x9c0 [ 2578.994832][T20746] do_user_addr_fault+0x47e/0x1240 [ 2579.000000][T20746] ? rcu_is_watching+0x12/0xb0 [ 2579.004804][T20746] exc_page_fault+0x98/0x170 [ 2579.009442][T20746] asm_exc_page_fault+0x26/0x30 [ 2579.014329][T20746] RIP: 0033:0x7f493322bde9 [ 2579.018771][T20746] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2579.038407][T20746] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2579.044597][T20746] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2579.052595][T20746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2579.060590][T20746] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2579.068622][T20746] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027529f 05:56:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3f4, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2579.076633][T20746] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2579.084646][T20746] [ 2579.092507][T20759] wireguard53: entered promiscuous mode [ 2579.115067][T20746] memory: usage 307200kB, limit 307200kB, failcnt 15101 [ 2579.127635][T20746] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2579.158475][T20746] Memory cgroup stats for /syz2: [ 2579.158734][T20746] anon 135168 [ 2579.158734][T20746] file 684032 [ 2579.158734][T20746] kernel 313753600 [ 2579.158734][T20746] kernel_stack 65536 [ 2579.158734][T20746] pagetables 81920 [ 2579.158734][T20746] sec_pagetables 0 [ 2579.158734][T20746] percpu 5387328 [ 2579.158734][T20746] sock 0 [ 2579.158734][T20746] vmalloc 8192 [ 2579.158734][T20746] shmem 679936 [ 2579.158734][T20746] zswap 0 [ 2579.158734][T20746] zswapped 0 [ 2579.158734][T20746] file_mapped 630784 [ 2579.158734][T20746] file_dirty 4096 [ 2579.158734][T20746] file_writeback 0 [ 2579.158734][T20746] swapcached 0 [ 2579.158734][T20746] anon_thp 0 [ 2579.158734][T20746] file_thp 0 [ 2579.158734][T20746] shmem_thp 0 [ 2579.158734][T20746] inactive_anon 708608 [ 2579.158734][T20746] active_anon 106496 [ 2579.158734][T20746] inactive_file 0 [ 2579.158734][T20746] active_file 4096 [ 2579.158734][T20746] unevictable 0 [ 2579.158734][T20746] slab_reclaimable 512264 [ 2579.158734][T20746] slab_unreclaimable 307665512 [ 2579.158734][T20746] slab 308177776 [ 2579.158734][T20746] workingset_refault_anon 0 [ 2579.158734][T20746] workingset_refault_file 2 [ 2579.158734][T20746] workingset_activate_anon 0 [ 2579.158734][T20746] workingset_activate_file 0 [ 2579.158734][T20746] workingset_restore_anon 0 [ 2579.158734][T20746] workingset_restore_file 1 [ 2579.158734][T20746] workingset_nodereclaim 0 [ 2579.158734][T20746] pgscan 1837 [ 2579.158734][T20746] pgsteal 131 [ 2579.158734][T20746] pgscan_kswapd 109 [ 2579.158734][T20746] pgscan_direct 1728 [ 2579.158734][T20746] pgscan_khugepaged 0 [ 2579.158734][T20746] pgsteal_kswapd 108 [ 2579.158734][T20746] pgsteal_direct 23 [ 2579.158734][T20746] pgsteal_khugepaged 0 [ 2579.158734][T20746] pgfault 1009577 [ 2579.158734][T20746] pgmajfault 0 [ 2579.158734][T20746] pgrefill 13152 [ 2579.158734][T20746] pgactivate 1683 [ 2579.158734][T20746] pgdeactivate 0 [ 2579.158734][T20746] pglazyfree 0 [ 2579.158734][T20746] pglazyfreed 0 [ 2579.158734][T20746] zswpin 0 [ 2579.158734][T20746] zswpout 0 05:56:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3f6, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2579.366371][T20746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20746,uid=0 [ 2579.396222][T20746] Memory cgroup out of memory: Killed process 20746 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:56:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x3a010700}, 0x0) 05:56:33 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c189}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:33 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8528a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2579.537524][T20776] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2579.575569][T20776] CPU: 1 PID: 20776 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 05:56:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3fa, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2579.586080][T20776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2579.596189][T20776] Call Trace: [ 2579.599514][T20776] [ 2579.602491][T20776] dump_stack_lvl+0x136/0x150 [ 2579.607244][T20776] dump_header+0x10a/0xd70 [ 2579.611752][T20776] oom_kill_process+0x25d/0x600 [ 2579.616682][T20776] out_of_memory+0x35c/0x1660 [ 2579.621435][T20776] ? find_held_lock+0x2d/0x110 [ 2579.626292][T20776] ? oom_killer_disable+0x2b0/0x2b0 [ 2579.631558][T20776] ? rcu_read_unlock+0x9/0x60 [ 2579.636325][T20776] ? find_held_lock+0x2d/0x110 [ 2579.641170][T20776] mem_cgroup_out_of_memory+0x206/0x270 [ 2579.646800][T20776] ? mem_cgroup_margin+0x130/0x130 [ 2579.652110][T20776] ? lock_downgrade+0x690/0x690 [ 2579.657043][T20776] try_charge_memcg+0xf9b/0x13b0 [ 2579.662089][T20776] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2579.668127][T20776] ? rcu_read_unlock+0x9/0x60 [ 2579.672843][T20776] ? lock_downgrade+0x690/0x690 [ 2579.677763][T20776] charge_memcg+0x90/0x3b0 [ 2579.682224][T20776] __mem_cgroup_charge+0x2b/0x90 [ 2579.687205][T20776] do_wp_page+0x8eb/0x3530 [ 2579.691853][T20776] ? lock_release+0x670/0x670 [ 2579.696578][T20776] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2579.701982][T20776] ? do_raw_spin_lock+0x124/0x2b0 [ 2579.707120][T20776] ? spin_bug+0x1c0/0x1c0 [ 2579.711476][T20776] ? lock_downgrade+0x690/0x690 [ 2579.716369][T20776] __handle_mm_fault+0x19a1/0x3e60 [ 2579.721557][T20776] ? vm_iomap_memory+0x190/0x190 [ 2579.726633][T20776] handle_mm_fault+0x2ba/0x9c0 [ 2579.731467][T20776] do_user_addr_fault+0x47e/0x1240 [ 2579.736654][T20776] ? rcu_is_watching+0x12/0xb0 [ 2579.741486][T20776] exc_page_fault+0x98/0x170 [ 2579.746165][T20776] asm_exc_page_fault+0x26/0x30 [ 2579.751078][T20776] RIP: 0033:0x7f4933239610 [ 2579.755552][T20776] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2579.775216][T20776] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2579.781336][T20776] RAX: 0000000001d40e8b RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2579.789346][T20776] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000c7ec73d [ 2579.797348][T20776] RBP: 0000000001d40e8b R08: 0000000000000e8b R09: 0000000001d40e8f [ 2579.805372][T20776] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2579.813416][T20776] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff87fd5456 [ 2579.821491][T20776] ? __sock_create+0x46/0x850 [ 2579.826339][T20776] [ 2579.833433][T20783] wireguard53: entered promiscuous mode 05:56:33 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7002, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2579.854028][T20776] memory: usage 307188kB, limit 307200kB, failcnt 15191 [ 2579.869388][T20785] wireguard71: entered allmulticast mode [ 2579.882132][T20776] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2579.896039][T20776] Memory cgroup stats for /syz2: 05:56:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3fc, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2579.896515][T20776] anon 114688 [ 2579.896515][T20776] file 684032 [ 2579.896515][T20776] kernel 313761792 [ 2579.896515][T20776] kernel_stack 65536 [ 2579.896515][T20776] pagetables 73728 [ 2579.896515][T20776] sec_pagetables 0 [ 2579.896515][T20776] percpu 5387392 [ 2579.896515][T20776] sock 0 [ 2579.896515][T20776] vmalloc 8192 [ 2579.896515][T20776] shmem 679936 [ 2579.896515][T20776] zswap 0 [ 2579.896515][T20776] zswapped 0 [ 2579.896515][T20776] file_mapped 630784 [ 2579.896515][T20776] file_dirty 4096 [ 2579.896515][T20776] file_writeback 0 [ 2579.896515][T20776] swapcached 0 [ 2579.896515][T20776] anon_thp 0 [ 2579.896515][T20776] file_thp 0 [ 2579.896515][T20776] shmem_thp 0 [ 2579.896515][T20776] inactive_anon 0 [ 2579.896515][T20776] active_anon 794624 [ 2579.896515][T20776] inactive_file 0 [ 2579.896515][T20776] active_file 4096 [ 2579.896515][T20776] unevictable 0 [ 2579.896515][T20776] slab_reclaimable 512264 [ 2579.896515][T20776] slab_unreclaimable 307677304 [ 2579.896515][T20776] slab 308189568 [ 2579.896515][T20776] workingset_refault_anon 0 [ 2579.896515][T20776] workingset_refault_file 2 [ 2579.896515][T20776] workingset_activate_anon 0 [ 2579.896515][T20776] workingset_activate_file 0 [ 2579.896515][T20776] workingset_restore_anon 0 [ 2579.896515][T20776] workingset_restore_file 1 [ 2579.896515][T20776] workingset_nodereclaim 0 [ 2579.896515][T20776] pgscan 1837 [ 2579.896515][T20776] pgsteal 131 [ 2579.896515][T20776] pgscan_kswapd 109 [ 2579.896515][T20776] pgscan_direct 1728 [ 2579.896515][T20776] pgscan_khugepaged 0 [ 2579.896515][T20776] pgsteal_kswapd 108 [ 2579.896515][T20776] pgsteal_direct 23 [ 2579.896515][T20776] pgsteal_khugepaged 0 [ 2579.896515][T20776] pgfault 1009628 [ 2579.896515][T20776] pgmajfault 0 [ 2579.896515][T20776] pgrefill 13215 [ 2579.896515][T20776] pgactivate 1683 [ 2579.896515][T20776] pgdeactivate 0 [ 2579.896515][T20776] pglazyfree 0 [ 2579.896515][T20776] pglazyfreed 0 [ 2579.896515][T20776] zswpin 0 [ 2579.896515][T20776] zswpout 0 [ 2580.094382][T20776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20776,uid=0 05:56:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x3e030000}, 0x0) [ 2580.141633][T20776] Memory cgroup out of memory: Killed process 20776 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2580.163214][T20756] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2580.195977][T20756] CPU: 0 PID: 20756 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2580.206483][T20756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2580.216679][T20756] Call Trace: [ 2580.220006][T20756] [ 2580.223069][T20756] dump_stack_lvl+0x136/0x150 [ 2580.227833][T20756] dump_header+0x10a/0xd70 [ 2580.232335][T20756] oom_kill_process+0x25d/0x600 [ 2580.237270][T20756] out_of_memory+0x35c/0x1660 [ 2580.242029][T20756] ? oom_killer_disable+0x2b0/0x2b0 [ 2580.247301][T20756] ? rcu_read_unlock+0x9/0x60 [ 2580.252055][T20756] ? find_held_lock+0x2d/0x110 [ 2580.256907][T20756] mem_cgroup_out_of_memory+0x206/0x270 [ 2580.262537][T20756] ? mem_cgroup_margin+0x130/0x130 [ 2580.267726][T20756] ? lock_downgrade+0x690/0x690 [ 2580.272657][T20756] try_charge_memcg+0xf9b/0x13b0 [ 2580.277667][T20756] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2580.283714][T20756] ? rcu_read_unlock+0x9/0x60 [ 2580.288467][T20756] ? lock_downgrade+0x690/0x690 [ 2580.293398][T20756] charge_memcg+0x90/0x3b0 [ 2580.297879][T20756] __mem_cgroup_charge+0x2b/0x90 [ 2580.302860][T20756] do_wp_page+0x8eb/0x3530 [ 2580.307331][T20756] ? lock_release+0x670/0x670 [ 2580.312041][T20756] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2580.317451][T20756] ? do_raw_spin_lock+0x124/0x2b0 [ 2580.322514][T20756] ? spin_bug+0x1c0/0x1c0 [ 2580.326895][T20756] ? lock_downgrade+0x690/0x690 [ 2580.331792][T20756] __handle_mm_fault+0x19a1/0x3e60 [ 2580.336974][T20756] ? vm_iomap_memory+0x190/0x190 [ 2580.341983][T20756] handle_mm_fault+0x2ba/0x9c0 [ 2580.346795][T20756] do_user_addr_fault+0x47e/0x1240 [ 2580.351973][T20756] ? rcu_is_watching+0x12/0xb0 [ 2580.356799][T20756] exc_page_fault+0x98/0x170 [ 2580.361455][T20756] asm_exc_page_fault+0x26/0x30 [ 2580.366347][T20756] RIP: 0033:0x7ffae1839610 [ 2580.370795][T20756] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2580.390436][T20756] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 05:56:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3fe, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2580.396536][T20756] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2580.404533][T20756] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2580.412639][T20756] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2580.420655][T20756] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2580.428652][T20756] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2580.436658][T20756] ? __sys_socket+0x7c/0x250 [ 2580.441305][T20756] [ 2580.496475][T20756] memory: usage 307200kB, limit 307200kB, failcnt 26491 [ 2580.510964][T20756] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2580.518024][T20756] Memory cgroup stats for /syz3: [ 2580.518314][T20756] anon 106496 [ 2580.518314][T20756] file 733184 [ 2580.518314][T20756] kernel 313733120 [ 2580.518314][T20756] kernel_stack 65536 [ 2580.518314][T20756] pagetables 69632 [ 2580.518314][T20756] sec_pagetables 0 [ 2580.518314][T20756] percpu 5375488 [ 2580.518314][T20756] sock 0 [ 2580.518314][T20756] vmalloc 8192 [ 2580.518314][T20756] shmem 733184 [ 2580.518314][T20756] zswap 0 [ 2580.518314][T20756] zswapped 0 [ 2580.518314][T20756] file_mapped 667648 [ 2580.518314][T20756] file_dirty 0 [ 2580.518314][T20756] file_writeback 0 [ 2580.518314][T20756] swapcached 0 [ 2580.518314][T20756] anon_thp 0 [ 2580.518314][T20756] file_thp 0 [ 2580.518314][T20756] shmem_thp 0 [ 2580.518314][T20756] inactive_anon 0 [ 2580.518314][T20756] active_anon 839680 [ 2580.518314][T20756] inactive_file 0 [ 2580.518314][T20756] active_file 0 [ 2580.518314][T20756] unevictable 0 [ 2580.518314][T20756] slab_reclaimable 1217464 [ 2580.518314][T20756] slab_unreclaimable 306964000 [ 2580.518314][T20756] slab 308181464 [ 2580.518314][T20756] workingset_refault_anon 0 [ 2580.518314][T20756] workingset_refault_file 130 [ 2580.518314][T20756] workingset_activate_anon 0 [ 2580.518314][T20756] workingset_activate_file 0 [ 2580.518314][T20756] workingset_restore_anon 0 [ 2580.518314][T20756] workingset_restore_file 0 [ 2580.518314][T20756] workingset_nodereclaim 0 [ 2580.518314][T20756] pgscan 3117 [ 2580.518314][T20756] pgsteal 939 [ 2580.518314][T20756] pgscan_kswapd 0 [ 2580.518314][T20756] pgscan_direct 3117 [ 2580.518314][T20756] pgscan_khugepaged 0 [ 2580.518314][T20756] pgsteal_kswapd 0 [ 2580.518314][T20756] pgsteal_direct 939 [ 2580.518314][T20756] pgsteal_khugepaged 0 [ 2580.518314][T20756] pgfault 575306 [ 2580.518314][T20756] pgmajfault 0 [ 2580.518314][T20756] pgrefill 79949 [ 2580.518314][T20756] pgactivate 862 [ 2580.518314][T20756] pgdeactivate 0 [ 2580.518314][T20756] pglazyfree 0 [ 2580.518314][T20756] pglazyfreed 0 [ 2580.518314][T20756] zswpin 0 [ 2580.518314][T20756] zswpout 0 [ 2580.707376][T20756] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20756,uid=0 05:56:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x60000000) 05:56:34 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c18a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:34 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8528b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x500, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2580.742528][T20756] Memory cgroup out of memory: Killed process 20756 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:34 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7003, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2580.844638][T20812] wireguard53: entered promiscuous mode [ 2580.863563][T20803] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2580.904955][T20803] CPU: 0 PID: 20803 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2580.915471][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2580.925592][T20803] Call Trace: [ 2580.928912][T20803] [ 2580.931881][T20803] dump_stack_lvl+0x136/0x150 [ 2580.936645][T20803] dump_header+0x10a/0xd70 [ 2580.941145][T20803] oom_kill_process+0x25d/0x600 [ 2580.946080][T20803] out_of_memory+0x35c/0x1660 [ 2580.950853][T20803] ? find_held_lock+0x2d/0x110 [ 2580.955677][T20803] ? oom_killer_disable+0x2b0/0x2b0 [ 2580.960921][T20803] ? rcu_read_unlock+0x9/0x60 [ 2580.965649][T20803] ? find_held_lock+0x2d/0x110 [ 2580.970508][T20803] mem_cgroup_out_of_memory+0x206/0x270 [ 2580.976112][T20803] ? mem_cgroup_margin+0x130/0x130 [ 2580.981268][T20803] ? lock_downgrade+0x690/0x690 [ 2580.986188][T20803] try_charge_memcg+0xf9b/0x13b0 [ 2580.991175][T20803] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2580.997212][T20803] ? rcu_read_unlock+0x9/0x60 [ 2581.001929][T20803] ? lock_downgrade+0x690/0x690 [ 2581.006919][T20803] charge_memcg+0x90/0x3b0 [ 2581.011371][T20803] __mem_cgroup_charge+0x2b/0x90 [ 2581.016343][T20803] do_wp_page+0x8eb/0x3530 [ 2581.020813][T20803] ? lock_release+0x670/0x670 [ 2581.025519][T20803] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2581.031033][T20803] ? do_raw_spin_lock+0x124/0x2b0 [ 2581.036092][T20803] ? spin_bug+0x1c0/0x1c0 [ 2581.040450][T20803] ? lock_downgrade+0x690/0x690 [ 2581.045338][T20803] __handle_mm_fault+0x19a1/0x3e60 [ 2581.050499][T20803] ? vm_iomap_memory+0x190/0x190 [ 2581.055497][T20803] handle_mm_fault+0x2ba/0x9c0 [ 2581.060303][T20803] do_user_addr_fault+0x47e/0x1240 [ 2581.065455][T20803] ? rcu_is_watching+0x12/0xb0 [ 2581.070258][T20803] exc_page_fault+0x98/0x170 [ 2581.074903][T20803] asm_exc_page_fault+0x26/0x30 [ 2581.079783][T20803] RIP: 0033:0x7f4933239610 [ 2581.084223][T20803] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2581.103873][T20803] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2581.109968][T20803] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2581.118085][T20803] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2581.126113][T20803] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2581.134122][T20803] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2581.142206][T20803] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2581.150225][T20803] ? apparmor_socket_create+0xb7/0x670 05:56:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x600, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2581.155766][T20803] [ 2581.196705][T20819] wireguard71: entered allmulticast mode [ 2581.215796][T20803] memory: usage 307200kB, limit 307200kB, failcnt 15306 [ 2581.223547][T20803] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2581.231297][T20803] Memory cgroup stats for /syz2: [ 2581.231590][T20803] anon 122880 [ 2581.231590][T20803] file 684032 [ 2581.231590][T20803] kernel 313765888 [ 2581.231590][T20803] kernel_stack 65536 [ 2581.231590][T20803] pagetables 73728 [ 2581.231590][T20803] sec_pagetables 0 [ 2581.231590][T20803] percpu 5387392 [ 2581.231590][T20803] sock 0 [ 2581.231590][T20803] vmalloc 8192 [ 2581.231590][T20803] shmem 679936 [ 2581.231590][T20803] zswap 0 [ 2581.231590][T20803] zswapped 0 [ 2581.231590][T20803] file_mapped 630784 [ 2581.231590][T20803] file_dirty 4096 [ 2581.231590][T20803] file_writeback 0 [ 2581.231590][T20803] swapcached 0 [ 2581.231590][T20803] anon_thp 0 [ 2581.231590][T20803] file_thp 0 [ 2581.231590][T20803] shmem_thp 0 [ 2581.231590][T20803] inactive_anon 0 [ 2581.231590][T20803] active_anon 802816 [ 2581.231590][T20803] inactive_file 0 [ 2581.231590][T20803] active_file 4096 [ 2581.231590][T20803] unevictable 0 [ 2581.231590][T20803] slab_reclaimable 512264 [ 2581.231590][T20803] slab_unreclaimable 307677304 [ 2581.231590][T20803] slab 308189568 [ 2581.231590][T20803] workingset_refault_anon 0 [ 2581.231590][T20803] workingset_refault_file 2 [ 2581.231590][T20803] workingset_activate_anon 0 [ 2581.231590][T20803] workingset_activate_file 0 [ 2581.231590][T20803] workingset_restore_anon 0 [ 2581.231590][T20803] workingset_restore_file 1 [ 2581.231590][T20803] workingset_nodereclaim 0 [ 2581.231590][T20803] pgscan 1837 [ 2581.231590][T20803] pgsteal 131 [ 2581.231590][T20803] pgscan_kswapd 109 [ 2581.231590][T20803] pgscan_direct 1728 [ 2581.231590][T20803] pgscan_khugepaged 0 [ 2581.231590][T20803] pgsteal_kswapd 108 [ 2581.231590][T20803] pgsteal_direct 23 [ 2581.231590][T20803] pgsteal_khugepaged 0 [ 2581.231590][T20803] pgfault 1009680 [ 2581.231590][T20803] pgmajfault 0 [ 2581.231590][T20803] pgrefill 13290 [ 2581.231590][T20803] pgactivate 1683 [ 2581.231590][T20803] pgdeactivate 0 [ 2581.231590][T20803] pglazyfree 0 [ 2581.231590][T20803] pglazyfreed 0 [ 2581.231590][T20803] zswpin 0 [ 2581.231590][T20803] zswpout 0 [ 2581.426401][T20803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20803,uid=0 [ 2581.442911][T20803] Memory cgroup out of memory: Killed process 20803 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) [ 2581.516673][T20823] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2581.549454][T20823] CPU: 1 PID: 20823 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2581.559962][T20823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2581.570195][T20823] Call Trace: [ 2581.573516][T20823] [ 2581.576494][T20823] dump_stack_lvl+0x136/0x150 [ 2581.581342][T20823] dump_header+0x10a/0xd70 [ 2581.585852][T20823] oom_kill_process+0x25d/0x600 [ 2581.590778][T20823] out_of_memory+0x35c/0x1660 [ 2581.595532][T20823] ? find_held_lock+0x2d/0x110 [ 2581.600377][T20823] ? oom_killer_disable+0x2b0/0x2b0 [ 2581.605623][T20823] ? rcu_read_unlock+0x9/0x60 [ 2581.610344][T20823] ? find_held_lock+0x2d/0x110 [ 2581.615244][T20823] mem_cgroup_out_of_memory+0x206/0x270 [ 2581.620856][T20823] ? mem_cgroup_margin+0x130/0x130 [ 2581.626011][T20823] ? lock_downgrade+0x690/0x690 [ 2581.630905][T20823] try_charge_memcg+0xf9b/0x13b0 [ 2581.635882][T20823] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2581.641899][T20823] ? rcu_read_unlock+0x9/0x60 [ 2581.646615][T20823] ? lock_downgrade+0x690/0x690 [ 2581.651514][T20823] charge_memcg+0x90/0x3b0 [ 2581.655963][T20823] __mem_cgroup_charge+0x2b/0x90 [ 2581.660941][T20823] do_wp_page+0x8eb/0x3530 [ 2581.665405][T20823] ? lock_release+0x670/0x670 [ 2581.670166][T20823] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2581.675583][T20823] ? do_raw_spin_lock+0x124/0x2b0 [ 2581.680643][T20823] ? spin_bug+0x1c0/0x1c0 [ 2581.685006][T20823] ? lock_downgrade+0x690/0x690 [ 2581.689929][T20823] __handle_mm_fault+0x19a1/0x3e60 [ 2581.695093][T20823] ? vm_iomap_memory+0x190/0x190 [ 2581.700107][T20823] handle_mm_fault+0x2ba/0x9c0 [ 2581.704933][T20823] do_user_addr_fault+0x47e/0x1240 [ 2581.710093][T20823] ? rcu_is_watching+0x12/0xb0 [ 2581.714904][T20823] exc_page_fault+0x98/0x170 [ 2581.719559][T20823] asm_exc_page_fault+0x26/0x30 [ 2581.724441][T20823] RIP: 0033:0x7ffae1839610 [ 2581.728881][T20823] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2581.748528][T20823] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2581.754717][T20823] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2581.762709][T20823] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2581.770714][T20823] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2581.778794][T20823] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2581.786791][T20823] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2581.794873][T20823] ? __sys_socket+0x7c/0x250 [ 2581.799595][T20823] 05:56:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x700, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2581.811491][T20823] memory: usage 307200kB, limit 307200kB, failcnt 26599 [ 2581.856587][T20823] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2581.864180][T20823] Memory cgroup stats for /syz3: [ 2581.864472][T20823] anon 106496 [ 2581.864472][T20823] file 733184 [ 2581.864472][T20823] kernel 313733120 [ 2581.864472][T20823] kernel_stack 65536 [ 2581.864472][T20823] pagetables 69632 [ 2581.864472][T20823] sec_pagetables 0 [ 2581.864472][T20823] percpu 5375488 [ 2581.864472][T20823] sock 0 [ 2581.864472][T20823] vmalloc 8192 [ 2581.864472][T20823] shmem 733184 [ 2581.864472][T20823] zswap 0 [ 2581.864472][T20823] zswapped 0 [ 2581.864472][T20823] file_mapped 667648 [ 2581.864472][T20823] file_dirty 0 [ 2581.864472][T20823] file_writeback 0 [ 2581.864472][T20823] swapcached 0 [ 2581.864472][T20823] anon_thp 0 [ 2581.864472][T20823] file_thp 0 [ 2581.864472][T20823] shmem_thp 0 [ 2581.864472][T20823] inactive_anon 0 [ 2581.864472][T20823] active_anon 839680 [ 2581.864472][T20823] inactive_file 0 [ 2581.864472][T20823] active_file 0 [ 2581.864472][T20823] unevictable 0 [ 2581.864472][T20823] slab_reclaimable 1217464 [ 2581.864472][T20823] slab_unreclaimable 306964000 [ 2581.864472][T20823] slab 308181464 [ 2581.864472][T20823] workingset_refault_anon 0 [ 2581.864472][T20823] workingset_refault_file 130 [ 2581.864472][T20823] workingset_activate_anon 0 [ 2581.864472][T20823] workingset_activate_file 0 [ 2581.864472][T20823] workingset_restore_anon 0 [ 2581.864472][T20823] workingset_restore_file 0 [ 2581.864472][T20823] workingset_nodereclaim 0 [ 2581.864472][T20823] pgscan 3117 [ 2581.864472][T20823] pgsteal 939 [ 2581.864472][T20823] pgscan_kswapd 0 [ 2581.864472][T20823] pgscan_direct 3117 [ 2581.864472][T20823] pgscan_khugepaged 0 [ 2581.864472][T20823] pgsteal_kswapd 0 [ 2581.864472][T20823] pgsteal_direct 939 [ 2581.864472][T20823] pgsteal_khugepaged 0 [ 2581.864472][T20823] pgfault 575350 [ 2581.864472][T20823] pgmajfault 0 [ 2581.864472][T20823] pgrefill 79949 [ 2581.864472][T20823] pgactivate 862 [ 2581.864472][T20823] pgdeactivate 0 [ 2581.864472][T20823] pglazyfree 0 [ 2581.864472][T20823] pglazyfreed 0 [ 2581.864472][T20823] zswpin 0 [ 2581.864472][T20823] zswpout 0 05:56:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x802, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:36 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c18b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2582.074630][T20823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20823,uid=0 [ 2582.098196][T20823] Memory cgroup out of memory: Killed process 20823 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:36 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8528c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x60010000) [ 2582.224434][T20836] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2582.228329][T20851] wireguard71: entered allmulticast mode [ 2582.237142][T20836] CPU: 1 PID: 20836 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2582.252755][T20836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2582.262866][T20836] Call Trace: [ 2582.266192][T20836] [ 2582.269167][T20836] dump_stack_lvl+0x136/0x150 [ 2582.273916][T20836] dump_header+0x10a/0xd70 [ 2582.278387][T20836] oom_kill_process+0x25d/0x600 [ 2582.283311][T20836] out_of_memory+0x35c/0x1660 [ 2582.288151][T20836] ? find_held_lock+0x2d/0x110 [ 2582.293001][T20836] ? oom_killer_disable+0x2b0/0x2b0 [ 2582.298279][T20836] ? rcu_read_unlock+0x9/0x60 [ 2582.303122][T20836] ? find_held_lock+0x2d/0x110 [ 2582.307972][T20836] mem_cgroup_out_of_memory+0x206/0x270 [ 2582.313701][T20836] ? mem_cgroup_margin+0x130/0x130 [ 2582.318890][T20836] ? lock_downgrade+0x690/0x690 [ 2582.323817][T20836] try_charge_memcg+0xf9b/0x13b0 [ 2582.328824][T20836] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2582.334897][T20836] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2582.340681][T20836] ? lock_downgrade+0x690/0x690 [ 2582.345599][T20836] ? lock_downgrade+0x690/0x690 [ 2582.350509][T20836] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2582.356103][T20836] __alloc_pages+0x1f3/0x4a0 [ 2582.360905][T20836] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2582.367706][T20836] ? print_usage_bug.part.0+0x660/0x660 [ 2582.373294][T20836] ? find_held_lock+0x2d/0x110 [ 2582.378116][T20836] alloc_pages+0x1aa/0x270 [ 2582.382566][T20836] pte_alloc_one+0x1a/0x230 [ 2582.387135][T20836] __pte_alloc+0x6d/0x260 [ 2582.391531][T20836] ? pmd_install+0x160/0x160 [ 2582.396255][T20836] ? _raw_spin_unlock+0x28/0x40 [ 2582.401243][T20836] ? __pmd_alloc+0x30c/0x5d0 [ 2582.405919][T20836] __handle_mm_fault+0x3626/0x3e60 [ 2582.411091][T20836] ? vm_iomap_memory+0x190/0x190 [ 2582.416098][T20836] handle_mm_fault+0x2ba/0x9c0 [ 2582.420905][T20836] do_user_addr_fault+0x47e/0x1240 [ 2582.426068][T20836] ? rcu_is_watching+0x12/0xb0 [ 2582.430871][T20836] exc_page_fault+0x98/0x170 [ 2582.435511][T20836] asm_exc_page_fault+0x26/0x30 [ 2582.440492][T20836] RIP: 0033:0x7f493322bde9 [ 2582.444937][T20836] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2582.464604][T20836] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2582.470702][T20836] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2582.478697][T20836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2582.486694][T20836] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2582.494700][T20836] R10: 00007f4932e00068 R11: 0000000000000246 R12: 0000000000275da1 [ 2582.502707][T20836] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2582.510732][T20836] [ 2582.517108][T20836] memory: usage 307196kB, limit 307200kB, failcnt 15419 [ 2582.524289][T20836] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2582.531395][T20836] Memory cgroup stats for /syz2: [ 2582.531692][T20836] anon 135168 [ 2582.531692][T20836] file 684032 [ 2582.531692][T20836] kernel 313749504 [ 2582.531692][T20836] kernel_stack 65536 [ 2582.531692][T20836] pagetables 77824 [ 2582.531692][T20836] sec_pagetables 0 [ 2582.531692][T20836] percpu 5387328 [ 2582.531692][T20836] sock 0 [ 2582.531692][T20836] vmalloc 8192 [ 2582.531692][T20836] shmem 679936 [ 2582.531692][T20836] zswap 0 [ 2582.531692][T20836] zswapped 0 [ 2582.531692][T20836] file_mapped 630784 [ 2582.531692][T20836] file_dirty 0 [ 2582.531692][T20836] file_writeback 0 [ 2582.531692][T20836] swapcached 0 [ 2582.531692][T20836] anon_thp 0 [ 2582.531692][T20836] file_thp 0 [ 2582.531692][T20836] shmem_thp 0 [ 2582.531692][T20836] inactive_anon 0 [ 2582.531692][T20836] active_anon 815104 [ 2582.531692][T20836] inactive_file 4096 [ 2582.531692][T20836] active_file 0 [ 2582.531692][T20836] unevictable 0 [ 2582.531692][T20836] slab_reclaimable 512264 [ 2582.531692][T20836] slab_unreclaimable 307665392 [ 2582.531692][T20836] slab 308177656 [ 2582.531692][T20836] workingset_refault_anon 0 [ 2582.531692][T20836] workingset_refault_file 2 [ 2582.531692][T20836] workingset_activate_anon 0 [ 2582.531692][T20836] workingset_activate_file 0 [ 2582.531692][T20836] workingset_restore_anon 0 [ 2582.531692][T20836] workingset_restore_file 1 [ 2582.531692][T20836] workingset_nodereclaim 0 [ 2582.531692][T20836] pgscan 1875 [ 2582.531692][T20836] pgsteal 131 [ 2582.531692][T20836] pgscan_kswapd 109 [ 2582.531692][T20836] pgscan_direct 1766 [ 2582.531692][T20836] pgscan_khugepaged 0 05:56:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x900, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2582.531692][T20836] pgsteal_kswapd 108 [ 2582.531692][T20836] pgsteal_direct 23 [ 2582.531692][T20836] pgsteal_khugepaged 0 [ 2582.531692][T20836] pgfault 1009738 [ 2582.531692][T20836] pgmajfault 0 [ 2582.531692][T20836] pgrefill 13290 [ 2582.531692][T20836] pgactivate 1721 [ 2582.531692][T20836] pgdeactivate 0 [ 2582.531692][T20836] pglazyfree 0 [ 2582.531692][T20836] pglazyfreed 0 [ 2582.531692][T20836] zswpin 0 [ 2582.531692][T20836] zswpout 0 05:56:36 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7200, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2582.730083][T20836] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20836,uid=0 [ 2582.756521][T20836] Memory cgroup out of memory: Killed process 20836 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 05:56:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) [ 2582.796325][T20850] wireguard53: entered promiscuous mode [ 2582.818378][T20856] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2582.840117][T20856] CPU: 0 PID: 20856 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2582.850624][T20856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2582.860728][T20856] Call Trace: [ 2582.864400][T20856] [ 2582.867383][T20856] dump_stack_lvl+0x136/0x150 [ 2582.872149][T20856] dump_header+0x10a/0xd70 [ 2582.876649][T20856] oom_kill_process+0x25d/0x600 [ 2582.881585][T20856] out_of_memory+0x35c/0x1660 [ 2582.886342][T20856] ? find_held_lock+0x2d/0x110 [ 2582.891196][T20856] ? oom_killer_disable+0x2b0/0x2b0 [ 2582.896475][T20856] ? rcu_read_unlock+0x9/0x60 [ 2582.901224][T20856] ? find_held_lock+0x2d/0x110 [ 2582.906074][T20856] mem_cgroup_out_of_memory+0x206/0x270 [ 2582.911706][T20856] ? mem_cgroup_margin+0x130/0x130 [ 2582.916893][T20856] ? lock_downgrade+0x690/0x690 [ 2582.921841][T20856] try_charge_memcg+0xf9b/0x13b0 [ 2582.926851][T20856] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2582.932904][T20856] ? rcu_read_unlock+0x9/0x60 [ 2582.937669][T20856] ? lock_downgrade+0x690/0x690 [ 2582.942583][T20856] charge_memcg+0x90/0x3b0 [ 2582.947040][T20856] __mem_cgroup_charge+0x2b/0x90 [ 2582.952010][T20856] ? copy_mc_to_kernel+0x3e/0x90 [ 2582.956997][T20856] do_wp_page+0x8eb/0x3530 [ 2582.961479][T20856] ? lock_release+0x670/0x670 [ 2582.966191][T20856] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2582.971603][T20856] ? do_raw_spin_lock+0x124/0x2b0 [ 2582.976664][T20856] ? spin_bug+0x1c0/0x1c0 [ 2582.981027][T20856] ? lock_downgrade+0x690/0x690 [ 2582.985920][T20856] __handle_mm_fault+0x19a1/0x3e60 [ 2582.991117][T20856] ? vm_iomap_memory+0x190/0x190 [ 2582.996116][T20856] handle_mm_fault+0x2ba/0x9c0 [ 2583.000925][T20856] do_user_addr_fault+0x47e/0x1240 [ 2583.006181][T20856] ? rcu_is_watching+0x12/0xb0 [ 2583.011018][T20856] exc_page_fault+0x98/0x170 [ 2583.015666][T20856] asm_exc_page_fault+0x26/0x30 [ 2583.020552][T20856] RIP: 0033:0x7ffae1836f7e [ 2583.025004][T20856] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2583.044644][T20856] RSP: 002b:00007ffdc9b413b0 EFLAGS: 00010246 [ 2583.050746][T20856] RAX: 00007ffae19abf80 RBX: 00007ffae19abf8c RCX: 0000000000000000 [ 2583.058739][T20856] RDX: 0000000000000000 RSI: 00007ffae19abf88 RDI: 0000000000000000 [ 2583.066748][T20856] RBP: 00007ffae19abf80 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2583.074777][T20856] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffae19abf8c [ 2583.082788][T20856] R13: 00007ffae1400060 R14: 00007ffae19abf80 R15: 0000000000000000 [ 2583.090825][T20856] [ 2583.102827][T20856] memory: usage 307184kB, limit 307200kB, failcnt 26701 [ 2583.124278][T20856] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2583.131807][T20856] Memory cgroup stats for /syz3: [ 2583.132098][T20856] anon 90112 [ 2583.132098][T20856] file 733184 [ 2583.132098][T20856] kernel 313733120 [ 2583.132098][T20856] kernel_stack 65536 [ 2583.132098][T20856] pagetables 69632 [ 2583.132098][T20856] sec_pagetables 0 [ 2583.132098][T20856] percpu 5375488 [ 2583.132098][T20856] sock 0 [ 2583.132098][T20856] vmalloc 8192 [ 2583.132098][T20856] shmem 733184 [ 2583.132098][T20856] zswap 0 [ 2583.132098][T20856] zswapped 0 [ 2583.132098][T20856] file_mapped 667648 [ 2583.132098][T20856] file_dirty 0 [ 2583.132098][T20856] file_writeback 0 [ 2583.132098][T20856] swapcached 0 [ 2583.132098][T20856] anon_thp 0 [ 2583.132098][T20856] file_thp 0 [ 2583.132098][T20856] shmem_thp 0 [ 2583.132098][T20856] inactive_anon 0 05:56:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x9f2, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2583.132098][T20856] active_anon 823296 [ 2583.132098][T20856] inactive_file 0 [ 2583.132098][T20856] active_file 0 [ 2583.132098][T20856] unevictable 0 [ 2583.132098][T20856] slab_reclaimable 1215536 [ 2583.132098][T20856] slab_unreclaimable 306963352 [ 2583.132098][T20856] slab 308178888 [ 2583.132098][T20856] workingset_refault_anon 0 [ 2583.132098][T20856] workingset_refault_file 130 [ 2583.132098][T20856] workingset_activate_anon 0 [ 2583.132098][T20856] workingset_activate_file 0 [ 2583.132098][T20856] workingset_restore_anon 0 [ 2583.132098][T20856] workingset_restore_file 0 [ 2583.132098][T20856] workingset_nodereclaim 0 [ 2583.132098][T20856] pgscan 3117 [ 2583.132098][T20856] pgsteal 939 [ 2583.132098][T20856] pgscan_kswapd 0 [ 2583.132098][T20856] pgscan_direct 3117 [ 2583.132098][T20856] pgscan_khugepaged 0 [ 2583.132098][T20856] pgsteal_kswapd 0 [ 2583.132098][T20856] pgsteal_direct 939 [ 2583.132098][T20856] pgsteal_khugepaged 0 [ 2583.132098][T20856] pgfault 575388 [ 2583.132098][T20856] pgmajfault 0 [ 2583.132098][T20856] pgrefill 79949 [ 2583.132098][T20856] pgactivate 862 [ 2583.132098][T20856] pgdeactivate 0 [ 2583.132098][T20856] pglazyfree 0 [ 2583.132098][T20856] pglazyfreed 0 [ 2583.132098][T20856] zswpin 0 [ 2583.132098][T20856] zswpout 0 [ 2583.327504][T20856] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20856,uid=0 05:56:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x60020000) [ 2583.343868][T20856] Memory cgroup out of memory: Killed process 20856 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xa00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2583.448596][T20865] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2583.488453][T20865] CPU: 1 PID: 20865 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 05:56:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xc00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2583.498985][T20865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2583.509101][T20865] Call Trace: [ 2583.512421][T20865] [ 2583.515388][T20865] dump_stack_lvl+0x136/0x150 [ 2583.520136][T20865] dump_header+0x10a/0xd70 [ 2583.524628][T20865] oom_kill_process+0x25d/0x600 [ 2583.529563][T20865] out_of_memory+0x35c/0x1660 [ 2583.534335][T20865] ? find_held_lock+0x2d/0x110 [ 2583.539181][T20865] ? oom_killer_disable+0x2b0/0x2b0 [ 2583.544455][T20865] ? rcu_read_unlock+0x9/0x60 05:56:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xe00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2583.549210][T20865] ? find_held_lock+0x2d/0x110 [ 2583.554057][T20865] mem_cgroup_out_of_memory+0x206/0x270 [ 2583.559681][T20865] ? mem_cgroup_margin+0x130/0x130 [ 2583.564870][T20865] ? lock_downgrade+0x690/0x690 [ 2583.569920][T20865] try_charge_memcg+0xf9b/0x13b0 [ 2583.574936][T20865] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2583.581015][T20865] ? rcu_read_unlock+0x9/0x60 [ 2583.585756][T20865] ? lock_downgrade+0x690/0x690 [ 2583.590654][T20865] charge_memcg+0x90/0x3b0 [ 2583.595106][T20865] __mem_cgroup_charge+0x2b/0x90 [ 2583.600164][T20865] do_wp_page+0x8eb/0x3530 [ 2583.604620][T20865] ? lock_release+0x670/0x670 [ 2583.609414][T20865] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2583.614846][T20865] ? do_raw_spin_lock+0x124/0x2b0 [ 2583.619903][T20865] ? spin_bug+0x1c0/0x1c0 [ 2583.624361][T20865] ? lock_downgrade+0x690/0x690 [ 2583.629250][T20865] __handle_mm_fault+0x19a1/0x3e60 [ 2583.634414][T20865] ? vm_iomap_memory+0x190/0x190 [ 2583.639441][T20865] handle_mm_fault+0x2ba/0x9c0 [ 2583.644250][T20865] do_user_addr_fault+0x47e/0x1240 [ 2583.649403][T20865] ? rcu_is_watching+0x12/0xb0 [ 2583.654206][T20865] exc_page_fault+0x98/0x170 [ 2583.658853][T20865] asm_exc_page_fault+0x26/0x30 [ 2583.663735][T20865] RIP: 0033:0x7f4933239610 [ 2583.668186][T20865] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2583.687915][T20865] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2583.694013][T20865] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2583.702004][T20865] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2583.709997][T20865] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2583.718019][T20865] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2583.726021][T20865] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2583.734104][T20865] ? apparmor_socket_create+0x13c/0x670 [ 2583.739717][T20865] 05:56:37 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8528d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2583.769932][T20865] memory: usage 307184kB, limit 307200kB, failcnt 15537 [ 2583.777085][T20865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2583.794531][T20865] Memory cgroup stats for /syz2: [ 2583.794822][T20865] anon 126976 [ 2583.794822][T20865] file 684032 [ 2583.794822][T20865] kernel 313745408 [ 2583.794822][T20865] kernel_stack 65536 [ 2583.794822][T20865] pagetables 73728 05:56:37 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c18c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2583.794822][T20865] sec_pagetables 0 [ 2583.794822][T20865] percpu 5387328 [ 2583.794822][T20865] sock 0 [ 2583.794822][T20865] vmalloc 8192 [ 2583.794822][T20865] shmem 679936 [ 2583.794822][T20865] zswap 0 [ 2583.794822][T20865] zswapped 0 [ 2583.794822][T20865] file_mapped 630784 [ 2583.794822][T20865] file_dirty 0 [ 2583.794822][T20865] file_writeback 0 [ 2583.794822][T20865] swapcached 0 [ 2583.794822][T20865] anon_thp 0 [ 2583.794822][T20865] file_thp 0 [ 2583.794822][T20865] shmem_thp 0 [ 2583.794822][T20865] inactive_anon 0 [ 2583.794822][T20865] active_anon 806912 05:56:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1200, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2583.794822][T20865] inactive_file 0 [ 2583.794822][T20865] active_file 4096 [ 2583.794822][T20865] unevictable 0 [ 2583.794822][T20865] slab_reclaimable 512264 [ 2583.794822][T20865] slab_unreclaimable 307665392 [ 2583.794822][T20865] slab 308177656 [ 2583.794822][T20865] workingset_refault_anon 0 [ 2583.794822][T20865] workingset_refault_file 2 [ 2583.794822][T20865] workingset_activate_anon 0 [ 2583.794822][T20865] workingset_activate_file 0 [ 2583.794822][T20865] workingset_restore_anon 0 [ 2583.794822][T20865] workingset_restore_file 1 [ 2583.794822][T20865] workingset_nodereclaim 0 [ 2583.794822][T20865] pgscan 1914 [ 2583.794822][T20865] pgsteal 131 [ 2583.794822][T20865] pgscan_kswapd 109 [ 2583.794822][T20865] pgscan_direct 1805 [ 2583.794822][T20865] pgscan_khugepaged 0 [ 2583.794822][T20865] pgsteal_kswapd 108 [ 2583.794822][T20865] pgsteal_direct 23 [ 2583.794822][T20865] pgsteal_khugepaged 0 [ 2583.794822][T20865] pgfault 1009792 [ 2583.794822][T20865] pgmajfault 0 [ 2583.794822][T20865] pgrefill 13290 [ 2583.794822][T20865] pgactivate 1760 [ 2583.794822][T20865] pgdeactivate 0 [ 2583.794822][T20865] pglazyfree 0 [ 2583.794822][T20865] pglazyfreed 0 [ 2583.794822][T20865] zswpin 0 [ 2583.794822][T20865] zswpout 0 [ 2583.982780][T20892] wireguard71: entered allmulticast mode [ 2583.988620][T20865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20865,uid=0 05:56:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x42010000}, 0x0) 05:56:38 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7201, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2584.004958][T20865] Memory cgroup out of memory: Killed process 20865 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2584.054852][T20876] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2584.082366][T20876] CPU: 1 PID: 20876 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2584.092873][T20876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2584.102990][T20876] Call Trace: [ 2584.106313][T20876] [ 2584.109300][T20876] dump_stack_lvl+0x136/0x150 [ 2584.114066][T20876] dump_header+0x10a/0xd70 [ 2584.118562][T20876] oom_kill_process+0x25d/0x600 [ 2584.123495][T20876] out_of_memory+0x35c/0x1660 [ 2584.128252][T20876] ? find_held_lock+0x2d/0x110 [ 2584.133104][T20876] ? oom_killer_disable+0x2b0/0x2b0 [ 2584.138390][T20876] ? rcu_read_unlock+0x9/0x60 [ 2584.143199][T20876] ? find_held_lock+0x2d/0x110 [ 2584.148060][T20876] mem_cgroup_out_of_memory+0x206/0x270 [ 2584.153692][T20876] ? mem_cgroup_margin+0x130/0x130 [ 2584.158867][T20876] ? lock_downgrade+0x690/0x690 [ 2584.163775][T20876] try_charge_memcg+0xf9b/0x13b0 [ 2584.168765][T20876] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2584.173996][T20897] wireguard53: entered promiscuous mode [ 2584.174786][T20876] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2584.174851][T20876] ? lock_downgrade+0x690/0x690 [ 2584.191040][T20876] ? lock_downgrade+0x690/0x690 [ 2584.195952][T20876] ? rcu_read_unlock+0x9/0x60 [ 2584.200735][T20876] obj_cgroup_charge+0x2af/0x5e0 [ 2584.205736][T20876] __kmem_cache_alloc_node+0xa3/0x320 [ 2584.211160][T20876] ? copy_semundo+0x18b/0x300 [ 2584.215958][T20876] kmalloc_trace+0x26/0xe0 [ 2584.220408][T20876] copy_semundo+0x18b/0x300 [ 2584.224942][T20876] copy_process+0x24a2/0x7580 [ 2584.229698][T20876] ? __lock_acquire+0xbc5/0x5d40 [ 2584.234717][T20876] ? __cleanup_sighand+0xb0/0xb0 [ 2584.239708][T20876] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2584.245740][T20876] ? psi_memstall_leave+0x174/0x250 [ 2584.250974][T20876] ? lock_downgrade+0x690/0x690 [ 2584.255885][T20876] kernel_clone+0xeb/0x890 [ 2584.260340][T20876] ? create_io_thread+0xf0/0xf0 [ 2584.265236][T20876] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2584.271543][T20876] ? lock_downgrade+0x690/0x690 [ 2584.276444][T20876] __do_sys_clone+0xba/0x100 [ 2584.281083][T20876] ? kernel_clone+0x890/0x890 [ 2584.285848][T20876] ? syscall_enter_from_user_mode+0x26/0x80 [ 2584.291822][T20876] do_syscall_64+0x39/0xb0 [ 2584.296270][T20876] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2584.302190][T20876] RIP: 0033:0x7ffae188d591 [ 2584.306625][T20876] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2584.326385][T20876] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2584.334862][T20876] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2584.342877][T20876] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2584.350908][T20876] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2584.358921][T20876] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2584.366919][T20876] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2584.374933][T20876] [ 2584.381801][T20876] memory: usage 307188kB, limit 307200kB, failcnt 26804 [ 2584.389237][T20876] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2584.396564][T20876] Memory cgroup stats for /syz3: [ 2584.396831][T20876] anon 90112 [ 2584.396831][T20876] file 733184 [ 2584.396831][T20876] kernel 313733120 [ 2584.396831][T20876] kernel_stack 65536 [ 2584.396831][T20876] pagetables 69632 [ 2584.396831][T20876] sec_pagetables 0 [ 2584.396831][T20876] percpu 5375488 [ 2584.396831][T20876] sock 0 [ 2584.396831][T20876] vmalloc 8192 [ 2584.396831][T20876] shmem 733184 [ 2584.396831][T20876] zswap 0 [ 2584.396831][T20876] zswapped 0 [ 2584.396831][T20876] file_mapped 667648 [ 2584.396831][T20876] file_dirty 0 [ 2584.396831][T20876] file_writeback 0 [ 2584.396831][T20876] swapcached 0 [ 2584.396831][T20876] anon_thp 0 [ 2584.396831][T20876] file_thp 0 [ 2584.396831][T20876] shmem_thp 0 [ 2584.396831][T20876] inactive_anon 0 [ 2584.396831][T20876] active_anon 823296 [ 2584.396831][T20876] inactive_file 0 [ 2584.396831][T20876] active_file 0 [ 2584.396831][T20876] unevictable 0 [ 2584.396831][T20876] slab_reclaimable 1215536 [ 2584.396831][T20876] slab_unreclaimable 306965568 [ 2584.396831][T20876] slab 308181104 [ 2584.396831][T20876] workingset_refault_anon 0 [ 2584.396831][T20876] workingset_refault_file 130 [ 2584.396831][T20876] workingset_activate_anon 0 [ 2584.396831][T20876] workingset_activate_file 0 [ 2584.396831][T20876] workingset_restore_anon 0 [ 2584.396831][T20876] workingset_restore_file 0 [ 2584.396831][T20876] workingset_nodereclaim 0 [ 2584.396831][T20876] pgscan 3117 [ 2584.396831][T20876] pgsteal 939 [ 2584.396831][T20876] pgscan_kswapd 0 [ 2584.396831][T20876] pgscan_direct 3117 [ 2584.396831][T20876] pgscan_khugepaged 0 [ 2584.396831][T20876] pgsteal_kswapd 0 [ 2584.396831][T20876] pgsteal_direct 939 [ 2584.396831][T20876] pgsteal_khugepaged 0 [ 2584.396831][T20876] pgfault 575425 [ 2584.396831][T20876] pgmajfault 0 [ 2584.396831][T20876] pgrefill 79949 [ 2584.396831][T20876] pgactivate 862 [ 2584.396831][T20876] pgdeactivate 0 [ 2584.396831][T20876] pglazyfree 0 [ 2584.396831][T20876] pglazyfreed 0 [ 2584.396831][T20876] zswpin 0 [ 2584.396831][T20876] zswpout 0 05:56:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1400, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x62020000) [ 2584.620080][T20876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20876,uid=0 [ 2584.636870][T20876] Memory cgroup out of memory: Killed process 20876 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2584.746424][T20913] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2584.757420][T20913] CPU: 0 PID: 20913 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2584.767999][T20913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2584.778108][T20913] Call Trace: [ 2584.781435][T20913] [ 2584.784414][T20913] dump_stack_lvl+0x136/0x150 [ 2584.789178][T20913] dump_header+0x10a/0xd70 [ 2584.793674][T20913] oom_kill_process+0x25d/0x600 [ 2584.798593][T20913] out_of_memory+0x35c/0x1660 [ 2584.803317][T20913] ? find_held_lock+0x2d/0x110 [ 2584.808150][T20913] ? oom_killer_disable+0x2b0/0x2b0 [ 2584.813568][T20913] ? rcu_read_unlock+0x9/0x60 [ 2584.818294][T20913] ? find_held_lock+0x2d/0x110 [ 2584.823127][T20913] mem_cgroup_out_of_memory+0x206/0x270 [ 2584.828721][T20913] ? mem_cgroup_margin+0x130/0x130 [ 2584.833876][T20913] ? lock_downgrade+0x690/0x690 [ 2584.838772][T20913] try_charge_memcg+0xf9b/0x13b0 [ 2584.843748][T20913] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2584.850634][T20913] ? rcu_read_unlock+0x9/0x60 [ 2584.855351][T20913] ? lock_downgrade+0x690/0x690 [ 2584.860270][T20913] charge_memcg+0x90/0x3b0 [ 2584.864813][T20913] __mem_cgroup_charge+0x2b/0x90 [ 2584.869792][T20913] ? copy_mc_to_kernel+0x3e/0x90 [ 2584.874770][T20913] do_wp_page+0x8eb/0x3530 [ 2584.879243][T20913] ? lock_release+0x670/0x670 [ 2584.883964][T20913] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2584.889465][T20913] ? do_raw_spin_lock+0x124/0x2b0 [ 2584.894528][T20913] ? spin_bug+0x1c0/0x1c0 [ 2584.898887][T20913] ? lock_downgrade+0x690/0x690 [ 2584.903783][T20913] __handle_mm_fault+0x19a1/0x3e60 [ 2584.908957][T20913] ? vm_iomap_memory+0x190/0x190 [ 2584.914056][T20913] handle_mm_fault+0x2ba/0x9c0 [ 2584.918953][T20913] do_user_addr_fault+0x47e/0x1240 [ 2584.924111][T20913] ? rcu_is_watching+0x12/0xb0 [ 2584.928934][T20913] exc_page_fault+0x98/0x170 [ 2584.933764][T20913] asm_exc_page_fault+0x26/0x30 [ 2584.938649][T20913] RIP: 0033:0x7ffae1836f7e [ 2584.943089][T20913] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2584.962818][T20913] RSP: 002b:00007ffdc9b413b0 EFLAGS: 00010246 [ 2584.968919][T20913] RAX: 00007ffae19abf80 RBX: 00007ffae19abf8c RCX: 0000000000000000 [ 2584.976918][T20913] RDX: 0000000000000000 RSI: 00007ffae19abf88 RDI: 0000000000000000 [ 2584.984932][T20913] RBP: 00007ffae19abf80 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2584.993017][T20913] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffae19abf8c [ 2585.001030][T20913] R13: 00007ffae1400060 R14: 00007ffae19abf80 R15: 0000000000000000 [ 2585.009043][T20913] 05:56:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1f00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2585.047109][T20913] memory: usage 307200kB, limit 307200kB, failcnt 26879 [ 2585.054663][T20913] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2585.064190][T20913] Memory cgroup stats for /syz3: [ 2585.064471][T20913] anon 90112 [ 2585.064471][T20913] file 733184 [ 2585.064471][T20913] kernel 313749504 [ 2585.064471][T20913] kernel_stack 65536 [ 2585.064471][T20913] pagetables 69632 [ 2585.064471][T20913] sec_pagetables 0 [ 2585.064471][T20913] percpu 5375552 [ 2585.064471][T20913] sock 0 05:56:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2585.064471][T20913] vmalloc 8192 [ 2585.064471][T20913] shmem 733184 [ 2585.064471][T20913] zswap 0 [ 2585.064471][T20913] zswapped 0 [ 2585.064471][T20913] file_mapped 667648 [ 2585.064471][T20913] file_dirty 0 [ 2585.064471][T20913] file_writeback 0 [ 2585.064471][T20913] swapcached 0 [ 2585.064471][T20913] anon_thp 0 [ 2585.064471][T20913] file_thp 0 [ 2585.064471][T20913] shmem_thp 0 [ 2585.064471][T20913] inactive_anon 0 [ 2585.064471][T20913] active_anon 823296 [ 2585.064471][T20913] inactive_file 0 [ 2585.064471][T20913] active_file 0 [ 2585.064471][T20913] unevictable 0 [ 2585.064471][T20913] slab_reclaimable 1215536 [ 2585.064471][T20913] slab_unreclaimable 306975264 [ 2585.064471][T20913] slab 308190800 [ 2585.064471][T20913] workingset_refault_anon 0 [ 2585.064471][T20913] workingset_refault_file 130 [ 2585.064471][T20913] workingset_activate_anon 0 [ 2585.064471][T20913] workingset_activate_file 0 [ 2585.064471][T20913] workingset_restore_anon 0 [ 2585.064471][T20913] workingset_restore_file 0 [ 2585.064471][T20913] workingset_nodereclaim 0 [ 2585.064471][T20913] pgscan 3117 [ 2585.064471][T20913] pgsteal 939 [ 2585.064471][T20913] pgscan_kswapd 0 [ 2585.064471][T20913] pgscan_direct 3117 [ 2585.064471][T20913] pgscan_khugepaged 0 [ 2585.064471][T20913] pgsteal_kswapd 0 [ 2585.064471][T20913] pgsteal_direct 939 [ 2585.064471][T20913] pgsteal_khugepaged 0 [ 2585.064471][T20913] pgfault 575463 [ 2585.064471][T20913] pgmajfault 0 [ 2585.064471][T20913] pgrefill 79949 [ 2585.064471][T20913] pgactivate 862 [ 2585.064471][T20913] pgdeactivate 0 [ 2585.064471][T20913] pglazyfree 0 [ 2585.064471][T20913] pglazyfreed 0 [ 2585.064471][T20913] zswpin 0 05:56:39 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x247d, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2585.064471][T20913] zswpout 0 05:56:39 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7202, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:39 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c18d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2585.298844][T20913] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20913,uid=0 [ 2585.317391][T20913] Memory cgroup out of memory: Killed process 20913 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x62030000) [ 2585.354980][T20935] wireguard71: entered promiscuous mode [ 2585.384009][T20935] wireguard71: entered allmulticast mode [ 2585.392827][T20905] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2585.424208][T20905] CPU: 0 PID: 20905 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2585.434748][T20905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2585.444857][T20905] Call Trace: [ 2585.448174][T20905] [ 2585.451149][T20905] dump_stack_lvl+0x136/0x150 [ 2585.455931][T20905] dump_header+0x10a/0xd70 [ 2585.460403][T20905] oom_kill_process+0x25d/0x600 [ 2585.465292][T20905] out_of_memory+0x35c/0x1660 [ 2585.470012][T20905] ? find_held_lock+0x2d/0x110 [ 2585.474856][T20905] ? oom_killer_disable+0x2b0/0x2b0 [ 2585.480113][T20905] ? rcu_read_unlock+0x9/0x60 [ 2585.484831][T20905] ? find_held_lock+0x2d/0x110 [ 2585.489667][T20905] mem_cgroup_out_of_memory+0x206/0x270 [ 2585.495268][T20905] ? mem_cgroup_margin+0x130/0x130 [ 2585.500412][T20905] ? lock_downgrade+0x690/0x690 [ 2585.505308][T20905] try_charge_memcg+0xf9b/0x13b0 [ 2585.510280][T20905] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2585.516295][T20905] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2585.522094][T20905] ? lock_downgrade+0x690/0x690 [ 2585.526995][T20905] ? lock_downgrade+0x690/0x690 [ 2585.531887][T20905] obj_cgroup_charge+0x2af/0x5e0 [ 2585.536897][T20905] ? __anon_vma_prepare+0x64/0x580 [ 2585.542069][T20905] kmem_cache_alloc+0xb1/0x3b0 [ 2585.546881][T20905] __anon_vma_prepare+0x64/0x580 [ 2585.551862][T20905] ? __pmd_alloc+0x30c/0x5d0 [ 2585.556486][T20905] __handle_mm_fault+0x3a8f/0x3e60 [ 2585.561639][T20905] ? vm_iomap_memory+0x190/0x190 [ 2585.566717][T20905] handle_mm_fault+0x2ba/0x9c0 [ 2585.571519][T20905] do_user_addr_fault+0x47e/0x1240 [ 2585.576673][T20905] ? rcu_is_watching+0x12/0xb0 [ 2585.581527][T20905] exc_page_fault+0x98/0x170 [ 2585.586162][T20905] asm_exc_page_fault+0x26/0x30 [ 2585.591120][T20905] RIP: 0033:0x7f493322bde9 [ 2585.595574][T20905] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2585.615242][T20905] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2585.621347][T20905] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2585.629363][T20905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2585.637388][T20905] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2585.645609][T20905] R10: 00007f4932e00068 R11: 0000000000000246 R12: 00000000002769b8 [ 2585.653643][T20905] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2585.661691][T20905] [ 2585.667340][T20905] memory: usage 307200kB, limit 307200kB, failcnt 15692 [ 2585.680448][T20905] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2585.687936][T20905] Memory cgroup stats for /syz2: [ 2585.688214][T20905] anon 135168 [ 2585.688214][T20905] file 684032 [ 2585.688214][T20905] kernel 313753600 [ 2585.688214][T20905] kernel_stack 65536 [ 2585.688214][T20905] pagetables 81920 [ 2585.688214][T20905] sec_pagetables 0 [ 2585.688214][T20905] percpu 5387328 [ 2585.688214][T20905] sock 0 [ 2585.688214][T20905] vmalloc 8192 [ 2585.688214][T20905] shmem 679936 [ 2585.688214][T20905] zswap 0 [ 2585.688214][T20905] zswapped 0 [ 2585.688214][T20905] file_mapped 630784 [ 2585.688214][T20905] file_dirty 4096 [ 2585.688214][T20905] file_writeback 0 [ 2585.688214][T20905] swapcached 0 [ 2585.688214][T20905] anon_thp 0 [ 2585.688214][T20905] file_thp 0 [ 2585.688214][T20905] shmem_thp 0 [ 2585.688214][T20905] inactive_anon 708608 [ 2585.688214][T20905] active_anon 106496 [ 2585.688214][T20905] inactive_file 0 [ 2585.688214][T20905] active_file 4096 [ 2585.688214][T20905] unevictable 0 [ 2585.688214][T20905] slab_reclaimable 512264 [ 2585.688214][T20905] slab_unreclaimable 307665392 [ 2585.688214][T20905] slab 308177656 [ 2585.688214][T20905] workingset_refault_anon 0 [ 2585.688214][T20905] workingset_refault_file 2 [ 2585.688214][T20905] workingset_activate_anon 0 [ 2585.688214][T20905] workingset_activate_file 0 [ 2585.688214][T20905] workingset_restore_anon 0 [ 2585.688214][T20905] workingset_restore_file 1 [ 2585.688214][T20905] workingset_nodereclaim 0 [ 2585.688214][T20905] pgscan 1960 [ 2585.688214][T20905] pgsteal 131 [ 2585.688214][T20905] pgscan_kswapd 109 [ 2585.688214][T20905] pgscan_direct 1851 [ 2585.688214][T20905] pgscan_khugepaged 0 [ 2585.688214][T20905] pgsteal_kswapd 108 [ 2585.688214][T20905] pgsteal_direct 23 [ 2585.688214][T20905] pgsteal_khugepaged 0 [ 2585.688214][T20905] pgfault 1009853 [ 2585.688214][T20905] pgmajfault 0 [ 2585.688214][T20905] pgrefill 13310 [ 2585.688214][T20905] pgactivate 1806 [ 2585.688214][T20905] pgdeactivate 0 [ 2585.688214][T20905] pglazyfree 0 [ 2585.688214][T20905] pglazyfreed 0 [ 2585.688214][T20905] zswpin 0 [ 2585.688214][T20905] zswpout 0 05:56:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3200, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2585.880055][T20905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20905,uid=0 [ 2585.897777][T20905] Memory cgroup out of memory: Killed process 20905 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2585.918108][T20938] wireguard53: entered promiscuous mode 05:56:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x42020000}, 0x0) [ 2585.987844][T20942] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2586.050227][T20942] CPU: 0 PID: 20942 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2586.060728][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2586.070833][T20942] Call Trace: [ 2586.074153][T20942] [ 2586.077133][T20942] dump_stack_lvl+0x136/0x150 [ 2586.081884][T20942] dump_header+0x10a/0xd70 [ 2586.086385][T20942] oom_kill_process+0x25d/0x600 [ 2586.091312][T20942] out_of_memory+0x35c/0x1660 [ 2586.096055][T20942] ? find_held_lock+0x2d/0x110 [ 2586.100894][T20942] ? oom_killer_disable+0x2b0/0x2b0 [ 2586.106156][T20942] ? rcu_read_unlock+0x9/0x60 [ 2586.110905][T20942] ? find_held_lock+0x2d/0x110 [ 2586.115764][T20942] mem_cgroup_out_of_memory+0x206/0x270 [ 2586.121387][T20942] ? mem_cgroup_margin+0x130/0x130 [ 2586.126560][T20942] ? lock_downgrade+0x690/0x690 [ 2586.131466][T20942] try_charge_memcg+0xf9b/0x13b0 [ 2586.136438][T20942] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2586.142736][T20942] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2586.148502][T20942] ? lock_downgrade+0x690/0x690 [ 2586.153384][T20942] ? lock_downgrade+0x690/0x690 [ 2586.158299][T20942] ? rcu_read_unlock+0x9/0x60 [ 2586.163025][T20942] obj_cgroup_charge+0x2af/0x5e0 [ 2586.168003][T20942] __kmem_cache_alloc_node+0xa3/0x320 [ 2586.173436][T20942] ? copy_semundo+0x18b/0x300 [ 2586.178183][T20942] kmalloc_trace+0x26/0xe0 [ 2586.182743][T20942] copy_semundo+0x18b/0x300 [ 2586.187292][T20942] copy_process+0x24a2/0x7580 [ 2586.192017][T20942] ? free_swap_cache+0x1b5/0x3d0 [ 2586.197045][T20942] ? __cleanup_sighand+0xb0/0xb0 [ 2586.202028][T20942] ? spin_bug+0x1c0/0x1c0 [ 2586.206396][T20942] ? lock_downgrade+0x690/0x690 [ 2586.211309][T20942] kernel_clone+0xeb/0x890 [ 2586.215775][T20942] ? create_io_thread+0xf0/0xf0 [ 2586.220663][T20942] ? vm_iomap_memory+0x190/0x190 [ 2586.225646][T20942] ? find_held_lock+0x2d/0x110 [ 2586.230468][T20942] __do_sys_clone+0xba/0x100 [ 2586.235092][T20942] ? kernel_clone+0x890/0x890 [ 2586.239814][T20942] ? syscall_enter_from_user_mode+0x26/0x80 [ 2586.245780][T20942] do_syscall_64+0x39/0xb0 [ 2586.250244][T20942] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2586.256184][T20942] RIP: 0033:0x7ffae188d591 [ 2586.260628][T20942] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2586.280297][T20942] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2586.288754][T20942] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2586.296931][T20942] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2586.304945][T20942] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2586.312956][T20942] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2586.320967][T20942] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2586.328994][T20942] 05:56:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3201, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2586.344975][T20942] memory: usage 307200kB, limit 307200kB, failcnt 26962 05:56:40 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2586.374574][T20942] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:56:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3600, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2586.433474][T20942] Memory cgroup stats for /syz3: [ 2586.433753][T20942] anon 90112 [ 2586.433753][T20942] file 733184 [ 2586.433753][T20942] kernel 313749504 [ 2586.433753][T20942] kernel_stack 65536 [ 2586.433753][T20942] pagetables 69632 [ 2586.433753][T20942] sec_pagetables 0 [ 2586.433753][T20942] percpu 5375552 [ 2586.433753][T20942] sock 0 [ 2586.433753][T20942] vmalloc 8192 [ 2586.433753][T20942] shmem 733184 [ 2586.433753][T20942] zswap 0 [ 2586.433753][T20942] zswapped 0 [ 2586.433753][T20942] file_mapped 667648 [ 2586.433753][T20942] file_dirty 0 [ 2586.433753][T20942] file_writeback 0 [ 2586.433753][T20942] swapcached 0 [ 2586.433753][T20942] anon_thp 0 [ 2586.433753][T20942] file_thp 0 [ 2586.433753][T20942] shmem_thp 0 [ 2586.433753][T20942] inactive_anon 0 [ 2586.433753][T20942] active_anon 823296 [ 2586.433753][T20942] inactive_file 0 [ 2586.433753][T20942] active_file 0 [ 2586.433753][T20942] unevictable 0 [ 2586.433753][T20942] slab_reclaimable 1215536 [ 2586.433753][T20942] slab_unreclaimable 306974800 [ 2586.433753][T20942] slab 308190336 05:56:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3601, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2586.433753][T20942] workingset_refault_anon 0 [ 2586.433753][T20942] workingset_refault_file 130 [ 2586.433753][T20942] workingset_activate_anon 0 [ 2586.433753][T20942] workingset_activate_file 0 [ 2586.433753][T20942] workingset_restore_anon 0 [ 2586.433753][T20942] workingset_restore_file 0 [ 2586.433753][T20942] workingset_nodereclaim 0 [ 2586.433753][T20942] pgscan 3117 [ 2586.433753][T20942] pgsteal 939 [ 2586.433753][T20942] pgscan_kswapd 0 [ 2586.433753][T20942] pgscan_direct 3117 [ 2586.433753][T20942] pgscan_khugepaged 0 [ 2586.433753][T20942] pgsteal_kswapd 0 05:56:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3802, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2586.433753][T20942] pgsteal_direct 939 [ 2586.433753][T20942] pgsteal_khugepaged 0 [ 2586.433753][T20942] pgfault 575500 [ 2586.433753][T20942] pgmajfault 0 [ 2586.433753][T20942] pgrefill 79949 [ 2586.433753][T20942] pgactivate 862 [ 2586.433753][T20942] pgdeactivate 0 [ 2586.433753][T20942] pglazyfree 0 [ 2586.433753][T20942] pglazyfreed 0 [ 2586.433753][T20942] zswpin 0 [ 2586.433753][T20942] zswpout 0 [ 2586.632666][T20942] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20942,uid=0 [ 2586.648949][T20967] wireguard71: entered promiscuous mode [ 2586.654405][T20942] Memory cgroup out of memory: Killed process 20942 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2586.660594][T20967] wireguard71: entered allmulticast mode 05:56:40 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7203, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2586.689613][T20952] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2586.702655][T20952] CPU: 1 PID: 20952 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2586.713161][T20952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2586.723268][T20952] Call Trace: [ 2586.726589][T20952] [ 2586.729556][T20952] dump_stack_lvl+0x136/0x150 [ 2586.734284][T20952] dump_header+0x10a/0xd70 [ 2586.738743][T20952] oom_kill_process+0x25d/0x600 [ 2586.743634][T20952] out_of_memory+0x35c/0x1660 [ 2586.748353][T20952] ? find_held_lock+0x2d/0x110 [ 2586.753164][T20952] ? oom_killer_disable+0x2b0/0x2b0 [ 2586.758397][T20952] ? rcu_read_unlock+0x9/0x60 [ 2586.763114][T20952] ? find_held_lock+0x2d/0x110 [ 2586.767933][T20952] mem_cgroup_out_of_memory+0x206/0x270 [ 2586.773521][T20952] ? mem_cgroup_margin+0x130/0x130 [ 2586.778673][T20952] ? lock_downgrade+0x690/0x690 [ 2586.783569][T20952] try_charge_memcg+0xf9b/0x13b0 [ 2586.788546][T20952] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2586.794557][T20952] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2586.800323][T20952] ? lock_downgrade+0x690/0x690 [ 2586.805209][T20952] ? lock_downgrade+0x690/0x690 [ 2586.810114][T20952] obj_cgroup_charge+0x2af/0x5e0 [ 2586.815108][T20952] ? __anon_vma_prepare+0x64/0x580 [ 2586.820280][T20952] kmem_cache_alloc+0xb1/0x3b0 [ 2586.825096][T20952] __anon_vma_prepare+0x64/0x580 [ 2586.830089][T20952] ? __pmd_alloc+0x30c/0x5d0 [ 2586.834724][T20952] __handle_mm_fault+0x3a8f/0x3e60 [ 2586.839880][T20952] ? vm_iomap_memory+0x190/0x190 [ 2586.844876][T20952] handle_mm_fault+0x2ba/0x9c0 [ 2586.849686][T20952] do_user_addr_fault+0x47e/0x1240 [ 2586.854855][T20952] ? rcu_is_watching+0x12/0xb0 [ 2586.859660][T20952] exc_page_fault+0x98/0x170 [ 2586.864312][T20952] asm_exc_page_fault+0x26/0x30 [ 2586.869197][T20952] RIP: 0033:0x7f493322bde9 [ 2586.873638][T20952] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2586.893309][T20952] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2586.899585][T20952] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2586.907700][T20952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2586.915700][T20952] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2586.923694][T20952] R10: 00007f4932e00068 R11: 0000000000000246 R12: 0000000000276eef [ 2586.931710][T20952] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 05:56:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x68000000) 05:56:41 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c18e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2586.939755][T20952] [ 2586.999852][T20952] memory: usage 307200kB, limit 307200kB, failcnt 15788 [ 2587.015232][T20952] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2587.037293][T20952] Memory cgroup stats for /syz2: [ 2587.037584][T20952] anon 135168 [ 2587.037584][T20952] file 684032 [ 2587.037584][T20952] kernel 313753600 [ 2587.037584][T20952] kernel_stack 65536 [ 2587.037584][T20952] pagetables 81920 [ 2587.037584][T20952] sec_pagetables 0 [ 2587.037584][T20952] percpu 5387328 [ 2587.037584][T20952] sock 0 [ 2587.037584][T20952] vmalloc 8192 [ 2587.037584][T20952] shmem 679936 [ 2587.037584][T20952] zswap 0 [ 2587.037584][T20952] zswapped 0 [ 2587.037584][T20952] file_mapped 630784 [ 2587.037584][T20952] file_dirty 4096 [ 2587.037584][T20952] file_writeback 0 [ 2587.037584][T20952] swapcached 0 [ 2587.037584][T20952] anon_thp 0 [ 2587.037584][T20952] file_thp 0 [ 2587.037584][T20952] shmem_thp 0 [ 2587.037584][T20952] inactive_anon 708608 [ 2587.037584][T20952] active_anon 106496 [ 2587.037584][T20952] inactive_file 0 [ 2587.037584][T20952] active_file 4096 [ 2587.037584][T20952] unevictable 0 [ 2587.037584][T20952] slab_reclaimable 512264 [ 2587.037584][T20952] slab_unreclaimable 307665392 [ 2587.037584][T20952] slab 308177656 [ 2587.037584][T20952] workingset_refault_anon 0 [ 2587.037584][T20952] workingset_refault_file 2 [ 2587.037584][T20952] workingset_activate_anon 0 [ 2587.037584][T20952] workingset_activate_file 0 [ 2587.037584][T20952] workingset_restore_anon 0 [ 2587.037584][T20952] workingset_restore_file 1 [ 2587.037584][T20952] workingset_nodereclaim 0 [ 2587.037584][T20952] pgscan 1960 [ 2587.037584][T20952] pgsteal 131 [ 2587.037584][T20952] pgscan_kswapd 109 [ 2587.037584][T20952] pgscan_direct 1851 [ 2587.037584][T20952] pgscan_khugepaged 0 [ 2587.037584][T20952] pgsteal_kswapd 108 [ 2587.037584][T20952] pgsteal_direct 23 [ 2587.037584][T20952] pgsteal_khugepaged 0 [ 2587.037584][T20952] pgfault 1009916 05:56:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3a02, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2587.037584][T20952] pgmajfault 0 [ 2587.037584][T20952] pgrefill 13390 [ 2587.037584][T20952] pgactivate 1806 [ 2587.037584][T20952] pgdeactivate 0 [ 2587.037584][T20952] pglazyfree 0 [ 2587.037584][T20952] pglazyfreed 0 [ 2587.037584][T20952] zswpin 0 [ 2587.037584][T20952] zswpout 0 [ 2587.279875][T20952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20952,uid=0 [ 2587.295859][T20952] Memory cgroup out of memory: Killed process 20952 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:56:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x46020000}, 0x0) [ 2587.329364][T20984] wireguard53: entered promiscuous mode [ 2587.350112][T20986] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 05:56:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3c00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2587.417689][T20986] CPU: 1 PID: 20986 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2587.428194][T20986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2587.438304][T20986] Call Trace: [ 2587.441624][T20986] [ 2587.444597][T20986] dump_stack_lvl+0x136/0x150 [ 2587.449354][T20986] dump_header+0x10a/0xd70 [ 2587.453849][T20986] oom_kill_process+0x25d/0x600 [ 2587.458779][T20986] out_of_memory+0x35c/0x1660 05:56:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x4000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2587.463970][T20986] ? find_held_lock+0x2d/0x110 [ 2587.468813][T20986] ? oom_killer_disable+0x2b0/0x2b0 [ 2587.474084][T20986] ? rcu_read_unlock+0x9/0x60 [ 2587.478828][T20986] ? find_held_lock+0x2d/0x110 [ 2587.483672][T20986] mem_cgroup_out_of_memory+0x206/0x270 [ 2587.489295][T20986] ? mem_cgroup_margin+0x130/0x130 [ 2587.494479][T20986] ? lock_downgrade+0x690/0x690 [ 2587.499459][T20986] try_charge_memcg+0xf9b/0x13b0 [ 2587.504462][T20986] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2587.510537][T20986] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2587.516340][T20986] ? lock_downgrade+0x690/0x690 [ 2587.521257][T20986] ? lock_downgrade+0x690/0x690 [ 2587.526154][T20986] ? rcu_read_unlock+0x9/0x60 [ 2587.530878][T20986] obj_cgroup_charge+0x2af/0x5e0 [ 2587.535851][T20986] __kmem_cache_alloc_node+0xa3/0x320 [ 2587.541283][T20986] ? copy_semundo+0x18b/0x300 [ 2587.546002][T20986] kmalloc_trace+0x26/0xe0 [ 2587.550459][T20986] copy_semundo+0x18b/0x300 [ 2587.554996][T20986] copy_process+0x24a2/0x7580 [ 2587.559795][T20986] ? __lock_acquire+0xbc5/0x5d40 [ 2587.564793][T20986] ? __cleanup_sighand+0xb0/0xb0 [ 2587.569771][T20986] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2587.575799][T20986] ? psi_memstall_leave+0x174/0x250 [ 2587.581044][T20986] ? lock_downgrade+0x690/0x690 [ 2587.585932][T20986] kernel_clone+0xeb/0x890 [ 2587.590384][T20986] ? create_io_thread+0xf0/0xf0 [ 2587.595271][T20986] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2587.601558][T20986] ? lock_downgrade+0x690/0x690 [ 2587.606454][T20986] __do_sys_clone+0xba/0x100 [ 2587.611082][T20986] ? kernel_clone+0x890/0x890 [ 2587.615808][T20986] ? syscall_enter_from_user_mode+0x26/0x80 [ 2587.621758][T20986] do_syscall_64+0x39/0xb0 [ 2587.626227][T20986] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2587.632152][T20986] RIP: 0033:0x7ffae188d591 [ 2587.636591][T20986] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2587.656226][T20986] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2587.664671][T20986] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2587.672857][T20986] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2587.680852][T20986] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2587.688846][T20986] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2587.696842][T20986] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2587.704862][T20986] [ 2587.710499][T20986] memory: usage 307184kB, limit 307200kB, failcnt 27062 05:56:41 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2587.717702][T20986] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2587.776506][T20986] Memory cgroup stats for /syz3: [ 2587.776810][T20986] anon 90112 [ 2587.776810][T20986] file 733184 [ 2587.776810][T20986] kernel 313733120 [ 2587.776810][T20986] kernel_stack 65536 [ 2587.776810][T20986] pagetables 69632 [ 2587.776810][T20986] sec_pagetables 0 [ 2587.776810][T20986] percpu 5375488 [ 2587.776810][T20986] sock 0 [ 2587.776810][T20986] vmalloc 8192 [ 2587.776810][T20986] shmem 733184 [ 2587.776810][T20986] zswap 0 [ 2587.776810][T20986] zswapped 0 [ 2587.776810][T20986] file_mapped 667648 [ 2587.776810][T20986] file_dirty 0 [ 2587.776810][T20986] file_writeback 0 [ 2587.776810][T20986] swapcached 0 [ 2587.776810][T20986] anon_thp 0 [ 2587.776810][T20986] file_thp 0 [ 2587.776810][T20986] shmem_thp 0 [ 2587.776810][T20986] inactive_anon 0 [ 2587.776810][T20986] active_anon 823296 [ 2587.776810][T20986] inactive_file 0 [ 2587.776810][T20986] active_file 0 [ 2587.776810][T20986] unevictable 0 [ 2587.776810][T20986] slab_reclaimable 1215536 [ 2587.776810][T20986] slab_unreclaimable 306962888 [ 2587.776810][T20986] slab 308178424 [ 2587.776810][T20986] workingset_refault_anon 0 [ 2587.776810][T20986] workingset_refault_file 130 [ 2587.776810][T20986] workingset_activate_anon 0 [ 2587.776810][T20986] workingset_activate_file 0 [ 2587.776810][T20986] workingset_restore_anon 0 [ 2587.776810][T20986] workingset_restore_file 0 [ 2587.776810][T20986] workingset_nodereclaim 0 [ 2587.776810][T20986] pgscan 3117 [ 2587.776810][T20986] pgsteal 939 [ 2587.776810][T20986] pgscan_kswapd 0 [ 2587.776810][T20986] pgscan_direct 3117 [ 2587.776810][T20986] pgscan_khugepaged 0 [ 2587.776810][T20986] pgsteal_kswapd 0 [ 2587.776810][T20986] pgsteal_direct 939 [ 2587.776810][T20986] pgsteal_khugepaged 0 [ 2587.776810][T20986] pgfault 575537 [ 2587.776810][T20986] pgmajfault 0 [ 2587.776810][T20986] pgrefill 79949 [ 2587.776810][T20986] pgactivate 862 [ 2587.776810][T20986] pgdeactivate 0 [ 2587.776810][T20986] pglazyfree 0 [ 2587.776810][T20986] pglazyfreed 0 [ 2587.776810][T20986] zswpin 0 [ 2587.776810][T20986] zswpout 0 05:56:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x4800, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:42 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7400, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2588.001512][T20986] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20986,uid=0 [ 2588.032860][T20986] Memory cgroup out of memory: Killed process 20986 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x6a020000) [ 2588.077684][T20994] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2588.092285][T20994] CPU: 0 PID: 20994 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2588.102781][T20994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2588.112970][T20994] Call Trace: [ 2588.116335][T20994] [ 2588.119313][T20994] dump_stack_lvl+0x136/0x150 [ 2588.124068][T20994] dump_header+0x10a/0xd70 [ 2588.128560][T20994] oom_kill_process+0x25d/0x600 [ 2588.133571][T20994] out_of_memory+0x35c/0x1660 [ 2588.138325][T20994] ? find_held_lock+0x2d/0x110 [ 2588.143173][T20994] ? oom_killer_disable+0x2b0/0x2b0 [ 2588.148450][T20994] ? rcu_read_unlock+0x9/0x60 [ 2588.153211][T20994] ? find_held_lock+0x2d/0x110 [ 2588.158065][T20994] mem_cgroup_out_of_memory+0x206/0x270 [ 2588.163704][T20994] ? mem_cgroup_margin+0x130/0x130 [ 2588.168900][T20994] ? lock_downgrade+0x690/0x690 [ 2588.173937][T20994] try_charge_memcg+0xf9b/0x13b0 [ 2588.179056][T20994] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2588.185109][T20994] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2588.190915][T20994] ? lock_downgrade+0x690/0x690 [ 2588.195833][T20994] ? lock_downgrade+0x690/0x690 [ 2588.200848][T20994] obj_cgroup_charge+0x2af/0x5e0 [ 2588.205855][T20994] ? __anon_vma_prepare+0x64/0x580 [ 2588.211038][T20994] kmem_cache_alloc+0xb1/0x3b0 [ 2588.215890][T20994] __anon_vma_prepare+0x64/0x580 [ 2588.220908][T20994] ? __pmd_alloc+0x30c/0x5d0 05:56:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x4802, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2588.225574][T20994] __handle_mm_fault+0x3a8f/0x3e60 [ 2588.230769][T20994] ? vm_iomap_memory+0x190/0x190 [ 2588.235809][T20994] handle_mm_fault+0x2ba/0x9c0 [ 2588.240655][T20994] do_user_addr_fault+0x47e/0x1240 [ 2588.245841][T20994] ? rcu_is_watching+0x12/0xb0 [ 2588.250679][T20994] exc_page_fault+0x98/0x170 [ 2588.255353][T20994] asm_exc_page_fault+0x26/0x30 [ 2588.260277][T20994] RIP: 0033:0x7f493322bde9 [ 2588.264757][T20994] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2588.284526][T20994] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2588.290673][T20994] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2588.298704][T20994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2588.306738][T20994] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2588.314763][T20994] R10: 00007f4932e00068 R11: 0000000000000246 R12: 0000000000277467 [ 2588.322774][T20994] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2588.330914][T20994] [ 2588.335578][T20994] memory: usage 307200kB, limit 307200kB, failcnt 15886 [ 2588.344056][T20994] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2588.352218][T20994] Memory cgroup stats for /syz2: [ 2588.352494][T20994] anon 135168 [ 2588.352494][T20994] file 684032 [ 2588.352494][T20994] kernel 313753600 [ 2588.352494][T20994] kernel_stack 65536 [ 2588.352494][T20994] pagetables 81920 [ 2588.352494][T20994] sec_pagetables 0 05:56:42 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c18f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2588.352494][T20994] percpu 5387328 [ 2588.352494][T20994] sock 0 [ 2588.352494][T20994] vmalloc 8192 [ 2588.352494][T20994] shmem 679936 [ 2588.352494][T20994] zswap 0 [ 2588.352494][T20994] zswapped 0 [ 2588.352494][T20994] file_mapped 630784 [ 2588.352494][T20994] file_dirty 4096 [ 2588.352494][T20994] file_writeback 0 [ 2588.352494][T20994] swapcached 0 [ 2588.352494][T20994] anon_thp 0 [ 2588.352494][T20994] file_thp 0 [ 2588.352494][T20994] shmem_thp 0 [ 2588.352494][T20994] inactive_anon 708608 [ 2588.352494][T20994] active_anon 106496 [ 2588.352494][T20994] inactive_file 0 [ 2588.352494][T20994] active_file 4096 [ 2588.352494][T20994] unevictable 0 [ 2588.352494][T20994] slab_reclaimable 512264 [ 2588.352494][T20994] slab_unreclaimable 307665392 [ 2588.352494][T20994] slab 308177656 [ 2588.352494][T20994] workingset_refault_anon 0 [ 2588.352494][T20994] workingset_refault_file 2 [ 2588.352494][T20994] workingset_activate_anon 0 [ 2588.352494][T20994] workingset_activate_file 0 [ 2588.352494][T20994] workingset_restore_anon 0 [ 2588.352494][T20994] workingset_restore_file 1 [ 2588.352494][T20994] workingset_nodereclaim 0 [ 2588.352494][T20994] pgscan 1960 [ 2588.352494][T20994] pgsteal 131 [ 2588.352494][T20994] pgscan_kswapd 109 [ 2588.352494][T20994] pgscan_direct 1851 [ 2588.352494][T20994] pgscan_khugepaged 0 [ 2588.352494][T20994] pgsteal_kswapd 108 [ 2588.352494][T20994] pgsteal_direct 23 [ 2588.352494][T20994] pgsteal_khugepaged 0 [ 2588.352494][T20994] pgfault 1009974 [ 2588.352494][T20994] pgmajfault 0 [ 2588.352494][T20994] pgrefill 13459 [ 2588.352494][T20994] pgactivate 1806 [ 2588.352494][T20994] pgdeactivate 0 [ 2588.352494][T20994] pglazyfree 0 [ 2588.352494][T20994] pglazyfreed 0 [ 2588.352494][T20994] zswpin 0 [ 2588.352494][T20994] zswpout 0 [ 2588.565970][T21025] wireguard53: entered promiscuous mode 05:56:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x4a01, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2588.579119][T20994] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20994,uid=0 [ 2588.599278][T20994] Memory cgroup out of memory: Killed process 20994 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8928kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:56:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 05:56:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x4c00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x5400, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:42 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c190}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:42 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2588.847580][T21036] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2588.883500][T21046] wireguard53: entered promiscuous mode [ 2588.889816][T21036] CPU: 0 PID: 21036 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2588.900399][T21036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2588.910497][T21036] Call Trace: [ 2588.913799][T21036] [ 2588.916768][T21036] dump_stack_lvl+0x136/0x150 [ 2588.921504][T21036] dump_header+0x10a/0xd70 [ 2588.925991][T21036] oom_kill_process+0x25d/0x600 [ 2588.930892][T21036] out_of_memory+0x35c/0x1660 [ 2588.935890][T21036] ? find_held_lock+0x2d/0x110 [ 2588.940710][T21036] ? oom_killer_disable+0x2b0/0x2b0 [ 2588.945949][T21036] ? rcu_read_unlock+0x9/0x60 [ 2588.950665][T21036] ? find_held_lock+0x2d/0x110 [ 2588.955511][T21036] mem_cgroup_out_of_memory+0x206/0x270 [ 2588.961115][T21036] ? mem_cgroup_margin+0x130/0x130 [ 2588.966270][T21036] ? lock_downgrade+0x690/0x690 [ 2588.971170][T21036] try_charge_memcg+0xf9b/0x13b0 [ 2588.976158][T21036] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2588.982176][T21036] ? rcu_read_unlock+0x9/0x60 [ 2588.986893][T21036] ? lock_downgrade+0x690/0x690 [ 2588.991791][T21036] charge_memcg+0x90/0x3b0 [ 2588.996239][T21036] __mem_cgroup_charge+0x2b/0x90 [ 2589.001212][T21036] do_wp_page+0x8eb/0x3530 [ 2589.005672][T21036] ? lock_release+0x670/0x670 [ 2589.010465][T21036] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2589.015875][T21036] ? do_raw_spin_lock+0x124/0x2b0 [ 2589.021019][T21036] ? spin_bug+0x1c0/0x1c0 [ 2589.025380][T21036] ? lock_downgrade+0x690/0x690 [ 2589.030270][T21036] __handle_mm_fault+0x19a1/0x3e60 [ 2589.035435][T21036] ? vm_iomap_memory+0x190/0x190 [ 2589.040449][T21036] handle_mm_fault+0x2ba/0x9c0 [ 2589.045260][T21036] do_user_addr_fault+0x47e/0x1240 [ 2589.050415][T21036] ? rcu_is_watching+0x12/0xb0 [ 2589.055218][T21036] exc_page_fault+0x98/0x170 [ 2589.059857][T21036] asm_exc_page_fault+0x26/0x30 [ 2589.064739][T21036] RIP: 0033:0x7f4933239610 [ 2589.069176][T21036] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2589.088823][T21036] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 05:56:42 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7402, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2589.094918][T21036] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2589.102915][T21036] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2589.110925][T21036] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2589.119049][T21036] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2589.127074][T21036] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2589.135251][T21036] ? apparmor_socket_create+0xb7/0x670 [ 2589.140786][T21036] [ 2589.147545][T21036] memory: usage 307200kB, limit 307200kB, failcnt 15978 [ 2589.160693][T21036] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2589.167776][T21036] Memory cgroup stats for /syz2: [ 2589.168065][T21036] anon 122880 [ 2589.168065][T21036] file 684032 [ 2589.168065][T21036] kernel 313765888 [ 2589.168065][T21036] kernel_stack 65536 [ 2589.168065][T21036] pagetables 73728 [ 2589.168065][T21036] sec_pagetables 0 [ 2589.168065][T21036] percpu 5387392 [ 2589.168065][T21036] sock 0 [ 2589.168065][T21036] vmalloc 8192 [ 2589.168065][T21036] shmem 679936 [ 2589.168065][T21036] zswap 0 [ 2589.168065][T21036] zswapped 0 [ 2589.168065][T21036] file_mapped 630784 [ 2589.168065][T21036] file_dirty 4096 [ 2589.168065][T21036] file_writeback 0 [ 2589.168065][T21036] swapcached 0 [ 2589.168065][T21036] anon_thp 0 [ 2589.168065][T21036] file_thp 0 [ 2589.168065][T21036] shmem_thp 0 [ 2589.168065][T21036] inactive_anon 708608 [ 2589.168065][T21036] active_anon 94208 [ 2589.168065][T21036] inactive_file 0 [ 2589.168065][T21036] active_file 4096 [ 2589.168065][T21036] unevictable 0 [ 2589.168065][T21036] slab_reclaimable 512264 [ 2589.168065][T21036] slab_unreclaimable 307677304 [ 2589.168065][T21036] slab 308189568 [ 2589.168065][T21036] workingset_refault_anon 0 [ 2589.168065][T21036] workingset_refault_file 2 [ 2589.168065][T21036] workingset_activate_anon 0 [ 2589.168065][T21036] workingset_activate_file 0 [ 2589.168065][T21036] workingset_restore_anon 0 [ 2589.168065][T21036] workingset_restore_file 1 [ 2589.168065][T21036] workingset_nodereclaim 0 [ 2589.168065][T21036] pgscan 1960 [ 2589.168065][T21036] pgsteal 131 [ 2589.168065][T21036] pgscan_kswapd 109 [ 2589.168065][T21036] pgscan_direct 1851 [ 2589.168065][T21036] pgscan_khugepaged 0 [ 2589.168065][T21036] pgsteal_kswapd 108 [ 2589.168065][T21036] pgsteal_direct 23 [ 2589.168065][T21036] pgsteal_khugepaged 0 [ 2589.168065][T21036] pgfault 1010026 [ 2589.168065][T21036] pgmajfault 0 [ 2589.168065][T21036] pgrefill 13510 [ 2589.168065][T21036] pgactivate 1806 [ 2589.168065][T21036] pgdeactivate 0 [ 2589.168065][T21036] pglazyfree 0 [ 2589.168065][T21036] pglazyfreed 0 [ 2589.168065][T21036] zswpin 0 [ 2589.168065][T21036] zswpout 0 [ 2589.366204][T21036] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21036,uid=0 [ 2589.382780][T21036] Memory cgroup out of memory: Killed process 21036 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48070000}, 0x0) [ 2589.405066][T21017] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2589.431694][T21017] CPU: 0 PID: 21017 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2589.442204][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2589.452313][T21017] Call Trace: [ 2589.455629][T21017] [ 2589.458623][T21017] dump_stack_lvl+0x136/0x150 [ 2589.463388][T21017] dump_header+0x10a/0xd70 [ 2589.467908][T21017] oom_kill_process+0x25d/0x600 [ 2589.472842][T21017] out_of_memory+0x35c/0x1660 [ 2589.477589][T21017] ? oom_killer_disable+0x2b0/0x2b0 [ 2589.482837][T21017] ? rcu_read_unlock+0x9/0x60 [ 2589.487589][T21017] ? find_held_lock+0x2d/0x110 [ 2589.492404][T21017] mem_cgroup_out_of_memory+0x206/0x270 [ 2589.498004][T21017] ? mem_cgroup_margin+0x130/0x130 [ 2589.503160][T21017] ? lock_downgrade+0x690/0x690 [ 2589.508086][T21017] try_charge_memcg+0xf9b/0x13b0 [ 2589.513152][T21017] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2589.519170][T21017] ? rcu_read_unlock+0x9/0x60 [ 2589.523910][T21017] ? lock_downgrade+0x690/0x690 [ 2589.528812][T21017] charge_memcg+0x90/0x3b0 [ 2589.533262][T21017] __mem_cgroup_charge+0x2b/0x90 [ 2589.538237][T21017] do_wp_page+0x8eb/0x3530 [ 2589.542698][T21017] ? lock_release+0x670/0x670 [ 2589.547429][T21017] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2589.552845][T21017] ? do_raw_spin_lock+0x124/0x2b0 [ 2589.557936][T21017] ? spin_bug+0x1c0/0x1c0 [ 2589.562310][T21017] ? lock_downgrade+0x690/0x690 [ 2589.567197][T21017] __handle_mm_fault+0x19a1/0x3e60 [ 2589.572356][T21017] ? vm_iomap_memory+0x190/0x190 [ 2589.577357][T21017] handle_mm_fault+0x2ba/0x9c0 [ 2589.582194][T21017] do_user_addr_fault+0x47e/0x1240 [ 2589.587351][T21017] ? rcu_is_watching+0x12/0xb0 [ 2589.592154][T21017] exc_page_fault+0x98/0x170 [ 2589.596954][T21017] asm_exc_page_fault+0x26/0x30 [ 2589.601839][T21017] RIP: 0033:0x7ffae1839610 [ 2589.606297][T21017] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2589.626195][T21017] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2589.632310][T21017] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2589.640392][T21017] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2589.648404][T21017] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 05:56:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x5802, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2589.656422][T21017] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2589.664423][T21017] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2589.672422][T21017] ? __sys_socket+0x7c/0x250 [ 2589.677075][T21017] [ 2589.717220][T21017] memory: usage 307200kB, limit 307200kB, failcnt 27231 [ 2589.724742][T21017] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2589.732608][T21017] Memory cgroup stats for /syz3: [ 2589.732900][T21017] anon 106496 [ 2589.732900][T21017] file 733184 [ 2589.732900][T21017] kernel 313733120 [ 2589.732900][T21017] kernel_stack 65536 [ 2589.732900][T21017] pagetables 69632 [ 2589.732900][T21017] sec_pagetables 0 [ 2589.732900][T21017] percpu 5375488 [ 2589.732900][T21017] sock 0 [ 2589.732900][T21017] vmalloc 8192 [ 2589.732900][T21017] shmem 733184 [ 2589.732900][T21017] zswap 0 [ 2589.732900][T21017] zswapped 0 [ 2589.732900][T21017] file_mapped 667648 [ 2589.732900][T21017] file_dirty 0 [ 2589.732900][T21017] file_writeback 0 [ 2589.732900][T21017] swapcached 0 [ 2589.732900][T21017] anon_thp 0 [ 2589.732900][T21017] file_thp 0 [ 2589.732900][T21017] shmem_thp 0 [ 2589.732900][T21017] inactive_anon 0 [ 2589.732900][T21017] active_anon 839680 [ 2589.732900][T21017] inactive_file 0 [ 2589.732900][T21017] active_file 0 [ 2589.732900][T21017] unevictable 0 [ 2589.732900][T21017] slab_reclaimable 1217464 [ 2589.732900][T21017] slab_unreclaimable 306964000 [ 2589.732900][T21017] slab 308181464 [ 2589.732900][T21017] workingset_refault_anon 0 [ 2589.732900][T21017] workingset_refault_file 130 [ 2589.732900][T21017] workingset_activate_anon 0 [ 2589.732900][T21017] workingset_activate_file 0 [ 2589.732900][T21017] workingset_restore_anon 0 [ 2589.732900][T21017] workingset_restore_file 0 [ 2589.732900][T21017] workingset_nodereclaim 0 [ 2589.732900][T21017] pgscan 3117 [ 2589.732900][T21017] pgsteal 939 [ 2589.732900][T21017] pgscan_kswapd 0 [ 2589.732900][T21017] pgscan_direct 3117 [ 2589.732900][T21017] pgscan_khugepaged 0 [ 2589.732900][T21017] pgsteal_kswapd 0 [ 2589.732900][T21017] pgsteal_direct 939 [ 2589.732900][T21017] pgsteal_khugepaged 0 [ 2589.732900][T21017] pgfault 575581 [ 2589.732900][T21017] pgmajfault 0 [ 2589.732900][T21017] pgrefill 79949 [ 2589.732900][T21017] pgactivate 862 [ 2589.732900][T21017] pgdeactivate 0 [ 2589.732900][T21017] pglazyfree 0 [ 2589.732900][T21017] pglazyfreed 0 [ 2589.732900][T21017] zswpin 0 [ 2589.732900][T21017] zswpout 0 05:56:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x6c000000) 05:56:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x5803, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2589.966686][T21017] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21017,uid=0 [ 2589.984779][T21017] Memory cgroup out of memory: Killed process 21017 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:44 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c191}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2590.097364][T21060] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:56:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x5865, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2590.146792][T21060] CPU: 1 PID: 21060 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2590.157288][T21060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2590.167411][T21060] Call Trace: [ 2590.170738][T21060] [ 2590.173715][T21060] dump_stack_lvl+0x136/0x150 [ 2590.178475][T21060] dump_header+0x10a/0xd70 [ 2590.182970][T21060] oom_kill_process+0x25d/0x600 [ 2590.187894][T21060] out_of_memory+0x35c/0x1660 [ 2590.192651][T21060] ? find_held_lock+0x2d/0x110 [ 2590.197810][T21060] ? oom_killer_disable+0x2b0/0x2b0 [ 2590.203087][T21060] ? rcu_read_unlock+0x9/0x60 [ 2590.207843][T21060] ? find_held_lock+0x2d/0x110 [ 2590.212701][T21060] mem_cgroup_out_of_memory+0x206/0x270 [ 2590.218324][T21060] ? mem_cgroup_margin+0x130/0x130 [ 2590.223512][T21060] ? lock_downgrade+0x690/0x690 [ 2590.228456][T21060] try_charge_memcg+0xf9b/0x13b0 [ 2590.233557][T21060] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2590.239604][T21060] ? rcu_read_unlock+0x9/0x60 [ 2590.244402][T21060] ? lock_downgrade+0x690/0x690 [ 2590.249330][T21060] charge_memcg+0x90/0x3b0 [ 2590.253808][T21060] __mem_cgroup_charge+0x2b/0x90 [ 2590.258817][T21060] do_wp_page+0x8eb/0x3530 [ 2590.263280][T21060] ? lock_release+0x670/0x670 [ 2590.268001][T21060] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2590.273443][T21060] ? do_raw_spin_lock+0x124/0x2b0 [ 2590.278656][T21060] ? spin_bug+0x1c0/0x1c0 [ 2590.283039][T21060] ? lock_downgrade+0x690/0x690 [ 2590.287955][T21060] __handle_mm_fault+0x19a1/0x3e60 [ 2590.293130][T21060] ? vm_iomap_memory+0x190/0x190 [ 2590.298173][T21060] handle_mm_fault+0x2ba/0x9c0 [ 2590.303015][T21060] do_user_addr_fault+0x47e/0x1240 [ 2590.308185][T21060] ? rcu_is_watching+0x12/0xb0 [ 2590.312984][T21060] exc_page_fault+0x98/0x170 [ 2590.317614][T21060] asm_exc_page_fault+0x26/0x30 [ 2590.322502][T21060] RIP: 0033:0x7f4933239610 [ 2590.326966][T21060] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2590.346626][T21060] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2590.352853][T21060] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2590.360870][T21060] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2590.368865][T21060] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2590.376863][T21060] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2590.384859][T21060] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2590.392872][T21060] ? apparmor_socket_create+0xb7/0x670 [ 2590.398434][T21060] [ 2590.405432][T21060] memory: usage 307200kB, limit 307200kB, failcnt 16071 [ 2590.412546][T21060] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2590.420363][T21060] Memory cgroup stats for /syz2: [ 2590.420663][T21060] anon 122880 [ 2590.420663][T21060] file 684032 [ 2590.420663][T21060] kernel 313765888 [ 2590.420663][T21060] kernel_stack 65536 [ 2590.420663][T21060] pagetables 73728 [ 2590.420663][T21060] sec_pagetables 0 [ 2590.420663][T21060] percpu 5387392 [ 2590.420663][T21060] sock 0 [ 2590.420663][T21060] vmalloc 8192 [ 2590.420663][T21060] shmem 679936 [ 2590.420663][T21060] zswap 0 [ 2590.420663][T21060] zswapped 0 [ 2590.420663][T21060] file_mapped 630784 [ 2590.420663][T21060] file_dirty 4096 [ 2590.420663][T21060] file_writeback 0 [ 2590.420663][T21060] swapcached 0 [ 2590.420663][T21060] anon_thp 0 [ 2590.420663][T21060] file_thp 0 [ 2590.420663][T21060] shmem_thp 0 [ 2590.420663][T21060] inactive_anon 0 [ 2590.420663][T21060] active_anon 802816 [ 2590.420663][T21060] inactive_file 0 [ 2590.420663][T21060] active_file 4096 [ 2590.420663][T21060] unevictable 0 [ 2590.420663][T21060] slab_reclaimable 512264 [ 2590.420663][T21060] slab_unreclaimable 307677304 [ 2590.420663][T21060] slab 308189568 [ 2590.420663][T21060] workingset_refault_anon 0 [ 2590.420663][T21060] workingset_refault_file 2 [ 2590.420663][T21060] workingset_activate_anon 0 [ 2590.420663][T21060] workingset_activate_file 0 [ 2590.420663][T21060] workingset_restore_anon 0 [ 2590.420663][T21060] workingset_restore_file 1 [ 2590.420663][T21060] workingset_nodereclaim 0 [ 2590.420663][T21060] pgscan 1960 [ 2590.420663][T21060] pgsteal 131 [ 2590.420663][T21060] pgscan_kswapd 109 [ 2590.420663][T21060] pgscan_direct 1851 [ 2590.420663][T21060] pgscan_khugepaged 0 [ 2590.420663][T21060] pgsteal_kswapd 108 [ 2590.420663][T21060] pgsteal_direct 23 [ 2590.420663][T21060] pgsteal_khugepaged 0 [ 2590.420663][T21060] pgfault 1010078 [ 2590.420663][T21060] pgmajfault 0 [ 2590.420663][T21060] pgrefill 13572 [ 2590.420663][T21060] pgactivate 1806 [ 2590.420663][T21060] pgdeactivate 0 [ 2590.420663][T21060] pglazyfree 0 05:56:44 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2590.420663][T21060] pglazyfreed 0 [ 2590.420663][T21060] zswpin 0 [ 2590.420663][T21060] zswpout 0 [ 2590.421616][T21079] wireguard53: entered promiscuous mode [ 2590.425706][T21060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21060,uid=0 [ 2590.631258][T21060] Memory cgroup out of memory: Killed process 21060 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a000000}, 0x0) 05:56:44 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7403, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2590.722198][T21076] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2590.764690][T21076] CPU: 1 PID: 21076 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2590.775200][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2590.785342][T21076] Call Trace: [ 2590.788675][T21076] [ 2590.791647][T21076] dump_stack_lvl+0x136/0x150 [ 2590.796422][T21076] dump_header+0x10a/0xd70 [ 2590.800942][T21076] oom_kill_process+0x25d/0x600 [ 2590.805877][T21076] out_of_memory+0x35c/0x1660 [ 2590.810639][T21076] ? find_held_lock+0x2d/0x110 [ 2590.815491][T21076] ? oom_killer_disable+0x2b0/0x2b0 [ 2590.820765][T21076] ? rcu_read_unlock+0x9/0x60 [ 2590.825615][T21076] ? find_held_lock+0x2d/0x110 [ 2590.830480][T21076] mem_cgroup_out_of_memory+0x206/0x270 [ 2590.836125][T21076] ? mem_cgroup_margin+0x130/0x130 [ 2590.841328][T21076] ? lock_downgrade+0x690/0x690 [ 2590.846275][T21076] try_charge_memcg+0xf9b/0x13b0 [ 2590.851289][T21076] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2590.857348][T21076] ? rcu_read_unlock+0x9/0x60 [ 2590.862113][T21076] ? lock_downgrade+0x690/0x690 [ 2590.867039][T21076] charge_memcg+0x90/0x3b0 [ 2590.871496][T21076] __mem_cgroup_charge+0x2b/0x90 [ 2590.876469][T21076] do_wp_page+0x8eb/0x3530 [ 2590.880953][T21076] ? lock_release+0x670/0x670 [ 2590.886009][T21076] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2590.891421][T21076] ? do_raw_spin_lock+0x124/0x2b0 [ 2590.896492][T21076] ? spin_bug+0x1c0/0x1c0 [ 2590.900939][T21076] ? lock_downgrade+0x690/0x690 [ 2590.905839][T21076] __handle_mm_fault+0x19a1/0x3e60 [ 2590.911001][T21076] ? vm_iomap_memory+0x190/0x190 [ 2590.916000][T21076] handle_mm_fault+0x2ba/0x9c0 [ 2590.920855][T21076] do_user_addr_fault+0x47e/0x1240 [ 2590.926031][T21076] ? rcu_is_watching+0x12/0xb0 [ 2590.931024][T21076] exc_page_fault+0x98/0x170 [ 2590.935665][T21076] asm_exc_page_fault+0x26/0x30 [ 2590.940567][T21076] RIP: 0033:0x7ffae1839610 [ 2590.945005][T21076] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2590.964642][T21076] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2590.970755][T21076] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2590.978750][T21076] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2590.986748][T21076] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2590.994832][T21076] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2591.002914][T21076] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2591.010909][T21076] ? __sys_socket+0x7c/0x250 05:56:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x5baa, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2591.015545][T21076] [ 2591.041079][T21076] memory: usage 307200kB, limit 307200kB, failcnt 27340 [ 2591.067269][T21076] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2591.083892][T21076] Memory cgroup stats for /syz3: [ 2591.084339][T21076] anon 106496 [ 2591.084339][T21076] file 733184 [ 2591.084339][T21076] kernel 313733120 [ 2591.084339][T21076] kernel_stack 65536 [ 2591.084339][T21076] pagetables 69632 [ 2591.084339][T21076] sec_pagetables 0 [ 2591.084339][T21076] percpu 5375488 [ 2591.084339][T21076] sock 0 [ 2591.084339][T21076] vmalloc 8192 [ 2591.084339][T21076] shmem 733184 [ 2591.084339][T21076] zswap 0 [ 2591.084339][T21076] zswapped 0 [ 2591.084339][T21076] file_mapped 667648 [ 2591.084339][T21076] file_dirty 0 [ 2591.084339][T21076] file_writeback 0 [ 2591.084339][T21076] swapcached 0 [ 2591.084339][T21076] anon_thp 0 [ 2591.084339][T21076] file_thp 0 [ 2591.084339][T21076] shmem_thp 0 [ 2591.084339][T21076] inactive_anon 0 [ 2591.084339][T21076] active_anon 839680 [ 2591.084339][T21076] inactive_file 0 [ 2591.084339][T21076] active_file 0 [ 2591.084339][T21076] unevictable 0 [ 2591.084339][T21076] slab_reclaimable 1217464 [ 2591.084339][T21076] slab_unreclaimable 306964000 [ 2591.084339][T21076] slab 308181464 [ 2591.084339][T21076] workingset_refault_anon 0 [ 2591.084339][T21076] workingset_refault_file 130 [ 2591.084339][T21076] workingset_activate_anon 0 [ 2591.084339][T21076] workingset_activate_file 0 [ 2591.084339][T21076] workingset_restore_anon 0 [ 2591.084339][T21076] workingset_restore_file 0 [ 2591.084339][T21076] workingset_nodereclaim 0 [ 2591.084339][T21076] pgscan 3117 [ 2591.084339][T21076] pgsteal 939 [ 2591.084339][T21076] pgscan_kswapd 0 [ 2591.084339][T21076] pgscan_direct 3117 [ 2591.084339][T21076] pgscan_khugepaged 0 [ 2591.084339][T21076] pgsteal_kswapd 0 [ 2591.084339][T21076] pgsteal_direct 939 [ 2591.084339][T21076] pgsteal_khugepaged 0 05:56:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x6000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2591.084339][T21076] pgfault 575625 [ 2591.084339][T21076] pgmajfault 0 [ 2591.084339][T21076] pgrefill 79949 [ 2591.084339][T21076] pgactivate 862 [ 2591.084339][T21076] pgdeactivate 0 [ 2591.084339][T21076] pglazyfree 0 [ 2591.084339][T21076] pglazyfreed 0 [ 2591.084339][T21076] zswpin 0 [ 2591.084339][T21076] zswpout 0 [ 2591.276309][T21076] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21076,uid=0 05:56:45 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c192}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x6203, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2591.314715][T21076] Memory cgroup out of memory: Killed process 21076 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:45 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x74000000) [ 2591.375928][T21108] wireguard53: entered promiscuous mode [ 2591.450557][T21094] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2591.477170][T21094] CPU: 1 PID: 21094 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2591.487850][T21094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 05:56:45 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7600, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2591.497962][T21094] Call Trace: [ 2591.501313][T21094] [ 2591.504294][T21094] dump_stack_lvl+0x136/0x150 [ 2591.509225][T21094] dump_header+0x10a/0xd70 [ 2591.513747][T21094] oom_kill_process+0x25d/0x600 [ 2591.518680][T21094] out_of_memory+0x35c/0x1660 [ 2591.523449][T21094] ? find_held_lock+0x2d/0x110 [ 2591.528316][T21094] ? oom_killer_disable+0x2b0/0x2b0 [ 2591.533587][T21094] ? rcu_read_unlock+0x9/0x60 [ 2591.538310][T21094] ? find_held_lock+0x2d/0x110 [ 2591.543129][T21094] mem_cgroup_out_of_memory+0x206/0x270 [ 2591.548723][T21094] ? mem_cgroup_margin+0x130/0x130 [ 2591.553883][T21094] ? lock_downgrade+0x690/0x690 [ 2591.558782][T21094] try_charge_memcg+0xf9b/0x13b0 [ 2591.563761][T21094] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2591.569780][T21094] ? rcu_read_unlock+0x9/0x60 [ 2591.574501][T21094] ? lock_downgrade+0x690/0x690 [ 2591.579485][T21094] charge_memcg+0x90/0x3b0 [ 2591.584030][T21094] __mem_cgroup_charge+0x2b/0x90 [ 2591.589007][T21094] do_wp_page+0x8eb/0x3530 [ 2591.593495][T21094] ? lock_release+0x670/0x670 [ 2591.598206][T21094] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2591.603622][T21094] ? do_raw_spin_lock+0x124/0x2b0 [ 2591.608690][T21094] ? spin_bug+0x1c0/0x1c0 [ 2591.613056][T21094] ? lock_downgrade+0x690/0x690 [ 2591.617960][T21094] __handle_mm_fault+0x19a1/0x3e60 [ 2591.623118][T21094] ? vm_iomap_memory+0x190/0x190 [ 2591.628121][T21094] handle_mm_fault+0x2ba/0x9c0 [ 2591.632934][T21094] do_user_addr_fault+0x47e/0x1240 [ 2591.638088][T21094] ? rcu_is_watching+0x12/0xb0 [ 2591.642895][T21094] exc_page_fault+0x98/0x170 [ 2591.647535][T21094] asm_exc_page_fault+0x26/0x30 [ 2591.652563][T21094] RIP: 0033:0x7f4933239610 [ 2591.657004][T21094] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2591.676647][T21094] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2591.682913][T21094] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2591.690996][T21094] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2591.698986][T21094] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2591.706980][T21094] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2591.714978][T21094] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2591.722976][T21094] ? apparmor_socket_create+0x13c/0x670 [ 2591.728605][T21094] [ 2591.745436][T21094] memory: usage 307188kB, limit 307200kB, failcnt 16155 [ 2591.765291][T21094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2591.772732][T21094] Memory cgroup stats for /syz2: [ 2591.773021][T21094] anon 126976 [ 2591.773021][T21094] file 684032 [ 2591.773021][T21094] kernel 313745408 [ 2591.773021][T21094] kernel_stack 65536 [ 2591.773021][T21094] pagetables 73728 [ 2591.773021][T21094] sec_pagetables 0 [ 2591.773021][T21094] percpu 5387328 [ 2591.773021][T21094] sock 0 [ 2591.773021][T21094] vmalloc 8192 [ 2591.773021][T21094] shmem 679936 [ 2591.773021][T21094] zswap 0 [ 2591.773021][T21094] zswapped 0 [ 2591.773021][T21094] file_mapped 630784 [ 2591.773021][T21094] file_dirty 4096 [ 2591.773021][T21094] file_writeback 0 [ 2591.773021][T21094] swapcached 0 [ 2591.773021][T21094] anon_thp 0 [ 2591.773021][T21094] file_thp 0 [ 2591.773021][T21094] shmem_thp 0 [ 2591.773021][T21094] inactive_anon 0 [ 2591.773021][T21094] active_anon 806912 [ 2591.773021][T21094] inactive_file 0 [ 2591.773021][T21094] active_file 4096 [ 2591.773021][T21094] unevictable 0 [ 2591.773021][T21094] slab_reclaimable 512264 [ 2591.773021][T21094] slab_unreclaimable 307665392 [ 2591.773021][T21094] slab 308177656 [ 2591.773021][T21094] workingset_refault_anon 0 [ 2591.773021][T21094] workingset_refault_file 2 [ 2591.773021][T21094] workingset_activate_anon 0 [ 2591.773021][T21094] workingset_activate_file 0 [ 2591.773021][T21094] workingset_restore_anon 0 [ 2591.773021][T21094] workingset_restore_file 1 [ 2591.773021][T21094] workingset_nodereclaim 0 [ 2591.773021][T21094] pgscan 1960 [ 2591.773021][T21094] pgsteal 131 [ 2591.773021][T21094] pgscan_kswapd 109 [ 2591.773021][T21094] pgscan_direct 1851 [ 2591.773021][T21094] pgscan_khugepaged 0 [ 2591.773021][T21094] pgsteal_kswapd 108 [ 2591.773021][T21094] pgsteal_direct 23 [ 2591.773021][T21094] pgsteal_khugepaged 0 [ 2591.773021][T21094] pgfault 1010135 [ 2591.773021][T21094] pgmajfault 0 [ 2591.773021][T21094] pgrefill 13653 [ 2591.773021][T21094] pgactivate 1806 [ 2591.773021][T21094] pgdeactivate 0 [ 2591.773021][T21094] pglazyfree 0 05:56:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x6558, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2591.773021][T21094] pglazyfreed 0 [ 2591.773021][T21094] zswpin 0 [ 2591.773021][T21094] zswpout 0 [ 2591.986637][T21094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21094,uid=0 [ 2592.011979][T21094] Memory cgroup out of memory: Killed process 21094 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x6800, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a030000}, 0x0) 05:56:46 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c193}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2592.180475][T21133] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2592.193044][T21133] CPU: 1 PID: 21133 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2592.203541][T21133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2592.213626][T21133] Call Trace: [ 2592.216924][T21133] [ 2592.219875][T21133] dump_stack_lvl+0x136/0x150 [ 2592.224598][T21133] dump_header+0x10a/0xd70 [ 2592.229057][T21133] oom_kill_process+0x25d/0x600 [ 2592.233951][T21133] out_of_memory+0x35c/0x1660 [ 2592.238673][T21133] ? find_held_lock+0x2d/0x110 [ 2592.243506][T21133] ? oom_killer_disable+0x2b0/0x2b0 [ 2592.248756][T21133] ? rcu_read_unlock+0x9/0x60 [ 2592.253560][T21133] ? find_held_lock+0x2d/0x110 [ 2592.258375][T21133] mem_cgroup_out_of_memory+0x206/0x270 [ 2592.263974][T21133] ? mem_cgroup_margin+0x130/0x130 [ 2592.269216][T21133] ? lock_downgrade+0x690/0x690 [ 2592.274112][T21133] try_charge_memcg+0xf9b/0x13b0 [ 2592.279094][T21133] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2592.285117][T21133] ? rcu_read_unlock+0x9/0x60 [ 2592.289840][T21133] ? lock_downgrade+0x690/0x690 [ 2592.294743][T21133] charge_memcg+0x90/0x3b0 [ 2592.299216][T21133] __mem_cgroup_charge+0x2b/0x90 [ 2592.304191][T21133] do_wp_page+0x8eb/0x3530 [ 2592.308903][T21133] ? lock_release+0x670/0x670 [ 2592.313611][T21133] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2592.319043][T21133] ? do_raw_spin_lock+0x124/0x2b0 [ 2592.324129][T21133] ? spin_bug+0x1c0/0x1c0 [ 2592.328499][T21133] ? lock_downgrade+0x690/0x690 [ 2592.333413][T21133] __handle_mm_fault+0x19a1/0x3e60 [ 2592.338582][T21133] ? vm_iomap_memory+0x190/0x190 [ 2592.343670][T21133] handle_mm_fault+0x2ba/0x9c0 [ 2592.348522][T21133] do_user_addr_fault+0x47e/0x1240 [ 2592.353764][T21133] ? rcu_is_watching+0x12/0xb0 [ 2592.358656][T21133] exc_page_fault+0x98/0x170 [ 2592.363353][T21133] asm_exc_page_fault+0x26/0x30 [ 2592.368236][T21133] RIP: 0033:0x7f4933239610 [ 2592.372797][T21133] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2592.392697][T21133] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2592.398878][T21133] RAX: 0000000001d40e8b RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2592.407137][T21133] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000c7ec73d [ 2592.415141][T21133] RBP: 0000000001d40e8b R08: 0000000000000e8b R09: 0000000001d40e8f [ 2592.423140][T21133] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2592.431137][T21133] R13: 0000000000000001 R14: 0000000000000004 R15: ffffffff87fd5456 [ 2592.439399][T21133] ? __sock_create+0x46/0x850 [ 2592.444138][T21133] [ 2592.466492][T21133] memory: usage 307188kB, limit 307200kB, failcnt 16230 05:56:46 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x6c00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2592.476941][T21133] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2592.485932][T21133] Memory cgroup stats for /syz2: [ 2592.491409][T21133] anon 114688 [ 2592.491409][T21133] file 684032 [ 2592.491409][T21133] kernel 313761792 [ 2592.491409][T21133] kernel_stack 65536 [ 2592.491409][T21133] pagetables 73728 [ 2592.491409][T21133] sec_pagetables 0 [ 2592.491409][T21133] percpu 5387392 [ 2592.491409][T21133] sock 0 [ 2592.491409][T21133] vmalloc 8192 [ 2592.491409][T21133] shmem 679936 [ 2592.491409][T21133] zswap 0 [ 2592.491409][T21133] zswapped 0 [ 2592.491409][T21133] file_mapped 630784 [ 2592.491409][T21133] file_dirty 4096 [ 2592.491409][T21133] file_writeback 0 [ 2592.491409][T21133] swapcached 0 [ 2592.491409][T21133] anon_thp 0 [ 2592.491409][T21133] file_thp 0 [ 2592.491409][T21133] shmem_thp 0 [ 2592.491409][T21133] inactive_anon 708608 [ 2592.491409][T21133] active_anon 86016 [ 2592.491409][T21133] inactive_file 0 [ 2592.491409][T21133] active_file 4096 [ 2592.491409][T21133] unevictable 0 [ 2592.491409][T21133] slab_reclaimable 512264 [ 2592.491409][T21133] slab_unreclaimable 307677304 [ 2592.491409][T21133] slab 308189568 [ 2592.491409][T21133] workingset_refault_anon 0 [ 2592.491409][T21133] workingset_refault_file 2 [ 2592.491409][T21133] workingset_activate_anon 0 [ 2592.491409][T21133] workingset_activate_file 0 [ 2592.491409][T21133] workingset_restore_anon 0 [ 2592.491409][T21133] workingset_restore_file 1 [ 2592.491409][T21133] workingset_nodereclaim 0 [ 2592.491409][T21133] pgscan 1960 [ 2592.491409][T21133] pgsteal 131 [ 2592.491409][T21133] pgscan_kswapd 109 [ 2592.491409][T21133] pgscan_direct 1851 [ 2592.491409][T21133] pgscan_khugepaged 0 [ 2592.491409][T21133] pgsteal_kswapd 108 [ 2592.491409][T21133] pgsteal_direct 23 [ 2592.491409][T21133] pgsteal_khugepaged 0 [ 2592.491409][T21133] pgfault 1010183 [ 2592.491409][T21133] pgmajfault 0 [ 2592.491409][T21133] pgrefill 13695 [ 2592.491409][T21133] pgactivate 1806 [ 2592.491409][T21133] pgdeactivate 0 [ 2592.491409][T21133] pglazyfree 0 [ 2592.491409][T21133] pglazyfreed 0 [ 2592.491409][T21133] zswpin 0 [ 2592.491409][T21133] zswpout 0 05:56:46 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7602, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2592.692739][T21133] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21133,uid=0 [ 2592.723616][T21133] Memory cgroup out of memory: Killed process 21133 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2592.741585][T21144] wireguard53: entered promiscuous mode [ 2592.757173][T21118] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2592.767924][T21118] CPU: 0 PID: 21118 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2592.778448][T21118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2592.788597][T21118] Call Trace: [ 2592.791929][T21118] [ 2592.794893][T21118] dump_stack_lvl+0x136/0x150 [ 2592.799646][T21118] dump_header+0x10a/0xd70 [ 2592.804138][T21118] oom_kill_process+0x25d/0x600 [ 2592.809072][T21118] out_of_memory+0x35c/0x1660 [ 2592.813835][T21118] ? oom_killer_disable+0x2b0/0x2b0 [ 2592.819108][T21118] ? rcu_read_unlock+0x9/0x60 [ 2592.823863][T21118] ? find_held_lock+0x2d/0x110 [ 2592.828888][T21118] mem_cgroup_out_of_memory+0x206/0x270 [ 2592.834514][T21118] ? mem_cgroup_margin+0x130/0x130 [ 2592.839684][T21118] ? lock_downgrade+0x690/0x690 [ 2592.844766][T21118] try_charge_memcg+0xf9b/0x13b0 [ 2592.849752][T21118] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2592.855817][T21118] ? rcu_read_unlock+0x9/0x60 [ 2592.860550][T21118] ? lock_downgrade+0x690/0x690 [ 2592.865450][T21118] charge_memcg+0x90/0x3b0 [ 2592.870422][T21118] __mem_cgroup_charge+0x2b/0x90 [ 2592.875391][T21118] do_wp_page+0x8eb/0x3530 [ 2592.879857][T21118] ? lock_release+0x670/0x670 [ 2592.884566][T21118] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2592.890080][T21118] ? do_raw_spin_lock+0x124/0x2b0 [ 2592.895166][T21118] ? spin_bug+0x1c0/0x1c0 [ 2592.899530][T21118] ? lock_downgrade+0x690/0x690 [ 2592.904606][T21118] __handle_mm_fault+0x19a1/0x3e60 [ 2592.909850][T21118] ? vm_iomap_memory+0x190/0x190 [ 2592.914860][T21118] handle_mm_fault+0x2ba/0x9c0 [ 2592.919843][T21118] do_user_addr_fault+0x47e/0x1240 [ 2592.924998][T21118] ? rcu_is_watching+0x12/0xb0 [ 2592.929802][T21118] exc_page_fault+0x98/0x170 [ 2592.934444][T21118] asm_exc_page_fault+0x26/0x30 [ 2592.939326][T21118] RIP: 0033:0x7ffae1839610 [ 2592.943780][T21118] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2592.963423][T21118] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2592.969526][T21118] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2592.977528][T21118] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2592.985531][T21118] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 05:56:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) [ 2592.993534][T21118] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2593.001534][T21118] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2593.009544][T21118] ? __sys_socket+0x7c/0x250 [ 2593.014189][T21118] [ 2593.036468][T21118] memory: usage 307200kB, limit 307200kB, failcnt 27475 [ 2593.044270][T21118] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2593.052002][T21118] Memory cgroup stats for /syz3: [ 2593.052289][T21118] anon 106496 [ 2593.052289][T21118] file 733184 [ 2593.052289][T21118] kernel 313733120 [ 2593.052289][T21118] kernel_stack 65536 [ 2593.052289][T21118] pagetables 69632 [ 2593.052289][T21118] sec_pagetables 0 [ 2593.052289][T21118] percpu 5375488 [ 2593.052289][T21118] sock 0 05:56:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2593.052289][T21118] vmalloc 8192 [ 2593.052289][T21118] shmem 733184 [ 2593.052289][T21118] zswap 0 [ 2593.052289][T21118] zswapped 0 [ 2593.052289][T21118] file_mapped 667648 [ 2593.052289][T21118] file_dirty 0 [ 2593.052289][T21118] file_writeback 0 [ 2593.052289][T21118] swapcached 0 [ 2593.052289][T21118] anon_thp 0 [ 2593.052289][T21118] file_thp 0 [ 2593.052289][T21118] shmem_thp 0 [ 2593.052289][T21118] inactive_anon 0 [ 2593.052289][T21118] active_anon 839680 [ 2593.052289][T21118] inactive_file 0 [ 2593.052289][T21118] active_file 0 [ 2593.052289][T21118] unevictable 0 [ 2593.052289][T21118] slab_reclaimable 1217464 [ 2593.052289][T21118] slab_unreclaimable 306964000 [ 2593.052289][T21118] slab 308181464 [ 2593.052289][T21118] workingset_refault_anon 0 [ 2593.052289][T21118] workingset_refault_file 130 [ 2593.052289][T21118] workingset_activate_anon 0 [ 2593.052289][T21118] workingset_activate_file 0 [ 2593.052289][T21118] workingset_restore_anon 0 [ 2593.052289][T21118] workingset_restore_file 0 [ 2593.052289][T21118] workingset_nodereclaim 0 [ 2593.052289][T21118] pgscan 3117 [ 2593.052289][T21118] pgsteal 939 [ 2593.052289][T21118] pgscan_kswapd 0 [ 2593.052289][T21118] pgscan_direct 3117 [ 2593.052289][T21118] pgscan_khugepaged 0 [ 2593.052289][T21118] pgsteal_kswapd 0 [ 2593.052289][T21118] pgsteal_direct 939 [ 2593.052289][T21118] pgsteal_khugepaged 0 [ 2593.052289][T21118] pgfault 575669 [ 2593.052289][T21118] pgmajfault 0 [ 2593.052289][T21118] pgrefill 79949 [ 2593.052289][T21118] pgactivate 862 [ 2593.052289][T21118] pgdeactivate 0 [ 2593.052289][T21118] pglazyfree 0 [ 2593.052289][T21118] pglazyfreed 0 [ 2593.052289][T21118] zswpin 0 [ 2593.052289][T21118] zswpout 0 [ 2593.248113][T21118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21118,uid=0 [ 2593.273357][T21118] Memory cgroup out of memory: Killed process 21118 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7001, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x74010000) [ 2593.355979][T21161] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2593.390207][T21161] CPU: 0 PID: 21161 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2593.400719][T21161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2593.410839][T21161] Call Trace: [ 2593.414161][T21161] [ 2593.417137][T21161] dump_stack_lvl+0x136/0x150 [ 2593.421909][T21161] dump_header+0x10a/0xd70 [ 2593.426416][T21161] oom_kill_process+0x25d/0x600 [ 2593.431347][T21161] out_of_memory+0x35c/0x1660 [ 2593.436198][T21161] ? find_held_lock+0x2d/0x110 [ 2593.441050][T21161] ? oom_killer_disable+0x2b0/0x2b0 [ 2593.446353][T21161] ? rcu_read_unlock+0x9/0x60 [ 2593.451099][T21161] ? find_held_lock+0x2d/0x110 05:56:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7002, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2593.455951][T21161] mem_cgroup_out_of_memory+0x206/0x270 [ 2593.461579][T21161] ? mem_cgroup_margin+0x130/0x130 [ 2593.466771][T21161] ? lock_downgrade+0x690/0x690 [ 2593.471686][T21161] try_charge_memcg+0xf9b/0x13b0 [ 2593.476695][T21161] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2593.482753][T21161] ? rcu_read_unlock+0x9/0x60 [ 2593.487505][T21161] ? lock_downgrade+0x690/0x690 [ 2593.492436][T21161] charge_memcg+0x90/0x3b0 [ 2593.496913][T21161] __mem_cgroup_charge+0x2b/0x90 [ 2593.501916][T21161] do_wp_page+0x8eb/0x3530 [ 2593.506419][T21161] ? lock_release+0x670/0x670 [ 2593.511255][T21161] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2593.516719][T21161] ? do_raw_spin_lock+0x124/0x2b0 [ 2593.521817][T21161] ? spin_bug+0x1c0/0x1c0 [ 2593.526211][T21161] ? lock_downgrade+0x690/0x690 [ 2593.531157][T21161] __handle_mm_fault+0x19a1/0x3e60 [ 2593.536372][T21161] ? vm_iomap_memory+0x190/0x190 [ 2593.541414][T21161] handle_mm_fault+0x2ba/0x9c0 [ 2593.546251][T21161] do_user_addr_fault+0x47e/0x1240 [ 2593.551435][T21161] ? rcu_is_watching+0x12/0xb0 05:56:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7003, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2593.556274][T21161] exc_page_fault+0x98/0x170 [ 2593.560951][T21161] asm_exc_page_fault+0x26/0x30 [ 2593.565863][T21161] RIP: 0033:0x7f4933239610 [ 2593.570334][T21161] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2593.590023][T21161] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2593.596154][T21161] RAX: 00000000d65cb852 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2593.604276][T21161] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a275848 [ 2593.612313][T21161] RBP: 00000000d65cb852 R08: 0000000000001852 R09: 00000000d65cb856 [ 2593.620614][T21161] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2593.628646][T21161] R13: 0000000000000001 R14: 000000000000000b R15: ffffffff83d4a937 [ 2593.636679][T21161] ? apparmor_socket_create+0xb7/0x670 [ 2593.642252][T21161] 05:56:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7200, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:47 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:47 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c194}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2593.662883][T21161] memory: usage 307200kB, limit 307200kB, failcnt 16343 [ 2593.707463][T21161] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2593.720417][T21161] Memory cgroup stats for /syz2: [ 2593.720700][T21161] anon 122880 [ 2593.720700][T21161] file 684032 [ 2593.720700][T21161] kernel 313765888 [ 2593.720700][T21161] kernel_stack 65536 [ 2593.720700][T21161] pagetables 73728 [ 2593.720700][T21161] sec_pagetables 0 [ 2593.720700][T21161] percpu 5387392 [ 2593.720700][T21161] sock 0 [ 2593.720700][T21161] vmalloc 8192 [ 2593.720700][T21161] shmem 679936 [ 2593.720700][T21161] zswap 0 [ 2593.720700][T21161] zswapped 0 [ 2593.720700][T21161] file_mapped 630784 [ 2593.720700][T21161] file_dirty 4096 [ 2593.720700][T21161] file_writeback 0 [ 2593.720700][T21161] swapcached 0 [ 2593.720700][T21161] anon_thp 0 [ 2593.720700][T21161] file_thp 0 [ 2593.720700][T21161] shmem_thp 0 [ 2593.720700][T21161] inactive_anon 708608 [ 2593.720700][T21161] active_anon 94208 [ 2593.720700][T21161] inactive_file 0 [ 2593.720700][T21161] active_file 4096 [ 2593.720700][T21161] unevictable 0 [ 2593.720700][T21161] slab_reclaimable 512264 [ 2593.720700][T21161] slab_unreclaimable 307677304 [ 2593.720700][T21161] slab 308189568 [ 2593.720700][T21161] workingset_refault_anon 0 [ 2593.720700][T21161] workingset_refault_file 2 [ 2593.720700][T21161] workingset_activate_anon 0 [ 2593.720700][T21161] workingset_activate_file 0 [ 2593.720700][T21161] workingset_restore_anon 0 [ 2593.720700][T21161] workingset_restore_file 1 [ 2593.720700][T21161] workingset_nodereclaim 0 [ 2593.720700][T21161] pgscan 1960 [ 2593.720700][T21161] pgsteal 131 05:56:47 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7603, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2593.720700][T21161] pgscan_kswapd 109 [ 2593.720700][T21161] pgscan_direct 1851 [ 2593.720700][T21161] pgscan_khugepaged 0 [ 2593.720700][T21161] pgsteal_kswapd 108 [ 2593.720700][T21161] pgsteal_direct 23 [ 2593.720700][T21161] pgsteal_khugepaged 0 [ 2593.720700][T21161] pgfault 1010235 [ 2593.720700][T21161] pgmajfault 0 [ 2593.720700][T21161] pgrefill 13770 [ 2593.720700][T21161] pgactivate 1806 [ 2593.720700][T21161] pgdeactivate 0 [ 2593.720700][T21161] pglazyfree 0 [ 2593.720700][T21161] pglazyfreed 0 [ 2593.720700][T21161] zswpin 0 [ 2593.720700][T21161] zswpout 0 05:56:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7201, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2593.924481][T21161] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21161,uid=0 05:56:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4e000000}, 0x0) [ 2593.972188][T21161] Memory cgroup out of memory: Killed process 21161 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2594.017860][T21188] wireguard53: entered promiscuous mode [ 2594.058276][T21170] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2594.114784][T21170] CPU: 0 PID: 21170 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2594.125290][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2594.135392][T21170] Call Trace: [ 2594.138709][T21170] [ 2594.141672][T21170] dump_stack_lvl+0x136/0x150 [ 2594.146410][T21170] dump_header+0x10a/0xd70 [ 2594.150967][T21170] oom_kill_process+0x25d/0x600 [ 2594.155979][T21170] out_of_memory+0x35c/0x1660 [ 2594.160696][T21170] ? find_held_lock+0x2d/0x110 [ 2594.165534][T21170] ? oom_killer_disable+0x2b0/0x2b0 [ 2594.170763][T21170] ? rcu_read_unlock+0x9/0x60 [ 2594.175482][T21170] ? find_held_lock+0x2d/0x110 [ 2594.180318][T21170] mem_cgroup_out_of_memory+0x206/0x270 [ 2594.185929][T21170] ? mem_cgroup_margin+0x130/0x130 [ 2594.191081][T21170] ? lock_downgrade+0x690/0x690 [ 2594.196027][T21170] try_charge_memcg+0xf9b/0x13b0 [ 2594.201002][T21170] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2594.207040][T21170] ? rcu_read_unlock+0x9/0x60 [ 2594.211779][T21170] ? lock_downgrade+0x690/0x690 [ 2594.216671][T21170] charge_memcg+0x90/0x3b0 [ 2594.221237][T21170] __mem_cgroup_charge+0x2b/0x90 [ 2594.226216][T21170] do_wp_page+0x8eb/0x3530 [ 2594.230727][T21170] ? lock_release+0x670/0x670 [ 2594.235450][T21170] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2594.240869][T21170] ? do_raw_spin_lock+0x124/0x2b0 [ 2594.245943][T21170] ? spin_bug+0x1c0/0x1c0 [ 2594.250314][T21170] ? lock_downgrade+0x690/0x690 [ 2594.255194][T21170] __handle_mm_fault+0x19a1/0x3e60 [ 2594.260358][T21170] ? vm_iomap_memory+0x190/0x190 [ 2594.265378][T21170] handle_mm_fault+0x2ba/0x9c0 [ 2594.270210][T21170] do_user_addr_fault+0x47e/0x1240 [ 2594.275382][T21170] ? rcu_is_watching+0x12/0xb0 [ 2594.280220][T21170] exc_page_fault+0x98/0x170 [ 2594.284871][T21170] asm_exc_page_fault+0x26/0x30 [ 2594.289772][T21170] RIP: 0033:0x7ffae1839610 [ 2594.294233][T21170] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2594.313875][T21170] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2594.319983][T21170] RAX: 00000000475432eb RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2594.328011][T21170] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 0000000000000022 [ 2594.336045][T21170] RBP: 00000000475432eb R08: 00000000000012eb R09: 00000000475432ef [ 2594.344054][T21170] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2594.352076][T21170] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87fd7b81 [ 2594.360095][T21170] ? __x64_sys_socket+0x11/0xb0 [ 2594.365036][T21170] [ 2594.370143][T21170] memory: usage 307200kB, limit 307200kB, failcnt 27582 [ 2594.387027][T21170] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:56:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7202, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2594.418332][T21170] Memory cgroup stats for /syz3: [ 2594.418606][T21170] anon 102400 [ 2594.418606][T21170] file 733184 [ 2594.418606][T21170] kernel 313737216 [ 2594.418606][T21170] kernel_stack 65536 [ 2594.418606][T21170] pagetables 69632 [ 2594.418606][T21170] sec_pagetables 0 [ 2594.418606][T21170] percpu 5375488 [ 2594.418606][T21170] sock 0 [ 2594.418606][T21170] vmalloc 8192 [ 2594.418606][T21170] shmem 733184 [ 2594.418606][T21170] zswap 0 [ 2594.418606][T21170] zswapped 0 [ 2594.418606][T21170] file_mapped 667648 [ 2594.418606][T21170] file_dirty 0 [ 2594.418606][T21170] file_writeback 0 [ 2594.418606][T21170] swapcached 0 [ 2594.418606][T21170] anon_thp 0 [ 2594.418606][T21170] file_thp 0 [ 2594.418606][T21170] shmem_thp 0 [ 2594.418606][T21170] inactive_anon 0 [ 2594.418606][T21170] active_anon 835584 [ 2594.418606][T21170] inactive_file 0 [ 2594.418606][T21170] active_file 0 [ 2594.418606][T21170] unevictable 0 [ 2594.418606][T21170] slab_reclaimable 1217464 [ 2594.418606][T21170] slab_unreclaimable 306964000 [ 2594.418606][T21170] slab 308181464 [ 2594.418606][T21170] workingset_refault_anon 0 [ 2594.418606][T21170] workingset_refault_file 130 [ 2594.418606][T21170] workingset_activate_anon 0 [ 2594.418606][T21170] workingset_activate_file 0 [ 2594.418606][T21170] workingset_restore_anon 0 [ 2594.418606][T21170] workingset_restore_file 0 [ 2594.418606][T21170] workingset_nodereclaim 0 [ 2594.418606][T21170] pgscan 3117 [ 2594.418606][T21170] pgsteal 939 [ 2594.418606][T21170] pgscan_kswapd 0 [ 2594.418606][T21170] pgscan_direct 3117 [ 2594.418606][T21170] pgscan_khugepaged 0 [ 2594.418606][T21170] pgsteal_kswapd 0 [ 2594.418606][T21170] pgsteal_direct 939 [ 2594.418606][T21170] pgsteal_khugepaged 0 [ 2594.418606][T21170] pgfault 575711 [ 2594.418606][T21170] pgmajfault 0 [ 2594.418606][T21170] pgrefill 79949 [ 2594.418606][T21170] pgactivate 862 [ 2594.418606][T21170] pgdeactivate 0 [ 2594.418606][T21170] pglazyfree 0 [ 2594.418606][T21170] pglazyfreed 0 [ 2594.418606][T21170] zswpin 0 [ 2594.418606][T21170] zswpout 0 [ 2594.623916][T21170] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21170,uid=0 [ 2594.648363][T21170] Memory cgroup out of memory: Killed process 21170 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x78020000) [ 2594.692958][T21204] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2594.721748][T21204] CPU: 1 PID: 21204 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2594.732254][T21204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2594.742331][T21204] Call Trace: [ 2594.745625][T21204] [ 2594.748575][T21204] dump_stack_lvl+0x136/0x150 [ 2594.753305][T21204] dump_header+0x10a/0xd70 [ 2594.757788][T21204] oom_kill_process+0x25d/0x600 [ 2594.762686][T21204] out_of_memory+0x35c/0x1660 [ 2594.767412][T21204] ? oom_killer_disable+0x2b0/0x2b0 [ 2594.772652][T21204] ? rcu_read_unlock+0x9/0x60 [ 2594.777366][T21204] ? find_held_lock+0x2d/0x110 [ 2594.782176][T21204] mem_cgroup_out_of_memory+0x206/0x270 [ 2594.787767][T21204] ? mem_cgroup_margin+0x130/0x130 [ 2594.792919][T21204] ? lock_downgrade+0x690/0x690 [ 2594.797818][T21204] try_charge_memcg+0xf9b/0x13b0 [ 2594.802794][T21204] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2594.808812][T21204] ? rcu_read_unlock+0x9/0x60 [ 2594.813531][T21204] ? lock_downgrade+0x690/0x690 [ 2594.818452][T21204] charge_memcg+0x90/0x3b0 [ 2594.822933][T21204] __mem_cgroup_charge+0x2b/0x90 [ 2594.827910][T21204] do_wp_page+0x8eb/0x3530 [ 2594.832375][T21204] ? lock_release+0x670/0x670 [ 2594.837086][T21204] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2594.842501][T21204] ? do_raw_spin_lock+0x124/0x2b0 [ 2594.847561][T21204] ? spin_bug+0x1c0/0x1c0 [ 2594.851952][T21204] ? lock_downgrade+0x690/0x690 [ 2594.856934][T21204] __handle_mm_fault+0x19a1/0x3e60 [ 2594.862096][T21204] ? vm_iomap_memory+0x190/0x190 [ 2594.867092][T21204] handle_mm_fault+0x2ba/0x9c0 [ 2594.871901][T21204] do_user_addr_fault+0x47e/0x1240 [ 2594.877059][T21204] ? rcu_is_watching+0x12/0xb0 [ 2594.881864][T21204] exc_page_fault+0x98/0x170 [ 2594.886507][T21204] asm_exc_page_fault+0x26/0x30 [ 2594.891388][T21204] RIP: 0033:0x7f4933239610 [ 2594.895825][T21204] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2594.915465][T21204] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2594.921563][T21204] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2594.929652][T21204] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef 05:56:49 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2594.937690][T21204] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2594.945681][T21204] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2594.953674][T21204] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2594.961692][T21204] ? apparmor_socket_create+0x13c/0x670 [ 2594.967306][T21204] [ 2594.982698][T21204] memory: usage 307188kB, limit 307200kB, failcnt 16459 05:56:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7203, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:49 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c195}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2594.992778][T21204] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2595.036488][T21204] Memory cgroup stats for /syz2: [ 2595.036767][T21204] anon 126976 [ 2595.036767][T21204] file 684032 [ 2595.036767][T21204] kernel 313745408 [ 2595.036767][T21204] kernel_stack 65536 [ 2595.036767][T21204] pagetables 73728 [ 2595.036767][T21204] sec_pagetables 0 [ 2595.036767][T21204] percpu 5387328 [ 2595.036767][T21204] sock 0 [ 2595.036767][T21204] vmalloc 8192 [ 2595.036767][T21204] shmem 679936 [ 2595.036767][T21204] zswap 0 [ 2595.036767][T21204] zswapped 0 [ 2595.036767][T21204] file_mapped 630784 [ 2595.036767][T21204] file_dirty 4096 [ 2595.036767][T21204] file_writeback 0 [ 2595.036767][T21204] swapcached 0 [ 2595.036767][T21204] anon_thp 0 [ 2595.036767][T21204] file_thp 0 [ 2595.036767][T21204] shmem_thp 0 [ 2595.036767][T21204] inactive_anon 0 [ 2595.036767][T21204] active_anon 806912 [ 2595.036767][T21204] inactive_file 0 [ 2595.036767][T21204] active_file 4096 [ 2595.036767][T21204] unevictable 0 [ 2595.036767][T21204] slab_reclaimable 512264 [ 2595.036767][T21204] slab_unreclaimable 307665392 [ 2595.036767][T21204] slab 308177656 05:56:49 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7801, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7400, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2595.036767][T21204] workingset_refault_anon 0 [ 2595.036767][T21204] workingset_refault_file 2 [ 2595.036767][T21204] workingset_activate_anon 0 [ 2595.036767][T21204] workingset_activate_file 0 [ 2595.036767][T21204] workingset_restore_anon 0 [ 2595.036767][T21204] workingset_restore_file 1 [ 2595.036767][T21204] workingset_nodereclaim 0 [ 2595.036767][T21204] pgscan 1960 [ 2595.036767][T21204] pgsteal 131 [ 2595.036767][T21204] pgscan_kswapd 109 [ 2595.036767][T21204] pgscan_direct 1851 [ 2595.036767][T21204] pgscan_khugepaged 0 [ 2595.036767][T21204] pgsteal_kswapd 108 [ 2595.036767][T21204] pgsteal_direct 23 [ 2595.036767][T21204] pgsteal_khugepaged 0 [ 2595.036767][T21204] pgfault 1010289 [ 2595.036767][T21204] pgmajfault 0 [ 2595.036767][T21204] pgrefill 13848 [ 2595.036767][T21204] pgactivate 1806 [ 2595.036767][T21204] pgdeactivate 0 [ 2595.036767][T21204] pglazyfree 0 [ 2595.036767][T21204] pglazyfreed 0 [ 2595.036767][T21204] zswpin 0 [ 2595.036767][T21204] zswpout 0 [ 2595.278162][T21204] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21204,uid=0 [ 2595.295542][T21204] Memory cgroup out of memory: Killed process 21204 (syz-executor.2) total-vm:54548kB, anon-rss:484kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2595.314910][T21230] wireguard53: entered promiscuous mode 05:56:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50030000}, 0x0) [ 2595.335170][T21215] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2595.348558][T21215] CPU: 1 PID: 21215 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2595.359055][T21215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2595.369170][T21215] Call Trace: [ 2595.372492][T21215] [ 2595.375514][T21215] dump_stack_lvl+0x136/0x150 [ 2595.380268][T21215] dump_header+0x10a/0xd70 [ 2595.384858][T21215] oom_kill_process+0x25d/0x600 [ 2595.389788][T21215] out_of_memory+0x35c/0x1660 [ 2595.394543][T21215] ? find_held_lock+0x2d/0x110 [ 2595.399391][T21215] ? oom_killer_disable+0x2b0/0x2b0 [ 2595.404664][T21215] ? rcu_read_unlock+0x9/0x60 [ 2595.409423][T21215] ? find_held_lock+0x2d/0x110 [ 2595.414249][T21215] mem_cgroup_out_of_memory+0x206/0x270 [ 2595.419859][T21215] ? mem_cgroup_margin+0x130/0x130 [ 2595.425020][T21215] ? lock_downgrade+0x690/0x690 [ 2595.429940][T21215] try_charge_memcg+0xf9b/0x13b0 [ 2595.435002][T21215] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2595.441010][T21215] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2595.446790][T21215] ? lock_downgrade+0x690/0x690 [ 2595.451698][T21215] ? lock_downgrade+0x690/0x690 [ 2595.456577][T21215] ? rcu_read_unlock+0x9/0x60 [ 2595.461302][T21215] obj_cgroup_charge+0x2af/0x5e0 [ 2595.466274][T21215] __kmem_cache_alloc_node+0xa3/0x320 [ 2595.471687][T21215] ? copy_semundo+0x18b/0x300 [ 2595.476402][T21215] kmalloc_trace+0x26/0xe0 [ 2595.480877][T21215] copy_semundo+0x18b/0x300 [ 2595.485441][T21215] copy_process+0x24a2/0x7580 [ 2595.490173][T21215] ? __lock_acquire+0xbc5/0x5d40 [ 2595.495171][T21215] ? __cleanup_sighand+0xb0/0xb0 [ 2595.500151][T21215] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2595.506277][T21215] ? psi_memstall_leave+0x174/0x250 [ 2595.511529][T21215] ? lock_downgrade+0x690/0x690 [ 2595.516419][T21215] kernel_clone+0xeb/0x890 [ 2595.520878][T21215] ? create_io_thread+0xf0/0xf0 [ 2595.526026][T21215] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2595.532319][T21215] ? lock_downgrade+0x690/0x690 [ 2595.537209][T21215] __do_sys_clone+0xba/0x100 [ 2595.541830][T21215] ? kernel_clone+0x890/0x890 [ 2595.546556][T21215] ? syscall_enter_from_user_mode+0x26/0x80 [ 2595.552503][T21215] do_syscall_64+0x39/0xb0 [ 2595.556954][T21215] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2595.562882][T21215] RIP: 0033:0x7ffae188d591 [ 2595.567322][T21215] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2595.586958][T21215] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2595.595413][T21215] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2595.603411][T21215] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2595.611407][T21215] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2595.619398][T21215] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2595.627388][T21215] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2595.635397][T21215] [ 2595.648638][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.651044][T21215] memory: usage 307200kB, limit 307200kB, failcnt 27671 [ 2595.655073][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 2595.691482][T21215] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2595.712701][T21215] Memory cgroup stats for /syz3: [ 2595.713029][T21215] anon 90112 [ 2595.713029][T21215] file 733184 [ 2595.713029][T21215] kernel 313733120 [ 2595.713029][T21215] kernel_stack 65536 [ 2595.713029][T21215] pagetables 69632 [ 2595.713029][T21215] sec_pagetables 0 05:56:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7402, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2595.713029][T21215] percpu 5375488 [ 2595.713029][T21215] sock 0 [ 2595.713029][T21215] vmalloc 8192 [ 2595.713029][T21215] shmem 733184 [ 2595.713029][T21215] zswap 0 [ 2595.713029][T21215] zswapped 0 [ 2595.713029][T21215] file_mapped 667648 [ 2595.713029][T21215] file_dirty 0 [ 2595.713029][T21215] file_writeback 0 [ 2595.713029][T21215] swapcached 0 [ 2595.713029][T21215] anon_thp 0 [ 2595.713029][T21215] file_thp 0 [ 2595.713029][T21215] shmem_thp 0 [ 2595.713029][T21215] inactive_anon 0 [ 2595.713029][T21215] active_anon 823296 [ 2595.713029][T21215] inactive_file 0 [ 2595.713029][T21215] active_file 0 [ 2595.713029][T21215] unevictable 0 [ 2595.713029][T21215] slab_reclaimable 1215536 [ 2595.713029][T21215] slab_unreclaimable 306962888 [ 2595.713029][T21215] slab 308178424 [ 2595.713029][T21215] workingset_refault_anon 0 [ 2595.713029][T21215] workingset_refault_file 130 [ 2595.713029][T21215] workingset_activate_anon 0 [ 2595.713029][T21215] workingset_activate_file 0 [ 2595.713029][T21215] workingset_restore_anon 0 [ 2595.713029][T21215] workingset_restore_file 0 [ 2595.713029][T21215] workingset_nodereclaim 0 [ 2595.713029][T21215] pgscan 3117 [ 2595.713029][T21215] pgsteal 939 [ 2595.713029][T21215] pgscan_kswapd 0 [ 2595.713029][T21215] pgscan_direct 3117 [ 2595.713029][T21215] pgscan_khugepaged 0 [ 2595.713029][T21215] pgsteal_kswapd 0 [ 2595.713029][T21215] pgsteal_direct 939 [ 2595.713029][T21215] pgsteal_khugepaged 0 [ 2595.713029][T21215] pgfault 575748 [ 2595.713029][T21215] pgmajfault 0 [ 2595.713029][T21215] pgrefill 79949 [ 2595.713029][T21215] pgactivate 862 [ 2595.713029][T21215] pgdeactivate 0 [ 2595.713029][T21215] pglazyfree 0 [ 2595.713029][T21215] pglazyfreed 0 [ 2595.713029][T21215] zswpin 0 [ 2595.713029][T21215] zswpout 0 [ 2595.907362][T21215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21215,uid=0 05:56:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x7a000000) [ 2595.935361][T21215] Memory cgroup out of memory: Killed process 21215 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2595.996886][T21244] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2596.007550][T21244] CPU: 0 PID: 21244 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2596.018035][T21244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2596.028143][T21244] Call Trace: [ 2596.031474][T21244] [ 2596.034449][T21244] dump_stack_lvl+0x136/0x150 [ 2596.039372][T21244] dump_header+0x10a/0xd70 [ 2596.043854][T21244] oom_kill_process+0x25d/0x600 [ 2596.048754][T21244] out_of_memory+0x35c/0x1660 [ 2596.053558][T21244] ? find_held_lock+0x2d/0x110 [ 2596.058373][T21244] ? oom_killer_disable+0x2b0/0x2b0 [ 2596.063623][T21244] ? rcu_read_unlock+0x9/0x60 [ 2596.068357][T21244] ? find_held_lock+0x2d/0x110 [ 2596.073187][T21244] mem_cgroup_out_of_memory+0x206/0x270 [ 2596.078782][T21244] ? mem_cgroup_margin+0x130/0x130 [ 2596.083941][T21244] ? lock_downgrade+0x690/0x690 [ 2596.088836][T21244] try_charge_memcg+0xf9b/0x13b0 [ 2596.093819][T21244] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2596.099885][T21244] ? rcu_read_unlock+0x9/0x60 [ 2596.104601][T21244] ? lock_downgrade+0x690/0x690 [ 2596.109493][T21244] charge_memcg+0x90/0x3b0 [ 2596.114147][T21244] __mem_cgroup_charge+0x2b/0x90 [ 2596.119119][T21244] do_wp_page+0x8eb/0x3530 [ 2596.123596][T21244] ? lock_release+0x670/0x670 [ 2596.128302][T21244] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2596.133717][T21244] ? do_raw_spin_lock+0x124/0x2b0 [ 2596.138777][T21244] ? spin_bug+0x1c0/0x1c0 [ 2596.143135][T21244] ? lock_downgrade+0x690/0x690 [ 2596.148022][T21244] __handle_mm_fault+0x19a1/0x3e60 [ 2596.153178][T21244] ? vm_iomap_memory+0x190/0x190 [ 2596.158191][T21244] handle_mm_fault+0x2ba/0x9c0 [ 2596.163023][T21244] do_user_addr_fault+0x47e/0x1240 [ 2596.168307][T21244] ? rcu_is_watching+0x12/0xb0 [ 2596.173117][T21244] exc_page_fault+0x98/0x170 [ 2596.177751][T21244] asm_exc_page_fault+0x26/0x30 [ 2596.182638][T21244] RIP: 0033:0x7f4933239610 [ 2596.187167][T21244] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2596.206801][T21244] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2596.212901][T21244] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2596.221072][T21244] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2596.229066][T21244] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2596.237060][T21244] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 05:56:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7403, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:50 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2596.245233][T21244] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2596.253233][T21244] ? apparmor_socket_create+0x13c/0x670 [ 2596.258866][T21244] [ 2596.269488][T21244] memory: usage 307188kB, limit 307200kB, failcnt 16576 [ 2596.337602][T21244] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2596.348659][T21244] Memory cgroup stats for /syz2: [ 2596.348991][T21244] anon 126976 [ 2596.348991][T21244] file 684032 [ 2596.348991][T21244] kernel 313745408 [ 2596.348991][T21244] kernel_stack 65536 [ 2596.348991][T21244] pagetables 73728 [ 2596.348991][T21244] sec_pagetables 0 [ 2596.348991][T21244] percpu 5387328 [ 2596.348991][T21244] sock 0 [ 2596.348991][T21244] vmalloc 8192 [ 2596.348991][T21244] shmem 679936 [ 2596.348991][T21244] zswap 0 [ 2596.348991][T21244] zswapped 0 [ 2596.348991][T21244] file_mapped 630784 [ 2596.348991][T21244] file_dirty 4096 [ 2596.348991][T21244] file_writeback 0 [ 2596.348991][T21244] swapcached 0 [ 2596.348991][T21244] anon_thp 0 [ 2596.348991][T21244] file_thp 0 [ 2596.348991][T21244] shmem_thp 0 [ 2596.348991][T21244] inactive_anon 0 [ 2596.348991][T21244] active_anon 806912 [ 2596.348991][T21244] inactive_file 0 [ 2596.348991][T21244] active_file 4096 [ 2596.348991][T21244] unevictable 0 [ 2596.348991][T21244] slab_reclaimable 512264 [ 2596.348991][T21244] slab_unreclaimable 307665392 [ 2596.348991][T21244] slab 308177656 [ 2596.348991][T21244] workingset_refault_anon 0 [ 2596.348991][T21244] workingset_refault_file 2 [ 2596.348991][T21244] workingset_activate_anon 0 [ 2596.348991][T21244] workingset_activate_file 0 [ 2596.348991][T21244] workingset_restore_anon 0 [ 2596.348991][T21244] workingset_restore_file 1 [ 2596.348991][T21244] workingset_nodereclaim 0 [ 2596.348991][T21244] pgscan 1960 [ 2596.348991][T21244] pgsteal 131 [ 2596.348991][T21244] pgscan_kswapd 109 05:56:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7600, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2596.348991][T21244] pgscan_direct 1851 [ 2596.348991][T21244] pgscan_khugepaged 0 [ 2596.348991][T21244] pgsteal_kswapd 108 [ 2596.348991][T21244] pgsteal_direct 23 [ 2596.348991][T21244] pgsteal_khugepaged 0 [ 2596.348991][T21244] pgfault 1010348 [ 2596.348991][T21244] pgmajfault 0 [ 2596.348991][T21244] pgrefill 13929 [ 2596.348991][T21244] pgactivate 1806 [ 2596.348991][T21244] pgdeactivate 0 [ 2596.348991][T21244] pglazyfree 0 [ 2596.348991][T21244] pglazyfreed 0 [ 2596.348991][T21244] zswpin 0 [ 2596.348991][T21244] zswpout 0 05:56:50 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c196}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7602, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2596.580291][T21244] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21244,uid=0 [ 2596.605201][T21244] Memory cgroup out of memory: Killed process 21244 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:50 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7a00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x52020000}, 0x0) [ 2596.680726][T21256] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2596.709337][T21273] wireguard53: entered promiscuous mode [ 2596.715931][T21256] CPU: 0 PID: 21256 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2596.726439][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2596.736548][T21256] Call Trace: [ 2596.739865][T21256] [ 2596.742838][T21256] dump_stack_lvl+0x136/0x150 [ 2596.747589][T21256] dump_header+0x10a/0xd70 [ 2596.752079][T21256] oom_kill_process+0x25d/0x600 [ 2596.757001][T21256] out_of_memory+0x35c/0x1660 [ 2596.761747][T21256] ? find_held_lock+0x2d/0x110 [ 2596.766584][T21256] ? oom_killer_disable+0x2b0/0x2b0 [ 2596.771854][T21256] ? rcu_read_unlock+0x9/0x60 [ 2596.776597][T21256] ? find_held_lock+0x2d/0x110 [ 2596.781445][T21256] mem_cgroup_out_of_memory+0x206/0x270 [ 2596.787069][T21256] ? mem_cgroup_margin+0x130/0x130 [ 2596.792278][T21256] ? lock_downgrade+0x690/0x690 [ 2596.797295][T21256] try_charge_memcg+0xf9b/0x13b0 [ 2596.802310][T21256] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2596.808352][T21256] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2596.814148][T21256] ? lock_downgrade+0x690/0x690 [ 2596.819065][T21256] ? lock_downgrade+0x690/0x690 [ 2596.823977][T21256] ? rcu_read_unlock+0x9/0x60 [ 2596.828754][T21256] obj_cgroup_charge+0x2af/0x5e0 [ 2596.833937][T21256] __kmem_cache_alloc_node+0xa3/0x320 [ 2596.839386][T21256] ? copy_semundo+0x18b/0x300 [ 2596.844283][T21256] kmalloc_trace+0x26/0xe0 [ 2596.848770][T21256] copy_semundo+0x18b/0x300 [ 2596.853346][T21256] copy_process+0x24a2/0x7580 [ 2596.858081][T21256] ? __lock_acquire+0xbc5/0x5d40 [ 2596.863096][T21256] ? __cleanup_sighand+0xb0/0xb0 [ 2596.868086][T21256] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2596.874116][T21256] ? psi_memstall_leave+0x174/0x250 [ 2596.879387][T21256] ? lock_downgrade+0x690/0x690 [ 2596.884328][T21256] kernel_clone+0xeb/0x890 [ 2596.888784][T21256] ? create_io_thread+0xf0/0xf0 [ 2596.893769][T21256] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2596.900097][T21256] ? lock_downgrade+0x690/0x690 [ 2596.905007][T21256] __do_sys_clone+0xba/0x100 [ 2596.909658][T21256] ? kernel_clone+0x890/0x890 [ 2596.914421][T21256] ? syscall_enter_from_user_mode+0x26/0x80 [ 2596.920410][T21256] do_syscall_64+0x39/0xb0 [ 2596.924884][T21256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2596.930817][T21256] RIP: 0033:0x7ffae188d591 [ 2596.935367][T21256] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2596.955037][T21256] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2596.963605][T21256] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2596.971646][T21256] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2596.979663][T21256] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2596.987774][T21256] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2596.995789][T21256] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2597.003839][T21256] [ 2597.016490][T21256] memory: usage 307184kB, limit 307200kB, failcnt 27780 [ 2597.024610][T21256] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2597.038993][T21256] Memory cgroup stats for /syz3: [ 2597.039277][T21256] anon 90112 [ 2597.039277][T21256] file 733184 [ 2597.039277][T21256] kernel 313733120 [ 2597.039277][T21256] kernel_stack 65536 [ 2597.039277][T21256] pagetables 69632 [ 2597.039277][T21256] sec_pagetables 0 [ 2597.039277][T21256] percpu 5375488 [ 2597.039277][T21256] sock 0 [ 2597.039277][T21256] vmalloc 8192 [ 2597.039277][T21256] shmem 733184 [ 2597.039277][T21256] zswap 0 [ 2597.039277][T21256] zswapped 0 [ 2597.039277][T21256] file_mapped 667648 05:56:51 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2597.039277][T21256] file_dirty 0 [ 2597.039277][T21256] file_writeback 0 [ 2597.039277][T21256] swapcached 0 [ 2597.039277][T21256] anon_thp 0 [ 2597.039277][T21256] file_thp 0 [ 2597.039277][T21256] shmem_thp 0 [ 2597.039277][T21256] inactive_anon 0 [ 2597.039277][T21256] active_anon 823296 [ 2597.039277][T21256] inactive_file 0 [ 2597.039277][T21256] active_file 0 [ 2597.039277][T21256] unevictable 0 [ 2597.039277][T21256] slab_reclaimable 1215536 [ 2597.039277][T21256] slab_unreclaimable 306962888 [ 2597.039277][T21256] slab 308178424 [ 2597.039277][T21256] workingset_refault_anon 0 [ 2597.039277][T21256] workingset_refault_file 130 [ 2597.039277][T21256] workingset_activate_anon 0 [ 2597.039277][T21256] workingset_activate_file 0 [ 2597.039277][T21256] workingset_restore_anon 0 [ 2597.039277][T21256] workingset_restore_file 0 [ 2597.039277][T21256] workingset_nodereclaim 0 [ 2597.039277][T21256] pgscan 3117 [ 2597.039277][T21256] pgsteal 939 [ 2597.039277][T21256] pgscan_kswapd 0 [ 2597.039277][T21256] pgscan_direct 3117 [ 2597.039277][T21256] pgscan_khugepaged 0 [ 2597.039277][T21256] pgsteal_kswapd 0 05:56:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7603, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2597.039277][T21256] pgsteal_direct 939 [ 2597.039277][T21256] pgsteal_khugepaged 0 [ 2597.039277][T21256] pgfault 575785 [ 2597.039277][T21256] pgmajfault 0 [ 2597.039277][T21256] pgrefill 79949 [ 2597.039277][T21256] pgactivate 862 [ 2597.039277][T21256] pgdeactivate 0 [ 2597.039277][T21256] pglazyfree 0 [ 2597.039277][T21256] pglazyfreed 0 [ 2597.039277][T21256] zswpin 0 [ 2597.039277][T21256] zswpout 0 05:56:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7a00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2597.311289][T21256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21256,uid=0 [ 2597.338363][T21256] Memory cgroup out of memory: Killed process 21256 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:51 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c197}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x7a010000) 05:56:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7a02, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:51 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7a02, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2597.468224][T21306] wireguard53: entered promiscuous mode [ 2597.524226][T21278] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2597.534996][T21278] CPU: 0 PID: 21278 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2597.545469][T21278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2597.555552][T21278] Call Trace: [ 2597.558846][T21278] [ 2597.561796][T21278] dump_stack_lvl+0x136/0x150 [ 2597.566519][T21278] dump_header+0x10a/0xd70 [ 2597.570975][T21278] oom_kill_process+0x25d/0x600 [ 2597.575862][T21278] out_of_memory+0x35c/0x1660 [ 2597.580582][T21278] ? find_held_lock+0x2d/0x110 [ 2597.585392][T21278] ? oom_killer_disable+0x2b0/0x2b0 [ 2597.590630][T21278] ? rcu_read_unlock+0x9/0x60 [ 2597.595357][T21278] ? find_held_lock+0x2d/0x110 [ 2597.600171][T21278] mem_cgroup_out_of_memory+0x206/0x270 [ 2597.605779][T21278] ? mem_cgroup_margin+0x130/0x130 [ 2597.610949][T21278] ? lock_downgrade+0x690/0x690 [ 2597.615844][T21278] try_charge_memcg+0xf9b/0x13b0 [ 2597.620821][T21278] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2597.626831][T21278] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2597.632595][T21278] ? lock_downgrade+0x690/0x690 [ 2597.637562][T21278] ? lock_downgrade+0x690/0x690 [ 2597.642472][T21278] obj_cgroup_charge+0x2af/0x5e0 [ 2597.647447][T21278] ? __anon_vma_prepare+0x2c6/0x580 [ 2597.652775][T21278] kmem_cache_alloc+0xb1/0x3b0 [ 2597.657656][T21278] __anon_vma_prepare+0x2c6/0x580 [ 2597.662718][T21278] ? __pmd_alloc+0x30c/0x5d0 [ 2597.667363][T21278] __handle_mm_fault+0x3a8f/0x3e60 [ 2597.672515][T21278] ? vm_iomap_memory+0x190/0x190 [ 2597.677508][T21278] handle_mm_fault+0x2ba/0x9c0 [ 2597.682325][T21278] do_user_addr_fault+0x47e/0x1240 [ 2597.687474][T21278] ? rcu_is_watching+0x12/0xb0 [ 2597.692280][T21278] exc_page_fault+0x98/0x170 [ 2597.696967][T21278] asm_exc_page_fault+0x26/0x30 [ 2597.701848][T21278] RIP: 0033:0x7f493322bde9 [ 2597.706292][T21278] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2597.725922][T21278] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2597.732017][T21278] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2597.740019][T21278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2597.748017][T21278] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2597.756018][T21278] R10: 00007f4932e00068 R11: 0000000000000246 R12: 0000000000279b95 [ 2597.764015][T21278] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2597.772031][T21278] [ 2597.812895][T21278] memory: usage 307200kB, limit 307200kB, failcnt 16692 [ 2597.831192][T21278] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2597.843416][T21278] Memory cgroup stats for /syz2: [ 2597.843737][T21278] anon 135168 [ 2597.843737][T21278] file 684032 [ 2597.843737][T21278] kernel 313753600 [ 2597.843737][T21278] kernel_stack 65536 [ 2597.843737][T21278] pagetables 81920 [ 2597.843737][T21278] sec_pagetables 0 [ 2597.843737][T21278] percpu 5387328 [ 2597.843737][T21278] sock 0 [ 2597.843737][T21278] vmalloc 8192 [ 2597.843737][T21278] shmem 679936 [ 2597.843737][T21278] zswap 0 [ 2597.843737][T21278] zswapped 0 [ 2597.843737][T21278] file_mapped 630784 [ 2597.843737][T21278] file_dirty 4096 [ 2597.843737][T21278] file_writeback 0 [ 2597.843737][T21278] swapcached 0 [ 2597.843737][T21278] anon_thp 0 [ 2597.843737][T21278] file_thp 0 [ 2597.843737][T21278] shmem_thp 0 [ 2597.843737][T21278] inactive_anon 0 [ 2597.843737][T21278] active_anon 815104 [ 2597.843737][T21278] inactive_file 0 [ 2597.843737][T21278] active_file 4096 [ 2597.843737][T21278] unevictable 0 [ 2597.843737][T21278] slab_reclaimable 512264 [ 2597.843737][T21278] slab_unreclaimable 307665512 [ 2597.843737][T21278] slab 308177776 [ 2597.843737][T21278] workingset_refault_anon 0 [ 2597.843737][T21278] workingset_refault_file 2 [ 2597.843737][T21278] workingset_activate_anon 0 [ 2597.843737][T21278] workingset_activate_file 0 [ 2597.843737][T21278] workingset_restore_anon 0 [ 2597.843737][T21278] workingset_restore_file 1 [ 2597.843737][T21278] workingset_nodereclaim 0 [ 2597.843737][T21278] pgscan 1960 [ 2597.843737][T21278] pgsteal 131 [ 2597.843737][T21278] pgscan_kswapd 109 [ 2597.843737][T21278] pgscan_direct 1851 [ 2597.843737][T21278] pgscan_khugepaged 0 [ 2597.843737][T21278] pgsteal_kswapd 108 [ 2597.843737][T21278] pgsteal_direct 23 [ 2597.843737][T21278] pgsteal_khugepaged 0 [ 2597.843737][T21278] pgfault 1010416 [ 2597.843737][T21278] pgmajfault 0 [ 2597.843737][T21278] pgrefill 14004 [ 2597.843737][T21278] pgactivate 1806 05:56:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7a03, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2597.843737][T21278] pgdeactivate 0 [ 2597.843737][T21278] pglazyfree 0 [ 2597.843737][T21278] pglazyfreed 0 [ 2597.843737][T21278] zswpin 0 [ 2597.843737][T21278] zswpout 0 05:56:52 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7c01, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2598.086572][T21278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21278,uid=0 05:56:52 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c198}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2598.131804][T21278] Memory cgroup out of memory: Killed process 21278 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:56:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x58000000}, 0x0) 05:56:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7c02, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2598.235089][T21311] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2598.248818][T21311] CPU: 0 PID: 21311 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2598.259318][T21311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2598.269455][T21311] Call Trace: [ 2598.272779][T21311] [ 2598.275760][T21311] dump_stack_lvl+0x136/0x150 [ 2598.280502][T21311] dump_header+0x10a/0xd70 [ 2598.284995][T21311] oom_kill_process+0x25d/0x600 [ 2598.289902][T21311] out_of_memory+0x35c/0x1660 [ 2598.294653][T21311] ? find_held_lock+0x2d/0x110 [ 2598.299474][T21311] ? oom_killer_disable+0x2b0/0x2b0 [ 2598.304723][T21311] ? rcu_read_unlock+0x9/0x60 [ 2598.309441][T21311] ? find_held_lock+0x2d/0x110 [ 2598.314259][T21311] mem_cgroup_out_of_memory+0x206/0x270 [ 2598.319856][T21311] ? mem_cgroup_margin+0x130/0x130 [ 2598.325009][T21311] ? lock_downgrade+0x690/0x690 [ 2598.329917][T21311] try_charge_memcg+0xf9b/0x13b0 [ 2598.334921][T21311] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2598.341040][T21311] ? rcu_read_unlock+0x9/0x60 [ 2598.345762][T21311] ? lock_downgrade+0x690/0x690 [ 2598.350684][T21311] charge_memcg+0x90/0x3b0 [ 2598.355139][T21311] __mem_cgroup_charge+0x2b/0x90 [ 2598.360110][T21311] do_wp_page+0x8eb/0x3530 [ 2598.364574][T21311] ? lock_release+0x670/0x670 [ 2598.369283][T21311] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2598.374783][T21311] ? do_raw_spin_lock+0x124/0x2b0 [ 2598.379849][T21311] ? spin_bug+0x1c0/0x1c0 [ 2598.384223][T21311] ? lock_downgrade+0x690/0x690 [ 2598.389112][T21311] __handle_mm_fault+0x19a1/0x3e60 [ 2598.394273][T21311] ? vm_iomap_memory+0x190/0x190 [ 2598.399298][T21311] handle_mm_fault+0x2ba/0x9c0 [ 2598.404119][T21311] do_user_addr_fault+0x47e/0x1240 [ 2598.409273][T21311] ? rcu_is_watching+0x12/0xb0 [ 2598.414075][T21311] exc_page_fault+0x98/0x170 [ 2598.418714][T21311] asm_exc_page_fault+0x26/0x30 [ 2598.423599][T21311] RIP: 0033:0x7ffae1839610 [ 2598.428043][T21311] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2598.447765][T21311] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2598.453860][T21311] RAX: 00000000475432eb RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2598.461855][T21311] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 0000000000000022 [ 2598.469844][T21311] RBP: 00000000475432eb R08: 00000000000012eb R09: 00000000475432ef [ 2598.477840][T21311] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2598.486013][T21311] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87fd7b81 [ 2598.494007][T21311] ? __x64_sys_socket+0x11/0xb0 [ 2598.498901][T21311] [ 2598.510776][T21311] memory: usage 307200kB, limit 307200kB, failcnt 27897 [ 2598.524827][T21311] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2598.542996][T21311] Memory cgroup stats for /syz3: [ 2598.543127][T21339] wireguard53: entered promiscuous mode [ 2598.543297][T21311] anon 102400 [ 2598.543297][T21311] file 733184 [ 2598.543297][T21311] kernel 313737216 [ 2598.543297][T21311] kernel_stack 65536 [ 2598.543297][T21311] pagetables 69632 [ 2598.543297][T21311] sec_pagetables 0 [ 2598.543297][T21311] percpu 5375488 [ 2598.543297][T21311] sock 0 [ 2598.543297][T21311] vmalloc 8192 [ 2598.543297][T21311] shmem 733184 [ 2598.543297][T21311] zswap 0 [ 2598.543297][T21311] zswapped 0 [ 2598.543297][T21311] file_mapped 667648 [ 2598.543297][T21311] file_dirty 0 [ 2598.543297][T21311] file_writeback 0 [ 2598.543297][T21311] swapcached 0 [ 2598.543297][T21311] anon_thp 0 [ 2598.543297][T21311] file_thp 0 [ 2598.543297][T21311] shmem_thp 0 [ 2598.543297][T21311] inactive_anon 0 [ 2598.543297][T21311] active_anon 835584 [ 2598.543297][T21311] inactive_file 0 [ 2598.543297][T21311] active_file 0 [ 2598.543297][T21311] unevictable 0 [ 2598.543297][T21311] slab_reclaimable 1217464 [ 2598.543297][T21311] slab_unreclaimable 306964000 [ 2598.543297][T21311] slab 308181464 [ 2598.543297][T21311] workingset_refault_anon 0 [ 2598.543297][T21311] workingset_refault_file 130 [ 2598.543297][T21311] workingset_activate_anon 0 [ 2598.543297][T21311] workingset_activate_file 0 [ 2598.543297][T21311] workingset_restore_anon 0 [ 2598.543297][T21311] workingset_restore_file 0 [ 2598.543297][T21311] workingset_nodereclaim 0 [ 2598.543297][T21311] pgscan 3117 [ 2598.543297][T21311] pgsteal 939 [ 2598.543297][T21311] pgscan_kswapd 0 [ 2598.543297][T21311] pgscan_direct 3117 [ 2598.543297][T21311] pgscan_khugepaged 0 [ 2598.543297][T21311] pgsteal_kswapd 0 [ 2598.543297][T21311] pgsteal_direct 939 [ 2598.543297][T21311] pgsteal_khugepaged 0 [ 2598.543297][T21311] pgfault 575828 [ 2598.543297][T21311] pgmajfault 0 [ 2598.543297][T21311] pgrefill 79949 [ 2598.543297][T21311] pgactivate 862 [ 2598.543297][T21311] pgdeactivate 0 [ 2598.543297][T21311] pglazyfree 0 [ 2598.543297][T21311] pglazyfreed 0 [ 2598.543297][T21311] zswpin 0 [ 2598.543297][T21311] zswpout 0 05:56:52 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7a03, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7c03, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2598.820421][T21311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21311,uid=0 [ 2598.870475][T21311] Memory cgroup out of memory: Killed process 21311 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x80020000) [ 2598.915680][T21346] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2598.949901][T21346] CPU: 1 PID: 21346 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2598.960395][T21346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2598.970693][T21346] Call Trace: [ 2598.973989][T21346] [ 2598.976942][T21346] dump_stack_lvl+0x136/0x150 [ 2598.981666][T21346] dump_header+0x10a/0xd70 [ 2598.986123][T21346] oom_kill_process+0x25d/0x600 [ 2598.991020][T21346] out_of_memory+0x35c/0x1660 [ 2598.995751][T21346] ? oom_killer_disable+0x2b0/0x2b0 [ 2599.000990][T21346] ? rcu_read_unlock+0x9/0x60 [ 2599.005709][T21346] ? find_held_lock+0x2d/0x110 [ 2599.010524][T21346] mem_cgroup_out_of_memory+0x206/0x270 [ 2599.016116][T21346] ? mem_cgroup_margin+0x130/0x130 [ 2599.021270][T21346] ? lock_downgrade+0x690/0x690 [ 2599.026165][T21346] try_charge_memcg+0xf9b/0x13b0 [ 2599.031138][T21346] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2599.037145][T21346] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2599.042910][T21346] ? lock_downgrade+0x690/0x690 [ 2599.047807][T21346] ? lock_downgrade+0x690/0x690 [ 2599.052699][T21346] obj_cgroup_charge+0x2af/0x5e0 [ 2599.057672][T21346] ? __anon_vma_prepare+0x2c6/0x580 [ 2599.062906][T21346] kmem_cache_alloc+0xb1/0x3b0 [ 2599.067723][T21346] __anon_vma_prepare+0x2c6/0x580 [ 2599.072785][T21346] ? __pmd_alloc+0x30c/0x5d0 [ 2599.077411][T21346] __handle_mm_fault+0x3a8f/0x3e60 [ 2599.082570][T21346] ? vm_iomap_memory+0x190/0x190 [ 2599.087576][T21346] handle_mm_fault+0x2ba/0x9c0 [ 2599.092383][T21346] do_user_addr_fault+0x47e/0x1240 [ 2599.097538][T21346] ? rcu_is_watching+0x12/0xb0 [ 2599.102345][T21346] exc_page_fault+0x98/0x170 [ 2599.106989][T21346] asm_exc_page_fault+0x26/0x30 [ 2599.111886][T21346] RIP: 0033:0x7f493322bde9 [ 2599.116326][T21346] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2599.135963][T21346] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2599.142063][T21346] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2599.150065][T21346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2599.158053][T21346] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 05:56:53 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7d24, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2599.166117][T21346] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027a0d8 [ 2599.174133][T21346] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2599.182151][T21346] 05:56:53 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c199}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2599.220384][T21346] memory: usage 307200kB, limit 307200kB, failcnt 16796 [ 2599.252542][T21346] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2599.276000][T21346] Memory cgroup stats for /syz2: [ 2599.276294][T21346] anon 135168 [ 2599.276294][T21346] file 684032 [ 2599.276294][T21346] kernel 313753600 [ 2599.276294][T21346] kernel_stack 65536 [ 2599.276294][T21346] pagetables 81920 [ 2599.276294][T21346] sec_pagetables 0 [ 2599.276294][T21346] percpu 5387328 [ 2599.276294][T21346] sock 0 [ 2599.276294][T21346] vmalloc 8192 [ 2599.276294][T21346] shmem 679936 [ 2599.276294][T21346] zswap 0 [ 2599.276294][T21346] zswapped 0 [ 2599.276294][T21346] file_mapped 630784 [ 2599.276294][T21346] file_dirty 4096 [ 2599.276294][T21346] file_writeback 0 [ 2599.276294][T21346] swapcached 0 [ 2599.276294][T21346] anon_thp 0 [ 2599.276294][T21346] file_thp 0 [ 2599.276294][T21346] shmem_thp 0 [ 2599.276294][T21346] inactive_anon 708608 [ 2599.276294][T21346] active_anon 106496 [ 2599.276294][T21346] inactive_file 0 [ 2599.276294][T21346] active_file 4096 [ 2599.276294][T21346] unevictable 0 [ 2599.276294][T21346] slab_reclaimable 512264 [ 2599.276294][T21346] slab_unreclaimable 307665512 [ 2599.276294][T21346] slab 308177776 [ 2599.276294][T21346] workingset_refault_anon 0 [ 2599.276294][T21346] workingset_refault_file 2 [ 2599.276294][T21346] workingset_activate_anon 0 [ 2599.276294][T21346] workingset_activate_file 0 [ 2599.276294][T21346] workingset_restore_anon 0 [ 2599.276294][T21346] workingset_restore_file 1 [ 2599.276294][T21346] workingset_nodereclaim 0 [ 2599.276294][T21346] pgscan 1960 [ 2599.276294][T21346] pgsteal 131 [ 2599.276294][T21346] pgscan_kswapd 109 [ 2599.276294][T21346] pgscan_direct 1851 [ 2599.276294][T21346] pgscan_khugepaged 0 [ 2599.276294][T21346] pgsteal_kswapd 108 [ 2599.276294][T21346] pgsteal_direct 23 [ 2599.276294][T21346] pgsteal_khugepaged 0 [ 2599.276294][T21346] pgfault 1010475 [ 2599.276294][T21346] pgmajfault 0 [ 2599.276294][T21346] pgrefill 14067 [ 2599.276294][T21346] pgactivate 1806 [ 2599.276294][T21346] pgdeactivate 0 [ 2599.276294][T21346] pglazyfree 0 [ 2599.276294][T21346] pglazyfreed 0 [ 2599.276294][T21346] zswpin 0 [ 2599.276294][T21346] zswpout 0 05:56:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x7e03, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2599.587214][T21372] wireguard53: entered promiscuous mode [ 2599.599843][T21346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21346,uid=0 [ 2599.621702][T21346] Memory cgroup out of memory: Killed process 21346 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2599.655354][T21360] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2599.685510][T21360] CPU: 1 PID: 21360 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2599.696012][T21360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2599.706128][T21360] Call Trace: [ 2599.709453][T21360] [ 2599.712432][T21360] dump_stack_lvl+0x136/0x150 [ 2599.717186][T21360] dump_header+0x10a/0xd70 [ 2599.721677][T21360] oom_kill_process+0x25d/0x600 [ 2599.726599][T21360] out_of_memory+0x35c/0x1660 [ 2599.731362][T21360] ? oom_killer_disable+0x2b0/0x2b0 05:56:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x58110000}, 0x0) 05:56:53 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7c01, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:56:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x8002, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2599.736633][T21360] ? rcu_read_unlock+0x9/0x60 [ 2599.741383][T21360] ? find_held_lock+0x2d/0x110 [ 2599.746237][T21360] mem_cgroup_out_of_memory+0x206/0x270 [ 2599.751849][T21360] ? mem_cgroup_margin+0x130/0x130 [ 2599.757062][T21360] ? lock_downgrade+0x690/0x690 [ 2599.761996][T21360] try_charge_memcg+0xf9b/0x13b0 [ 2599.767019][T21360] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2599.773077][T21360] ? rcu_read_unlock+0x9/0x60 [ 2599.778268][T21360] ? lock_downgrade+0x690/0x690 [ 2599.783200][T21360] charge_memcg+0x90/0x3b0 [ 2599.787860][T21360] __mem_cgroup_charge+0x2b/0x90 [ 2599.792874][T21360] do_wp_page+0x8eb/0x3530 [ 2599.797367][T21360] ? lock_release+0x670/0x670 [ 2599.802112][T21360] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2599.807568][T21360] ? do_raw_spin_lock+0x124/0x2b0 [ 2599.812675][T21360] ? spin_bug+0x1c0/0x1c0 [ 2599.817070][T21360] ? lock_downgrade+0x690/0x690 [ 2599.821994][T21360] __handle_mm_fault+0x19a1/0x3e60 [ 2599.827540][T21360] ? vm_iomap_memory+0x190/0x190 [ 2599.832570][T21360] handle_mm_fault+0x2ba/0x9c0 [ 2599.837393][T21360] do_user_addr_fault+0x47e/0x1240 [ 2599.842556][T21360] ? rcu_is_watching+0x12/0xb0 [ 2599.847386][T21360] exc_page_fault+0x98/0x170 [ 2599.852051][T21360] asm_exc_page_fault+0x26/0x30 [ 2599.856937][T21360] RIP: 0033:0x7ffae1839610 [ 2599.861371][T21360] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2599.881022][T21360] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2599.887144][T21360] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2599.895157][T21360] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2599.903177][T21360] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2599.911196][T21360] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2599.919201][T21360] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2599.927232][T21360] ? __sys_socket+0x7c/0x250 [ 2599.931874][T21360] [ 2599.944757][T21360] memory: usage 307200kB, limit 307200kB, failcnt 27983 [ 2599.951978][T21360] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2599.958999][T21360] Memory cgroup stats for /syz3: [ 2599.959251][T21360] anon 106496 [ 2599.959251][T21360] file 733184 [ 2599.959251][T21360] kernel 313733120 [ 2599.959251][T21360] kernel_stack 65536 [ 2599.959251][T21360] pagetables 69632 [ 2599.959251][T21360] sec_pagetables 0 [ 2599.959251][T21360] percpu 5375488 [ 2599.959251][T21360] sock 0 [ 2599.959251][T21360] vmalloc 8192 [ 2599.959251][T21360] shmem 733184 [ 2599.959251][T21360] zswap 0 [ 2599.959251][T21360] zswapped 0 [ 2599.959251][T21360] file_mapped 667648 [ 2599.959251][T21360] file_dirty 0 [ 2599.959251][T21360] file_writeback 0 [ 2599.959251][T21360] swapcached 0 [ 2599.959251][T21360] anon_thp 0 [ 2599.959251][T21360] file_thp 0 [ 2599.959251][T21360] shmem_thp 0 [ 2599.959251][T21360] inactive_anon 0 [ 2599.959251][T21360] active_anon 839680 [ 2599.959251][T21360] inactive_file 0 [ 2599.959251][T21360] active_file 0 [ 2599.959251][T21360] unevictable 0 [ 2599.959251][T21360] slab_reclaimable 1217464 [ 2599.959251][T21360] slab_unreclaimable 306964000 [ 2599.959251][T21360] slab 308181464 [ 2599.959251][T21360] workingset_refault_anon 0 [ 2599.959251][T21360] workingset_refault_file 130 [ 2599.959251][T21360] workingset_activate_anon 0 [ 2599.959251][T21360] workingset_activate_file 0 [ 2599.959251][T21360] workingset_restore_anon 0 [ 2599.959251][T21360] workingset_restore_file 0 [ 2599.959251][T21360] workingset_nodereclaim 0 [ 2599.959251][T21360] pgscan 3117 [ 2599.959251][T21360] pgsteal 939 [ 2599.959251][T21360] pgscan_kswapd 0 [ 2599.959251][T21360] pgscan_direct 3117 [ 2599.959251][T21360] pgscan_khugepaged 0 [ 2599.959251][T21360] pgsteal_kswapd 0 [ 2599.959251][T21360] pgsteal_direct 939 [ 2599.959251][T21360] pgsteal_khugepaged 0 [ 2599.959251][T21360] pgfault 575872 [ 2599.959251][T21360] pgmajfault 0 [ 2599.959251][T21360] pgrefill 79949 [ 2599.959251][T21360] pgactivate 862 [ 2599.959251][T21360] pgdeactivate 0 [ 2599.959251][T21360] pglazyfree 0 [ 2599.959251][T21360] pglazyfreed 0 [ 2599.959251][T21360] zswpin 0 [ 2599.959251][T21360] zswpout 0 05:56:54 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa020000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x8100, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2600.169911][T21360] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21360,uid=0 [ 2600.194136][T21360] Memory cgroup out of memory: Killed process 21360 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:54 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c19a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x81000000) 05:56:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x8a00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2600.367251][T21382] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2600.393371][T21402] wireguard53: entered promiscuous mode [ 2600.426280][T21382] CPU: 0 PID: 21382 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2600.436783][T21382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2600.446897][T21382] Call Trace: [ 2600.450215][T21382] [ 2600.453182][T21382] dump_stack_lvl+0x136/0x150 [ 2600.457945][T21382] dump_header+0x10a/0xd70 [ 2600.462428][T21382] oom_kill_process+0x25d/0x600 [ 2600.467338][T21382] out_of_memory+0x35c/0x1660 [ 2600.472064][T21382] ? find_held_lock+0x2d/0x110 [ 2600.476908][T21382] ? oom_killer_disable+0x2b0/0x2b0 [ 2600.482145][T21382] ? rcu_read_unlock+0x9/0x60 [ 2600.486888][T21382] ? find_held_lock+0x2d/0x110 [ 2600.491736][T21382] mem_cgroup_out_of_memory+0x206/0x270 [ 2600.497347][T21382] ? mem_cgroup_margin+0x130/0x130 [ 2600.502505][T21382] ? lock_downgrade+0x690/0x690 [ 2600.507413][T21382] try_charge_memcg+0xf9b/0x13b0 [ 2600.512389][T21382] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2600.518403][T21382] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2600.524345][T21382] ? lock_downgrade+0x690/0x690 [ 2600.529245][T21382] ? lock_downgrade+0x690/0x690 [ 2600.534146][T21382] obj_cgroup_charge+0x2af/0x5e0 [ 2600.539123][T21382] ? __anon_vma_prepare+0x64/0x580 [ 2600.544277][T21382] kmem_cache_alloc+0xb1/0x3b0 [ 2600.549091][T21382] __anon_vma_prepare+0x64/0x580 [ 2600.554065][T21382] ? __pmd_alloc+0x30c/0x5d0 [ 2600.558692][T21382] __handle_mm_fault+0x3a8f/0x3e60 [ 2600.563864][T21382] ? vm_iomap_memory+0x190/0x190 [ 2600.568876][T21382] handle_mm_fault+0x2ba/0x9c0 [ 2600.573688][T21382] do_user_addr_fault+0x47e/0x1240 [ 2600.578839][T21382] ? rcu_is_watching+0x12/0xb0 [ 2600.583643][T21382] exc_page_fault+0x98/0x170 [ 2600.588281][T21382] asm_exc_page_fault+0x26/0x30 [ 2600.593160][T21382] RIP: 0033:0x7f493322bde9 [ 2600.597600][T21382] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2600.617238][T21382] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2600.623330][T21382] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2600.631339][T21382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2600.639334][T21382] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2600.647325][T21382] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027a68c [ 2600.655493][T21382] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2600.663515][T21382] 05:56:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x8a03, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:54 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7c02, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2600.734060][T21382] memory: usage 307200kB, limit 307200kB, failcnt 16903 [ 2600.762968][T21382] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2600.771392][T21382] Memory cgroup stats for /syz2: [ 2600.771658][T21382] anon 135168 [ 2600.771658][T21382] file 684032 [ 2600.771658][T21382] kernel 313753600 [ 2600.771658][T21382] kernel_stack 65536 [ 2600.771658][T21382] pagetables 81920 [ 2600.771658][T21382] sec_pagetables 0 [ 2600.771658][T21382] percpu 5387328 [ 2600.771658][T21382] sock 0 [ 2600.771658][T21382] vmalloc 8192 [ 2600.771658][T21382] shmem 679936 [ 2600.771658][T21382] zswap 0 [ 2600.771658][T21382] zswapped 0 [ 2600.771658][T21382] file_mapped 630784 [ 2600.771658][T21382] file_dirty 4096 [ 2600.771658][T21382] file_writeback 0 [ 2600.771658][T21382] swapcached 0 [ 2600.771658][T21382] anon_thp 0 05:56:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x9001, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2600.771658][T21382] file_thp 0 [ 2600.771658][T21382] shmem_thp 0 [ 2600.771658][T21382] inactive_anon 0 [ 2600.771658][T21382] active_anon 815104 [ 2600.771658][T21382] inactive_file 0 [ 2600.771658][T21382] active_file 4096 [ 2600.771658][T21382] unevictable 0 [ 2600.771658][T21382] slab_reclaimable 512264 [ 2600.771658][T21382] slab_unreclaimable 307665392 [ 2600.771658][T21382] slab 308177656 [ 2600.771658][T21382] workingset_refault_anon 0 [ 2600.771658][T21382] workingset_refault_file 2 [ 2600.771658][T21382] workingset_activate_anon 0 [ 2600.771658][T21382] workingset_activate_file 0 [ 2600.771658][T21382] workingset_restore_anon 0 [ 2600.771658][T21382] workingset_restore_file 1 [ 2600.771658][T21382] workingset_nodereclaim 0 [ 2600.771658][T21382] pgscan 1960 [ 2600.771658][T21382] pgsteal 131 [ 2600.771658][T21382] pgscan_kswapd 109 [ 2600.771658][T21382] pgscan_direct 1851 [ 2600.771658][T21382] pgscan_khugepaged 0 [ 2600.771658][T21382] pgsteal_kswapd 108 [ 2600.771658][T21382] pgsteal_direct 23 [ 2600.771658][T21382] pgsteal_khugepaged 0 [ 2600.771658][T21382] pgfault 1010532 [ 2600.771658][T21382] pgmajfault 0 [ 2600.771658][T21382] pgrefill 14136 [ 2600.771658][T21382] pgactivate 1806 [ 2600.771658][T21382] pgdeactivate 0 [ 2600.771658][T21382] pglazyfree 0 [ 2600.771658][T21382] pglazyfreed 0 [ 2600.771658][T21382] zswpin 0 [ 2600.771658][T21382] zswpout 0 [ 2600.966915][T21382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21382,uid=0 05:56:55 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5a010000}, 0x0) [ 2600.983424][T21382] Memory cgroup out of memory: Killed process 21382 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:56:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x9002, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:55 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c19b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2601.079423][T21411] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2601.109982][T21411] CPU: 0 PID: 21411 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2601.120492][T21411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2601.130597][T21411] Call Trace: [ 2601.133934][T21411] [ 2601.136910][T21411] dump_stack_lvl+0x136/0x150 [ 2601.141684][T21411] dump_header+0x10a/0xd70 [ 2601.146179][T21411] oom_kill_process+0x25d/0x600 [ 2601.151293][T21411] out_of_memory+0x35c/0x1660 [ 2601.156057][T21411] ? find_held_lock+0x2d/0x110 [ 2601.160902][T21411] ? oom_killer_disable+0x2b0/0x2b0 [ 2601.166164][T21411] ? rcu_read_unlock+0x9/0x60 [ 2601.170903][T21411] ? find_held_lock+0x2d/0x110 [ 2601.175734][T21411] mem_cgroup_out_of_memory+0x206/0x270 [ 2601.181373][T21411] ? mem_cgroup_margin+0x130/0x130 [ 2601.186598][T21411] ? lock_downgrade+0x690/0x690 [ 2601.191647][T21411] try_charge_memcg+0xf9b/0x13b0 [ 2601.196716][T21411] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2601.202737][T21411] ? rcu_read_unlock+0x9/0x60 [ 2601.207459][T21411] ? lock_downgrade+0x690/0x690 [ 2601.212373][T21411] charge_memcg+0x90/0x3b0 [ 2601.216827][T21411] __mem_cgroup_charge+0x2b/0x90 [ 2601.221888][T21411] do_wp_page+0x8eb/0x3530 [ 2601.226356][T21411] ? lock_release+0x670/0x670 [ 2601.231064][T21411] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2601.236474][T21411] ? do_raw_spin_lock+0x124/0x2b0 [ 2601.241540][T21411] ? spin_bug+0x1c0/0x1c0 [ 2601.245904][T21411] ? lock_downgrade+0x690/0x690 [ 2601.250792][T21411] __handle_mm_fault+0x19a1/0x3e60 [ 2601.256128][T21411] ? vm_iomap_memory+0x190/0x190 [ 2601.261129][T21411] handle_mm_fault+0x2ba/0x9c0 [ 2601.265939][T21411] do_user_addr_fault+0x47e/0x1240 [ 2601.271093][T21411] ? rcu_is_watching+0x12/0xb0 [ 2601.275899][T21411] exc_page_fault+0x98/0x170 [ 2601.280539][T21411] asm_exc_page_fault+0x26/0x30 [ 2601.285423][T21411] RIP: 0033:0x7ffae1839610 [ 2601.289863][T21411] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2601.309498][T21411] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2601.315593][T21411] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2601.323587][T21411] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2601.331583][T21411] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2601.339694][T21411] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2601.347969][T21411] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2601.356238][T21411] ? __sys_socket+0x7c/0x250 [ 2601.360881][T21411] [ 2601.369080][T21411] memory: usage 307200kB, limit 307200kB, failcnt 28090 [ 2601.388135][T21438] wireguard53: entered promiscuous mode [ 2601.394768][T21411] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2601.402655][T21411] Memory cgroup stats for /syz3: [ 2601.402916][T21411] anon 106496 [ 2601.402916][T21411] file 733184 [ 2601.402916][T21411] kernel 313733120 [ 2601.402916][T21411] kernel_stack 65536 [ 2601.402916][T21411] pagetables 69632 [ 2601.402916][T21411] sec_pagetables 0 [ 2601.402916][T21411] percpu 5375488 [ 2601.402916][T21411] sock 0 [ 2601.402916][T21411] vmalloc 8192 [ 2601.402916][T21411] shmem 733184 [ 2601.402916][T21411] zswap 0 [ 2601.402916][T21411] zswapped 0 [ 2601.402916][T21411] file_mapped 667648 [ 2601.402916][T21411] file_dirty 0 [ 2601.402916][T21411] file_writeback 0 [ 2601.402916][T21411] swapcached 0 [ 2601.402916][T21411] anon_thp 0 [ 2601.402916][T21411] file_thp 0 [ 2601.402916][T21411] shmem_thp 0 [ 2601.402916][T21411] inactive_anon 0 [ 2601.402916][T21411] active_anon 839680 [ 2601.402916][T21411] inactive_file 0 [ 2601.402916][T21411] active_file 0 [ 2601.402916][T21411] unevictable 0 [ 2601.402916][T21411] slab_reclaimable 1217464 [ 2601.402916][T21411] slab_unreclaimable 306964000 [ 2601.402916][T21411] slab 308181464 [ 2601.402916][T21411] workingset_refault_anon 0 [ 2601.402916][T21411] workingset_refault_file 130 [ 2601.402916][T21411] workingset_activate_anon 0 [ 2601.402916][T21411] workingset_activate_file 0 [ 2601.402916][T21411] workingset_restore_anon 0 [ 2601.402916][T21411] workingset_restore_file 0 [ 2601.402916][T21411] workingset_nodereclaim 0 [ 2601.402916][T21411] pgscan 3117 [ 2601.402916][T21411] pgsteal 939 [ 2601.402916][T21411] pgscan_kswapd 0 [ 2601.402916][T21411] pgscan_direct 3117 [ 2601.402916][T21411] pgscan_khugepaged 0 [ 2601.402916][T21411] pgsteal_kswapd 0 [ 2601.402916][T21411] pgsteal_direct 939 [ 2601.402916][T21411] pgsteal_khugepaged 0 [ 2601.402916][T21411] pgfault 575916 [ 2601.402916][T21411] pgmajfault 0 [ 2601.402916][T21411] pgrefill 79949 [ 2601.402916][T21411] pgactivate 862 [ 2601.402916][T21411] pgdeactivate 0 [ 2601.402916][T21411] pglazyfree 0 [ 2601.402916][T21411] pglazyfreed 0 [ 2601.402916][T21411] zswpin 0 [ 2601.402916][T21411] zswpout 0 05:56:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x9401, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:55 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x7e03, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2601.600212][T21411] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21411,uid=0 [ 2601.624600][T21411] Memory cgroup out of memory: Killed process 21411 (syz-executor.3) total-vm:54548kB, anon-rss:416kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:56:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x81020000) [ 2601.757184][T21434] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2601.768014][T21434] CPU: 1 PID: 21434 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2601.778504][T21434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2601.788616][T21434] Call Trace: [ 2601.791946][T21434] [ 2601.794941][T21434] dump_stack_lvl+0x136/0x150 [ 2601.799701][T21434] dump_header+0x10a/0xd70 05:56:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xaa5b, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2601.804206][T21434] oom_kill_process+0x25d/0x600 [ 2601.809137][T21434] out_of_memory+0x35c/0x1660 [ 2601.813897][T21434] ? find_held_lock+0x2d/0x110 [ 2601.818846][T21434] ? oom_killer_disable+0x2b0/0x2b0 [ 2601.824119][T21434] ? rcu_read_unlock+0x9/0x60 [ 2601.828864][T21434] ? find_held_lock+0x2d/0x110 [ 2601.833709][T21434] mem_cgroup_out_of_memory+0x206/0x270 [ 2601.840215][T21434] ? mem_cgroup_margin+0x130/0x130 [ 2601.845410][T21434] ? lock_downgrade+0x690/0x690 [ 2601.850354][T21434] try_charge_memcg+0xf9b/0x13b0 [ 2601.855365][T21434] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2601.861411][T21434] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2601.867298][T21434] ? lock_downgrade+0x690/0x690 [ 2601.872215][T21434] ? lock_downgrade+0x690/0x690 [ 2601.877136][T21434] obj_cgroup_charge+0x2af/0x5e0 [ 2601.882144][T21434] ? __anon_vma_prepare+0x64/0x580 [ 2601.887328][T21434] kmem_cache_alloc+0xb1/0x3b0 [ 2601.892166][T21434] __anon_vma_prepare+0x64/0x580 [ 2601.897139][T21434] ? __pmd_alloc+0x30c/0x5d0 [ 2601.901765][T21434] __handle_mm_fault+0x3a8f/0x3e60 [ 2601.906935][T21434] ? vm_iomap_memory+0x190/0x190 [ 2601.911927][T21434] handle_mm_fault+0x2ba/0x9c0 [ 2601.916744][T21434] do_user_addr_fault+0x47e/0x1240 [ 2601.921940][T21434] ? rcu_is_watching+0x12/0xb0 [ 2601.926770][T21434] exc_page_fault+0x98/0x170 [ 2601.931432][T21434] asm_exc_page_fault+0x26/0x30 [ 2601.936321][T21434] RIP: 0033:0x7f493322bde9 [ 2601.940776][T21434] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2601.960440][T21434] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2601.966530][T21434] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2601.974540][T21434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2601.982556][T21434] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2601.990842][T21434] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027aa13 [ 2601.998864][T21434] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 05:56:56 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2602.006902][T21434] [ 2602.015768][T21434] memory: usage 307200kB, limit 307200kB, failcnt 17018 [ 2602.025038][T21434] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2602.052684][T21434] Memory cgroup stats for /syz2: [ 2602.052978][T21434] anon 135168 [ 2602.052978][T21434] file 684032 [ 2602.052978][T21434] kernel 313753600 [ 2602.052978][T21434] kernel_stack 65536 [ 2602.052978][T21434] pagetables 81920 [ 2602.052978][T21434] sec_pagetables 0 [ 2602.052978][T21434] percpu 5387328 [ 2602.052978][T21434] sock 0 [ 2602.052978][T21434] vmalloc 8192 [ 2602.052978][T21434] shmem 679936 [ 2602.052978][T21434] zswap 0 [ 2602.052978][T21434] zswapped 0 [ 2602.052978][T21434] file_mapped 630784 [ 2602.052978][T21434] file_dirty 4096 [ 2602.052978][T21434] file_writeback 0 [ 2602.052978][T21434] swapcached 0 [ 2602.052978][T21434] anon_thp 0 [ 2602.052978][T21434] file_thp 0 [ 2602.052978][T21434] shmem_thp 0 [ 2602.052978][T21434] inactive_anon 0 [ 2602.052978][T21434] active_anon 815104 [ 2602.052978][T21434] inactive_file 0 [ 2602.052978][T21434] active_file 4096 [ 2602.052978][T21434] unevictable 0 [ 2602.052978][T21434] slab_reclaimable 512264 [ 2602.052978][T21434] slab_unreclaimable 307665392 [ 2602.052978][T21434] slab 308177656 [ 2602.052978][T21434] workingset_refault_anon 0 [ 2602.052978][T21434] workingset_refault_file 2 [ 2602.052978][T21434] workingset_activate_anon 0 [ 2602.052978][T21434] workingset_activate_file 0 [ 2602.052978][T21434] workingset_restore_anon 0 [ 2602.052978][T21434] workingset_restore_file 1 [ 2602.052978][T21434] workingset_nodereclaim 0 [ 2602.052978][T21434] pgscan 1960 [ 2602.052978][T21434] pgsteal 131 [ 2602.052978][T21434] pgscan_kswapd 109 [ 2602.052978][T21434] pgscan_direct 1851 [ 2602.052978][T21434] pgscan_khugepaged 0 [ 2602.052978][T21434] pgsteal_kswapd 108 [ 2602.052978][T21434] pgsteal_direct 23 [ 2602.052978][T21434] pgsteal_khugepaged 0 [ 2602.052978][T21434] pgfault 1010593 [ 2602.052978][T21434] pgmajfault 0 [ 2602.052978][T21434] pgrefill 14244 [ 2602.052978][T21434] pgactivate 1806 [ 2602.052978][T21434] pgdeactivate 0 [ 2602.052978][T21434] pglazyfree 0 [ 2602.052978][T21434] pglazyfreed 0 [ 2602.052978][T21434] zswpin 0 [ 2602.052978][T21434] zswpout 0 05:56:56 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c19c}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5a030000}, 0x0) 05:56:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xb401, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2602.252940][T21434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21434,uid=0 [ 2602.271084][T21434] Memory cgroup out of memory: Killed process 21434 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2602.349587][T21467] wireguard53: entered promiscuous mode [ 2602.381776][T21456] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2602.392408][T21456] CPU: 0 PID: 21456 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2602.402886][T21456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2602.413067][T21456] Call Trace: [ 2602.416368][T21456] [ 2602.419318][T21456] dump_stack_lvl+0x136/0x150 [ 2602.424072][T21456] dump_header+0x10a/0xd70 [ 2602.428734][T21456] oom_kill_process+0x25d/0x600 [ 2602.433628][T21456] out_of_memory+0x35c/0x1660 [ 2602.438433][T21456] ? find_held_lock+0x2d/0x110 [ 2602.443245][T21456] ? oom_killer_disable+0x2b0/0x2b0 [ 2602.448486][T21456] ? rcu_read_unlock+0x9/0x60 [ 2602.453199][T21456] ? find_held_lock+0x2d/0x110 [ 2602.458015][T21456] mem_cgroup_out_of_memory+0x206/0x270 [ 2602.463606][T21456] ? mem_cgroup_margin+0x130/0x130 [ 2602.468760][T21456] ? lock_downgrade+0x690/0x690 [ 2602.473655][T21456] try_charge_memcg+0xf9b/0x13b0 [ 2602.478626][T21456] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2602.484644][T21456] ? rcu_read_unlock+0x9/0x60 [ 2602.489362][T21456] ? lock_downgrade+0x690/0x690 [ 2602.494370][T21456] charge_memcg+0x90/0x3b0 [ 2602.498820][T21456] __mem_cgroup_charge+0x2b/0x90 [ 2602.503804][T21456] do_wp_page+0x8eb/0x3530 [ 2602.508282][T21456] ? lock_release+0x670/0x670 [ 2602.513009][T21456] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2602.518433][T21456] ? do_raw_spin_lock+0x124/0x2b0 [ 2602.523678][T21456] ? spin_bug+0x1c0/0x1c0 [ 2602.528039][T21456] ? lock_downgrade+0x690/0x690 [ 2602.532928][T21456] __handle_mm_fault+0x19a1/0x3e60 [ 2602.538086][T21456] ? vm_iomap_memory+0x190/0x190 [ 2602.543371][T21456] handle_mm_fault+0x2ba/0x9c0 [ 2602.548215][T21456] do_user_addr_fault+0x47e/0x1240 [ 2602.553459][T21456] ? rcu_is_watching+0x12/0xb0 [ 2602.558279][T21456] exc_page_fault+0x98/0x170 [ 2602.562927][T21456] asm_exc_page_fault+0x26/0x30 [ 2602.567807][T21456] RIP: 0033:0x7ffae1839610 [ 2602.572349][T21456] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2602.591987][T21456] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2602.598102][T21456] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2602.606094][T21456] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2602.614088][T21456] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2602.622153][T21456] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2602.630173][T21456] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2602.638167][T21456] ? __sys_socket+0x7c/0x250 [ 2602.642800][T21456] [ 2602.667970][T21456] memory: usage 307200kB, limit 307200kB, failcnt 28200 [ 2602.730395][T21456] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2602.770053][T21456] Memory cgroup stats for /syz3: [ 2602.770356][T21456] anon 106496 [ 2602.770356][T21456] file 733184 [ 2602.770356][T21456] kernel 313733120 [ 2602.770356][T21456] kernel_stack 65536 [ 2602.770356][T21456] pagetables 69632 [ 2602.770356][T21456] sec_pagetables 0 [ 2602.770356][T21456] percpu 5375488 [ 2602.770356][T21456] sock 0 [ 2602.770356][T21456] vmalloc 8192 [ 2602.770356][T21456] shmem 733184 [ 2602.770356][T21456] zswap 0 [ 2602.770356][T21456] zswapped 0 [ 2602.770356][T21456] file_mapped 667648 [ 2602.770356][T21456] file_dirty 0 [ 2602.770356][T21456] file_writeback 0 [ 2602.770356][T21456] swapcached 0 05:56:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xba01, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2602.770356][T21456] anon_thp 0 [ 2602.770356][T21456] file_thp 0 [ 2602.770356][T21456] shmem_thp 0 [ 2602.770356][T21456] inactive_anon 0 [ 2602.770356][T21456] active_anon 839680 [ 2602.770356][T21456] inactive_file 0 [ 2602.770356][T21456] active_file 0 [ 2602.770356][T21456] unevictable 0 [ 2602.770356][T21456] slab_reclaimable 1217464 [ 2602.770356][T21456] slab_unreclaimable 306964000 [ 2602.770356][T21456] slab 308181464 [ 2602.770356][T21456] workingset_refault_anon 0 [ 2602.770356][T21456] workingset_refault_file 130 [ 2602.770356][T21456] workingset_activate_anon 0 [ 2602.770356][T21456] workingset_activate_file 0 [ 2602.770356][T21456] workingset_restore_anon 0 [ 2602.770356][T21456] workingset_restore_file 0 [ 2602.770356][T21456] workingset_nodereclaim 0 [ 2602.770356][T21456] pgscan 3117 [ 2602.770356][T21456] pgsteal 939 [ 2602.770356][T21456] pgscan_kswapd 0 [ 2602.770356][T21456] pgscan_direct 3117 [ 2602.770356][T21456] pgscan_khugepaged 0 [ 2602.770356][T21456] pgsteal_kswapd 0 [ 2602.770356][T21456] pgsteal_direct 939 [ 2602.770356][T21456] pgsteal_khugepaged 0 [ 2602.770356][T21456] pgfault 575960 05:56:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xba02, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2602.770356][T21456] pgmajfault 0 [ 2602.770356][T21456] pgrefill 79949 [ 2602.770356][T21456] pgactivate 862 [ 2602.770356][T21456] pgdeactivate 0 [ 2602.770356][T21456] pglazyfree 0 [ 2602.770356][T21456] pglazyfreed 0 [ 2602.770356][T21456] zswpin 0 [ 2602.770356][T21456] zswpout 0 [ 2602.960187][T21456] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21456,uid=0 05:56:57 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x84010000) 05:56:57 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8003, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2602.993646][T21456] Memory cgroup out of memory: Killed process 21456 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2603.022436][T21471] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2603.061937][T21471] CPU: 1 PID: 21471 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2603.072438][T21471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2603.082551][T21471] Call Trace: [ 2603.085876][T21471] [ 2603.088853][T21471] dump_stack_lvl+0x136/0x150 [ 2603.093616][T21471] dump_header+0x10a/0xd70 [ 2603.098107][T21471] oom_kill_process+0x25d/0x600 [ 2603.103030][T21471] out_of_memory+0x35c/0x1660 [ 2603.107813][T21471] ? oom_killer_disable+0x2b0/0x2b0 [ 2603.113082][T21471] ? rcu_read_unlock+0x9/0x60 [ 2603.117829][T21471] ? find_held_lock+0x2d/0x110 [ 2603.122680][T21471] mem_cgroup_out_of_memory+0x206/0x270 [ 2603.128309][T21471] ? mem_cgroup_margin+0x130/0x130 [ 2603.133488][T21471] ? lock_downgrade+0x690/0x690 [ 2603.138442][T21471] try_charge_memcg+0xf9b/0x13b0 [ 2603.143456][T21471] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2603.149514][T21471] ? rcu_read_unlock+0x9/0x60 [ 2603.154265][T21471] ? lock_downgrade+0x690/0x690 [ 2603.159191][T21471] charge_memcg+0x90/0x3b0 [ 2603.163680][T21471] __mem_cgroup_charge+0x2b/0x90 [ 2603.168685][T21471] do_wp_page+0x8eb/0x3530 [ 2603.173201][T21471] ? lock_release+0x670/0x670 [ 2603.177955][T21471] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2603.183374][T21471] ? do_raw_spin_lock+0x124/0x2b0 [ 2603.188435][T21471] ? spin_bug+0x1c0/0x1c0 [ 2603.192798][T21471] ? lock_downgrade+0x690/0x690 [ 2603.197694][T21471] __handle_mm_fault+0x19a1/0x3e60 [ 2603.202852][T21471] ? vm_iomap_memory+0x190/0x190 [ 2603.207846][T21471] handle_mm_fault+0x2ba/0x9c0 [ 2603.212655][T21471] do_user_addr_fault+0x47e/0x1240 [ 2603.217804][T21471] ? rcu_is_watching+0x12/0xb0 [ 2603.222613][T21471] exc_page_fault+0x98/0x170 [ 2603.227260][T21471] asm_exc_page_fault+0x26/0x30 [ 2603.232143][T21471] RIP: 0033:0x7f4933239610 [ 2603.236580][T21471] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2603.256238][T21471] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2603.262358][T21471] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2603.270357][T21471] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2603.278354][T21471] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2603.286434][T21471] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2603.294427][T21471] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2603.302431][T21471] ? apparmor_socket_create+0x13c/0x670 [ 2603.308035][T21471] [ 2603.318790][T21471] memory: usage 307188kB, limit 307200kB, failcnt 17114 [ 2603.329475][T21471] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2603.336944][T21471] Memory cgroup stats for /syz2: [ 2603.337229][T21471] anon 126976 [ 2603.337229][T21471] file 684032 [ 2603.337229][T21471] kernel 313745408 [ 2603.337229][T21471] kernel_stack 65536 [ 2603.337229][T21471] pagetables 73728 [ 2603.337229][T21471] sec_pagetables 0 [ 2603.337229][T21471] percpu 5387328 [ 2603.337229][T21471] sock 0 [ 2603.337229][T21471] vmalloc 8192 [ 2603.337229][T21471] shmem 679936 [ 2603.337229][T21471] zswap 0 [ 2603.337229][T21471] zswapped 0 [ 2603.337229][T21471] file_mapped 630784 [ 2603.337229][T21471] file_dirty 4096 [ 2603.337229][T21471] file_writeback 0 [ 2603.337229][T21471] swapcached 0 [ 2603.337229][T21471] anon_thp 0 [ 2603.337229][T21471] file_thp 0 [ 2603.337229][T21471] shmem_thp 0 [ 2603.337229][T21471] inactive_anon 708608 [ 2603.337229][T21471] active_anon 98304 [ 2603.337229][T21471] inactive_file 0 [ 2603.337229][T21471] active_file 4096 [ 2603.337229][T21471] unevictable 0 [ 2603.337229][T21471] slab_reclaimable 512264 [ 2603.337229][T21471] slab_unreclaimable 307665392 [ 2603.337229][T21471] slab 308177656 [ 2603.337229][T21471] workingset_refault_anon 0 [ 2603.337229][T21471] workingset_refault_file 2 [ 2603.337229][T21471] workingset_activate_anon 0 [ 2603.337229][T21471] workingset_activate_file 0 [ 2603.337229][T21471] workingset_restore_anon 0 [ 2603.337229][T21471] workingset_restore_file 1 [ 2603.337229][T21471] workingset_nodereclaim 0 [ 2603.337229][T21471] pgscan 1960 [ 2603.337229][T21471] pgsteal 131 [ 2603.337229][T21471] pgscan_kswapd 109 [ 2603.337229][T21471] pgscan_direct 1851 [ 2603.337229][T21471] pgscan_khugepaged 0 [ 2603.337229][T21471] pgsteal_kswapd 108 [ 2603.337229][T21471] pgsteal_direct 23 [ 2603.337229][T21471] pgsteal_khugepaged 0 [ 2603.337229][T21471] pgfault 1010650 [ 2603.337229][T21471] pgmajfault 0 [ 2603.337229][T21471] pgrefill 14307 [ 2603.337229][T21471] pgactivate 1806 [ 2603.337229][T21471] pgdeactivate 0 [ 2603.337229][T21471] pglazyfree 0 [ 2603.337229][T21471] pglazyfreed 0 05:56:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xca00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:57 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c19d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2603.337229][T21471] zswpin 0 [ 2603.337229][T21471] zswpout 0 05:56:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5c030000}, 0x0) 05:56:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xca01, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2603.561083][T21471] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21471,uid=0 [ 2603.577636][T21471] Memory cgroup out of memory: Killed process 21471 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2603.658591][T21494] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2603.670630][T21505] wireguard53: entered promiscuous mode [ 2603.680226][T21494] CPU: 0 PID: 21494 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2603.690729][T21494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2603.700841][T21494] Call Trace: [ 2603.704166][T21494] [ 2603.707145][T21494] dump_stack_lvl+0x136/0x150 [ 2603.711925][T21494] dump_header+0x10a/0xd70 [ 2603.716418][T21494] oom_kill_process+0x25d/0x600 [ 2603.721350][T21494] out_of_memory+0x35c/0x1660 [ 2603.726112][T21494] ? find_held_lock+0x2d/0x110 [ 2603.730959][T21494] ? oom_killer_disable+0x2b0/0x2b0 [ 2603.736229][T21494] ? rcu_read_unlock+0x9/0x60 [ 2603.740982][T21494] ? find_held_lock+0x2d/0x110 [ 2603.745828][T21494] mem_cgroup_out_of_memory+0x206/0x270 [ 2603.751580][T21494] ? mem_cgroup_margin+0x130/0x130 [ 2603.756770][T21494] ? lock_downgrade+0x690/0x690 [ 2603.761703][T21494] try_charge_memcg+0xf9b/0x13b0 [ 2603.766700][T21494] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2603.772730][T21494] ? rcu_read_unlock+0x9/0x60 [ 2603.777472][T21494] ? lock_downgrade+0x690/0x690 [ 2603.782388][T21494] charge_memcg+0x90/0x3b0 [ 2603.786842][T21494] __mem_cgroup_charge+0x2b/0x90 [ 2603.791813][T21494] ? copy_mc_to_kernel+0x3e/0x90 [ 2603.796799][T21494] do_wp_page+0x8eb/0x3530 [ 2603.801270][T21494] ? lock_release+0x670/0x670 [ 2603.805988][T21494] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2603.811404][T21494] ? do_raw_spin_lock+0x124/0x2b0 [ 2603.816485][T21494] ? spin_bug+0x1c0/0x1c0 [ 2603.820849][T21494] ? lock_downgrade+0x690/0x690 [ 2603.825747][T21494] __handle_mm_fault+0x19a1/0x3e60 [ 2603.830905][T21494] ? vm_iomap_memory+0x190/0x190 [ 2603.835906][T21494] handle_mm_fault+0x2ba/0x9c0 [ 2603.840719][T21494] do_user_addr_fault+0x47e/0x1240 [ 2603.845871][T21494] ? rcu_is_watching+0x12/0xb0 [ 2603.850684][T21494] exc_page_fault+0x98/0x170 [ 2603.855332][T21494] asm_exc_page_fault+0x26/0x30 [ 2603.860245][T21494] RIP: 0033:0x7ffae1836f7e [ 2603.864789][T21494] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2603.884468][T21494] RSP: 002b:00007ffdc9b413b0 EFLAGS: 00010246 [ 2603.890587][T21494] RAX: 00007ffae19abf80 RBX: 00007ffae19abf8c RCX: 0000000000000000 [ 2603.898669][T21494] RDX: 0000000000000000 RSI: 00007ffae19abf88 RDI: 0000000000000000 [ 2603.906666][T21494] RBP: 00007ffae19abf80 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2603.914707][T21494] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffae19abf8c [ 2603.922718][T21494] R13: 00007ffae1400060 R14: 00007ffae19abf80 R15: 0000000000000000 [ 2603.930755][T21494] [ 2603.939275][T21494] memory: usage 307184kB, limit 307200kB, failcnt 28303 [ 2603.956183][T21494] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2603.963875][T21494] Memory cgroup stats for /syz3: [ 2603.964180][T21494] anon 90112 [ 2603.964180][T21494] file 733184 [ 2603.964180][T21494] kernel 313733120 [ 2603.964180][T21494] kernel_stack 65536 [ 2603.964180][T21494] pagetables 69632 [ 2603.964180][T21494] sec_pagetables 0 [ 2603.964180][T21494] percpu 5375488 [ 2603.964180][T21494] sock 0 [ 2603.964180][T21494] vmalloc 8192 [ 2603.964180][T21494] shmem 733184 [ 2603.964180][T21494] zswap 0 [ 2603.964180][T21494] zswapped 0 [ 2603.964180][T21494] file_mapped 667648 [ 2603.964180][T21494] file_dirty 0 [ 2603.964180][T21494] file_writeback 0 [ 2603.964180][T21494] swapcached 0 [ 2603.964180][T21494] anon_thp 0 [ 2603.964180][T21494] file_thp 0 [ 2603.964180][T21494] shmem_thp 0 [ 2603.964180][T21494] inactive_anon 0 [ 2603.964180][T21494] active_anon 823296 [ 2603.964180][T21494] inactive_file 0 [ 2603.964180][T21494] active_file 0 [ 2603.964180][T21494] unevictable 0 [ 2603.964180][T21494] slab_reclaimable 1215536 [ 2603.964180][T21494] slab_unreclaimable 306963352 [ 2603.964180][T21494] slab 308178888 [ 2603.964180][T21494] workingset_refault_anon 0 [ 2603.964180][T21494] workingset_refault_file 130 [ 2603.964180][T21494] workingset_activate_anon 0 [ 2603.964180][T21494] workingset_activate_file 0 [ 2603.964180][T21494] workingset_restore_anon 0 [ 2603.964180][T21494] workingset_restore_file 0 [ 2603.964180][T21494] workingset_nodereclaim 0 [ 2603.964180][T21494] pgscan 3117 [ 2603.964180][T21494] pgsteal 939 [ 2603.964180][T21494] pgscan_kswapd 0 [ 2603.964180][T21494] pgscan_direct 3117 [ 2603.964180][T21494] pgscan_khugepaged 0 [ 2603.964180][T21494] pgsteal_kswapd 0 [ 2603.964180][T21494] pgsteal_direct 939 [ 2603.964180][T21494] pgsteal_khugepaged 0 [ 2603.964180][T21494] pgfault 575998 [ 2603.964180][T21494] pgmajfault 0 [ 2603.964180][T21494] pgrefill 79949 [ 2603.964180][T21494] pgactivate 862 [ 2603.964180][T21494] pgdeactivate 0 [ 2603.964180][T21494] pglazyfree 0 [ 2603.964180][T21494] pglazyfreed 0 [ 2603.964180][T21494] zswpin 0 [ 2603.964180][T21494] zswpout 0 05:56:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x88f60600) [ 2604.159216][T21494] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21494,uid=0 [ 2604.175630][T21494] Memory cgroup out of memory: Killed process 21494 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2604.234178][T21516] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2604.289167][T21516] CPU: 0 PID: 21516 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2604.299673][T21516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2604.309777][T21516] Call Trace: [ 2604.313102][T21516] [ 2604.316084][T21516] dump_stack_lvl+0x136/0x150 [ 2604.320835][T21516] dump_header+0x10a/0xd70 [ 2604.325414][T21516] oom_kill_process+0x25d/0x600 [ 2604.330343][T21516] out_of_memory+0x35c/0x1660 [ 2604.335104][T21516] ? find_held_lock+0x2d/0x110 [ 2604.339942][T21516] ? oom_killer_disable+0x2b0/0x2b0 [ 2604.345242][T21516] ? rcu_read_unlock+0x9/0x60 [ 2604.349996][T21516] ? find_held_lock+0x2d/0x110 [ 2604.354844][T21516] mem_cgroup_out_of_memory+0x206/0x270 [ 2604.360462][T21516] ? mem_cgroup_margin+0x130/0x130 [ 2604.365659][T21516] ? lock_downgrade+0x690/0x690 [ 2604.370591][T21516] try_charge_memcg+0xf9b/0x13b0 [ 2604.375574][T21516] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2604.381637][T21516] ? rcu_read_unlock+0x9/0x60 [ 2604.386363][T21516] ? lock_downgrade+0x690/0x690 [ 2604.391266][T21516] charge_memcg+0x90/0x3b0 [ 2604.395716][T21516] __mem_cgroup_charge+0x2b/0x90 [ 2604.400694][T21516] do_wp_page+0x8eb/0x3530 [ 2604.405154][T21516] ? lock_release+0x670/0x670 [ 2604.409859][T21516] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2604.415286][T21516] ? do_raw_spin_lock+0x124/0x2b0 [ 2604.420367][T21516] ? spin_bug+0x1c0/0x1c0 [ 2604.424731][T21516] ? lock_downgrade+0x690/0x690 [ 2604.429631][T21516] __handle_mm_fault+0x19a1/0x3e60 [ 2604.434990][T21516] ? vm_iomap_memory+0x190/0x190 [ 2604.440010][T21516] handle_mm_fault+0x2ba/0x9c0 [ 2604.444839][T21516] do_user_addr_fault+0x47e/0x1240 [ 2604.450085][T21516] ? rcu_is_watching+0x12/0xb0 [ 2604.454885][T21516] exc_page_fault+0x98/0x170 [ 2604.459524][T21516] asm_exc_page_fault+0x26/0x30 [ 2604.464405][T21516] RIP: 0033:0x7f4933239610 [ 2604.468842][T21516] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2604.488479][T21516] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2604.494578][T21516] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2604.502570][T21516] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2604.510567][T21516] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2604.518559][T21516] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2604.526567][T21516] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2604.534565][T21516] ? apparmor_socket_create+0x13c/0x670 05:56:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xce00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:56:58 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2604.540262][T21516] 05:56:58 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8100, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2604.570255][T21516] memory: usage 307188kB, limit 307200kB, failcnt 17221 [ 2604.591950][T21516] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2604.609065][T21516] Memory cgroup stats for /syz2: [ 2604.609360][T21516] anon 126976 [ 2604.609360][T21516] file 684032 [ 2604.609360][T21516] kernel 313745408 [ 2604.609360][T21516] kernel_stack 65536 [ 2604.609360][T21516] pagetables 73728 [ 2604.609360][T21516] sec_pagetables 0 [ 2604.609360][T21516] percpu 5387328 [ 2604.609360][T21516] sock 0 [ 2604.609360][T21516] vmalloc 8192 [ 2604.609360][T21516] shmem 679936 [ 2604.609360][T21516] zswap 0 [ 2604.609360][T21516] zswapped 0 [ 2604.609360][T21516] file_mapped 630784 [ 2604.609360][T21516] file_dirty 4096 [ 2604.609360][T21516] file_writeback 0 [ 2604.609360][T21516] swapcached 0 05:56:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xd002, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2604.609360][T21516] anon_thp 0 [ 2604.609360][T21516] file_thp 0 [ 2604.609360][T21516] shmem_thp 0 [ 2604.609360][T21516] inactive_anon 708608 [ 2604.609360][T21516] active_anon 98304 [ 2604.609360][T21516] inactive_file 0 [ 2604.609360][T21516] active_file 4096 [ 2604.609360][T21516] unevictable 0 [ 2604.609360][T21516] slab_reclaimable 512264 [ 2604.609360][T21516] slab_unreclaimable 307665392 [ 2604.609360][T21516] slab 308177656 [ 2604.609360][T21516] workingset_refault_anon 0 [ 2604.609360][T21516] workingset_refault_file 2 [ 2604.609360][T21516] workingset_activate_anon 0 [ 2604.609360][T21516] workingset_activate_file 0 [ 2604.609360][T21516] workingset_restore_anon 0 [ 2604.609360][T21516] workingset_restore_file 1 [ 2604.609360][T21516] workingset_nodereclaim 0 [ 2604.609360][T21516] pgscan 1960 [ 2604.609360][T21516] pgsteal 131 [ 2604.609360][T21516] pgscan_kswapd 109 [ 2604.609360][T21516] pgscan_direct 1851 [ 2604.609360][T21516] pgscan_khugepaged 0 [ 2604.609360][T21516] pgsteal_kswapd 108 [ 2604.609360][T21516] pgsteal_direct 23 [ 2604.609360][T21516] pgsteal_khugepaged 0 [ 2604.609360][T21516] pgfault 1010704 [ 2604.609360][T21516] pgmajfault 0 [ 2604.609360][T21516] pgrefill 14378 [ 2604.609360][T21516] pgactivate 1806 [ 2604.609360][T21516] pgdeactivate 0 [ 2604.609360][T21516] pglazyfree 0 [ 2604.609360][T21516] pglazyfreed 0 [ 2604.609360][T21516] zswpin 0 [ 2604.609360][T21516] zswpout 0 05:56:58 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c19e}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:56:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xd203, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2604.808202][T21516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21516,uid=0 [ 2604.832369][T21516] Memory cgroup out of memory: Killed process 21516 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:56:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 2604.902864][T21543] wireguard53: entered promiscuous mode 05:56:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xd803, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2604.984684][T21523] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2605.029977][T21523] CPU: 1 PID: 21523 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2605.040480][T21523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2605.050597][T21523] Call Trace: [ 2605.053934][T21523] [ 2605.056929][T21523] dump_stack_lvl+0x136/0x150 [ 2605.061693][T21523] dump_header+0x10a/0xd70 [ 2605.066178][T21523] oom_kill_process+0x25d/0x600 [ 2605.071102][T21523] out_of_memory+0x35c/0x1660 05:56:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xde01, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2605.075851][T21523] ? find_held_lock+0x2d/0x110 [ 2605.080686][T21523] ? oom_killer_disable+0x2b0/0x2b0 [ 2605.085951][T21523] ? rcu_read_unlock+0x9/0x60 [ 2605.090700][T21523] ? find_held_lock+0x2d/0x110 [ 2605.095648][T21523] mem_cgroup_out_of_memory+0x206/0x270 [ 2605.101278][T21523] ? mem_cgroup_margin+0x130/0x130 [ 2605.106466][T21523] ? lock_downgrade+0x690/0x690 [ 2605.111398][T21523] try_charge_memcg+0xf9b/0x13b0 [ 2605.116409][T21523] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2605.122458][T21523] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2605.128261][T21523] ? lock_downgrade+0x690/0x690 [ 2605.133161][T21523] ? lock_downgrade+0x690/0x690 [ 2605.138063][T21523] ? rcu_read_unlock+0x9/0x60 [ 2605.142799][T21523] obj_cgroup_charge+0x2af/0x5e0 [ 2605.147778][T21523] __kmem_cache_alloc_node+0xa3/0x320 [ 2605.153198][T21523] ? copy_semundo+0x18b/0x300 [ 2605.157913][T21523] kmalloc_trace+0x26/0xe0 [ 2605.162365][T21523] copy_semundo+0x18b/0x300 [ 2605.166903][T21523] copy_process+0x24a2/0x7580 [ 2605.171616][T21523] ? __lock_acquire+0xbc5/0x5d40 [ 2605.176594][T21523] ? __cleanup_sighand+0xb0/0xb0 [ 2605.181577][T21523] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2605.187616][T21523] ? psi_memstall_leave+0x174/0x250 [ 2605.192869][T21523] ? lock_downgrade+0x690/0x690 [ 2605.197759][T21523] kernel_clone+0xeb/0x890 [ 2605.202210][T21523] ? create_io_thread+0xf0/0xf0 [ 2605.207099][T21523] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2605.213391][T21523] ? lock_downgrade+0x690/0x690 [ 2605.218307][T21523] __do_sys_clone+0xba/0x100 [ 2605.222960][T21523] ? kernel_clone+0x890/0x890 [ 2605.227689][T21523] ? syscall_enter_from_user_mode+0x26/0x80 [ 2605.233638][T21523] do_syscall_64+0x39/0xb0 [ 2605.238110][T21523] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2605.244037][T21523] RIP: 0033:0x7ffae188d591 [ 2605.248564][T21523] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2605.268394][T21523] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2605.276875][T21523] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2605.284901][T21523] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2605.292913][T21523] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2605.300934][T21523] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2605.308955][T21523] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2605.316979][T21523] 05:56:59 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12020000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:56:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2605.420059][T21523] memory: usage 307184kB, limit 307200kB, failcnt 28386 [ 2605.427393][T21523] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2605.455376][T21523] Memory cgroup stats for /syz3: [ 2605.455760][T21523] anon 90112 [ 2605.455760][T21523] file 733184 [ 2605.455760][T21523] kernel 313733120 [ 2605.455760][T21523] kernel_stack 65536 [ 2605.455760][T21523] pagetables 69632 [ 2605.455760][T21523] sec_pagetables 0 [ 2605.455760][T21523] percpu 5375488 [ 2605.455760][T21523] sock 0 [ 2605.455760][T21523] vmalloc 8192 [ 2605.455760][T21523] shmem 733184 [ 2605.455760][T21523] zswap 0 [ 2605.455760][T21523] zswapped 0 [ 2605.455760][T21523] file_mapped 667648 [ 2605.455760][T21523] file_dirty 0 [ 2605.455760][T21523] file_writeback 0 [ 2605.455760][T21523] swapcached 0 [ 2605.455760][T21523] anon_thp 0 [ 2605.455760][T21523] file_thp 0 [ 2605.455760][T21523] shmem_thp 0 [ 2605.455760][T21523] inactive_anon 0 [ 2605.455760][T21523] active_anon 823296 [ 2605.455760][T21523] inactive_file 0 [ 2605.455760][T21523] active_file 0 [ 2605.455760][T21523] unevictable 0 [ 2605.455760][T21523] slab_reclaimable 1215536 [ 2605.455760][T21523] slab_unreclaimable 306962888 [ 2605.455760][T21523] slab 308178424 [ 2605.455760][T21523] workingset_refault_anon 0 [ 2605.455760][T21523] workingset_refault_file 130 [ 2605.455760][T21523] workingset_activate_anon 0 [ 2605.455760][T21523] workingset_activate_file 0 [ 2605.455760][T21523] workingset_restore_anon 0 [ 2605.455760][T21523] workingset_restore_file 0 [ 2605.455760][T21523] workingset_nodereclaim 0 [ 2605.455760][T21523] pgscan 3117 [ 2605.455760][T21523] pgsteal 939 [ 2605.455760][T21523] pgscan_kswapd 0 [ 2605.455760][T21523] pgscan_direct 3117 [ 2605.455760][T21523] pgscan_khugepaged 0 [ 2605.455760][T21523] pgsteal_kswapd 0 [ 2605.455760][T21523] pgsteal_direct 939 [ 2605.455760][T21523] pgsteal_khugepaged 0 [ 2605.455760][T21523] pgfault 576035 [ 2605.455760][T21523] pgmajfault 0 [ 2605.455760][T21523] pgrefill 79949 [ 2605.455760][T21523] pgactivate 862 [ 2605.455760][T21523] pgdeactivate 0 [ 2605.455760][T21523] pglazyfree 0 [ 2605.455760][T21523] pglazyfreed 0 [ 2605.455760][T21523] zswpin 0 [ 2605.455760][T21523] zswpout 0 [ 2605.653335][T21523] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21523,uid=0 [ 2605.677351][T21523] Memory cgroup out of memory: Killed process 21523 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2605.763132][T21557] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2605.776055][T21557] CPU: 1 PID: 21557 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2605.786546][T21557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2605.796644][T21557] Call Trace: [ 2605.799957][T21557] [ 2605.802952][T21557] dump_stack_lvl+0x136/0x150 [ 2605.807690][T21557] dump_header+0x10a/0xd70 [ 2605.812166][T21557] oom_kill_process+0x25d/0x600 [ 2605.817079][T21557] out_of_memory+0x35c/0x1660 [ 2605.821811][T21557] ? find_held_lock+0x2d/0x110 [ 2605.826635][T21557] ? oom_killer_disable+0x2b0/0x2b0 [ 2605.831890][T21557] ? rcu_read_unlock+0x9/0x60 [ 2605.836627][T21557] ? find_held_lock+0x2d/0x110 [ 2605.841465][T21557] mem_cgroup_out_of_memory+0x206/0x270 [ 2605.847087][T21557] ? mem_cgroup_margin+0x130/0x130 [ 2605.852265][T21557] ? lock_downgrade+0x690/0x690 [ 2605.857188][T21557] try_charge_memcg+0xf9b/0x13b0 [ 2605.862183][T21557] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2605.868296][T21557] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2605.874079][T21557] ? lock_downgrade+0x690/0x690 [ 2605.878992][T21557] ? lock_downgrade+0x690/0x690 [ 2605.883989][T21557] obj_cgroup_charge+0x2af/0x5e0 [ 2605.888967][T21557] ? __anon_vma_prepare+0x64/0x580 [ 2605.894115][T21557] kmem_cache_alloc+0xb1/0x3b0 [ 2605.898927][T21557] __anon_vma_prepare+0x64/0x580 [ 2605.903910][T21557] ? __pmd_alloc+0x30c/0x5d0 [ 2605.908544][T21557] __handle_mm_fault+0x3a8f/0x3e60 [ 2605.913718][T21557] ? vm_iomap_memory+0x190/0x190 [ 2605.918712][T21557] handle_mm_fault+0x2ba/0x9c0 [ 2605.923517][T21557] do_user_addr_fault+0x47e/0x1240 [ 2605.928673][T21557] ? rcu_is_watching+0x12/0xb0 [ 2605.933482][T21557] exc_page_fault+0x98/0x170 [ 2605.938128][T21557] asm_exc_page_fault+0x26/0x30 [ 2605.943029][T21557] RIP: 0033:0x7f493322bde9 [ 2605.947472][T21557] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2605.967119][T21557] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2605.973327][T21557] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2605.981321][T21557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2605.989499][T21557] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2605.997516][T21557] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027b9a0 [ 2606.005780][T21557] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 05:57:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x89f60600) 05:57:00 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8a00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:57:00 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c19f}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:57:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf001, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2606.014341][T21557] 05:57:00 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:57:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf002, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2606.139854][T21557] memory: usage 307200kB, limit 307200kB, failcnt 17334 [ 2606.161120][T21557] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2606.192689][T21557] Memory cgroup stats for /syz2: [ 2606.192996][T21557] anon 135168 [ 2606.192996][T21557] file 684032 [ 2606.192996][T21557] kernel 313753600 [ 2606.192996][T21557] kernel_stack 65536 [ 2606.192996][T21557] pagetables 81920 [ 2606.192996][T21557] sec_pagetables 0 [ 2606.192996][T21557] percpu 5387328 [ 2606.192996][T21557] sock 0 [ 2606.192996][T21557] vmalloc 8192 [ 2606.192996][T21557] shmem 679936 [ 2606.192996][T21557] zswap 0 [ 2606.192996][T21557] zswapped 0 [ 2606.192996][T21557] file_mapped 630784 [ 2606.192996][T21557] file_dirty 4096 [ 2606.192996][T21557] file_writeback 0 [ 2606.192996][T21557] swapcached 0 [ 2606.192996][T21557] anon_thp 0 [ 2606.192996][T21557] file_thp 0 [ 2606.192996][T21557] shmem_thp 0 [ 2606.192996][T21557] inactive_anon 0 [ 2606.192996][T21557] active_anon 815104 [ 2606.192996][T21557] inactive_file 0 [ 2606.192996][T21557] active_file 4096 [ 2606.192996][T21557] unevictable 0 [ 2606.192996][T21557] slab_reclaimable 512264 [ 2606.192996][T21557] slab_unreclaimable 307665392 [ 2606.192996][T21557] slab 308177656 [ 2606.192996][T21557] workingset_refault_anon 0 [ 2606.192996][T21557] workingset_refault_file 2 [ 2606.192996][T21557] workingset_activate_anon 0 [ 2606.192996][T21557] workingset_activate_file 0 [ 2606.192996][T21557] workingset_restore_anon 0 [ 2606.192996][T21557] workingset_restore_file 1 [ 2606.192996][T21557] workingset_nodereclaim 0 [ 2606.192996][T21557] pgscan 1960 [ 2606.192996][T21557] pgsteal 131 [ 2606.192996][T21557] pgscan_kswapd 109 [ 2606.192996][T21557] pgscan_direct 1851 [ 2606.192996][T21557] pgscan_khugepaged 0 [ 2606.192996][T21557] pgsteal_kswapd 108 [ 2606.192996][T21557] pgsteal_direct 23 [ 2606.192996][T21557] pgsteal_khugepaged 0 [ 2606.192996][T21557] pgfault 1010765 [ 2606.192996][T21557] pgmajfault 0 [ 2606.192996][T21557] pgrefill 14457 [ 2606.192996][T21557] pgactivate 1806 [ 2606.192996][T21557] pgdeactivate 0 [ 2606.192996][T21557] pglazyfree 0 [ 2606.192996][T21557] pglazyfreed 0 [ 2606.192996][T21557] zswpin 0 [ 2606.192996][T21557] zswpout 0 [ 2606.388649][T21557] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21557,uid=0 [ 2606.416403][T21557] Memory cgroup out of memory: Killed process 21557 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2606.444320][T21584] wireguard53: entered promiscuous mode 05:57:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60010000}, 0x0) 05:57:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf003, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2606.688323][T21586] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2606.728019][T21586] CPU: 1 PID: 21586 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2606.738528][T21586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2606.748812][T21586] Call Trace: [ 2606.752137][T21586] [ 2606.755089][T21586] dump_stack_lvl+0x136/0x150 [ 2606.759816][T21586] dump_header+0x10a/0xd70 [ 2606.764273][T21586] oom_kill_process+0x25d/0x600 [ 2606.769171][T21586] out_of_memory+0x35c/0x1660 [ 2606.773895][T21586] ? find_held_lock+0x2d/0x110 [ 2606.778722][T21586] ? oom_killer_disable+0x2b0/0x2b0 [ 2606.783989][T21586] ? rcu_read_unlock+0x9/0x60 [ 2606.788708][T21586] ? find_held_lock+0x2d/0x110 [ 2606.793541][T21586] mem_cgroup_out_of_memory+0x206/0x270 [ 2606.799218][T21586] ? mem_cgroup_margin+0x130/0x130 [ 2606.804370][T21586] ? lock_downgrade+0x690/0x690 [ 2606.809266][T21586] try_charge_memcg+0xf9b/0x13b0 [ 2606.814255][T21586] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2606.820271][T21586] ? rcu_read_unlock+0x9/0x60 [ 2606.824983][T21586] ? lock_downgrade+0x690/0x690 [ 2606.829876][T21586] charge_memcg+0x90/0x3b0 [ 2606.834323][T21586] __mem_cgroup_charge+0x2b/0x90 [ 2606.839297][T21586] do_wp_page+0x8eb/0x3530 [ 2606.843765][T21586] ? lock_release+0x670/0x670 [ 2606.848481][T21586] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2606.853898][T21586] ? do_raw_spin_lock+0x124/0x2b0 [ 2606.859066][T21586] ? spin_bug+0x1c0/0x1c0 [ 2606.863427][T21586] ? lock_downgrade+0x690/0x690 [ 2606.868331][T21586] __handle_mm_fault+0x19a1/0x3e60 [ 2606.873503][T21586] ? vm_iomap_memory+0x190/0x190 [ 2606.878674][T21586] handle_mm_fault+0x2ba/0x9c0 [ 2606.884350][T21586] do_user_addr_fault+0x47e/0x1240 [ 2606.889503][T21586] ? rcu_is_watching+0x12/0xb0 [ 2606.894313][T21586] exc_page_fault+0x98/0x170 [ 2606.899038][T21586] asm_exc_page_fault+0x26/0x30 [ 2606.903922][T21586] RIP: 0033:0x7ffae1839610 [ 2606.908365][T21586] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2606.928002][T21586] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2606.934186][T21586] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2606.942183][T21586] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2606.950186][T21586] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2606.958181][T21586] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2606.966185][T21586] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2606.974188][T21586] ? __sys_socket+0x7c/0x250 [ 2606.978856][T21586] [ 2606.998591][T21586] memory: usage 307200kB, limit 307200kB, failcnt 28492 [ 2607.036262][T21586] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:57:01 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:57:01 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x8a03, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:57:01 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x16030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2607.099907][T21586] Memory cgroup stats for /syz3: [ 2607.100205][T21586] anon 106496 [ 2607.100205][T21586] file 733184 [ 2607.100205][T21586] kernel 313733120 [ 2607.100205][T21586] kernel_stack 65536 [ 2607.100205][T21586] pagetables 69632 [ 2607.100205][T21586] sec_pagetables 0 [ 2607.100205][T21586] percpu 5375488 [ 2607.100205][T21586] sock 0 [ 2607.100205][T21586] vmalloc 8192 [ 2607.100205][T21586] shmem 733184 [ 2607.100205][T21586] zswap 0 [ 2607.100205][T21586] zswapped 0 [ 2607.100205][T21586] file_mapped 667648 [ 2607.100205][T21586] file_dirty 0 [ 2607.100205][T21586] file_writeback 0 [ 2607.100205][T21586] swapcached 0 [ 2607.100205][T21586] anon_thp 0 [ 2607.100205][T21586] file_thp 0 [ 2607.100205][T21586] shmem_thp 0 [ 2607.100205][T21586] inactive_anon 0 [ 2607.100205][T21586] active_anon 839680 [ 2607.100205][T21586] inactive_file 0 [ 2607.100205][T21586] active_file 0 [ 2607.100205][T21586] unevictable 0 [ 2607.100205][T21586] slab_reclaimable 1217464 [ 2607.100205][T21586] slab_unreclaimable 306964000 [ 2607.100205][T21586] slab 308181464 [ 2607.100205][T21586] workingset_refault_anon 0 [ 2607.100205][T21586] workingset_refault_file 130 [ 2607.100205][T21586] workingset_activate_anon 0 [ 2607.100205][T21586] workingset_activate_file 0 [ 2607.100205][T21586] workingset_restore_anon 0 [ 2607.100205][T21586] workingset_restore_file 0 [ 2607.100205][T21586] workingset_nodereclaim 0 [ 2607.100205][T21586] pgscan 3117 [ 2607.100205][T21586] pgsteal 939 [ 2607.100205][T21586] pgscan_kswapd 0 [ 2607.100205][T21586] pgscan_direct 3117 [ 2607.100205][T21586] pgscan_khugepaged 0 [ 2607.100205][T21586] pgsteal_kswapd 0 [ 2607.100205][T21586] pgsteal_direct 939 [ 2607.100205][T21586] pgsteal_khugepaged 0 [ 2607.100205][T21586] pgfault 576079 [ 2607.100205][T21586] pgmajfault 0 [ 2607.100205][T21586] pgrefill 79949 [ 2607.100205][T21586] pgactivate 862 [ 2607.100205][T21586] pgdeactivate 0 [ 2607.100205][T21586] pglazyfree 0 [ 2607.100205][T21586] pglazyfreed 0 [ 2607.100205][T21586] zswpin 0 [ 2607.100205][T21586] zswpout 0 [ 2607.203692][T21612] wireguard53: entered promiscuous mode 05:57:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf200, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2607.653997][T21586] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21586,uid=0 [ 2607.689881][T21586] Memory cgroup out of memory: Killed process 21586 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8912kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:57:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x8a400000) 05:57:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf201, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2607.771659][T21603] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2607.793608][T21603] CPU: 0 PID: 21603 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2607.804127][T21603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2607.814244][T21603] Call Trace: [ 2607.817567][T21603] [ 2607.820542][T21603] dump_stack_lvl+0x136/0x150 [ 2607.825309][T21603] dump_header+0x10a/0xd70 [ 2607.829799][T21603] oom_kill_process+0x25d/0x600 [ 2607.834722][T21603] out_of_memory+0x35c/0x1660 [ 2607.839475][T21603] ? find_held_lock+0x2d/0x110 [ 2607.844317][T21603] ? oom_killer_disable+0x2b0/0x2b0 [ 2607.849608][T21603] ? rcu_read_unlock+0x9/0x60 [ 2607.854358][T21603] ? find_held_lock+0x2d/0x110 [ 2607.859212][T21603] mem_cgroup_out_of_memory+0x206/0x270 [ 2607.864920][T21603] ? mem_cgroup_margin+0x130/0x130 [ 2607.870102][T21603] ? lock_downgrade+0x690/0x690 [ 2607.875029][T21603] try_charge_memcg+0xf9b/0x13b0 [ 2607.880032][T21603] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2607.886064][T21603] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2607.891931][T21603] ? lock_downgrade+0x690/0x690 [ 2607.896857][T21603] ? lock_downgrade+0x690/0x690 [ 2607.901808][T21603] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2607.907449][T21603] __alloc_pages+0x1f3/0x4a0 [ 2607.912076][T21603] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2607.918872][T21603] ? print_usage_bug.part.0+0x660/0x660 [ 2607.924475][T21603] ? find_held_lock+0x2d/0x110 [ 2607.929319][T21603] alloc_pages+0x1aa/0x270 [ 2607.933783][T21603] pte_alloc_one+0x1a/0x230 [ 2607.938370][T21603] __pte_alloc+0x6d/0x260 [ 2607.942781][T21603] ? pmd_install+0x160/0x160 [ 2607.947432][T21603] ? _raw_spin_unlock+0x28/0x40 [ 2607.952353][T21603] ? __pmd_alloc+0x30c/0x5d0 [ 2607.957029][T21603] __handle_mm_fault+0x3626/0x3e60 [ 2607.962236][T21603] ? vm_iomap_memory+0x190/0x190 [ 2607.967282][T21603] handle_mm_fault+0x2ba/0x9c0 [ 2607.972134][T21603] do_user_addr_fault+0x47e/0x1240 [ 2607.977347][T21603] ? rcu_is_watching+0x12/0xb0 [ 2607.982271][T21603] exc_page_fault+0x98/0x170 [ 2607.987627][T21603] asm_exc_page_fault+0x26/0x30 [ 2607.992522][T21603] RIP: 0033:0x7f493322bde9 [ 2607.996973][T21603] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2608.016638][T21603] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2608.022768][T21603] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2608.030779][T21603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2608.038860][T21603] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2608.046858][T21603] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027bfe4 [ 2608.054869][T21603] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2608.062929][T21603] [ 2608.070443][T21603] memory: usage 307200kB, limit 307200kB, failcnt 17387 [ 2608.077541][T21603] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2608.084585][T21603] Memory cgroup stats for /syz2: [ 2608.084870][T21603] anon 135168 [ 2608.084870][T21603] file 684032 [ 2608.084870][T21603] kernel 313753600 [ 2608.084870][T21603] kernel_stack 65536 [ 2608.084870][T21603] pagetables 77824 [ 2608.084870][T21603] sec_pagetables 0 [ 2608.084870][T21603] percpu 5387328 [ 2608.084870][T21603] sock 0 [ 2608.084870][T21603] vmalloc 8192 [ 2608.084870][T21603] shmem 679936 [ 2608.084870][T21603] zswap 0 [ 2608.084870][T21603] zswapped 0 [ 2608.084870][T21603] file_mapped 630784 [ 2608.084870][T21603] file_dirty 4096 [ 2608.084870][T21603] file_writeback 0 [ 2608.084870][T21603] swapcached 0 [ 2608.084870][T21603] anon_thp 0 [ 2608.084870][T21603] file_thp 0 [ 2608.084870][T21603] shmem_thp 0 [ 2608.084870][T21603] inactive_anon 0 [ 2608.084870][T21603] active_anon 815104 [ 2608.084870][T21603] inactive_file 0 [ 2608.084870][T21603] active_file 4096 [ 2608.084870][T21603] unevictable 0 [ 2608.084870][T21603] slab_reclaimable 512264 [ 2608.084870][T21603] slab_unreclaimable 307665392 [ 2608.084870][T21603] slab 308177656 [ 2608.084870][T21603] workingset_refault_anon 0 [ 2608.084870][T21603] workingset_refault_file 2 [ 2608.084870][T21603] workingset_activate_anon 0 [ 2608.084870][T21603] workingset_activate_file 0 [ 2608.084870][T21603] workingset_restore_anon 0 [ 2608.084870][T21603] workingset_restore_file 1 [ 2608.084870][T21603] workingset_nodereclaim 0 [ 2608.084870][T21603] pgscan 1960 [ 2608.084870][T21603] pgsteal 131 [ 2608.084870][T21603] pgscan_kswapd 109 [ 2608.084870][T21603] pgscan_direct 1851 [ 2608.084870][T21603] pgscan_khugepaged 0 [ 2608.084870][T21603] pgsteal_kswapd 108 [ 2608.084870][T21603] pgsteal_direct 23 [ 2608.084870][T21603] pgsteal_khugepaged 0 [ 2608.084870][T21603] pgfault 1010826 [ 2608.084870][T21603] pgmajfault 0 [ 2608.084870][T21603] pgrefill 14509 [ 2608.084870][T21603] pgactivate 1806 [ 2608.084870][T21603] pgdeactivate 0 [ 2608.084870][T21603] pglazyfree 0 [ 2608.084870][T21603] pglazyfreed 0 [ 2608.084870][T21603] zswpin 0 [ 2608.084870][T21603] zswpout 0 05:57:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf202, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:02 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:57:02 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1f000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:57:02 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9001, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2608.275719][T21603] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21603,uid=0 [ 2608.299297][T21603] Memory cgroup out of memory: Killed process 21603 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 05:57:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x62020000}, 0x0) [ 2608.353615][T21632] wireguard53: entered promiscuous mode [ 2608.388442][T21628] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2608.425701][T21628] CPU: 0 PID: 21628 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2608.436208][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2608.446317][T21628] Call Trace: [ 2608.449642][T21628] [ 2608.452622][T21628] dump_stack_lvl+0x136/0x150 [ 2608.457385][T21628] dump_header+0x10a/0xd70 [ 2608.461882][T21628] oom_kill_process+0x25d/0x600 [ 2608.466809][T21628] out_of_memory+0x35c/0x1660 [ 2608.471563][T21628] ? find_held_lock+0x2d/0x110 [ 2608.476430][T21628] ? oom_killer_disable+0x2b0/0x2b0 [ 2608.481780][T21628] ? rcu_read_unlock+0x9/0x60 [ 2608.486599][T21628] ? find_held_lock+0x2d/0x110 [ 2608.491436][T21628] mem_cgroup_out_of_memory+0x206/0x270 [ 2608.497031][T21628] ? mem_cgroup_margin+0x130/0x130 [ 2608.502186][T21628] ? lock_downgrade+0x690/0x690 [ 2608.507079][T21628] try_charge_memcg+0xf9b/0x13b0 [ 2608.512052][T21628] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2608.518069][T21628] ? rcu_read_unlock+0x9/0x60 [ 2608.522788][T21628] ? lock_downgrade+0x690/0x690 [ 2608.527683][T21628] charge_memcg+0x90/0x3b0 [ 2608.532131][T21628] __mem_cgroup_charge+0x2b/0x90 [ 2608.537107][T21628] do_wp_page+0x8eb/0x3530 [ 2608.541570][T21628] ? lock_release+0x670/0x670 [ 2608.546276][T21628] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2608.551682][T21628] ? do_raw_spin_lock+0x124/0x2b0 [ 2608.556738][T21628] ? spin_bug+0x1c0/0x1c0 [ 2608.561096][T21628] ? lock_downgrade+0x690/0x690 [ 2608.565986][T21628] __handle_mm_fault+0x19a1/0x3e60 [ 2608.571141][T21628] ? vm_iomap_memory+0x190/0x190 [ 2608.576143][T21628] handle_mm_fault+0x2ba/0x9c0 [ 2608.580956][T21628] do_user_addr_fault+0x47e/0x1240 [ 2608.586108][T21628] ? rcu_is_watching+0x12/0xb0 [ 2608.590929][T21628] exc_page_fault+0x98/0x170 [ 2608.595828][T21628] asm_exc_page_fault+0x26/0x30 [ 2608.600713][T21628] RIP: 0033:0x7ffae1839610 [ 2608.605152][T21628] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2608.624798][T21628] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2608.630891][T21628] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2608.638885][T21628] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2608.646879][T21628] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2608.654878][T21628] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2608.662871][T21628] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2608.670880][T21628] ? __sys_socket+0x7c/0x250 [ 2608.675516][T21628] [ 2608.687747][T21628] memory: usage 307200kB, limit 307200kB, failcnt 28580 [ 2608.707681][T21628] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2608.715624][T21628] Memory cgroup stats for /syz3: [ 2608.715926][T21628] anon 106496 [ 2608.715926][T21628] file 733184 [ 2608.715926][T21628] kernel 313733120 [ 2608.715926][T21628] kernel_stack 65536 [ 2608.715926][T21628] pagetables 69632 [ 2608.715926][T21628] sec_pagetables 0 [ 2608.715926][T21628] percpu 5375488 [ 2608.715926][T21628] sock 0 [ 2608.715926][T21628] vmalloc 8192 [ 2608.715926][T21628] shmem 733184 [ 2608.715926][T21628] zswap 0 [ 2608.715926][T21628] zswapped 0 [ 2608.715926][T21628] file_mapped 667648 [ 2608.715926][T21628] file_dirty 0 [ 2608.715926][T21628] file_writeback 0 [ 2608.715926][T21628] swapcached 0 05:57:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf203, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2608.715926][T21628] anon_thp 0 [ 2608.715926][T21628] file_thp 0 [ 2608.715926][T21628] shmem_thp 0 [ 2608.715926][T21628] inactive_anon 0 [ 2608.715926][T21628] active_anon 839680 [ 2608.715926][T21628] inactive_file 0 [ 2608.715926][T21628] active_file 0 [ 2608.715926][T21628] unevictable 0 [ 2608.715926][T21628] slab_reclaimable 1217464 [ 2608.715926][T21628] slab_unreclaimable 306964000 [ 2608.715926][T21628] slab 308181464 [ 2608.715926][T21628] workingset_refault_anon 0 [ 2608.715926][T21628] workingset_refault_file 130 [ 2608.715926][T21628] workingset_activate_anon 0 [ 2608.715926][T21628] workingset_activate_file 0 [ 2608.715926][T21628] workingset_restore_anon 0 [ 2608.715926][T21628] workingset_restore_file 0 [ 2608.715926][T21628] workingset_nodereclaim 0 [ 2608.715926][T21628] pgscan 3117 [ 2608.715926][T21628] pgsteal 939 [ 2608.715926][T21628] pgscan_kswapd 0 [ 2608.715926][T21628] pgscan_direct 3117 [ 2608.715926][T21628] pgscan_khugepaged 0 [ 2608.715926][T21628] pgsteal_kswapd 0 [ 2608.715926][T21628] pgsteal_direct 939 [ 2608.715926][T21628] pgsteal_khugepaged 0 [ 2608.715926][T21628] pgfault 576123 [ 2608.715926][T21628] pgmajfault 0 [ 2608.715926][T21628] pgrefill 79949 [ 2608.715926][T21628] pgactivate 862 [ 2608.715926][T21628] pgdeactivate 0 [ 2608.715926][T21628] pglazyfree 0 [ 2608.715926][T21628] pglazyfreed 0 [ 2608.715926][T21628] zswpin 0 [ 2608.715926][T21628] zswpout 0 05:57:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x8af60600) [ 2608.914827][T21628] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21628,uid=0 [ 2608.932018][T21628] Memory cgroup out of memory: Killed process 21628 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2608.999103][T21646] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf209, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf400, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2609.112246][T21646] CPU: 1 PID: 21646 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2609.122750][T21646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2609.132856][T21646] Call Trace: [ 2609.136178][T21646] [ 2609.139155][T21646] dump_stack_lvl+0x136/0x150 [ 2609.143911][T21646] dump_header+0x10a/0xd70 [ 2609.148400][T21646] oom_kill_process+0x25d/0x600 [ 2609.153333][T21646] out_of_memory+0x35c/0x1660 [ 2609.158094][T21646] ? find_held_lock+0x2d/0x110 [ 2609.162941][T21646] ? oom_killer_disable+0x2b0/0x2b0 [ 2609.168224][T21646] ? rcu_read_unlock+0x9/0x60 [ 2609.172962][T21646] ? find_held_lock+0x2d/0x110 [ 2609.177802][T21646] mem_cgroup_out_of_memory+0x206/0x270 [ 2609.183422][T21646] ? mem_cgroup_margin+0x130/0x130 [ 2609.188620][T21646] ? lock_downgrade+0x690/0x690 [ 2609.193585][T21646] try_charge_memcg+0xf9b/0x13b0 [ 2609.198607][T21646] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2609.204648][T21646] ? get_mem_cgroup_from_objcg+0xa1/0x280 05:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf401, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2609.210452][T21646] ? lock_downgrade+0x690/0x690 [ 2609.215375][T21646] ? lock_downgrade+0x690/0x690 [ 2609.220307][T21646] obj_cgroup_charge+0x2af/0x5e0 [ 2609.225312][T21646] ? __anon_vma_prepare+0x64/0x580 [ 2609.230495][T21646] kmem_cache_alloc+0xb1/0x3b0 [ 2609.235351][T21646] __anon_vma_prepare+0x64/0x580 [ 2609.240352][T21646] ? __pmd_alloc+0x30c/0x5d0 [ 2609.245013][T21646] __handle_mm_fault+0x3a8f/0x3e60 [ 2609.250205][T21646] ? vm_iomap_memory+0x190/0x190 [ 2609.255244][T21646] handle_mm_fault+0x2ba/0x9c0 [ 2609.260081][T21646] do_user_addr_fault+0x47e/0x1240 [ 2609.265259][T21646] ? rcu_is_watching+0x12/0xb0 [ 2609.270094][T21646] exc_page_fault+0x98/0x170 [ 2609.274766][T21646] asm_exc_page_fault+0x26/0x30 [ 2609.279682][T21646] RIP: 0033:0x7f493322bde9 [ 2609.284146][T21646] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2609.303807][T21646] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 05:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf403, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2609.309912][T21646] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2609.317940][T21646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2609.325953][T21646] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2609.333961][T21646] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027c7c2 [ 2609.341989][T21646] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2609.350045][T21646] [ 2609.378331][T21646] memory: usage 307200kB, limit 307200kB, failcnt 17502 [ 2609.385627][T21646] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2609.396577][T21646] Memory cgroup stats for /syz2: [ 2609.396864][T21646] anon 135168 [ 2609.396864][T21646] file 684032 [ 2609.396864][T21646] kernel 313753600 [ 2609.396864][T21646] kernel_stack 65536 [ 2609.396864][T21646] pagetables 81920 [ 2609.396864][T21646] sec_pagetables 0 [ 2609.396864][T21646] percpu 5387328 [ 2609.396864][T21646] sock 0 [ 2609.396864][T21646] vmalloc 8192 [ 2609.396864][T21646] shmem 679936 [ 2609.396864][T21646] zswap 0 [ 2609.396864][T21646] zswapped 0 [ 2609.396864][T21646] file_mapped 630784 [ 2609.396864][T21646] file_dirty 4096 [ 2609.396864][T21646] file_writeback 0 [ 2609.396864][T21646] swapcached 0 [ 2609.396864][T21646] anon_thp 0 [ 2609.396864][T21646] file_thp 0 [ 2609.396864][T21646] shmem_thp 0 [ 2609.396864][T21646] inactive_anon 0 [ 2609.396864][T21646] active_anon 815104 [ 2609.396864][T21646] inactive_file 0 [ 2609.396864][T21646] active_file 4096 [ 2609.396864][T21646] unevictable 0 [ 2609.396864][T21646] slab_reclaimable 512264 [ 2609.396864][T21646] slab_unreclaimable 307665392 [ 2609.396864][T21646] slab 308177656 [ 2609.396864][T21646] workingset_refault_anon 0 [ 2609.396864][T21646] workingset_refault_file 2 [ 2609.396864][T21646] workingset_activate_anon 0 [ 2609.396864][T21646] workingset_activate_file 0 [ 2609.396864][T21646] workingset_restore_anon 0 [ 2609.396864][T21646] workingset_restore_file 1 [ 2609.396864][T21646] workingset_nodereclaim 0 [ 2609.396864][T21646] pgscan 1960 [ 2609.396864][T21646] pgsteal 131 [ 2609.396864][T21646] pgscan_kswapd 109 [ 2609.396864][T21646] pgscan_direct 1851 [ 2609.396864][T21646] pgscan_khugepaged 0 [ 2609.396864][T21646] pgsteal_kswapd 108 [ 2609.396864][T21646] pgsteal_direct 23 [ 2609.396864][T21646] pgsteal_khugepaged 0 [ 2609.396864][T21646] pgfault 1010887 [ 2609.396864][T21646] pgmajfault 0 [ 2609.396864][T21646] pgrefill 14588 [ 2609.396864][T21646] pgactivate 1806 [ 2609.396864][T21646] pgdeactivate 0 [ 2609.396864][T21646] pglazyfree 0 [ 2609.396864][T21646] pglazyfreed 0 05:57:03 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9002, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf601, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2609.396864][T21646] zswpin 0 [ 2609.396864][T21646] zswpout 0 05:57:03 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:57:03 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2609.630112][T21646] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21646,uid=0 [ 2609.655686][T21646] Memory cgroup out of memory: Killed process 21646 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:57:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x62030000}, 0x0) 05:57:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf602, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2609.697907][T21657] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2609.754148][T21657] CPU: 1 PID: 21657 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2609.764752][T21657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2609.775210][T21657] Call Trace: [ 2609.778535][T21657] [ 2609.781512][T21657] dump_stack_lvl+0x136/0x150 [ 2609.786275][T21657] dump_header+0x10a/0xd70 [ 2609.790770][T21657] oom_kill_process+0x25d/0x600 [ 2609.795707][T21657] out_of_memory+0x35c/0x1660 [ 2609.800468][T21657] ? find_held_lock+0x2d/0x110 [ 2609.805314][T21657] ? oom_killer_disable+0x2b0/0x2b0 [ 2609.810673][T21657] ? rcu_read_unlock+0x9/0x60 [ 2609.815424][T21657] ? find_held_lock+0x2d/0x110 [ 2609.820270][T21657] mem_cgroup_out_of_memory+0x206/0x270 [ 2609.826071][T21657] ? mem_cgroup_margin+0x130/0x130 [ 2609.831366][T21657] ? lock_downgrade+0x690/0x690 [ 2609.836317][T21657] try_charge_memcg+0xf9b/0x13b0 [ 2609.841331][T21657] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2609.847413][T21657] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2609.853182][T21657] ? lock_downgrade+0x690/0x690 [ 2609.858200][T21657] ? lock_downgrade+0x690/0x690 [ 2609.863374][T21657] ? rcu_read_unlock+0x9/0x60 [ 2609.868133][T21657] obj_cgroup_charge+0x2af/0x5e0 [ 2609.873137][T21657] __kmem_cache_alloc_node+0xa3/0x320 [ 2609.878577][T21657] ? copy_semundo+0x18b/0x300 [ 2609.883304][T21657] kmalloc_trace+0x26/0xe0 [ 2609.887779][T21657] copy_semundo+0x18b/0x300 [ 2609.892333][T21657] copy_process+0x24a2/0x7580 [ 2609.897081][T21657] ? __lock_acquire+0xbc5/0x5d40 [ 2609.902065][T21657] ? __cleanup_sighand+0xb0/0xb0 [ 2609.907029][T21657] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2609.913062][T21657] ? psi_memstall_leave+0x174/0x250 [ 2609.918374][T21657] ? lock_downgrade+0x690/0x690 [ 2609.923284][T21657] kernel_clone+0xeb/0x890 [ 2609.927743][T21657] ? create_io_thread+0xf0/0xf0 [ 2609.933667][T21657] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2609.939980][T21657] ? lock_downgrade+0x690/0x690 [ 2609.944873][T21657] __do_sys_clone+0xba/0x100 [ 2609.949519][T21657] ? kernel_clone+0x890/0x890 [ 2609.954243][T21657] ? syscall_enter_from_user_mode+0x26/0x80 [ 2609.960201][T21657] do_syscall_64+0x39/0xb0 [ 2609.964692][T21657] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2609.970649][T21657] RIP: 0033:0x7ffae188d591 [ 2609.975121][T21657] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2609.994957][T21657] RSP: 002b:00007ffdc9b41278 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2610.003861][T21657] RAX: ffffffffffffffda RBX: 00007ffae2524700 RCX: 00007ffae188d591 [ 2610.011878][T21657] RDX: 00007ffae25249d0 RSI: 00007ffae25242f0 RDI: 00000000003d0f00 [ 2610.019912][T21657] RBP: 00007ffdc9b414c0 R08: 00007ffae2524700 R09: 00007ffae2524700 [ 2610.027932][T21657] R10: 00007ffae25249d0 R11: 0000000000000206 R12: 00007ffdc9b4132e [ 2610.035949][T21657] R13: 00007ffdc9b4132f R14: 00007ffae2524300 R15: 0000000000022000 [ 2610.043964][T21657] [ 2610.051239][T21657] memory: usage 307184kB, limit 307200kB, failcnt 28682 [ 2610.066419][T21657] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2610.078794][T21657] Memory cgroup stats for /syz3: [ 2610.079077][T21657] anon 90112 [ 2610.079077][T21657] file 733184 [ 2610.079077][T21657] kernel 313733120 [ 2610.079077][T21657] kernel_stack 65536 [ 2610.079077][T21657] pagetables 69632 [ 2610.079077][T21657] sec_pagetables 0 [ 2610.079077][T21657] percpu 5375488 [ 2610.079077][T21657] sock 0 [ 2610.079077][T21657] vmalloc 8192 [ 2610.079077][T21657] shmem 733184 [ 2610.079077][T21657] zswap 0 [ 2610.079077][T21657] zswapped 0 [ 2610.079077][T21657] file_mapped 667648 [ 2610.079077][T21657] file_dirty 0 [ 2610.079077][T21657] file_writeback 0 [ 2610.079077][T21657] swapcached 0 [ 2610.079077][T21657] anon_thp 0 [ 2610.079077][T21657] file_thp 0 [ 2610.079077][T21657] shmem_thp 0 [ 2610.079077][T21657] inactive_anon 0 [ 2610.079077][T21657] active_anon 823296 [ 2610.079077][T21657] inactive_file 0 [ 2610.079077][T21657] active_file 0 [ 2610.079077][T21657] unevictable 0 [ 2610.079077][T21657] slab_reclaimable 1215536 [ 2610.079077][T21657] slab_unreclaimable 306963192 [ 2610.079077][T21657] slab 308178728 [ 2610.079077][T21657] workingset_refault_anon 0 [ 2610.079077][T21657] workingset_refault_file 130 [ 2610.079077][T21657] workingset_activate_anon 0 [ 2610.079077][T21657] workingset_activate_file 0 [ 2610.079077][T21657] workingset_restore_anon 0 [ 2610.079077][T21657] workingset_restore_file 0 [ 2610.079077][T21657] workingset_nodereclaim 0 [ 2610.079077][T21657] pgscan 3117 [ 2610.079077][T21657] pgsteal 939 [ 2610.079077][T21657] pgscan_kswapd 0 [ 2610.079077][T21657] pgscan_direct 3117 [ 2610.079077][T21657] pgscan_khugepaged 0 [ 2610.079077][T21657] pgsteal_kswapd 0 [ 2610.079077][T21657] pgsteal_direct 939 [ 2610.079077][T21657] pgsteal_khugepaged 0 [ 2610.079077][T21657] pgfault 576160 [ 2610.079077][T21657] pgmajfault 0 [ 2610.079077][T21657] pgrefill 79949 [ 2610.079077][T21657] pgactivate 862 [ 2610.079077][T21657] pgdeactivate 0 [ 2610.079077][T21657] pglazyfree 0 05:57:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf603, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2610.079077][T21657] pglazyfreed 0 [ 2610.079077][T21657] zswpin 0 [ 2610.079077][T21657] zswpout 0 [ 2610.125815][T21689] wireguard53: entered promiscuous mode [ 2610.273689][T21657] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21657,uid=0 05:57:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x8bf60600) [ 2610.293429][T21657] Memory cgroup out of memory: Killed process 21657 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 2610.394389][T21692] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2610.428077][T21692] CPU: 1 PID: 21692 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2610.438601][T21692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2610.448717][T21692] Call Trace: [ 2610.452039][T21692] [ 2610.455022][T21692] dump_stack_lvl+0x136/0x150 [ 2610.459872][T21692] dump_header+0x10a/0xd70 [ 2610.464369][T21692] oom_kill_process+0x25d/0x600 [ 2610.469292][T21692] out_of_memory+0x35c/0x1660 [ 2610.474040][T21692] ? find_held_lock+0x2d/0x110 [ 2610.478888][T21692] ? oom_killer_disable+0x2b0/0x2b0 [ 2610.484164][T21692] ? rcu_read_unlock+0x9/0x60 [ 2610.488910][T21692] ? find_held_lock+0x2d/0x110 [ 2610.493756][T21692] mem_cgroup_out_of_memory+0x206/0x270 [ 2610.499349][T21692] ? mem_cgroup_margin+0x130/0x130 [ 2610.504518][T21692] ? lock_downgrade+0x690/0x690 [ 2610.509429][T21692] try_charge_memcg+0xf9b/0x13b0 [ 2610.514498][T21692] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2610.520529][T21692] ? rcu_read_unlock+0x9/0x60 [ 2610.525294][T21692] ? lock_downgrade+0x690/0x690 [ 2610.530205][T21692] charge_memcg+0x90/0x3b0 [ 2610.534687][T21692] __mem_cgroup_charge+0x2b/0x90 [ 2610.539674][T21692] do_wp_page+0x8eb/0x3530 [ 2610.544150][T21692] ? lock_release+0x670/0x670 [ 2610.548872][T21692] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2610.554374][T21692] ? do_raw_spin_lock+0x124/0x2b0 [ 2610.559439][T21692] ? spin_bug+0x1c0/0x1c0 [ 2610.563811][T21692] ? lock_downgrade+0x690/0x690 [ 2610.568704][T21692] __handle_mm_fault+0x19a1/0x3e60 [ 2610.573910][T21692] ? vm_iomap_memory+0x190/0x190 [ 2610.578927][T21692] handle_mm_fault+0x2ba/0x9c0 [ 2610.583752][T21692] do_user_addr_fault+0x47e/0x1240 [ 2610.588914][T21692] ? rcu_is_watching+0x12/0xb0 [ 2610.593719][T21692] exc_page_fault+0x98/0x170 [ 2610.598359][T21692] asm_exc_page_fault+0x26/0x30 [ 2610.603329][T21692] RIP: 0033:0x7f4933239610 [ 2610.607774][T21692] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2610.627412][T21692] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2610.633516][T21692] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 05:57:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf800, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2610.641515][T21692] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2610.649600][T21692] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2610.657597][T21692] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2610.665594][T21692] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2610.673592][T21692] ? apparmor_socket_create+0x13c/0x670 [ 2610.679287][T21692] [ 2610.686505][T21692] memory: usage 307200kB, limit 307200kB, failcnt 17589 [ 2610.694900][T21692] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2610.719065][T21692] Memory cgroup stats for /syz2: [ 2610.719365][T21692] anon 126976 [ 2610.719365][T21692] file 684032 [ 2610.719365][T21692] kernel 313749504 [ 2610.719365][T21692] kernel_stack 65536 [ 2610.719365][T21692] pagetables 73728 [ 2610.719365][T21692] sec_pagetables 0 [ 2610.719365][T21692] percpu 5387328 [ 2610.719365][T21692] sock 0 [ 2610.719365][T21692] vmalloc 8192 [ 2610.719365][T21692] shmem 679936 [ 2610.719365][T21692] zswap 0 [ 2610.719365][T21692] zswapped 0 [ 2610.719365][T21692] file_mapped 630784 [ 2610.719365][T21692] file_dirty 4096 [ 2610.719365][T21692] file_writeback 0 [ 2610.719365][T21692] swapcached 0 [ 2610.719365][T21692] anon_thp 0 [ 2610.719365][T21692] file_thp 0 [ 2610.719365][T21692] shmem_thp 0 [ 2610.719365][T21692] inactive_anon 0 [ 2610.719365][T21692] active_anon 806912 [ 2610.719365][T21692] inactive_file 0 [ 2610.719365][T21692] active_file 4096 [ 2610.719365][T21692] unevictable 0 [ 2610.719365][T21692] slab_reclaimable 512264 [ 2610.719365][T21692] slab_unreclaimable 307665696 [ 2610.719365][T21692] slab 308177960 [ 2610.719365][T21692] workingset_refault_anon 0 [ 2610.719365][T21692] workingset_refault_file 2 [ 2610.719365][T21692] workingset_activate_anon 0 [ 2610.719365][T21692] workingset_activate_file 0 [ 2610.719365][T21692] workingset_restore_anon 0 [ 2610.719365][T21692] workingset_restore_file 1 [ 2610.719365][T21692] workingset_nodereclaim 0 [ 2610.719365][T21692] pgscan 1960 [ 2610.719365][T21692] pgsteal 131 [ 2610.719365][T21692] pgscan_kswapd 109 [ 2610.719365][T21692] pgscan_direct 1851 05:57:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfa00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:05 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x9401, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2610.719365][T21692] pgscan_khugepaged 0 [ 2610.719365][T21692] pgsteal_kswapd 108 [ 2610.719365][T21692] pgsteal_direct 23 [ 2610.719365][T21692] pgsteal_khugepaged 0 [ 2610.719365][T21692] pgfault 1010941 [ 2610.719365][T21692] pgmajfault 0 [ 2610.719365][T21692] pgrefill 14656 [ 2610.719365][T21692] pgactivate 1806 [ 2610.719365][T21692] pgdeactivate 0 [ 2610.719365][T21692] pglazyfree 0 [ 2610.719365][T21692] pglazyfreed 0 [ 2610.719365][T21692] zswpin 0 [ 2610.719365][T21692] zswpout 0 [ 2610.942373][T21692] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21692,uid=0 05:57:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfa01, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2610.980318][T21692] Memory cgroup out of memory: Killed process 21692 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:57:05 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:57:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) [ 2611.078162][T21704] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2611.108055][T21704] CPU: 1 PID: 21704 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2611.118562][T21704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2611.128677][T21704] Call Trace: [ 2611.132005][T21704] [ 2611.134992][T21704] dump_stack_lvl+0x136/0x150 [ 2611.139752][T21704] dump_header+0x10a/0xd70 [ 2611.144252][T21704] oom_kill_process+0x25d/0x600 [ 2611.149183][T21704] out_of_memory+0x35c/0x1660 [ 2611.153949][T21704] ? find_held_lock+0x2d/0x110 [ 2611.158797][T21704] ? oom_killer_disable+0x2b0/0x2b0 [ 2611.164247][T21704] ? rcu_read_unlock+0x9/0x60 [ 2611.168994][T21704] ? find_held_lock+0x2d/0x110 05:57:05 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2611.173843][T21704] mem_cgroup_out_of_memory+0x206/0x270 [ 2611.180516][T21704] ? mem_cgroup_margin+0x130/0x130 [ 2611.185793][T21704] ? lock_downgrade+0x690/0x690 [ 2611.190731][T21704] try_charge_memcg+0xf9b/0x13b0 [ 2611.195754][T21704] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2611.201864][T21704] ? rcu_read_unlock+0x9/0x60 [ 2611.206621][T21704] ? lock_downgrade+0x690/0x690 [ 2611.211555][T21704] charge_memcg+0x90/0x3b0 [ 2611.216028][T21704] __mem_cgroup_charge+0x2b/0x90 [ 2611.221000][T21704] do_wp_page+0x8eb/0x3530 [ 2611.225587][T21704] ? lock_release+0x670/0x670 [ 2611.230405][T21704] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2611.235816][T21704] ? do_raw_spin_lock+0x124/0x2b0 [ 2611.240887][T21704] ? spin_bug+0x1c0/0x1c0 [ 2611.245331][T21704] ? lock_downgrade+0x690/0x690 [ 2611.250245][T21704] __handle_mm_fault+0x19a1/0x3e60 [ 2611.255412][T21704] ? vm_iomap_memory+0x190/0x190 [ 2611.260524][T21704] handle_mm_fault+0x2ba/0x9c0 [ 2611.265396][T21704] do_user_addr_fault+0x47e/0x1240 [ 2611.270607][T21704] ? rcu_is_watching+0x12/0xb0 [ 2611.275424][T21704] exc_page_fault+0x98/0x170 [ 2611.280131][T21704] asm_exc_page_fault+0x26/0x30 [ 2611.285016][T21704] RIP: 0033:0x7ffae1839610 [ 2611.289464][T21704] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2611.309275][T21704] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2611.315498][T21704] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2611.323535][T21704] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2611.331569][T21704] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2611.339665][T21704] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2611.347759][T21704] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2611.355761][T21704] ? __sys_socket+0x7c/0x250 [ 2611.360408][T21704] [ 2611.385484][T21704] memory: usage 307200kB, limit 307200kB, failcnt 28780 [ 2611.412798][T21704] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2611.420554][T21731] wireguard53: entered promiscuous mode [ 2611.422739][T21704] Memory cgroup stats for /syz3: [ 2611.426436][T21704] anon 106496 [ 2611.426436][T21704] file 733184 [ 2611.426436][T21704] kernel 313733120 [ 2611.426436][T21704] kernel_stack 65536 [ 2611.426436][T21704] pagetables 69632 [ 2611.426436][T21704] sec_pagetables 0 [ 2611.426436][T21704] percpu 5375488 [ 2611.426436][T21704] sock 0 [ 2611.426436][T21704] vmalloc 8192 [ 2611.426436][T21704] shmem 733184 [ 2611.426436][T21704] zswap 0 [ 2611.426436][T21704] zswapped 0 [ 2611.426436][T21704] file_mapped 667648 [ 2611.426436][T21704] file_dirty 0 [ 2611.426436][T21704] file_writeback 0 [ 2611.426436][T21704] swapcached 0 05:57:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfa02, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2611.426436][T21704] anon_thp 0 [ 2611.426436][T21704] file_thp 0 [ 2611.426436][T21704] shmem_thp 0 [ 2611.426436][T21704] inactive_anon 0 [ 2611.426436][T21704] active_anon 839680 [ 2611.426436][T21704] inactive_file 0 [ 2611.426436][T21704] active_file 0 [ 2611.426436][T21704] unevictable 0 [ 2611.426436][T21704] slab_reclaimable 1217464 [ 2611.426436][T21704] slab_unreclaimable 306964000 [ 2611.426436][T21704] slab 308181464 [ 2611.426436][T21704] workingset_refault_anon 0 [ 2611.426436][T21704] workingset_refault_file 130 [ 2611.426436][T21704] workingset_activate_anon 0 [ 2611.426436][T21704] workingset_activate_file 0 [ 2611.426436][T21704] workingset_restore_anon 0 [ 2611.426436][T21704] workingset_restore_file 0 [ 2611.426436][T21704] workingset_nodereclaim 0 [ 2611.426436][T21704] pgscan 3117 [ 2611.426436][T21704] pgsteal 939 [ 2611.426436][T21704] pgscan_kswapd 0 [ 2611.426436][T21704] pgscan_direct 3117 [ 2611.426436][T21704] pgscan_khugepaged 0 [ 2611.426436][T21704] pgsteal_kswapd 0 [ 2611.426436][T21704] pgsteal_direct 939 [ 2611.426436][T21704] pgsteal_khugepaged 0 [ 2611.426436][T21704] pgfault 576204 [ 2611.426436][T21704] pgmajfault 0 [ 2611.426436][T21704] pgrefill 79949 [ 2611.426436][T21704] pgactivate 862 [ 2611.426436][T21704] pgdeactivate 0 [ 2611.426436][T21704] pglazyfree 0 [ 2611.426436][T21704] pglazyfreed 0 [ 2611.426436][T21704] zswpin 0 [ 2611.426436][T21704] zswpout 0 [ 2611.626677][T21704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21704,uid=0 [ 2611.642653][T21704] Memory cgroup out of memory: Killed process 21704 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:57:05 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xb401, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:57:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x8c010000) 05:57:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfa03, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:05 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22030000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2611.805030][T21728] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2611.840821][T21728] CPU: 0 PID: 21728 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2611.851342][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2611.861481][T21728] Call Trace: [ 2611.864797][T21728] [ 2611.867777][T21728] dump_stack_lvl+0x136/0x150 [ 2611.872541][T21728] dump_header+0x10a/0xd70 [ 2611.877043][T21728] oom_kill_process+0x25d/0x600 [ 2611.881955][T21728] out_of_memory+0x35c/0x1660 [ 2611.886673][T21728] ? find_held_lock+0x2d/0x110 [ 2611.891495][T21728] ? oom_killer_disable+0x2b0/0x2b0 [ 2611.896763][T21728] ? rcu_read_unlock+0x9/0x60 [ 2611.901499][T21728] ? find_held_lock+0x2d/0x110 [ 2611.906305][T21728] mem_cgroup_out_of_memory+0x206/0x270 [ 2611.911917][T21728] ? mem_cgroup_margin+0x130/0x130 [ 2611.917094][T21728] ? lock_downgrade+0x690/0x690 [ 2611.921992][T21728] try_charge_memcg+0xf9b/0x13b0 [ 2611.926990][T21728] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2611.933016][T21728] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2611.938864][T21728] ? lock_downgrade+0x690/0x690 [ 2611.943764][T21728] ? lock_downgrade+0x690/0x690 [ 2611.948678][T21728] obj_cgroup_charge+0x2af/0x5e0 [ 2611.953664][T21728] ? __anon_vma_prepare+0x2c6/0x580 [ 2611.958927][T21728] kmem_cache_alloc+0xb1/0x3b0 [ 2611.963741][T21728] __anon_vma_prepare+0x2c6/0x580 [ 2611.968840][T21728] ? __pmd_alloc+0x30c/0x5d0 [ 2611.973528][T21728] __handle_mm_fault+0x3a8f/0x3e60 [ 2611.978706][T21728] ? vm_iomap_memory+0x190/0x190 [ 2611.983722][T21728] handle_mm_fault+0x2ba/0x9c0 [ 2611.988550][T21728] do_user_addr_fault+0x47e/0x1240 [ 2611.993817][T21728] ? rcu_is_watching+0x12/0xb0 [ 2611.998656][T21728] exc_page_fault+0x98/0x170 [ 2612.003299][T21728] asm_exc_page_fault+0x26/0x30 [ 2612.008194][T21728] RIP: 0033:0x7f493322bde9 [ 2612.012771][T21728] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2612.032447][T21728] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2612.038629][T21728] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2612.046638][T21728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2612.054761][T21728] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2612.062776][T21728] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027d350 [ 2612.070808][T21728] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2612.078858][T21728] [ 2612.091676][T21728] memory: usage 307200kB, limit 307200kB, failcnt 17705 [ 2612.114900][T21728] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2612.122487][T21728] Memory cgroup stats for /syz2: [ 2612.122776][T21728] anon 135168 [ 2612.122776][T21728] file 684032 [ 2612.122776][T21728] kernel 313753600 [ 2612.122776][T21728] kernel_stack 65536 [ 2612.122776][T21728] pagetables 81920 [ 2612.122776][T21728] sec_pagetables 0 [ 2612.122776][T21728] percpu 5387328 [ 2612.122776][T21728] sock 0 [ 2612.122776][T21728] vmalloc 8192 [ 2612.122776][T21728] shmem 679936 [ 2612.122776][T21728] zswap 0 05:57:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfc00, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:06 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2612.122776][T21728] zswapped 0 [ 2612.122776][T21728] file_mapped 630784 [ 2612.122776][T21728] file_dirty 4096 [ 2612.122776][T21728] file_writeback 0 [ 2612.122776][T21728] swapcached 0 [ 2612.122776][T21728] anon_thp 0 [ 2612.122776][T21728] file_thp 0 [ 2612.122776][T21728] shmem_thp 0 [ 2612.122776][T21728] inactive_anon 708608 [ 2612.122776][T21728] active_anon 106496 [ 2612.122776][T21728] inactive_file 0 [ 2612.122776][T21728] active_file 4096 [ 2612.122776][T21728] unevictable 0 [ 2612.122776][T21728] slab_reclaimable 512264 [ 2612.122776][T21728] slab_unreclaimable 307665512 [ 2612.122776][T21728] slab 308177776 [ 2612.122776][T21728] workingset_refault_anon 0 [ 2612.122776][T21728] workingset_refault_file 2 [ 2612.122776][T21728] workingset_activate_anon 0 [ 2612.122776][T21728] workingset_activate_file 0 [ 2612.122776][T21728] workingset_restore_anon 0 [ 2612.122776][T21728] workingset_restore_file 1 [ 2612.122776][T21728] workingset_nodereclaim 0 [ 2612.122776][T21728] pgscan 1960 [ 2612.122776][T21728] pgsteal 131 [ 2612.122776][T21728] pgscan_kswapd 109 [ 2612.122776][T21728] pgscan_direct 1851 [ 2612.122776][T21728] pgscan_khugepaged 0 [ 2612.122776][T21728] pgsteal_kswapd 108 [ 2612.122776][T21728] pgsteal_direct 23 [ 2612.122776][T21728] pgsteal_khugepaged 0 [ 2612.122776][T21728] pgfault 1010998 [ 2612.122776][T21728] pgmajfault 0 [ 2612.122776][T21728] pgrefill 14730 [ 2612.122776][T21728] pgactivate 1806 [ 2612.122776][T21728] pgdeactivate 0 [ 2612.122776][T21728] pglazyfree 0 [ 2612.122776][T21728] pglazyfreed 0 [ 2612.122776][T21728] zswpin 0 [ 2612.122776][T21728] zswpout 0 05:57:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfc01, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2612.316609][T21728] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21728,uid=0 [ 2612.343946][T21758] wireguard53: entered promiscuous mode [ 2612.349336][T21728] Memory cgroup out of memory: Killed process 21728 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:57:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) 05:57:06 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xba01, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2612.449537][T21771] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2612.460899][T21771] CPU: 0 PID: 21771 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2612.471410][T21771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2612.481788][T21771] Call Trace: [ 2612.485116][T21771] [ 2612.488099][T21771] dump_stack_lvl+0x136/0x150 [ 2612.492862][T21771] dump_header+0x10a/0xd70 [ 2612.497630][T21771] oom_kill_process+0x25d/0x600 [ 2612.502557][T21771] out_of_memory+0x35c/0x1660 [ 2612.507317][T21771] ? find_held_lock+0x2d/0x110 [ 2612.512166][T21771] ? oom_killer_disable+0x2b0/0x2b0 [ 2612.517611][T21771] ? rcu_read_unlock+0x9/0x60 [ 2612.522362][T21771] ? find_held_lock+0x2d/0x110 [ 2612.527222][T21771] mem_cgroup_out_of_memory+0x206/0x270 [ 2612.532843][T21771] ? mem_cgroup_margin+0x130/0x130 [ 2612.538009][T21771] ? lock_downgrade+0x690/0x690 [ 2612.542910][T21771] try_charge_memcg+0xf9b/0x13b0 [ 2612.547902][T21771] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2612.553918][T21771] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2612.559689][T21771] ? lock_downgrade+0x690/0x690 [ 2612.564585][T21771] ? lock_downgrade+0x690/0x690 [ 2612.569479][T21771] __memcg_kmem_charge_page+0x16e/0x3c0 [ 2612.575154][T21771] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 2612.581349][T21771] copy_process+0x4e3/0x7580 [ 2612.586007][T21771] ? __lock_acquire+0xbc5/0x5d40 [ 2612.590992][T21771] ? __cleanup_sighand+0xb0/0xb0 [ 2612.595962][T21771] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2612.601988][T21771] ? psi_memstall_leave+0x174/0x250 [ 2612.607238][T21771] ? lock_downgrade+0x690/0x690 [ 2612.612137][T21771] kernel_clone+0xeb/0x890 [ 2612.616680][T21771] ? create_io_thread+0xf0/0xf0 [ 2612.621571][T21771] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 2612.627863][T21771] ? lock_downgrade+0x690/0x690 [ 2612.632767][T21771] __do_sys_clone+0xba/0x100 [ 2612.637394][T21771] ? kernel_clone+0x890/0x890 [ 2612.642206][T21771] ? syscall_enter_from_user_mode+0x26/0x80 [ 2612.648170][T21771] do_syscall_64+0x39/0xb0 [ 2612.652623][T21771] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2612.658601][T21771] RIP: 0033:0x7f493328d591 [ 2612.663397][T21771] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2612.683048][T21771] RSP: 002b:00007fff741ea238 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2612.691582][T21771] RAX: ffffffffffffffda RBX: 00007f493404d700 RCX: 00007f493328d591 05:57:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfc02, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2612.699577][T21771] RDX: 00007f493404d9d0 RSI: 00007f493404d2f0 RDI: 00000000003d0f00 [ 2612.707589][T21771] RBP: 00007fff741ea480 R08: 00007f493404d700 R09: 00007f493404d700 [ 2612.715585][T21771] R10: 00007f493404d9d0 R11: 0000000000000206 R12: 00007fff741ea2ee [ 2612.723600][T21771] R13: 00007fff741ea2ef R14: 00007f493404d300 R15: 0000000000022000 [ 2612.731617][T21771] [ 2612.742117][T21771] memory: usage 307200kB, limit 307200kB, failcnt 17775 [ 2612.776043][T21771] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2612.792299][T21771] Memory cgroup stats for /syz2: [ 2612.792629][T21771] anon 90112 [ 2612.792629][T21771] file 684032 [ 2612.792629][T21771] kernel 313757696 [ 2612.792629][T21771] kernel_stack 32768 [ 2612.792629][T21771] pagetables 73728 [ 2612.792629][T21771] sec_pagetables 0 [ 2612.792629][T21771] percpu 5387392 [ 2612.792629][T21771] sock 0 [ 2612.792629][T21771] vmalloc 8192 [ 2612.792629][T21771] shmem 679936 [ 2612.792629][T21771] zswap 0 [ 2612.792629][T21771] zswapped 0 [ 2612.792629][T21771] file_mapped 630784 [ 2612.792629][T21771] file_dirty 4096 [ 2612.792629][T21771] file_writeback 0 [ 2612.792629][T21771] swapcached 0 [ 2612.792629][T21771] anon_thp 0 [ 2612.792629][T21771] file_thp 0 [ 2612.792629][T21771] shmem_thp 0 [ 2612.792629][T21771] inactive_anon 708608 [ 2612.792629][T21771] active_anon 61440 [ 2612.792629][T21771] inactive_file 0 [ 2612.792629][T21771] active_file 4096 [ 2612.792629][T21771] unevictable 0 [ 2612.792629][T21771] slab_reclaimable 510336 [ 2612.792629][T21771] slab_unreclaimable 307676192 [ 2612.792629][T21771] slab 308186528 [ 2612.792629][T21771] workingset_refault_anon 0 [ 2612.792629][T21771] workingset_refault_file 2 [ 2612.792629][T21771] workingset_activate_anon 0 [ 2612.792629][T21771] workingset_activate_file 0 [ 2612.792629][T21771] workingset_restore_anon 0 [ 2612.792629][T21771] workingset_restore_file 1 [ 2612.792629][T21771] workingset_nodereclaim 0 [ 2612.792629][T21771] pgscan 1960 [ 2612.792629][T21771] pgsteal 131 [ 2612.792629][T21771] pgscan_kswapd 109 [ 2612.792629][T21771] pgscan_direct 1851 [ 2612.792629][T21771] pgscan_khugepaged 0 [ 2612.792629][T21771] pgsteal_kswapd 108 [ 2612.792629][T21771] pgsteal_direct 23 [ 2612.792629][T21771] pgsteal_khugepaged 0 [ 2612.792629][T21771] pgfault 1011038 [ 2612.792629][T21771] pgmajfault 0 [ 2612.792629][T21771] pgrefill 14766 [ 2612.792629][T21771] pgactivate 1806 [ 2612.792629][T21771] pgdeactivate 0 [ 2612.792629][T21771] pglazyfree 0 [ 2612.792629][T21771] pglazyfreed 0 05:57:07 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2612.792629][T21771] zswpin 0 [ 2612.792629][T21771] zswpout 0 [ 2612.988242][T21771] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21771,uid=0 [ 2613.011138][T21771] Memory cgroup out of memory: Killed process 21771 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:57:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6a020000}, 0x0) [ 2613.062742][T21746] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2613.076508][T21746] CPU: 0 PID: 21746 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2613.087027][T21746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2613.097151][T21746] Call Trace: [ 2613.100475][T21746] [ 2613.103471][T21746] dump_stack_lvl+0x136/0x150 [ 2613.108232][T21746] dump_header+0x10a/0xd70 05:57:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfc03, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2613.112720][T21746] oom_kill_process+0x25d/0x600 [ 2613.117653][T21746] out_of_memory+0x35c/0x1660 [ 2613.122417][T21746] ? oom_killer_disable+0x2b0/0x2b0 [ 2613.127711][T21746] ? rcu_read_unlock+0x9/0x60 [ 2613.132468][T21746] ? find_held_lock+0x2d/0x110 [ 2613.137318][T21746] mem_cgroup_out_of_memory+0x206/0x270 [ 2613.142972][T21746] ? mem_cgroup_margin+0x130/0x130 [ 2613.148163][T21746] ? lock_downgrade+0x690/0x690 [ 2613.153101][T21746] try_charge_memcg+0xf9b/0x13b0 [ 2613.158120][T21746] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2613.164177][T21746] ? rcu_read_unlock+0x9/0x60 [ 2613.168937][T21746] ? lock_downgrade+0x690/0x690 [ 2613.174004][T21746] charge_memcg+0x90/0x3b0 [ 2613.178721][T21746] __mem_cgroup_charge+0x2b/0x90 [ 2613.183739][T21746] do_wp_page+0x8eb/0x3530 [ 2613.188358][T21746] ? lock_release+0x670/0x670 [ 2613.193804][T21746] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2613.199432][T21746] ? do_raw_spin_lock+0x124/0x2b0 [ 2613.204526][T21746] ? spin_bug+0x1c0/0x1c0 [ 2613.208920][T21746] ? lock_downgrade+0x690/0x690 [ 2613.213909][T21746] __handle_mm_fault+0x19a1/0x3e60 [ 2613.219070][T21746] ? vm_iomap_memory+0x190/0x190 [ 2613.224090][T21746] handle_mm_fault+0x2ba/0x9c0 [ 2613.228955][T21746] do_user_addr_fault+0x47e/0x1240 [ 2613.234106][T21746] ? rcu_is_watching+0x12/0xb0 [ 2613.238907][T21746] exc_page_fault+0x98/0x170 [ 2613.244816][T21746] asm_exc_page_fault+0x26/0x30 [ 2613.249876][T21746] RIP: 0033:0x7ffae1839610 [ 2613.254339][T21746] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2613.273991][T21746] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2613.280096][T21746] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2613.288141][T21746] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2613.296271][T21746] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2613.304295][T21746] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2613.312335][T21746] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2613.320461][T21746] ? __sys_socket+0x7c/0x250 [ 2613.325180][T21746] [ 2613.387036][T21746] memory: usage 307200kB, limit 307200kB, failcnt 28894 [ 2613.398060][T21746] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2613.409606][T21746] Memory cgroup stats for /syz3: [ 2613.410895][T21746] anon 106496 [ 2613.410895][T21746] file 733184 [ 2613.410895][T21746] kernel 313733120 [ 2613.410895][T21746] kernel_stack 65536 [ 2613.410895][T21746] pagetables 69632 [ 2613.410895][T21746] sec_pagetables 0 [ 2613.410895][T21746] percpu 5375488 [ 2613.410895][T21746] sock 0 [ 2613.410895][T21746] vmalloc 8192 [ 2613.410895][T21746] shmem 733184 [ 2613.410895][T21746] zswap 0 [ 2613.410895][T21746] zswapped 0 [ 2613.410895][T21746] file_mapped 667648 [ 2613.410895][T21746] file_dirty 0 [ 2613.410895][T21746] file_writeback 0 [ 2613.410895][T21746] swapcached 0 [ 2613.410895][T21746] anon_thp 0 [ 2613.410895][T21746] file_thp 0 [ 2613.410895][T21746] shmem_thp 0 [ 2613.410895][T21746] inactive_anon 0 [ 2613.410895][T21746] active_anon 839680 [ 2613.410895][T21746] inactive_file 0 [ 2613.410895][T21746] active_file 0 [ 2613.410895][T21746] unevictable 0 [ 2613.410895][T21746] slab_reclaimable 1217464 [ 2613.410895][T21746] slab_unreclaimable 306964000 [ 2613.410895][T21746] slab 308181464 [ 2613.410895][T21746] workingset_refault_anon 0 [ 2613.410895][T21746] workingset_refault_file 130 [ 2613.410895][T21746] workingset_activate_anon 0 [ 2613.410895][T21746] workingset_activate_file 0 [ 2613.410895][T21746] workingset_restore_anon 0 [ 2613.410895][T21746] workingset_restore_file 0 [ 2613.410895][T21746] workingset_nodereclaim 0 [ 2613.410895][T21746] pgscan 3117 [ 2613.410895][T21746] pgsteal 939 [ 2613.410895][T21746] pgscan_kswapd 0 [ 2613.410895][T21746] pgscan_direct 3117 [ 2613.410895][T21746] pgscan_khugepaged 0 [ 2613.410895][T21746] pgsteal_kswapd 0 [ 2613.410895][T21746] pgsteal_direct 939 [ 2613.410895][T21746] pgsteal_khugepaged 0 [ 2613.410895][T21746] pgfault 576248 [ 2613.410895][T21746] pgmajfault 0 [ 2613.410895][T21746] pgrefill 79949 [ 2613.410895][T21746] pgactivate 862 [ 2613.410895][T21746] pgdeactivate 0 [ 2613.410895][T21746] pglazyfree 0 [ 2613.410895][T21746] pglazyfreed 0 [ 2613.410895][T21746] zswpin 0 [ 2613.410895][T21746] zswpout 0 [ 2613.616802][T21746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21746,uid=0 05:57:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x8cf60600) 05:57:07 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:57:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfe03, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:07 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xba02, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 2613.639224][T21746] Memory cgroup out of memory: Killed process 21746 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8880kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:57:07 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x27020000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:57:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfeff, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2613.768382][T21801] wireguard53: entered promiscuous mode [ 2613.835166][T21792] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2613.862568][T21792] CPU: 0 PID: 21792 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2613.873065][T21792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2613.883143][T21792] Call Trace: [ 2613.886470][T21792] [ 2613.889418][T21792] dump_stack_lvl+0x136/0x150 [ 2613.894134][T21792] dump_header+0x10a/0xd70 [ 2613.898592][T21792] oom_kill_process+0x25d/0x600 [ 2613.904021][T21792] out_of_memory+0x35c/0x1660 [ 2613.908775][T21792] ? find_held_lock+0x2d/0x110 [ 2613.913862][T21792] ? oom_killer_disable+0x2b0/0x2b0 [ 2613.919199][T21792] ? rcu_read_unlock+0x9/0x60 [ 2613.923949][T21792] ? find_held_lock+0x2d/0x110 [ 2613.928812][T21792] mem_cgroup_out_of_memory+0x206/0x270 05:57:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xff0f, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2613.934416][T21792] ? mem_cgroup_margin+0x130/0x130 [ 2613.939606][T21792] ? lock_downgrade+0x690/0x690 [ 2613.944543][T21792] try_charge_memcg+0xf9b/0x13b0 [ 2613.949637][T21792] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2613.955741][T21792] ? rcu_read_unlock+0x9/0x60 [ 2613.960519][T21792] ? lock_downgrade+0x690/0x690 [ 2613.965458][T21792] charge_memcg+0x90/0x3b0 [ 2613.969951][T21792] __mem_cgroup_charge+0x2b/0x90 [ 2613.974947][T21792] do_wp_page+0x8eb/0x3530 [ 2613.979412][T21792] ? lock_release+0x670/0x670 [ 2613.984116][T21792] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2613.989520][T21792] ? do_raw_spin_lock+0x124/0x2b0 [ 2613.994578][T21792] ? spin_bug+0x1c0/0x1c0 [ 2613.998934][T21792] ? lock_downgrade+0x690/0x690 [ 2614.003822][T21792] __handle_mm_fault+0x19a1/0x3e60 [ 2614.008992][T21792] ? vm_iomap_memory+0x190/0x190 [ 2614.013987][T21792] handle_mm_fault+0x2ba/0x9c0 [ 2614.018818][T21792] do_user_addr_fault+0x47e/0x1240 [ 2614.024032][T21792] ? rcu_is_watching+0x12/0xb0 [ 2614.028874][T21792] exc_page_fault+0x98/0x170 [ 2614.033509][T21792] asm_exc_page_fault+0x26/0x30 [ 2614.038654][T21792] RIP: 0033:0x7f4933239610 [ 2614.043095][T21792] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2614.062741][T21792] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2614.068840][T21792] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2614.076835][T21792] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2614.084827][T21792] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2614.092820][T21792] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2614.100821][T21792] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2614.109072][T21792] ? apparmor_socket_create+0x13c/0x670 [ 2614.114683][T21792] [ 2614.126234][T21792] memory: usage 307200kB, limit 307200kB, failcnt 17905 [ 2614.133916][T21792] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2614.142912][T21792] Memory cgroup stats for /syz2: [ 2614.143215][T21792] anon 126976 [ 2614.143215][T21792] file 684032 [ 2614.143215][T21792] kernel 313761792 [ 2614.143215][T21792] kernel_stack 65536 [ 2614.143215][T21792] pagetables 73728 [ 2614.143215][T21792] sec_pagetables 0 [ 2614.143215][T21792] percpu 5387392 [ 2614.143215][T21792] sock 0 [ 2614.143215][T21792] vmalloc 8192 [ 2614.143215][T21792] shmem 679936 [ 2614.143215][T21792] zswap 0 [ 2614.143215][T21792] zswapped 0 [ 2614.143215][T21792] file_mapped 630784 [ 2614.143215][T21792] file_dirty 4096 [ 2614.143215][T21792] file_writeback 0 [ 2614.143215][T21792] swapcached 0 [ 2614.143215][T21792] anon_thp 0 [ 2614.143215][T21792] file_thp 0 [ 2614.143215][T21792] shmem_thp 0 [ 2614.143215][T21792] inactive_anon 708608 [ 2614.143215][T21792] active_anon 98304 [ 2614.143215][T21792] inactive_file 0 [ 2614.143215][T21792] active_file 4096 [ 2614.143215][T21792] unevictable 0 [ 2614.143215][T21792] slab_reclaimable 512264 [ 2614.143215][T21792] slab_unreclaimable 307677304 [ 2614.143215][T21792] slab 308189568 [ 2614.143215][T21792] workingset_refault_anon 0 [ 2614.143215][T21792] workingset_refault_file 2 [ 2614.143215][T21792] workingset_activate_anon 0 [ 2614.143215][T21792] workingset_activate_file 0 [ 2614.143215][T21792] workingset_restore_anon 0 [ 2614.143215][T21792] workingset_restore_file 1 [ 2614.143215][T21792] workingset_nodereclaim 0 [ 2614.143215][T21792] pgscan 1960 [ 2614.143215][T21792] pgsteal 131 [ 2614.143215][T21792] pgscan_kswapd 109 [ 2614.143215][T21792] pgscan_direct 1851 [ 2614.143215][T21792] pgscan_khugepaged 0 [ 2614.143215][T21792] pgsteal_kswapd 108 [ 2614.143215][T21792] pgsteal_direct 23 [ 2614.143215][T21792] pgsteal_khugepaged 0 [ 2614.143215][T21792] pgfault 1011095 [ 2614.143215][T21792] pgmajfault 0 [ 2614.143215][T21792] pgrefill 14854 [ 2614.143215][T21792] pgactivate 1806 [ 2614.143215][T21792] pgdeactivate 0 [ 2614.143215][T21792] pglazyfree 0 [ 2614.143215][T21792] pglazyfreed 0 [ 2614.143215][T21792] zswpin 0 [ 2614.143215][T21792] zswpout 0 [ 2614.334916][T21792] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21792,uid=0 [ 2614.351660][T21792] Memory cgroup out of memory: Killed process 21792 (syz-executor.2) total-vm:54548kB, anon-rss:472kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2614.372621][T21810] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2614.383075][T21810] CPU: 0 PID: 21810 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2614.393558][T21810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2614.403666][T21810] Call Trace: [ 2614.406991][T21810] [ 2614.409968][T21810] dump_stack_lvl+0x136/0x150 [ 2614.414734][T21810] dump_header+0x10a/0xd70 [ 2614.419244][T21810] oom_kill_process+0x25d/0x600 [ 2614.424174][T21810] out_of_memory+0x35c/0x1660 [ 2614.428933][T21810] ? oom_killer_disable+0x2b0/0x2b0 [ 2614.434202][T21810] ? rcu_read_unlock+0x9/0x60 [ 2614.438961][T21810] ? find_held_lock+0x2d/0x110 [ 2614.443834][T21810] mem_cgroup_out_of_memory+0x206/0x270 [ 2614.449451][T21810] ? mem_cgroup_margin+0x130/0x130 [ 2614.454708][T21810] ? lock_downgrade+0x690/0x690 [ 2614.459611][T21810] try_charge_memcg+0xf9b/0x13b0 [ 2614.464591][T21810] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2614.470614][T21810] ? rcu_read_unlock+0x9/0x60 [ 2614.475329][T21810] ? lock_downgrade+0x690/0x690 [ 2614.480399][T21810] charge_memcg+0x90/0x3b0 [ 2614.484849][T21810] __mem_cgroup_charge+0x2b/0x90 [ 2614.489820][T21810] do_wp_page+0x8eb/0x3530 [ 2614.494294][T21810] ? lock_release+0x670/0x670 [ 2614.498998][T21810] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2614.504410][T21810] ? do_raw_spin_lock+0x124/0x2b0 [ 2614.509470][T21810] ? spin_bug+0x1c0/0x1c0 [ 2614.513832][T21810] ? lock_downgrade+0x690/0x690 [ 2614.518736][T21810] __handle_mm_fault+0x19a1/0x3e60 [ 2614.523985][T21810] ? vm_iomap_memory+0x190/0x190 [ 2614.528980][T21810] handle_mm_fault+0x2ba/0x9c0 [ 2614.533793][T21810] do_user_addr_fault+0x47e/0x1240 [ 2614.538943][T21810] ? rcu_is_watching+0x12/0xb0 [ 2614.543747][T21810] exc_page_fault+0x98/0x170 [ 2614.548382][T21810] asm_exc_page_fault+0x26/0x30 [ 2614.553348][T21810] RIP: 0033:0x7ffae1839610 [ 2614.557786][T21810] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2614.577418][T21810] RSP: 002b:00007ffdc9b412d0 EFLAGS: 00010246 [ 2614.583514][T21810] RAX: 00000000a4864b03 RBX: 00007ffae19ac018 RCX: 0000001b2e520000 [ 2614.591507][T21810] RDX: 0000000000000000 RSI: 0000001b2e520018 RDI: 000000000c7edde4 [ 2614.599513][T21810] RBP: 00000000a4864b03 R08: 0000000000000b03 R09: 00000000a4864b07 [ 2614.607507][T21810] R10: 00007ffdc9b41490 R11: 0000000000000246 R12: 00007ffae19a0000 [ 2614.615498][T21810] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87fd799c [ 2614.623492][T21810] ? __sys_socket+0x7c/0x250 [ 2614.628213][T21810] 05:57:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) [ 2614.639570][T21810] memory: usage 307200kB, limit 307200kB, failcnt 28999 [ 2614.668357][T21810] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2614.677069][T21810] Memory cgroup stats for /syz3: [ 2614.677347][T21810] anon 106496 [ 2614.677347][T21810] file 733184 [ 2614.677347][T21810] kernel 313733120 [ 2614.677347][T21810] kernel_stack 65536 [ 2614.677347][T21810] pagetables 69632 [ 2614.677347][T21810] sec_pagetables 0 [ 2614.677347][T21810] percpu 5375488 [ 2614.677347][T21810] sock 0 [ 2614.677347][T21810] vmalloc 8192 [ 2614.677347][T21810] shmem 733184 [ 2614.677347][T21810] zswap 0 [ 2614.677347][T21810] zswapped 0 [ 2614.677347][T21810] file_mapped 667648 [ 2614.677347][T21810] file_dirty 0 [ 2614.677347][T21810] file_writeback 0 [ 2614.677347][T21810] swapcached 0 [ 2614.677347][T21810] anon_thp 0 05:57:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xff7f, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2614.677347][T21810] file_thp 0 [ 2614.677347][T21810] shmem_thp 0 [ 2614.677347][T21810] inactive_anon 0 [ 2614.677347][T21810] active_anon 839680 [ 2614.677347][T21810] inactive_file 0 [ 2614.677347][T21810] active_file 0 [ 2614.677347][T21810] unevictable 0 [ 2614.677347][T21810] slab_reclaimable 1217464 [ 2614.677347][T21810] slab_unreclaimable 306964000 [ 2614.677347][T21810] slab 308181464 [ 2614.677347][T21810] workingset_refault_anon 0 [ 2614.677347][T21810] workingset_refault_file 130 [ 2614.677347][T21810] workingset_activate_anon 0 [ 2614.677347][T21810] workingset_activate_file 0 [ 2614.677347][T21810] workingset_restore_anon 0 [ 2614.677347][T21810] workingset_restore_file 0 [ 2614.677347][T21810] workingset_nodereclaim 0 [ 2614.677347][T21810] pgscan 3117 [ 2614.677347][T21810] pgsteal 939 [ 2614.677347][T21810] pgscan_kswapd 0 [ 2614.677347][T21810] pgscan_direct 3117 [ 2614.677347][T21810] pgscan_khugepaged 0 [ 2614.677347][T21810] pgsteal_kswapd 0 [ 2614.677347][T21810] pgsteal_direct 939 [ 2614.677347][T21810] pgsteal_khugepaged 0 [ 2614.677347][T21810] pgfault 576292 [ 2614.677347][T21810] pgmajfault 0 [ 2614.677347][T21810] pgrefill 79949 [ 2614.677347][T21810] pgactivate 862 [ 2614.677347][T21810] pgdeactivate 0 [ 2614.677347][T21810] pglazyfree 0 [ 2614.677347][T21810] pglazyfreed 0 [ 2614.677347][T21810] zswpin 0 [ 2614.677347][T21810] zswpout 0 [ 2614.864939][T21810] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21810,uid=0 05:57:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xfffe, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2614.915036][T21810] Memory cgroup out of memory: Killed process 21810 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 05:57:09 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xc402, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:57:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x8df60600) 05:57:09 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) 05:57:09 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2e120000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2615.039360][T21833] syz-executor.3 invoked oom-killer: gfp_mask=0xc40(GFP_NOFS), order=0, oom_score_adj=0 [ 2615.050780][T21833] CPU: 1 PID: 21833 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2615.061266][T21833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2615.071372][T21833] Call Trace: [ 2615.074683][T21833] [ 2615.077654][T21833] dump_stack_lvl+0x136/0x150 [ 2615.082407][T21833] dump_header+0x10a/0xd70 [ 2615.086899][T21833] oom_kill_process+0x25d/0x600 [ 2615.091832][T21833] out_of_memory+0x35c/0x1660 [ 2615.096589][T21833] ? find_held_lock+0x2d/0x110 [ 2615.101435][T21833] ? oom_killer_disable+0x2b0/0x2b0 [ 2615.106719][T21833] ? rcu_read_unlock+0x9/0x60 [ 2615.111469][T21833] ? find_held_lock+0x2d/0x110 [ 2615.116313][T21833] mem_cgroup_out_of_memory+0x206/0x270 [ 2615.121937][T21833] ? mem_cgroup_margin+0x130/0x130 [ 2615.127147][T21833] ? lock_downgrade+0x690/0x690 [ 2615.132082][T21833] try_charge_memcg+0xf9b/0x13b0 [ 2615.137094][T21833] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2615.143141][T21833] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2615.148946][T21833] ? lock_downgrade+0x690/0x690 [ 2615.153872][T21833] ? lock_downgrade+0x690/0x690 [ 2615.158809][T21833] obj_cgroup_charge+0x2af/0x5e0 [ 2615.163822][T21833] ? ext4_alloc_inode+0x28/0x680 [ 2615.168891][T21833] kmem_cache_alloc_lru+0x142/0x600 [ 2615.174175][T21833] ? mark_held_locks+0x9f/0xe0 [ 2615.178996][T21833] ? ext4_free_in_core_inode+0xb0/0xb0 [ 2615.184518][T21833] ext4_alloc_inode+0x28/0x680 [ 2615.189339][T21833] ? ext4_free_in_core_inode+0xb0/0xb0 [ 2615.194849][T21833] alloc_inode+0x61/0x230 [ 2615.199235][T21833] new_inode+0x2b/0x280 [ 2615.203463][T21833] __ext4_new_inode+0x34f/0x54c0 [ 2615.208489][T21833] ? __kmem_cache_free+0xaf/0x2d0 [ 2615.213663][T21833] ? ext4_mark_inode_used+0x14a0/0x14a0 [ 2615.219417][T21833] ? ext4_lookup+0xcb/0x700 [ 2615.224016][T21833] ext4_symlink+0x5ac/0xa00 [ 2615.228701][T21833] ? ext4_mknod+0x4f0/0x4f0 [ 2615.233262][T21833] ? cpuset_write_resmask+0xfe0/0x2c10 [ 2615.238814][T21833] ? bpf_lsm_inode_permission+0x9/0x10 [ 2615.244309][T21833] ? security_inode_permission+0xc9/0xf0 [ 2615.250110][T21833] ? inode_permission.part.0+0xb5/0x520 [ 2615.255793][T21833] ? bpf_lsm_inode_symlink+0x9/0x10 [ 2615.261054][T21833] vfs_symlink+0x10c/0x2c0 [ 2615.265546][T21833] do_symlinkat+0x262/0x2e0 [ 2615.270132][T21833] ? __ia32_sys_unlink+0x110/0x110 [ 2615.275304][T21833] ? getname_flags.part.0+0x1dd/0x4f0 [ 2615.280721][T21833] __x64_sys_symlinkat+0x97/0xc0 [ 2615.285700][T21833] do_syscall_64+0x39/0xb0 [ 2615.290174][T21833] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2615.296130][T21833] RIP: 0033:0x7ffae188baa7 [ 2615.300600][T21833] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2615.320259][T21833] RSP: 002b:00007ffdc9b41588 EFLAGS: 00000206 ORIG_RAX: 000000000000010a [ 2615.328731][T21833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffae188baa7 [ 2615.336729][T21833] RDX: 00007ffae18e7d56 RSI: 00000000ffffff9c RDI: 00007ffdc9b41650 [ 2615.344724][T21833] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdc9b41420 [ 2615.352719][T21833] R10: 00007ffdc9b412d7 R11: 0000000000000206 R12: 0000000000000001 [ 2615.360825][T21833] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdc9b41650 [ 2615.368875][T21833] [ 2615.389891][T21833] memory: usage 307128kB, limit 307200kB, failcnt 29070 [ 2615.396957][T21833] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2615.419169][T21833] Memory cgroup stats for /syz3: [ 2615.419902][T21833] anon 77824 [ 2615.419902][T21833] file 733184 [ 2615.419902][T21833] kernel 313688064 [ 2615.419902][T21833] kernel_stack 32768 05:57:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x20000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2615.419902][T21833] pagetables 57344 [ 2615.419902][T21833] sec_pagetables 0 [ 2615.419902][T21833] percpu 5375552 [ 2615.419902][T21833] sock 0 [ 2615.419902][T21833] vmalloc 8192 [ 2615.419902][T21833] shmem 733184 [ 2615.419902][T21833] zswap 0 [ 2615.419902][T21833] zswapped 0 [ 2615.419902][T21833] file_mapped 667648 [ 2615.419902][T21833] file_dirty 0 [ 2615.419902][T21833] file_writeback 0 [ 2615.419902][T21833] swapcached 0 [ 2615.419902][T21833] anon_thp 0 [ 2615.419902][T21833] file_thp 0 [ 2615.419902][T21833] shmem_thp 0 [ 2615.419902][T21833] inactive_anon 0 [ 2615.419902][T21833] active_anon 811008 [ 2615.419902][T21833] inactive_file 0 [ 2615.419902][T21833] active_file 0 [ 2615.419902][T21833] unevictable 0 [ 2615.419902][T21833] slab_reclaimable 1212400 [ 2615.419902][T21833] slab_unreclaimable 306966440 [ 2615.419902][T21833] slab 308178840 [ 2615.419902][T21833] workingset_refault_anon 0 [ 2615.419902][T21833] workingset_refault_file 130 [ 2615.419902][T21833] workingset_activate_anon 0 [ 2615.419902][T21833] workingset_activate_file 0 [ 2615.419902][T21833] workingset_restore_anon 0 [ 2615.419902][T21833] workingset_restore_file 0 [ 2615.419902][T21833] workingset_nodereclaim 0 [ 2615.419902][T21833] pgscan 3117 [ 2615.419902][T21833] pgsteal 939 [ 2615.419902][T21833] pgscan_kswapd 0 [ 2615.419902][T21833] pgscan_direct 3117 [ 2615.419902][T21833] pgscan_khugepaged 0 [ 2615.419902][T21833] pgsteal_kswapd 0 [ 2615.419902][T21833] pgsteal_direct 939 [ 2615.419902][T21833] pgsteal_khugepaged 0 [ 2615.419902][T21833] pgfault 576322 [ 2615.419902][T21833] pgmajfault 0 [ 2615.419902][T21833] pgrefill 79949 [ 2615.419902][T21833] pgactivate 862 [ 2615.419902][T21833] pgdeactivate 0 [ 2615.419902][T21833] pglazyfree 0 [ 2615.419902][T21833] pglazyfreed 0 [ 2615.419902][T21833] zswpin 0 [ 2615.419902][T21833] zswpout 0 [ 2615.620025][T21833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5039,uid=0 [ 2615.640459][T21833] Memory cgroup out of memory: Killed process 5039 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:68kB oom_score_adj:0 [ 2615.644792][T21847] wireguard53: entered promiscuous mode [ 2615.687026][T21828] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2615.697639][T21828] CPU: 1 PID: 21828 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2615.708126][T21828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2615.718228][T21828] Call Trace: [ 2615.721527][T21828] [ 2615.724491][T21828] dump_stack_lvl+0x136/0x150 [ 2615.729319][T21828] dump_header+0x10a/0xd70 [ 2615.733773][T21828] oom_kill_process+0x25d/0x600 [ 2615.738748][T21828] out_of_memory+0x35c/0x1660 [ 2615.743494][T21828] ? find_held_lock+0x2d/0x110 [ 2615.748353][T21828] ? oom_killer_disable+0x2b0/0x2b0 [ 2615.753696][T21828] ? rcu_read_unlock+0x9/0x60 [ 2615.758627][T21828] ? find_held_lock+0x2d/0x110 [ 2615.763503][T21828] mem_cgroup_out_of_memory+0x206/0x270 [ 2615.769136][T21828] ? mem_cgroup_margin+0x130/0x130 [ 2615.774320][T21828] ? lock_downgrade+0x690/0x690 [ 2615.779305][T21828] try_charge_memcg+0xf9b/0x13b0 [ 2615.784409][T21828] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2615.790461][T21828] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2615.796273][T21828] ? lock_downgrade+0x690/0x690 [ 2615.801199][T21828] ? lock_downgrade+0x690/0x690 [ 2615.806128][T21828] obj_cgroup_charge+0x2af/0x5e0 [ 2615.811134][T21828] ? __anon_vma_prepare+0x64/0x580 [ 2615.816318][T21828] kmem_cache_alloc+0xb1/0x3b0 [ 2615.821157][T21828] __anon_vma_prepare+0x64/0x580 [ 2615.826164][T21828] ? __pmd_alloc+0x30c/0x5d0 [ 2615.830816][T21828] __handle_mm_fault+0x3a8f/0x3e60 05:57:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x30000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2615.835979][T21828] ? vm_iomap_memory+0x190/0x190 [ 2615.841067][T21828] handle_mm_fault+0x2ba/0x9c0 [ 2615.845869][T21828] do_user_addr_fault+0x47e/0x1240 [ 2615.851041][T21828] ? rcu_is_watching+0x12/0xb0 [ 2615.855878][T21828] exc_page_fault+0x98/0x170 [ 2615.860793][T21828] asm_exc_page_fault+0x26/0x30 [ 2615.865700][T21828] RIP: 0033:0x7f493322bde9 05:57:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x40000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2615.870172][T21828] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2615.889852][T21828] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2615.895987][T21828] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2615.904026][T21828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2615.912049][T21828] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2615.920347][T21828] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027e021 [ 2615.928457][T21828] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2615.936624][T21828] [ 2616.013866][T21828] memory: usage 307200kB, limit 307200kB, failcnt 18056 [ 2616.037325][T21828] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:57:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0xf0ffff, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2616.063288][T21828] Memory cgroup stats for /syz2: [ 2616.063584][T21828] anon 135168 [ 2616.063584][T21828] file 684032 [ 2616.063584][T21828] kernel 313753600 [ 2616.063584][T21828] kernel_stack 65536 [ 2616.063584][T21828] pagetables 81920 [ 2616.063584][T21828] sec_pagetables 0 [ 2616.063584][T21828] percpu 5387328 [ 2616.063584][T21828] sock 0 [ 2616.063584][T21828] vmalloc 8192 [ 2616.063584][T21828] shmem 679936 [ 2616.063584][T21828] zswap 0 [ 2616.063584][T21828] zswapped 0 [ 2616.063584][T21828] file_mapped 630784 [ 2616.063584][T21828] file_dirty 4096 [ 2616.063584][T21828] file_writeback 0 [ 2616.063584][T21828] swapcached 0 [ 2616.063584][T21828] anon_thp 0 [ 2616.063584][T21828] file_thp 0 [ 2616.063584][T21828] shmem_thp 0 [ 2616.063584][T21828] inactive_anon 708608 [ 2616.063584][T21828] active_anon 106496 [ 2616.063584][T21828] inactive_file 0 [ 2616.063584][T21828] active_file 4096 [ 2616.063584][T21828] unevictable 0 [ 2616.063584][T21828] slab_reclaimable 512264 [ 2616.063584][T21828] slab_unreclaimable 307665392 [ 2616.063584][T21828] slab 308177656 [ 2616.063584][T21828] workingset_refault_anon 0 [ 2616.063584][T21828] workingset_refault_file 2 [ 2616.063584][T21828] workingset_activate_anon 0 [ 2616.063584][T21828] workingset_activate_file 0 [ 2616.063584][T21828] workingset_restore_anon 0 [ 2616.063584][T21828] workingset_restore_file 1 [ 2616.063584][T21828] workingset_nodereclaim 0 [ 2616.063584][T21828] pgscan 1960 [ 2616.063584][T21828] pgsteal 131 [ 2616.063584][T21828] pgscan_kswapd 109 [ 2616.063584][T21828] pgscan_direct 1851 [ 2616.063584][T21828] pgscan_khugepaged 0 [ 2616.063584][T21828] pgsteal_kswapd 108 [ 2616.063584][T21828] pgsteal_direct 23 [ 2616.063584][T21828] pgsteal_khugepaged 0 [ 2616.063584][T21828] pgfault 1011156 [ 2616.063584][T21828] pgmajfault 0 [ 2616.063584][T21828] pgrefill 14963 [ 2616.063584][T21828] pgactivate 1806 [ 2616.063584][T21828] pgdeactivate 0 [ 2616.063584][T21828] pglazyfree 0 [ 2616.063584][T21828] pglazyfreed 0 [ 2616.063584][T21828] zswpin 0 [ 2616.063584][T21828] zswpout 0 05:57:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x70030000}, 0x0) 05:57:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x1000000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:10 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f120000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) [ 2616.258676][T21828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21828,uid=0 [ 2616.275045][T21828] Memory cgroup out of memory: Killed process 21828 (syz-executor.2) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 05:57:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x2000000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:10 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xce00, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:57:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x8ef60600) 05:57:10 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2616.611831][T21879] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2616.629787][T21879] CPU: 0 PID: 21879 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2616.640299][T21879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2616.650411][T21879] Call Trace: [ 2616.653776][T21879] [ 2616.656746][T21879] dump_stack_lvl+0x136/0x150 [ 2616.661590][T21879] dump_header+0x10a/0xd70 [ 2616.666078][T21879] oom_kill_process+0x25d/0x600 [ 2616.670996][T21879] out_of_memory+0x35c/0x1660 [ 2616.675742][T21879] ? find_held_lock+0x2d/0x110 [ 2616.680580][T21879] ? oom_killer_disable+0x2b0/0x2b0 [ 2616.685846][T21879] ? rcu_read_unlock+0x9/0x60 [ 2616.690603][T21879] ? find_held_lock+0x2d/0x110 [ 2616.695447][T21879] mem_cgroup_out_of_memory+0x206/0x270 [ 2616.701073][T21879] ? mem_cgroup_margin+0x130/0x130 [ 2616.706268][T21879] ? lock_downgrade+0x690/0x690 [ 2616.711213][T21879] try_charge_memcg+0xf9b/0x13b0 [ 2616.716359][T21879] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2616.722405][T21879] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 2616.728206][T21879] ? lock_downgrade+0x690/0x690 [ 2616.733110][T21879] ? lock_downgrade+0x690/0x690 [ 2616.738015][T21879] obj_cgroup_charge+0x2af/0x5e0 [ 2616.743083][T21879] ? __anon_vma_prepare+0x2c6/0x580 [ 2616.748410][T21879] kmem_cache_alloc+0xb1/0x3b0 [ 2616.753256][T21879] __anon_vma_prepare+0x2c6/0x580 [ 2616.758351][T21879] ? __pmd_alloc+0x30c/0x5d0 [ 2616.763003][T21879] __handle_mm_fault+0x3a8f/0x3e60 [ 2616.768179][T21879] ? vm_iomap_memory+0x190/0x190 [ 2616.773409][T21879] handle_mm_fault+0x2ba/0x9c0 [ 2616.778229][T21879] do_user_addr_fault+0x47e/0x1240 [ 2616.783392][T21879] ? rcu_is_watching+0x12/0xb0 [ 2616.788224][T21879] exc_page_fault+0x98/0x170 [ 2616.792890][T21879] asm_exc_page_fault+0x26/0x30 [ 2616.797803][T21879] RIP: 0033:0x7f493322bde9 [ 2616.802688][T21879] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 2616.822333][T21879] RSP: 002b:00007fff741ea330 EFLAGS: 00010246 [ 2616.828435][T21879] RAX: 0000000020000240 RBX: 0000000000000000 RCX: 0000000000000000 [ 2616.836434][T21879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555679e2e8 [ 2616.844429][T21879] RBP: 00007fff741ea428 R08: 0000000000000000 R09: 0000000000000000 [ 2616.852426][T21879] R10: 00007f4932e00068 R11: 0000000000000246 R12: 000000000027e623 05:57:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x8ff60600) [ 2616.860424][T21879] R13: 00007fff741ea450 R14: 00007f49333abf80 R15: 0000000000000032 [ 2616.868443][T21879] [ 2616.894926][T21879] memory: usage 307200kB, limit 307200kB, failcnt 18152 [ 2616.907157][T21879] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2616.925482][T21879] Memory cgroup stats for /syz2: [ 2616.927098][T21879] anon 135168 [ 2616.927098][T21879] file 684032 [ 2616.927098][T21879] kernel 313753600 [ 2616.927098][T21879] kernel_stack 65536 [ 2616.927098][T21879] pagetables 81920 [ 2616.927098][T21879] sec_pagetables 0 [ 2616.927098][T21879] percpu 5387328 [ 2616.927098][T21879] sock 0 [ 2616.927098][T21879] vmalloc 8192 [ 2616.927098][T21879] shmem 679936 [ 2616.927098][T21879] zswap 0 [ 2616.927098][T21879] zswapped 0 [ 2616.927098][T21879] file_mapped 630784 [ 2616.927098][T21879] file_dirty 4096 [ 2616.927098][T21879] file_writeback 0 [ 2616.927098][T21879] swapcached 0 [ 2616.927098][T21879] anon_thp 0 [ 2616.927098][T21879] file_thp 0 [ 2616.927098][T21879] shmem_thp 0 [ 2616.927098][T21879] inactive_anon 708608 [ 2616.927098][T21879] active_anon 106496 [ 2616.927098][T21879] inactive_file 0 [ 2616.927098][T21879] active_file 4096 [ 2616.927098][T21879] unevictable 0 [ 2616.927098][T21879] slab_reclaimable 512264 [ 2616.927098][T21879] slab_unreclaimable 307665512 [ 2616.927098][T21879] slab 308177776 [ 2616.927098][T21879] workingset_refault_anon 0 [ 2616.927098][T21879] workingset_refault_file 2 [ 2616.927098][T21879] workingset_activate_anon 0 [ 2616.927098][T21879] workingset_activate_file 0 [ 2616.927098][T21879] workingset_restore_anon 0 [ 2616.927098][T21879] workingset_restore_file 1 [ 2616.927098][T21879] workingset_nodereclaim 0 [ 2616.927098][T21879] pgscan 1960 [ 2616.927098][T21879] pgsteal 131 [ 2616.927098][T21879] pgscan_kswapd 109 [ 2616.927098][T21879] pgscan_direct 1851 [ 2616.927098][T21879] pgscan_khugepaged 0 [ 2616.927098][T21879] pgsteal_kswapd 108 [ 2616.927098][T21879] pgsteal_direct 23 [ 2616.927098][T21879] pgsteal_khugepaged 0 [ 2616.927098][T21879] pgfault 1011213 [ 2616.927098][T21879] pgmajfault 0 [ 2616.927098][T21879] pgrefill 15018 [ 2616.927098][T21879] pgactivate 1806 [ 2616.927098][T21879] pgdeactivate 0 [ 2616.927098][T21879] pglazyfree 0 [ 2616.927098][T21879] pglazyfreed 0 [ 2616.927098][T21879] zswpin 0 [ 2616.927098][T21879] zswpout 0 05:57:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x71070000}, 0x0) [ 2617.118405][T21879] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21879,uid=0 [ 2617.138664][T21879] Memory cgroup out of memory: Killed process 21879 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 2617.324134][T21896] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2617.348595][T21896] CPU: 1 PID: 21896 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2617.359110][T21896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2617.369214][T21896] Call Trace: [ 2617.372541][T21896] [ 2617.375539][T21896] dump_stack_lvl+0x136/0x150 [ 2617.380292][T21896] dump_header+0x10a/0xd70 [ 2617.384782][T21896] oom_kill_process+0x25d/0x600 [ 2617.389808][T21896] out_of_memory+0x35c/0x1660 [ 2617.394571][T21896] ? find_held_lock+0x2d/0x110 [ 2617.399415][T21896] ? oom_killer_disable+0x2b0/0x2b0 [ 2617.404689][T21896] ? rcu_read_unlock+0x9/0x60 [ 2617.409433][T21896] ? find_held_lock+0x2d/0x110 [ 2617.414287][T21896] mem_cgroup_out_of_memory+0x206/0x270 [ 2617.420039][T21896] ? mem_cgroup_margin+0x130/0x130 [ 2617.425242][T21896] ? lock_downgrade+0x690/0x690 [ 2617.430178][T21896] try_charge_memcg+0xf9b/0x13b0 [ 2617.435190][T21896] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2617.441244][T21896] ? rcu_read_unlock+0x9/0x60 [ 2617.446003][T21896] ? lock_downgrade+0x690/0x690 [ 2617.450930][T21896] charge_memcg+0x90/0x3b0 [ 2617.455400][T21896] __mem_cgroup_charge+0x2b/0x90 [ 2617.460379][T21896] do_wp_page+0x8eb/0x3530 [ 2617.464842][T21896] ? lock_release+0x670/0x670 [ 2617.469547][T21896] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2617.474956][T21896] ? do_raw_spin_lock+0x124/0x2b0 [ 2617.480018][T21896] ? spin_bug+0x1c0/0x1c0 [ 2617.484376][T21896] ? lock_downgrade+0x690/0x690 [ 2617.489273][T21896] __handle_mm_fault+0x19a1/0x3e60 [ 2617.494440][T21896] ? vm_iomap_memory+0x190/0x190 [ 2617.499439][T21896] handle_mm_fault+0x2ba/0x9c0 [ 2617.504277][T21896] do_user_addr_fault+0x47e/0x1240 [ 2617.509430][T21896] ? rcu_is_watching+0x12/0xb0 [ 2617.514240][T21896] exc_page_fault+0x98/0x170 [ 2617.518900][T21896] asm_exc_page_fault+0x26/0x30 [ 2617.523798][T21896] RIP: 0033:0x7f4933239610 [ 2617.528256][T21896] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2617.547896][T21896] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2617.554012][T21896] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2617.562005][T21896] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2617.570000][T21896] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2617.577998][T21896] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2617.586077][T21896] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2617.594093][T21896] ? apparmor_socket_create+0x13c/0x670 [ 2617.599710][T21896] [ 2617.629914][T21896] memory: usage 307200kB, limit 307200kB, failcnt 18225 [ 2617.637224][T21896] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2617.651848][T21896] Memory cgroup stats for /syz2: [ 2617.652560][T21896] anon 126976 [ 2617.652560][T21896] file 684032 [ 2617.652560][T21896] kernel 313761792 [ 2617.652560][T21896] kernel_stack 65536 [ 2617.652560][T21896] pagetables 73728 [ 2617.652560][T21896] sec_pagetables 0 [ 2617.652560][T21896] percpu 5387392 [ 2617.652560][T21896] sock 0 [ 2617.652560][T21896] vmalloc 8192 [ 2617.652560][T21896] shmem 679936 [ 2617.652560][T21896] zswap 0 [ 2617.652560][T21896] zswapped 0 [ 2617.652560][T21896] file_mapped 630784 [ 2617.652560][T21896] file_dirty 0 [ 2617.652560][T21896] file_writeback 0 [ 2617.652560][T21896] swapcached 0 [ 2617.652560][T21896] anon_thp 0 [ 2617.652560][T21896] file_thp 0 [ 2617.652560][T21896] shmem_thp 0 [ 2617.652560][T21896] inactive_anon 49152 [ 2617.652560][T21896] active_anon 757760 [ 2617.652560][T21896] inactive_file 4096 [ 2617.652560][T21896] active_file 0 [ 2617.652560][T21896] unevictable 0 [ 2617.652560][T21896] slab_reclaimable 512264 [ 2617.652560][T21896] slab_unreclaimable 307677304 [ 2617.652560][T21896] slab 308189568 [ 2617.652560][T21896] workingset_refault_anon 0 [ 2617.652560][T21896] workingset_refault_file 2 [ 2617.652560][T21896] workingset_activate_anon 0 [ 2617.652560][T21896] workingset_activate_file 0 [ 2617.652560][T21896] workingset_restore_anon 0 [ 2617.652560][T21896] workingset_restore_file 1 [ 2617.652560][T21896] workingset_nodereclaim 0 [ 2617.652560][T21896] pgscan 1980 [ 2617.652560][T21896] pgsteal 131 [ 2617.652560][T21896] pgscan_kswapd 109 [ 2617.652560][T21896] pgscan_direct 1871 [ 2617.652560][T21896] pgscan_khugepaged 0 [ 2617.652560][T21896] pgsteal_kswapd 108 [ 2617.652560][T21896] pgsteal_direct 23 [ 2617.652560][T21896] pgsteal_khugepaged 0 [ 2617.652560][T21896] pgfault 1011267 [ 2617.652560][T21896] pgmajfault 0 [ 2617.652560][T21896] pgrefill 15024 [ 2617.652560][T21896] pgactivate 1826 [ 2617.652560][T21896] pgdeactivate 0 [ 2617.652560][T21896] pglazyfree 0 05:57:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x72000000}, 0x0) [ 2617.652560][T21896] pglazyfreed 0 [ 2617.652560][T21896] zswpin 0 [ 2617.652560][T21896] zswpout 0 [ 2617.845241][T21896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21896,uid=0 [ 2617.862601][T21896] Memory cgroup out of memory: Killed process 21896 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2618.072050][T21900] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2618.109932][T21900] CPU: 1 PID: 21900 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2618.120442][T21900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2618.130658][T21900] Call Trace: [ 2618.133981][T21900] [ 2618.136979][T21900] dump_stack_lvl+0x136/0x150 [ 2618.141755][T21900] dump_header+0x10a/0xd70 [ 2618.146293][T21900] oom_kill_process+0x25d/0x600 [ 2618.151216][T21900] out_of_memory+0x35c/0x1660 [ 2618.156054][T21900] ? find_held_lock+0x2d/0x110 [ 2618.160902][T21900] ? oom_killer_disable+0x2b0/0x2b0 [ 2618.166178][T21900] ? rcu_read_unlock+0x9/0x60 [ 2618.170936][T21900] ? find_held_lock+0x2d/0x110 [ 2618.175779][T21900] mem_cgroup_out_of_memory+0x206/0x270 [ 2618.181393][T21900] ? mem_cgroup_margin+0x130/0x130 [ 2618.186559][T21900] ? lock_downgrade+0x690/0x690 [ 2618.191470][T21900] try_charge_memcg+0xf9b/0x13b0 [ 2618.196464][T21900] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2618.202487][T21900] ? rcu_read_unlock+0x9/0x60 [ 2618.207205][T21900] ? lock_downgrade+0x690/0x690 [ 2618.212102][T21900] charge_memcg+0x90/0x3b0 [ 2618.216553][T21900] __mem_cgroup_charge+0x2b/0x90 [ 2618.221532][T21900] do_wp_page+0x8eb/0x3530 [ 2618.225998][T21900] ? lock_release+0x670/0x670 [ 2618.230714][T21900] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2618.236128][T21900] ? do_raw_spin_lock+0x124/0x2b0 [ 2618.241276][T21900] ? spin_bug+0x1c0/0x1c0 [ 2618.245643][T21900] ? lock_downgrade+0x690/0x690 [ 2618.250536][T21900] __handle_mm_fault+0x19a1/0x3e60 [ 2618.255868][T21900] ? vm_iomap_memory+0x190/0x190 [ 2618.260874][T21900] handle_mm_fault+0x2ba/0x9c0 [ 2618.265686][T21900] do_user_addr_fault+0x47e/0x1240 [ 2618.270886][T21900] ? rcu_is_watching+0x12/0xb0 [ 2618.275701][T21900] exc_page_fault+0x98/0x170 [ 2618.280345][T21900] asm_exc_page_fault+0x26/0x30 [ 2618.285251][T21900] RIP: 0033:0x7f4933239610 [ 2618.289715][T21900] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2618.309568][T21900] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2618.315764][T21900] RAX: 00000000cbcda2c8 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2618.323766][T21900] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000c7edf13 [ 2618.331851][T21900] RBP: 00000000cbcda2c8 R08: 00000000000002c8 R09: 00000000cbcda2cc [ 2618.340023][T21900] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2618.348041][T21900] R13: 0000000000000001 R14: 0000000000000002 R15: ffffffff87fd79eb [ 2618.356147][T21900] ? __sys_socket+0xcb/0x250 [ 2618.360792][T21900] [ 2618.368225][T21900] memory: usage 307200kB, limit 307200kB, failcnt 18326 [ 2618.397574][T21900] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2618.406167][T21900] Memory cgroup stats for /syz2: [ 2618.409089][T21900] anon 110592 [ 2618.409089][T21900] file 684032 [ 2618.409089][T21900] kernel 313761792 [ 2618.409089][T21900] kernel_stack 65536 [ 2618.409089][T21900] pagetables 73728 [ 2618.409089][T21900] sec_pagetables 0 [ 2618.409089][T21900] percpu 5387392 [ 2618.409089][T21900] sock 0 [ 2618.409089][T21900] vmalloc 8192 [ 2618.409089][T21900] shmem 679936 [ 2618.409089][T21900] zswap 0 [ 2618.409089][T21900] zswapped 0 [ 2618.409089][T21900] file_mapped 630784 [ 2618.409089][T21900] file_dirty 0 [ 2618.409089][T21900] file_writeback 0 [ 2618.409089][T21900] swapcached 0 [ 2618.409089][T21900] anon_thp 0 [ 2618.409089][T21900] file_thp 0 [ 2618.409089][T21900] shmem_thp 0 [ 2618.409089][T21900] inactive_anon 749568 [ 2618.409089][T21900] active_anon 40960 [ 2618.409089][T21900] inactive_file 0 [ 2618.409089][T21900] active_file 4096 [ 2618.409089][T21900] unevictable 0 [ 2618.409089][T21900] slab_reclaimable 512264 [ 2618.409089][T21900] slab_unreclaimable 307677568 [ 2618.409089][T21900] slab 308189832 [ 2618.409089][T21900] workingset_refault_anon 0 [ 2618.409089][T21900] workingset_refault_file 2 [ 2618.409089][T21900] workingset_activate_anon 0 [ 2618.409089][T21900] workingset_activate_file 0 [ 2618.409089][T21900] workingset_restore_anon 0 [ 2618.409089][T21900] workingset_restore_file 1 [ 2618.409089][T21900] workingset_nodereclaim 0 [ 2618.409089][T21900] pgscan 2014 [ 2618.409089][T21900] pgsteal 131 [ 2618.409089][T21900] pgscan_kswapd 109 [ 2618.409089][T21900] pgscan_direct 1905 [ 2618.409089][T21900] pgscan_khugepaged 0 [ 2618.409089][T21900] pgsteal_kswapd 108 [ 2618.409089][T21900] pgsteal_direct 23 [ 2618.409089][T21900] pgsteal_khugepaged 0 [ 2618.409089][T21900] pgfault 1011316 [ 2618.409089][T21900] pgmajfault 0 [ 2618.409089][T21900] pgrefill 15024 [ 2618.409089][T21900] pgactivate 1860 [ 2618.409089][T21900] pgdeactivate 0 [ 2618.409089][T21900] pglazyfree 0 [ 2618.409089][T21900] pglazyfreed 0 [ 2618.409089][T21900] zswpin 0 [ 2618.409089][T21900] zswpout 0 05:57:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x72010000}, 0x0) [ 2618.607989][T21900] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21900,uid=0 [ 2618.624593][T21900] Memory cgroup out of memory: Killed process 21900 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2618.735161][T21903] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2618.746519][T21903] CPU: 1 PID: 21903 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2618.757009][T21903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2618.767122][T21903] Call Trace: [ 2618.770513][T21903] [ 2618.773473][T21903] dump_stack_lvl+0x136/0x150 [ 2618.778212][T21903] dump_header+0x10a/0xd70 [ 2618.782689][T21903] oom_kill_process+0x25d/0x600 [ 2618.787681][T21903] out_of_memory+0x35c/0x1660 [ 2618.792395][T21903] ? find_held_lock+0x2d/0x110 [ 2618.797195][T21903] ? oom_killer_disable+0x2b0/0x2b0 [ 2618.802440][T21903] ? rcu_read_unlock+0x9/0x60 [ 2618.807189][T21903] ? find_held_lock+0x2d/0x110 [ 2618.812146][T21903] mem_cgroup_out_of_memory+0x206/0x270 [ 2618.817740][T21903] ? mem_cgroup_margin+0x130/0x130 [ 2618.822897][T21903] ? lock_downgrade+0x690/0x690 [ 2618.827807][T21903] try_charge_memcg+0xf9b/0x13b0 [ 2618.832789][T21903] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2618.838817][T21903] ? rcu_read_unlock+0x9/0x60 [ 2618.843649][T21903] ? lock_downgrade+0x690/0x690 [ 2618.849172][T21903] charge_memcg+0x90/0x3b0 [ 2618.853646][T21903] __mem_cgroup_charge+0x2b/0x90 [ 2618.858836][T21903] ? copy_mc_to_kernel+0x3e/0x90 [ 2618.863856][T21903] do_wp_page+0x8eb/0x3530 [ 2618.868332][T21903] ? lock_release+0x670/0x670 [ 2618.873053][T21903] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2618.878467][T21903] ? do_raw_spin_lock+0x124/0x2b0 [ 2618.883539][T21903] ? spin_bug+0x1c0/0x1c0 [ 2618.887941][T21903] ? lock_downgrade+0x690/0x690 [ 2618.893821][T21903] __handle_mm_fault+0x19a1/0x3e60 [ 2618.899040][T21903] ? vm_iomap_memory+0x190/0x190 [ 2618.904069][T21903] handle_mm_fault+0x2ba/0x9c0 [ 2618.909034][T21903] do_user_addr_fault+0x47e/0x1240 [ 2618.914219][T21903] ? rcu_is_watching+0x12/0xb0 [ 2618.919064][T21903] exc_page_fault+0x98/0x170 [ 2618.923729][T21903] asm_exc_page_fault+0x26/0x30 [ 2618.928637][T21903] RIP: 0033:0x7f4933236f7e [ 2618.933080][T21903] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 2618.952732][T21903] RSP: 002b:00007fff741ea370 EFLAGS: 00010246 [ 2618.958952][T21903] RAX: 00007f49333abf80 RBX: 00007f49333abf8c RCX: 0000000000000000 [ 2618.966984][T21903] RDX: 0000000000000000 RSI: 00007f49333abf88 RDI: 0000000000000000 [ 2618.974978][T21903] RBP: 00007f49333abf80 R08: 00007f493404d700 R09: 00007f493404d700 [ 2618.982993][T21903] R10: 00007f493404d9d0 R11: 0000000000000206 R12: 00007f49333abf8c [ 2618.990995][T21903] R13: 00007f4932e00060 R14: 00007f49333abf80 R15: 0000000000000000 [ 2618.999010][T21903] [ 2619.004946][T21903] memory: usage 307200kB, limit 307200kB, failcnt 18393 [ 2619.012386][T21903] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2619.019404][T21903] Memory cgroup stats for /syz2: [ 2619.019818][T21903] anon 90112 [ 2619.019818][T21903] file 684032 [ 2619.019818][T21903] kernel 313778176 [ 2619.019818][T21903] kernel_stack 65536 [ 2619.019818][T21903] pagetables 73728 [ 2619.019818][T21903] sec_pagetables 0 [ 2619.019818][T21903] percpu 5387456 [ 2619.019818][T21903] sock 0 [ 2619.019818][T21903] vmalloc 8192 [ 2619.019818][T21903] shmem 679936 [ 2619.019818][T21903] zswap 0 [ 2619.019818][T21903] zswapped 0 [ 2619.019818][T21903] file_mapped 630784 [ 2619.019818][T21903] file_dirty 0 [ 2619.019818][T21903] file_writeback 0 [ 2619.019818][T21903] swapcached 0 [ 2619.019818][T21903] anon_thp 0 [ 2619.019818][T21903] file_thp 0 [ 2619.019818][T21903] shmem_thp 0 [ 2619.019818][T21903] inactive_anon 8192 [ 2619.019818][T21903] active_anon 761856 [ 2619.019818][T21903] inactive_file 4096 [ 2619.019818][T21903] active_file 0 [ 2619.019818][T21903] unevictable 0 [ 2619.019818][T21903] slab_reclaimable 514456 [ 2619.019818][T21903] slab_unreclaimable 307691160 [ 2619.019818][T21903] slab 308205616 [ 2619.019818][T21903] workingset_refault_anon 0 [ 2619.019818][T21903] workingset_refault_file 2 [ 2619.019818][T21903] workingset_activate_anon 0 [ 2619.019818][T21903] workingset_activate_file 0 [ 2619.019818][T21903] workingset_restore_anon 0 [ 2619.019818][T21903] workingset_restore_file 1 [ 2619.019818][T21903] workingset_nodereclaim 0 [ 2619.019818][T21903] pgscan 2030 [ 2619.019818][T21903] pgsteal 131 [ 2619.019818][T21903] pgscan_kswapd 109 [ 2619.019818][T21903] pgscan_direct 1921 [ 2619.019818][T21903] pgscan_khugepaged 0 [ 2619.019818][T21903] pgsteal_kswapd 108 [ 2619.019818][T21903] pgsteal_direct 23 [ 2619.019818][T21903] pgsteal_khugepaged 0 [ 2619.019818][T21903] pgfault 1011357 [ 2619.019818][T21903] pgmajfault 0 [ 2619.019818][T21903] pgrefill 15024 [ 2619.019818][T21903] pgactivate 1876 [ 2619.019818][T21903] pgdeactivate 0 [ 2619.019818][T21903] pglazyfree 0 [ 2619.019818][T21903] pglazyfreed 0 [ 2619.019818][T21903] zswpin 0 [ 2619.019818][T21903] zswpout 0 [ 2619.209948][T21903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21903,uid=0 05:57:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x72020000}, 0x0) [ 2619.226087][T21903] Memory cgroup out of memory: Killed process 21903 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2619.325564][T21906] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2619.336140][T21906] CPU: 1 PID: 21906 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2619.346609][T21906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2619.356736][T21906] Call Trace: [ 2619.360048][T21906] [ 2619.362997][T21906] dump_stack_lvl+0x136/0x150 [ 2619.367731][T21906] dump_header+0x10a/0xd70 [ 2619.372231][T21906] oom_kill_process+0x25d/0x600 [ 2619.377138][T21906] out_of_memory+0x35c/0x1660 [ 2619.381849][T21906] ? find_held_lock+0x2d/0x110 [ 2619.386669][T21906] ? oom_killer_disable+0x2b0/0x2b0 [ 2619.391945][T21906] ? rcu_read_unlock+0x9/0x60 [ 2619.396691][T21906] ? find_held_lock+0x2d/0x110 [ 2619.401528][T21906] mem_cgroup_out_of_memory+0x206/0x270 [ 2619.407146][T21906] ? mem_cgroup_margin+0x130/0x130 [ 2619.412306][T21906] ? lock_downgrade+0x690/0x690 [ 2619.417239][T21906] try_charge_memcg+0xf9b/0x13b0 [ 2619.422247][T21906] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2619.428268][T21906] ? rcu_read_unlock+0x9/0x60 [ 2619.433025][T21906] ? lock_downgrade+0x690/0x690 [ 2619.437949][T21906] charge_memcg+0x90/0x3b0 [ 2619.442432][T21906] __mem_cgroup_charge+0x2b/0x90 [ 2619.447424][T21906] ? copy_mc_to_kernel+0x3e/0x90 [ 2619.452415][T21906] do_wp_page+0x8eb/0x3530 [ 2619.456882][T21906] ? lock_release+0x670/0x670 [ 2619.461584][T21906] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2619.467018][T21906] ? do_raw_spin_lock+0x124/0x2b0 [ 2619.472100][T21906] ? spin_bug+0x1c0/0x1c0 [ 2619.476472][T21906] ? lock_downgrade+0x690/0x690 [ 2619.481364][T21906] __handle_mm_fault+0x19a1/0x3e60 [ 2619.486516][T21906] ? vm_iomap_memory+0x190/0x190 [ 2619.491532][T21906] handle_mm_fault+0x2ba/0x9c0 [ 2619.496373][T21906] do_user_addr_fault+0x47e/0x1240 [ 2619.501543][T21906] ? rcu_is_watching+0x12/0xb0 [ 2619.506374][T21906] exc_page_fault+0x98/0x170 [ 2619.511010][T21906] asm_exc_page_fault+0x26/0x30 [ 2619.515909][T21906] RIP: 0033:0x7f4933236fdd [ 2619.520363][T21906] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 2619.540106][T21906] RSP: 002b:00007fff741ea370 EFLAGS: 00010207 [ 2619.546238][T21906] RAX: 0000000000000001 RBX: 00007f49333abf8c RCX: 00007f493328c169 [ 2619.554376][T21906] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49333abf88 [ 2619.562475][T21906] RBP: 00007f49333abf80 R08: 00007f493404d700 R09: 0000000000000000 [ 2619.570489][T21906] R10: 00007f493404d700 R11: 0000000000000246 R12: 00007f49333abf8c [ 2619.578499][T21906] R13: 00007f4932e00060 R14: 00007f49333abf80 R15: 0000000000000000 [ 2619.586521][T21906] [ 2619.599814][T21906] memory: usage 307184kB, limit 307200kB, failcnt 18444 [ 2619.606959][T21906] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2619.614151][T21906] Memory cgroup stats for /syz2: [ 2619.614444][T21906] anon 94208 [ 2619.614444][T21906] file 684032 [ 2619.614444][T21906] kernel 313778176 [ 2619.614444][T21906] kernel_stack 65536 [ 2619.614444][T21906] pagetables 73728 [ 2619.614444][T21906] sec_pagetables 0 [ 2619.614444][T21906] percpu 5387456 [ 2619.614444][T21906] sock 0 [ 2619.614444][T21906] vmalloc 8192 [ 2619.614444][T21906] shmem 679936 [ 2619.614444][T21906] zswap 0 [ 2619.614444][T21906] zswapped 0 [ 2619.614444][T21906] file_mapped 630784 [ 2619.614444][T21906] file_dirty 0 [ 2619.614444][T21906] file_writeback 0 [ 2619.614444][T21906] swapcached 0 [ 2619.614444][T21906] anon_thp 0 [ 2619.614444][T21906] file_thp 0 [ 2619.614444][T21906] shmem_thp 0 [ 2619.614444][T21906] inactive_anon 720896 [ 2619.614444][T21906] active_anon 53248 [ 2619.614444][T21906] inactive_file 4096 [ 2619.614444][T21906] active_file 0 [ 2619.614444][T21906] unevictable 0 [ 2619.614444][T21906] slab_reclaimable 512264 [ 2619.614444][T21906] slab_unreclaimable 307689216 [ 2619.614444][T21906] slab 308201480 [ 2619.614444][T21906] workingset_refault_anon 0 [ 2619.614444][T21906] workingset_refault_file 2 [ 2619.614444][T21906] workingset_activate_anon 0 [ 2619.614444][T21906] workingset_activate_file 0 [ 2619.614444][T21906] workingset_restore_anon 0 [ 2619.614444][T21906] workingset_restore_file 1 [ 2619.614444][T21906] workingset_nodereclaim 0 [ 2619.614444][T21906] pgscan 2042 [ 2619.614444][T21906] pgsteal 131 [ 2619.614444][T21906] pgscan_kswapd 109 [ 2619.614444][T21906] pgscan_direct 1933 [ 2619.614444][T21906] pgscan_khugepaged 0 [ 2619.614444][T21906] pgsteal_kswapd 108 [ 2619.614444][T21906] pgsteal_direct 23 [ 2619.614444][T21906] pgsteal_khugepaged 0 [ 2619.614444][T21906] pgfault 1011396 [ 2619.614444][T21906] pgmajfault 0 [ 2619.614444][T21906] pgrefill 15024 [ 2619.614444][T21906] pgactivate 1888 [ 2619.614444][T21906] pgdeactivate 0 [ 2619.614444][T21906] pglazyfree 0 [ 2619.614444][T21906] pglazyfreed 0 [ 2619.614444][T21906] zswpin 0 [ 2619.614444][T21906] zswpout 0 [ 2619.801425][T21906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21906,uid=0 [ 2619.860066][T21906] Memory cgroup out of memory: Killed process 21906 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:57:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x72030000}, 0x0) [ 2620.116548][ T4394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2620.127834][ T4394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2620.136805][ T4394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2620.145534][ T4394] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2620.153529][ T4394] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 05:57:14 executing program 4: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7c1a8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 2620.164635][ T4394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2620.221044][T21909] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2620.270949][T21909] CPU: 0 PID: 21909 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2620.281553][T21909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2620.291701][T21909] Call Trace: [ 2620.295024][T21909] [ 2620.298024][T21909] dump_stack_lvl+0x136/0x150 [ 2620.302775][T21909] dump_header+0x10a/0xd70 [ 2620.307236][T21909] oom_kill_process+0x25d/0x600 [ 2620.312133][T21909] out_of_memory+0x35c/0x1660 [ 2620.316858][T21909] ? find_held_lock+0x2d/0x110 [ 2620.321671][T21909] ? oom_killer_disable+0x2b0/0x2b0 [ 2620.326927][T21909] ? rcu_read_unlock+0x9/0x60 [ 2620.331657][T21909] ? find_held_lock+0x2d/0x110 [ 2620.336467][T21909] mem_cgroup_out_of_memory+0x206/0x270 [ 2620.342080][T21909] ? mem_cgroup_margin+0x130/0x130 [ 2620.347279][T21909] ? lock_downgrade+0x690/0x690 [ 2620.352208][T21909] try_charge_memcg+0xf9b/0x13b0 [ 2620.357292][T21909] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2620.363332][T21909] ? rcu_read_unlock+0x9/0x60 [ 2620.368059][T21909] ? lock_downgrade+0x690/0x690 [ 2620.373049][T21909] charge_memcg+0x90/0x3b0 [ 2620.377526][T21909] __mem_cgroup_charge+0x2b/0x90 [ 2620.382523][T21909] do_wp_page+0x8eb/0x3530 [ 2620.387257][T21909] ? lock_release+0x670/0x670 [ 2620.391986][T21909] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2620.397404][T21909] ? do_raw_spin_lock+0x124/0x2b0 [ 2620.402466][T21909] ? spin_bug+0x1c0/0x1c0 [ 2620.406825][T21909] ? lock_downgrade+0x690/0x690 [ 2620.411736][T21909] __handle_mm_fault+0x19a1/0x3e60 [ 2620.416893][T21909] ? vm_iomap_memory+0x190/0x190 [ 2620.421893][T21909] handle_mm_fault+0x2ba/0x9c0 [ 2620.426715][T21909] do_user_addr_fault+0x47e/0x1240 [ 2620.431877][T21909] ? rcu_is_watching+0x12/0xb0 [ 2620.436940][T21909] exc_page_fault+0x98/0x170 [ 2620.441591][T21909] asm_exc_page_fault+0x26/0x30 [ 2620.446480][T21909] RIP: 0033:0x7f4933239610 [ 2620.450915][T21909] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2620.470556][T21909] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2620.476655][T21909] RAX: 00000000cbcda2c8 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2620.484649][T21909] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000c7edf13 [ 2620.492645][T21909] RBP: 00000000cbcda2c8 R08: 00000000000002c8 R09: 00000000cbcda2cc [ 2620.500649][T21909] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2620.508733][T21909] R13: 0000000000000001 R14: 0000000000000002 R15: ffffffff87fd79eb [ 2620.516727][T21909] ? __sys_socket+0xcb/0x250 [ 2620.521377][T21909] [ 2620.542319][T21909] memory: usage 307200kB, limit 307200kB, failcnt 18500 [ 2620.549428][T21909] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2620.564275][T21909] Memory cgroup stats for /syz2: [ 2620.564566][T21909] anon 106496 [ 2620.564566][T21909] file 684032 [ 2620.564566][T21909] kernel 313778176 [ 2620.564566][T21909] kernel_stack 65536 [ 2620.564566][T21909] pagetables 73728 [ 2620.564566][T21909] sec_pagetables 0 [ 2620.564566][T21909] percpu 5387456 [ 2620.564566][T21909] sock 0 [ 2620.564566][T21909] vmalloc 8192 [ 2620.564566][T21909] shmem 679936 [ 2620.564566][T21909] zswap 0 [ 2620.564566][T21909] zswapped 0 [ 2620.564566][T21909] file_mapped 630784 [ 2620.564566][T21909] file_dirty 0 [ 2620.564566][T21909] file_writeback 0 [ 2620.564566][T21909] swapcached 0 [ 2620.564566][T21909] anon_thp 0 [ 2620.564566][T21909] file_thp 0 [ 2620.564566][T21909] shmem_thp 0 [ 2620.564566][T21909] inactive_anon 36864 [ 2620.564566][T21909] active_anon 749568 [ 2620.564566][T21909] inactive_file 0 [ 2620.564566][T21909] active_file 4096 [ 2620.564566][T21909] unevictable 0 [ 2620.564566][T21909] slab_reclaimable 512264 [ 2620.564566][T21909] slab_unreclaimable 307689216 [ 2620.564566][T21909] slab 308201480 [ 2620.564566][T21909] workingset_refault_anon 0 [ 2620.564566][T21909] workingset_refault_file 2 [ 2620.564566][T21909] workingset_activate_anon 0 [ 2620.564566][T21909] workingset_activate_file 0 [ 2620.564566][T21909] workingset_restore_anon 0 [ 2620.564566][T21909] workingset_restore_file 1 [ 2620.564566][T21909] workingset_nodereclaim 0 [ 2620.564566][T21909] pgscan 2062 [ 2620.564566][T21909] pgsteal 131 [ 2620.564566][T21909] pgscan_kswapd 109 [ 2620.564566][T21909] pgscan_direct 1953 [ 2620.564566][T21909] pgscan_khugepaged 0 [ 2620.564566][T21909] pgsteal_kswapd 108 [ 2620.564566][T21909] pgsteal_direct 23 [ 2620.564566][T21909] pgsteal_khugepaged 0 [ 2620.564566][T21909] pgfault 1011442 [ 2620.564566][T21909] pgmajfault 0 [ 2620.564566][T21909] pgrefill 15024 [ 2620.564566][T21909] pgactivate 1908 [ 2620.564566][T21909] pgdeactivate 0 [ 2620.564566][T21909] pglazyfree 0 [ 2620.564566][T21909] pglazyfreed 0 [ 2620.564566][T21909] zswpin 0 [ 2620.564566][T21909] zswpout 0 [ 2620.768694][T21909] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21909,uid=0 [ 2620.797655][T21909] Memory cgroup out of memory: Killed process 21909 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 05:57:14 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="cda215b5a377c63d15a1f2dcc91fda7a1ccc9d58", 0x14, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32000000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 05:57:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x3000000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 05:57:14 executing program 1: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xd002, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 05:57:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) [ 2620.959358][T21923] wireguard53: entered promiscuous mode 05:57:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x4000000, 0x0, {0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) [ 2621.406128][T21934] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2621.477292][T21934] CPU: 1 PID: 21934 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2621.487796][T21934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2621.497916][T21934] Call Trace: [ 2621.501231][T21934] [ 2621.504201][T21934] dump_stack_lvl+0x136/0x150 [ 2621.508946][T21934] dump_header+0x10a/0xd70 [ 2621.513447][T21934] oom_kill_process+0x25d/0x600 [ 2621.518400][T21934] out_of_memory+0x35c/0x1660 [ 2621.523160][T21934] ? find_held_lock+0x2d/0x110 [ 2621.527996][T21934] ? oom_killer_disable+0x2b0/0x2b0 [ 2621.533255][T21934] ? rcu_read_unlock+0x9/0x60 [ 2621.538080][T21934] ? find_held_lock+0x2d/0x110 [ 2621.542920][T21934] mem_cgroup_out_of_memory+0x206/0x270 [ 2621.548538][T21934] ? mem_cgroup_margin+0x130/0x130 [ 2621.553724][T21934] ? lock_downgrade+0x690/0x690 [ 2621.558648][T21934] try_charge_memcg+0xf9b/0x13b0 [ 2621.563663][T21934] ? mem_cgroup_handle_over_high+0x520/0x520 [ 2621.569704][T21934] ? rcu_read_unlock+0x9/0x60 [ 2621.574440][T21934] ? lock_downgrade+0x690/0x690 [ 2621.579364][T21934] charge_memcg+0x90/0x3b0 [ 2621.583839][T21934] __mem_cgroup_charge+0x2b/0x90 [ 2621.588832][T21934] do_wp_page+0x8eb/0x3530 [ 2621.593320][T21934] ? lock_release+0x670/0x670 [ 2621.598058][T21934] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 2621.603506][T21934] ? do_raw_spin_lock+0x124/0x2b0 [ 2621.608602][T21934] ? spin_bug+0x1c0/0x1c0 [ 2621.612985][T21934] ? lock_downgrade+0x690/0x690 [ 2621.617900][T21934] __handle_mm_fault+0x19a1/0x3e60 [ 2621.623093][T21934] ? vm_iomap_memory+0x190/0x190 [ 2621.628234][T21934] handle_mm_fault+0x2ba/0x9c0 [ 2621.633085][T21934] do_user_addr_fault+0x47e/0x1240 [ 2621.638276][T21934] ? rcu_is_watching+0x12/0xb0 [ 2621.643119][T21934] exc_page_fault+0x98/0x170 [ 2621.647790][T21934] asm_exc_page_fault+0x26/0x30 [ 2621.652691][T21934] RIP: 0033:0x7f4933239610 [ 2621.657130][T21934] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 2621.676786][T21934] RSP: 002b:00007fff741ea290 EFLAGS: 00010246 [ 2621.682892][T21934] RAX: 000000008260bd46 RBX: 00007f49333ac018 RCX: 0000001b31620000 [ 2621.690910][T21934] RDX: 0000000000000000 RSI: 0000001b31620018 RDI: 000000000a2757ef [ 2621.698932][T21934] RBP: 000000008260bd46 R08: 0000000000001d46 R09: 000000008260bd4a [ 2621.706945][T21934] R10: 00007fff741ea450 R11: 0000000000000246 R12: 00007f49333a0000 [ 2621.715056][T21934] R13: 0000000000000001 R14: 000000000000000d R15: ffffffff83d4a9bc [ 2621.723067][T21934] ? apparmor_socket_create+0x13c/0x670 [ 2621.728701][T21934] [ 2621.860363][T21934] memory: usage 307200kB, limit 307200kB, failcnt 18604 [ 2621.867520][T21934] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2621.874664][T21934] Memory cgroup stats for /syz2: [ 2621.874952][T21934] anon 126976 [ 2621.874952][T21934] file 684032 [ 2621.874952][T21934] kernel 313761792 [ 2621.874952][T21934] kernel_stack 65536 [ 2621.874952][T21934] pagetables 73728 [ 2621.874952][T21934] sec_pagetables 0 [ 2621.874952][T21934] percpu 5387392 [ 2621.874952][T21934] sock 0 [ 2621.874952][T21934] vmalloc 8192 [ 2621.874952][T21934] shmem 679936 [ 2621.874952][T21934] zswap 0 [ 2621.874952][T21934] zswapped 0 [ 2621.874952][T21934] file_mapped 630784 [ 2621.874952][T21934] file_dirty 0 [ 2621.874952][T21934] file_writeback 0 [ 2621.874952][T21934] swapcached 0 [ 2621.874952][T21934] anon_thp 0 [ 2621.874952][T21934] file_thp 0 [ 2621.874952][T21934] shmem_thp 0 [ 2621.874952][T21934] inactive_anon 12288 [ 2621.874952][T21934] active_anon 794624 [ 2621.874952][T21934] inactive_file 0 [ 2621.874952][T21934] active_file 4096 [ 2621.874952][T21934] unevictable 0 [ 2621.874952][T21934] slab_reclaimable 512264 [ 2621.874952][T21934] slab_unreclaimable 307677304 [ 2621.874952][T21934] slab 308189568 [ 2621.874952][T21934] workingset_refault_anon 0 [ 2621.874952][T21934] workingset_refault_file 2 [ 2621.874952][T21934] workingset_activate_anon 0 [ 2621.874952][T21934] workingset_activate_file 0 [ 2621.874952][T21934] workingset_restore_anon 0 [ 2621.874952][T21934] workingset_restore_file 1 [ 2621.874952][T21934] workingset_nodereclaim 0 [ 2621.874952][T21934] pgscan 2094 [ 2621.874952][T21934] pgsteal 131 [ 2621.874952][T21934] pgscan_kswapd 109 [ 2621.874952][T21934] pgscan_direct 1985 [ 2621.874952][T21934] pgscan_khugepaged 0 [ 2621.874952][T21934] pgsteal_kswapd 108 [ 2621.874952][T21934] pgsteal_direct 23 [ 2621.874952][T21934] pgsteal_khugepaged 0 [ 2621.874952][T21934] pgfault 1011499 [ 2621.874952][T21934] pgmajfault 0 [ 2621.874952][T21934] pgrefill 15024 [ 2621.874952][T21934] pgactivate 1940 [ 2621.874952][T21934] pgdeactivate 0 [ 2621.874952][T21934] pglazyfree 0 [ 2621.874952][T21934] pglazyfreed 0 [ 2621.874952][T21934] zswpin 0 [ 2621.874952][T21934] zswpout 0 [ 2622.223986][T21934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21934,uid=0 [ 2622.241052][T21915] chnl_net:caif_netlink_parms(): no params data found [ 2622.264868][ T5029] Bluetooth: hci5: command 0x0409 tx timeout [ 2622.270201][T21934] Memory cgroup out of memory: Killed process 21934 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 2622.391197][T21915] bridge0: port 1(bridge_slave_0) entered blocking state [ 2622.398408][T21915] bridge0: port 1(bridge_slave_0) entered disabled state [ 2622.409160][T21915] bridge_slave_0: entered allmulticast mode [ 2622.416475][T21915] bridge_slave_0: entered promiscuous mode [ 2622.434148][T21915] bridge0: port 2(bridge_slave_1) entered blocking state [ 2622.442489][T21915] bridge0: port 2(bridge_slave_1) entered disabled state [ 2622.449924][T21915] bridge_slave_1: entered allmulticast mode [ 2622.457081][T21915] bridge_slave_1: entered promiscuous mode [ 2622.494222][T21915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2622.506497][T21915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2622.553514][T21915] team0: Port device team_slave_0 added [ 2622.563582][T21915] team0: Port device team_slave_1 added [ 2622.594550][T21915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2622.602096][T21915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2622.628463][T21915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2622.647723][T21915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2622.654969][T21915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2622.683744][T21915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2622.728963][T21915] hsr_slave_0: entered promiscuous mode [ 2622.737547][T21915] hsr_slave_1: entered promiscuous mode [ 2622.745204][T21915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2622.753564][T21915] Cannot create hsr debugfs directory [ 2623.051229][ T9747] IPVS: stopping backup sync thread 13885 ... [ 2623.466965][ T9747] hsr_slave_0: left promiscuous mode [ 2623.473910][ T9747] hsr_slave_1: left promiscuous mode [ 2623.480287][ T9747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2623.497443][ T9747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2623.508661][ T9747] bridge_slave_1: left allmulticast mode [ 2623.515051][ T9747] bridge_slave_1: left promiscuous mode [ 2623.521215][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state [ 2623.529633][ T9747] bridge_slave_0: left allmulticast mode [ 2623.535826][ T9747] bridge_slave_0: left promiscuous mode [ 2623.541833][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state [ 2624.340111][ T5029] Bluetooth: hci5: command 0x041b tx timeout [ 2626.419892][ T5029] Bluetooth: hci5: command 0x040f tx timeout [ 2628.500544][ T5029] Bluetooth: hci5: command 0x0419 tx timeout [ 2639.336177][ T9747] bond63 (unregistering): Released all slaves [ 2639.872817][ T9747] bond62 (unregistering): Released all slaves [ 2639.888439][ T9747] bond61 (unregistering): Released all slaves [ 2640.073112][ T9747] bond60 (unregistering): Released all slaves [ 2640.088965][ T9747] bond59 (unregistering): Released all slaves [ 2640.103306][ T9747] bond58 (unregistering): Released all slaves [ 2640.169466][ T9747] bond57 (unregistering): Released all slaves [ 2640.345043][ T9747] bond56 (unregistering): Released all slaves [ 2640.494089][ T9747] bond55 (unregistering): Released all slaves [ 2640.696509][ T9747] bond54 (unregistering): Released all slaves [ 2641.370680][ T9747] bond53 (unregistering): Released all slaves [ 2641.390484][ T9747] bond52 (unregistering): Released all slaves [ 2641.409119][ T9747] bond51 (unregistering): Released all slaves [ 2641.459293][ T9747] bond50 (unregistering): Released all slaves [ 2641.474253][ T9747] bond49 (unregistering): Released all slaves [ 2641.584593][ T9747] bond48 (unregistering): Released all slaves [ 2641.803202][ T9747] bond47 (unregistering): Released all slaves [ 2641.820048][ T9747] bond46 (unregistering): Released all slaves [ 2641.834345][ T9747] bond45 (unregistering): Released all slaves [ 2641.847525][ T9747] bond44 (unregistering): Released all slaves [ 2641.865256][ T9747] bond43 (unregistering): Released all slaves [ 2641.924269][ T9747] bond42 (unregistering): Released all slaves [ 2642.107961][ T9747] bond41 (unregistering): Released all slaves [ 2642.122384][ T9747] bond40 (unregistering): Released all slaves [ 2642.234317][ T9747] bond39 (unregistering): Released all slaves [ 2642.247050][ T9747] bond38 (unregistering): Released all slaves [ 2642.263547][ T9747] bond37 (unregistering): Released all slaves [ 2642.593623][ T9747] bond36 (unregistering): Released all slaves [ 2642.609400][ T9747] bond35 (unregistering): Released all slaves [ 2642.844113][ T9747] bond34 (unregistering): Released all slaves [ 2642.861802][ T9747] bond33 (unregistering): Released all slaves [ 2642.876572][ T9747] bond32 (unregistering): Released all slaves [ 2642.889310][ T9747] bond31 (unregistering): Released all slaves [ 2643.113251][ T9747] bond30 (unregistering): Released all slaves [ 2643.223429][ T9747] bond29 (unregistering): Released all slaves [ 2643.453078][ T9747] bond28 (unregistering): Released all slaves [ 2643.470000][ T9747] bond27 (unregistering): Released all slaves [ 2643.743555][ T9747] bond26 (unregistering): Released all slaves [ 2643.794656][ T9747] bond25 (unregistering): Released all slaves [ 2643.933237][ T9747] bond24 (unregistering): Released all slaves [ 2644.083519][ T9747] bond23 (unregistering): Released all slaves [ 2644.314625][ T9747] bond22 (unregistering): Released all slaves [ 2644.664531][ T9747] bond21 (unregistering): Released all slaves [ 2644.766761][ T9747] bond20 (unregistering): Released all slaves [ 2644.825724][ T9747] bond19 (unregistering): Released all slaves [ 2644.884745][ T9747] bond18 (unregistering): Released all slaves [ 2644.994930][ T9747] bond17 (unregistering): Released all slaves [ 2645.009060][ T9747] bond16 (unregistering): Released all slaves [ 2645.023486][ T9747] bond15 (unregistering): Released all slaves [ 2645.036180][ T9747] bond14 (unregistering): Released all slaves [ 2645.052059][ T9747] bond13 (unregistering): Released all slaves [ 2645.226692][ T9747] bond12 (unregistering): Released all slaves [ 2645.403126][ T9747] bond11 (unregistering): Released all slaves [ 2645.418821][ T9747] bond10 (unregistering): Released all slaves [ 2645.772947][ T9747] bond9 (unregistering): Released all slaves [ 2645.956452][ T9747] bond8 (unregistering): Released all slaves [ 2645.968926][ T9747] bond7 (unregistering): Released all slaves [ 2645.982400][ T9747] bond6 (unregistering): Released all slaves [ 2645.995994][ T9747] bond5 (unregistering): Released all slaves [ 2646.214667][ T9747] bond4 (unregistering): Released all slaves [ 2646.227300][ T9747] bond3 (unregistering): Released all slaves [ 2646.244375][ T9747] bond2 (unregistering): Released all slaves [ 2646.571830][ T9747] bond1 (unregistering): Released all slaves [ 2646.623730][ T9747] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 2646.807836][ T9747] team0 (unregistering): Port device team_slave_1 removed [ 2646.828613][ T9747] team0 (unregistering): Port device team_slave_0 removed [ 2646.844204][ T9747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2646.860679][ T9747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2646.957611][ T9747] bond0 (unregistering): Released all slaves [ 2656.901691][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 2656.908012][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 2686.617459][T21919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2686.627139][T21919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2686.639138][T21919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2686.657389][T21919] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2686.665691][T21919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2688.750002][T21919] Bluetooth: hci6: command 0x0409 tx timeout [ 2690.820085][T21919] Bluetooth: hci6: command 0x041b tx timeout [ 2692.910026][T21919] Bluetooth: hci6: command 0x040f tx timeout [ 2694.989904][T21919] Bluetooth: hci6: command 0x0419 tx timeout [ 2718.343956][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 2718.350435][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 2746.019988][T21919] Bluetooth: hci5: command 0x0406 tx timeout [ 2748.505877][ T5029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2748.521649][ T5029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2748.529960][ T5029] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2748.537671][ T5029] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2748.546290][ T5029] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2750.580031][ T5029] Bluetooth: hci6: command 0x0409 tx timeout [ 2752.659785][ T5029] Bluetooth: hci6: command 0x041b tx timeout [ 2754.749709][ T5029] Bluetooth: hci6: command 0x040f tx timeout [ 2756.823382][ T5029] Bluetooth: hci6: command 0x0419 tx timeout [ 2774.023249][ T28] INFO: task syz-executor.3:21915 blocked for more than 143 seconds. [ 2774.032528][ T28] Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2774.042024][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2774.051956][ T28] task:syz-executor.3 state:D stack:25072 pid:21915 ppid:1 flags:0x00004004 [ 2774.062631][ T28] Call Trace: [ 2774.065966][ T28] [ 2774.068942][ T28] __schedule+0xc91/0x5770 [ 2774.081874][ T28] ? io_schedule_timeout+0x150/0x150 [ 2774.087354][ T28] ? rwsem_down_write_slowpath+0x3b8/0x1220 [ 2774.094383][ T28] schedule+0xde/0x1a0 [ 2774.098542][ T28] schedule_preempt_disabled+0x13/0x20 [ 2774.104330][ T28] rwsem_down_write_slowpath+0x3e2/0x1220 [ 2774.110381][ T28] ? down_timeout+0x90/0x90 [ 2774.114973][ T28] ? lock_release+0x670/0x670 [ 2774.119831][ T28] down_write+0x1d2/0x200 [ 2774.124276][ T28] ? rwsem_down_write_slowpath+0x1220/0x1220 [ 2774.130477][ T28] ? nsim_drv_remove+0x11e/0x1d0 [ 2774.135551][ T28] unregister_netdevice_notifier+0x22/0x180 [ 2774.141766][ T28] devlink_free+0x2cb/0x460 [ 2774.148550][ T28] nsim_drv_remove+0x158/0x1d0 [ 2774.153570][ T28] ? nsim_num_vf+0x50/0x50 [ 2774.158060][ T28] device_remove+0xc8/0x170 [ 2774.163621][ T28] device_release_driver_internal+0x443/0x610 [ 2774.170222][ T28] ? put_device+0x1f/0x30 [ 2774.174621][ T28] bus_remove_device+0x22c/0x420 [ 2774.180064][ T28] device_del+0x48a/0xb80 [ 2774.184469][ T28] ? __device_link_del+0x380/0x380 [ 2774.189801][ T28] ? trace_contention_end+0xd8/0x100 [ 2774.196226][ T28] device_unregister+0x1e/0xc0 [ 2774.204658][ T28] del_device_store+0x34e/0x4a0 [ 2774.209598][ T28] ? nsim_bus_probe+0x20/0x20 [ 2774.214380][ T28] ? nsim_bus_probe+0x20/0x20 [ 2774.219120][ T28] ? sysfs_file_ops+0x1c0/0x1c0 [ 2774.232309][ T28] bus_attr_store+0x76/0xa0 [ 2774.236924][ T28] ? bus_attr_show+0x90/0x90 [ 2774.245150][ T28] sysfs_kf_write+0x114/0x170 [ 2774.252532][ T28] kernfs_fop_write_iter+0x3f1/0x600 [ 2774.257902][ T28] vfs_write+0x9f6/0xe20 [ 2774.262535][ T28] ? kernel_write+0x670/0x670 [ 2774.267245][ T28] ? build_open_flags+0x6f0/0x6f0 [ 2774.272735][ T28] ? __fget_light+0x20a/0x270 [ 2774.277468][ T28] ksys_write+0x12b/0x250 [ 2774.283944][ T28] ? __ia32_sys_read+0xb0/0xb0 [ 2774.288786][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 2774.295160][ T28] do_syscall_64+0x39/0xb0 [ 2774.300237][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2774.306288][ T28] RIP: 0033:0x7f082fc3deef [ 2774.311093][ T28] RSP: 002b:00007ffe440131c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2774.319724][ T28] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f082fc3deef [ 2774.327775][ T28] RDX: 0000000000000001 RSI: 00007ffe44013210 RDI: 0000000000000005 [ 2774.336074][ T28] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffe44013160 [ 2774.344330][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f082fce78b6 [ 2774.352644][ T28] R13: 00007ffe44013210 R14: 0000000000000000 R15: 00007ffe440138e0 [ 2774.361130][ T28] [ 2774.369902][ T28] [ 2774.369902][ T28] Showing all locks held in the system: [ 2774.377972][ T28] 1 lock held by rcu_tasks_kthre/12: [ 2774.383761][ T28] #0: ffffffff8c794a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 2774.395190][ T28] 1 lock held by rcu_tasks_trace/13: [ 2774.401283][ T28] #0: ffffffff8c794770 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 2774.412667][ T28] 1 lock held by khungtaskd/28: [ 2774.417582][ T28] #0: ffffffff8c7955c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 2774.427856][ T28] 1 lock held by syslogd/4423: [ 2774.433023][ T28] 2 locks held by getty/4742: [ 2774.437729][ T28] #0: ffff888027573098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 2774.447977][ T28] #1: ffffc900015a02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 2774.458544][ T28] 3 locks held by kworker/u4:9/5281: [ 2774.464233][ T28] 5 locks held by kworker/u4:1/9747: [ 2774.469565][ T28] #0: ffff88801661f138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 2774.484140][ T28] #1: ffffc90006077da8 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 2774.494394][ T28] #2: ffffffff8e0e9410 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9f/0xb10 [ 2774.504498][ T28] #3: ffff88817b0ed3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x14f/0x400 [ 2774.515386][ T28] #4: ffffffff8c7a08b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e8/0x770 [ 2774.527612][ T28] 2 locks held by kworker/1:6/4922: [ 2774.533110][ T28] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 2774.543818][ T28] #1: ffffc900365a7da8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 2774.555799][ T28] 6 locks held by syz-executor.3/21915: [ 2774.561668][ T28] #0: ffff88807e856460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 2774.571094][ T28] #1: ffff8881f5bb1c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x285/0x600 [ 2774.584122][ T28] #2: ffff88801ffab0f0 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2a9/0x600 [ 2774.594790][ T28] #3: ffffffff8d7e6568 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xc9/0x4a0 [ 2774.605817][ T28] #4: ffff888048afd0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 2774.616755][ T28] #5: ffffffff8e0e9410 (pernet_ops_rwsem){++++}-{3:3}, at: unregister_netdevice_notifier+0x22/0x180 [ 2774.628268][ T28] 3 locks held by kworker/1:0/21964: [ 2774.633882][ T28] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 2774.644751][ T28] #1: ffffc90034947da8 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 2774.657685][ T28] #2: ffffffff8c7a08b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x64a/0x770 [ 2774.668941][ T28] 1 lock held by syz-executor.3/21970: [ 2774.679810][ T28] #0: ffffffff8e0e9410 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4cb/0x8e0 [ 2774.689419][ T28] [ 2774.692426][ T28] ============================================= [ 2774.692426][ T28] [ 2774.702813][ T28] NMI backtrace for cpu 0 [ 2774.707199][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2774.717054][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2774.727156][ T28] Call Trace: [ 2774.730461][ T28] [ 2774.733433][ T28] dump_stack_lvl+0xd9/0x150 [ 2774.738086][ T28] nmi_cpu_backtrace+0x29c/0x350 [ 2774.743051][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 2774.748349][ T28] nmi_trigger_cpumask_backtrace+0x2a4/0x300 [ 2774.754387][ T28] watchdog+0xe16/0x1090 [ 2774.758698][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 2774.764728][ T28] kthread+0x2e8/0x3a0 [ 2774.768818][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2774.774472][ T28] ret_from_fork+0x1f/0x30 [ 2774.778926][ T28] [ 2774.782738][ T28] Sending NMI from CPU 0 to CPUs 1: [ 2774.788005][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x40/0x50 [ 2774.789957][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2774.789974][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc7-syzkaller-02360-g938f65adc420 #0 [ 2774.790011][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2774.790031][ T28] Call Trace: [ 2774.790040][ T28] [ 2774.790052][ T28] dump_stack_lvl+0xd9/0x150 [ 2774.790107][ T28] panic+0x688/0x730 [ 2774.790150][ T28] ? panic_smp_self_stop+0x90/0x90 [ 2774.790199][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 2774.790232][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 2774.790288][ T28] ? watchdog+0xbe8/0x1090 [ 2774.790328][ T28] watchdog+0xbf9/0x1090 [ 2774.790365][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 2774.790405][ T28] kthread+0x2e8/0x3a0 [ 2774.790439][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 2774.790481][ T28] ret_from_fork+0x1f/0x30 [ 2774.790545][ T28] [ 2774.798094][ T28] Kernel Offset: disabled [ 2774.891591][ T28] Rebooting in 86400 seconds..