0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3607.920563][ T8859] Cannot find add_set index 0 as target 05:50:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'batadv0\x00', 0x4}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14142000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x2b0) 05:50:30 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:30 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3608.091567][ T8873] Cannot find add_set index 0 as target 05:50:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3608.160200][ T8892] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 3608.171809][ T8891] xt_socket: unknown flags 0x8 05:50:30 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0xffffff8d, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:30 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x294300, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={r6, @in={{0x2, 0x4e23, @rand_addr=0x10000}}, 0x7}, 0x90) 05:50:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3608.333683][ T8900] Cannot find add_set index 0 as target 05:50:30 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3608.391378][ T8921] Cannot find add_set index 0 as target 05:50:30 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3608.573207][ T8925] xt_socket: unknown flags 0x8 05:50:30 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x20020023) 05:50:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x2b0) 05:50:30 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0xfffffff5, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:30 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:30 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3608.947216][ T8982] xt_socket: unknown flags 0x8 05:50:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x2, 0x0, 0x1}}, 0x14) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:30 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/46, 0x2e) [ 3609.090703][ T8987] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3609.130573][ T8987] CPU: 1 PID: 8987 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3609.139197][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3609.149263][ T8987] Call Trace: [ 3609.152640][ T8987] dump_stack+0x11d/0x181 [ 3609.157115][ T8987] dump_header+0xaa/0x39c [ 3609.161456][ T8987] oom_kill_process.cold+0x10/0x15 [ 3609.166616][ T8987] out_of_memory+0x231/0xa60 [ 3609.171236][ T8987] mem_cgroup_out_of_memory+0x128/0x150 [ 3609.176806][ T8987] try_charge+0xb6c/0xbf0 [ 3609.181269][ T8987] mem_cgroup_try_charge+0xd2/0x260 [ 3609.186533][ T8987] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3609.192206][ T8987] wp_page_copy+0x322/0xf20 [ 3609.196798][ T8987] ? __read_once_size+0x41/0xe0 [ 3609.201768][ T8987] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3609.207688][ T8987] do_wp_page+0x192/0xd20 [ 3609.212041][ T8987] __handle_mm_fault+0x1d16/0x2e00 [ 3609.217198][ T8987] handle_mm_fault+0x21b/0x530 [ 3609.221987][ T8987] do_page_fault+0x496/0xa3d [ 3609.226596][ T8987] page_fault+0x34/0x40 [ 3609.230920][ T8987] RIP: 0033:0x45ad75 [ 3609.234876][ T8987] Code: 52 2c 00 00 00 00 00 c7 05 34 52 2c 00 01 00 00 00 74 23 66 90 48 8b 03 48 8b 50 18 48 85 d2 74 05 ff d2 48 8b 03 48 8b 5b 08 40 28 01 00 00 00 48 85 db 75 df c7 05 f5 c3 82 00 00 00 00 00 [ 3609.254487][ T8987] RSP: 002b:00007ffec8967580 EFLAGS: 00010202 [ 3609.260558][ T8987] RAX: 0000000000c871a8 RBX: 0000000000000000 RCX: 0000000000c82680 [ 3609.268537][ T8987] RDX: 0000000000000001 RSI: 000000000071ee90 RDI: 0000000002307c20 [ 3609.276731][ T8987] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 05:50:31 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0x0}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:31 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3609.284934][ T8987] R10: 0000000002307c10 R11: 0000000000000202 R12: 0000000000000001 [ 3609.292905][ T8987] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3609.344893][ T8987] memory: usage 307036kB, limit 307200kB, failcnt 276978 [ 3609.392751][ T8987] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3609.399728][ T8987] Memory cgroup stats for /syz0: [ 3609.400014][ T8987] anon 173854720 [ 3609.400014][ T8987] file 0 [ 3609.400014][ T8987] kernel_stack 12423168 [ 3609.400014][ T8987] slab 22507520 [ 3609.400014][ T8987] sock 0 [ 3609.400014][ T8987] shmem 0 [ 3609.400014][ T8987] file_mapped 135168 [ 3609.400014][ T8987] file_dirty 0 [ 3609.400014][ T8987] file_writeback 0 [ 3609.400014][ T8987] anon_thp 71303168 [ 3609.400014][ T8987] inactive_anon 0 05:50:31 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:31 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22, 0x2, 0x80, 0x6}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x2, 0x0, 0x1}}, 0x14) [ 3609.400014][ T8987] active_anon 173854720 [ 3609.400014][ T8987] inactive_file 0 [ 3609.400014][ T8987] active_file 0 [ 3609.400014][ T8987] unevictable 0 [ 3609.400014][ T8987] slab_reclaimable 3649536 [ 3609.400014][ T8987] slab_unreclaimable 18857984 [ 3609.400014][ T8987] pgfault 399696 [ 3609.400014][ T8987] pgmajfault 0 [ 3609.400014][ T8987] workingset_refault 825 [ 3609.400014][ T8987] workingset_activate 561 [ 3609.400014][ T8987] workingset_nodereclaim 0 [ 3609.400014][ T8987] pgrefill 7472 [ 3609.400014][ T8987] pgscan 7920 [ 3609.400014][ T8987] pgsteal 1292 [ 3609.503413][ T8987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8208,uid=0 [ 3609.522260][ T8987] Memory cgroup out of memory: Killed process 8208 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3609.543237][ T1077] oom_reaper: reaped process 8208 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 3609.557436][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3609.582814][ T8006] CPU: 1 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3609.591424][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3609.602005][ T8006] Call Trace: [ 3609.605310][ T8006] dump_stack+0x11d/0x181 [ 3609.609675][ T8006] dump_header+0xaa/0x39c [ 3609.614025][ T8006] oom_kill_process.cold+0x10/0x15 [ 3609.619318][ T8006] out_of_memory+0x231/0xa60 [ 3609.623924][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3609.629587][ T8006] try_charge+0x800/0xbf0 [ 3609.633984][ T8006] mem_cgroup_try_charge+0xd2/0x260 [ 3609.639204][ T8006] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3609.644854][ T8006] wp_page_copy+0x322/0xf20 [ 3609.649376][ T8006] ? __read_once_size+0x41/0xe0 [ 3609.654237][ T8006] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3609.660156][ T8006] do_wp_page+0x192/0xd20 [ 3609.664608][ T8006] __handle_mm_fault+0x1d16/0x2e00 [ 3609.669762][ T8006] handle_mm_fault+0x21b/0x530 [ 3609.674582][ T8006] do_page_fault+0x496/0xa3d [ 3609.679191][ T8006] page_fault+0x34/0x40 [ 3609.683394][ T8006] RIP: 0033:0x45adfa [ 3609.687294][ T8006] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba 05:50:31 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0x5, 0x9, 0x1, 0x2}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3609.707681][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00010246 [ 3609.713748][ T8006] RAX: 0000000000000000 RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3609.721725][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000c871a8 [ 3609.729806][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3609.737779][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 00000000000000ca [ 3609.745807][ T8006] R13: 0000000000005466 R14: 0000000000000000 R15: 00007ffec8967610 05:50:31 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x2}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:31 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3609.875559][ T8006] memory: usage 307100kB, limit 307200kB, failcnt 276978 [ 3609.952067][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3609.960153][ T8006] Memory cgroup stats for /syz0: [ 3609.960311][ T8006] anon 173703168 [ 3609.960311][ T8006] file 0 [ 3609.960311][ T8006] kernel_stack 12423168 [ 3609.960311][ T8006] slab 22507520 [ 3609.960311][ T8006] sock 0 [ 3609.960311][ T8006] shmem 0 [ 3609.960311][ T8006] file_mapped 135168 [ 3609.960311][ T8006] file_dirty 0 [ 3609.960311][ T8006] file_writeback 0 [ 3609.960311][ T8006] anon_thp 71303168 [ 3609.960311][ T8006] inactive_anon 0 [ 3609.960311][ T8006] active_anon 173703168 [ 3609.960311][ T8006] inactive_file 0 [ 3609.960311][ T8006] active_file 0 [ 3609.960311][ T8006] unevictable 0 [ 3609.960311][ T8006] slab_reclaimable 3649536 [ 3609.960311][ T8006] slab_unreclaimable 18857984 [ 3609.960311][ T8006] pgfault 399762 [ 3609.960311][ T8006] pgmajfault 0 [ 3609.960311][ T8006] workingset_refault 825 [ 3609.960311][ T8006] workingset_activate 561 [ 3609.960311][ T8006] workingset_nodereclaim 0 [ 3609.960311][ T8006] pgrefill 7472 [ 3609.960311][ T8006] pgscan 7920 [ 3609.960311][ T8006] pgsteal 1292 [ 3610.054597][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=28962,uid=0 05:50:32 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:32 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x90) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x294300, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r6, 0x7, 0x30}, 0xc) r7 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3610.104516][ T8006] Memory cgroup out of memory: Killed process 28962 (syz-executor.0) total-vm:74704kB, anon-rss:2200kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3610.167353][ T9000] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3610.258840][ T9000] CPU: 0 PID: 9000 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3610.267459][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3610.277508][ T9000] Call Trace: [ 3610.280809][ T9000] dump_stack+0x11d/0x181 [ 3610.285179][ T9000] dump_header+0xaa/0x39c [ 3610.289530][ T9000] oom_kill_process.cold+0x10/0x15 [ 3610.294730][ T9000] out_of_memory+0x231/0xa60 [ 3610.299381][ T9000] mem_cgroup_out_of_memory+0x128/0x150 [ 3610.305119][ T9000] try_charge+0xb6c/0xbf0 [ 3610.309625][ T9000] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3610.315105][ T9000] __memcg_kmem_charge+0xcf/0x1b0 [ 3610.320137][ T9000] __alloc_pages_nodemask+0x26c/0x310 [ 3610.325526][ T9000] alloc_pages_current+0xd1/0x170 [ 3610.330562][ T9000] pte_alloc_one+0x18/0x50 [ 3610.334982][ T9000] __pte_alloc+0x2d/0x220 [ 3610.339333][ T9000] __handle_mm_fault+0x1ffb/0x2e00 [ 3610.344477][ T9000] handle_mm_fault+0x21b/0x530 [ 3610.349258][ T9000] do_page_fault+0x496/0xa3d [ 3610.353866][ T9000] page_fault+0x34/0x40 [ 3610.358020][ T9000] RIP: 0033:0x40f87c [ 3610.361916][ T9000] Code: 8c 02 50 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 76 00 e8 14 3a ff ff <83> 05 81 07 76 00 01 80 7c 24 59 00 74 0b f6 44 24 08 01 0f 84 98 [ 3610.381605][ T9000] RSP: 002b:00007fff58164010 EFLAGS: 00010217 [ 3610.387685][ T9000] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045c6c9 [ 3610.395679][ T9000] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf28 [ 3610.404044][ T9000] RBP: 000000000076bf2c R08: 00007f9ecc737700 R09: ffffffffffffffff [ 3610.412022][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf20 [ 3610.420086][ T9000] R13: 0000000000000003 R14: 0000000000000000 R15: 000000000076bf2c [ 3610.434732][ T9000] memory: usage 307196kB, limit 307200kB, failcnt 246054 [ 3610.441785][ T9000] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3610.450382][ T9000] Memory cgroup stats for /syz1: [ 3610.450628][ T9000] anon 130961408 [ 3610.450628][ T9000] file 98304 [ 3610.450628][ T9000] kernel_stack 17399808 [ 3610.450628][ T9000] slab 28909568 [ 3610.450628][ T9000] sock 4096 [ 3610.450628][ T9000] shmem 0 [ 3610.450628][ T9000] file_mapped 0 [ 3610.450628][ T9000] file_dirty 0 [ 3610.450628][ T9000] file_writeback 0 [ 3610.450628][ T9000] anon_thp 0 [ 3610.450628][ T9000] inactive_anon 135168 [ 3610.450628][ T9000] active_anon 131026944 [ 3610.450628][ T9000] inactive_file 0 [ 3610.450628][ T9000] active_file 0 [ 3610.450628][ T9000] unevictable 0 [ 3610.450628][ T9000] slab_reclaimable 3379200 [ 3610.450628][ T9000] slab_unreclaimable 25530368 [ 3610.450628][ T9000] pgfault 472956 [ 3610.450628][ T9000] pgmajfault 0 [ 3610.450628][ T9000] workingset_refault 1617 [ 3610.450628][ T9000] workingset_activate 1188 [ 3610.450628][ T9000] workingset_nodereclaim 0 [ 3610.450628][ T9000] pgrefill 17287 [ 3610.450628][ T9000] pgscan 17737 [ 3610.450628][ T9000] pgsteal 2373 05:50:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0xefa63c43a1693138, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x199040, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/907], 0x2b0) 05:50:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:32 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x3}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) rt_sigaction(0x34, &(0x7f0000000200)={&(0x7f0000000180)="6466450fee782fc443856f138fc481f172d147f044ff0d4eeb00000ff9216567653e47fac4424d3c4d0dd88200008020c4a239a76a2f660fd193365cbea8", 0x18000000, &(0x7f00000001c0)="f3470f1eccc423b17cca4b47c0757b00f30f1ecfc4816565f90f0f4004bbf2453500000000c4a2d1b7362edec145d9f4", {[0x5]}}, &(0x7f00000002c0)={&(0x7f0000000240)="c442099e650cc481e25d5900f0fe4bce450f01d7c40115544e0ac4420dbb8101caffff440fbc99293871128f6850ef520028f226400f8d00e079a9440fa346e2", 0x0, &(0x7f0000000280)="660f3acf01003e440f820e00000025868f00000f01d60fabee420fc7f166440fd13a8f0978e3e5c4a250f5950400000065450f6be0"}, 0x8, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0x7, 0x80000001, 0x11c7, 0xb0b0b0b0}) r3 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x80000000020, 0x0, 0x7, 0x1}) ioctl(0xffffffffffffffff, 0x1ff, &(0x7f0000000040)="06224e3e27a8e2cb42a87cc9bace8830a3cffe58fbcea80dff35cce87791463a4b63bf7f5aa74a3ab8dc96d42625f376356473a213567dd42572b5bce1279acad861d1ee95dd51eb81d1a5ecc2bc78402360ed3754b35f14a3f87b3298fc4039623d463929f41366a7af1b77e8c7498051e7976c2947996007d8c77095af286bc646025de78884c46c11058dfa2d71bac075ad2ef094ee641b50e170543b6c846faa8db800") 05:50:32 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3610.545799][ T9000] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6609,uid=0 [ 3610.561517][ T9000] Memory cgroup out of memory: Killed process 6609 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3610.593579][ T1077] oom_reaper: reaped process 6609 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 3610.601358][ T9004] xt_socket: unknown flags 0x8 05:50:32 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:32 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:32 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) accept$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr="7516fe5d531e1533e7293de6d3f46e80"}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x800) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x13}) 05:50:32 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:33 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:33 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x4}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3611.109749][ T9163] xt_socket: unknown flags 0x8 05:50:33 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:33 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) signalfd4(r1, &(0x7f0000000040)={[0x5]}, 0x8, 0x80000) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = semget(0x1, 0x2, 0x400) semctl$SEM_STAT(r3, 0x1, 0x12, &(0x7f0000000300)=""/23) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r4, 0x800000c004500a, &(0x7f0000000300)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000680)=0x2, 0x143) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r7, &(0x7f0000000040)={0x2c, 0xa, r6}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) setsockopt$packet_int(r9, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000017c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0xc0, r11, 0x501, 0x0, 0x0, {{}, {}, {0xa4, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, '\x00'}}}}}, 0xc0}}, 0x1f5e) sendmsg$TIPC_CMD_GET_MAX_PORTS(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r11, 0x100, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) semtimedop(r3, &(0x7f0000000080)=[{0x3, 0x1, 0x1000}, {0x0, 0x8001, 0x1000}, {0x4, 0x32c, 0x2400}, {0x0, 0xb09a, 0x400}, {0x2, 0x2, 0x1000}, {0x3, 0x0, 0x800}], 0x6, &(0x7f0000000040)={0x0, 0x989680}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a31000000000000000000000000000000b110443a0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x2b0) 05:50:33 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3611.373636][ T9187] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3611.402845][ T9187] CPU: 0 PID: 9187 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3611.411456][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3611.421511][ T9187] Call Trace: [ 3611.424874][ T9187] dump_stack+0x11d/0x181 [ 3611.429263][ T9187] dump_header+0xaa/0x39c [ 3611.433645][ T9187] oom_kill_process.cold+0x10/0x15 [ 3611.438788][ T9187] out_of_memory+0x231/0xa60 [ 3611.443435][ T9187] mem_cgroup_out_of_memory+0x128/0x150 [ 3611.448991][ T9187] try_charge+0xb6c/0xbf0 [ 3611.453388][ T9187] mem_cgroup_try_charge+0xd2/0x260 [ 3611.458609][ T9187] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3611.464301][ T9187] wp_page_copy+0x322/0xf20 [ 3611.468865][ T9187] ? __read_once_size+0x41/0xe0 [ 3611.473728][ T9187] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3611.479630][ T9187] do_wp_page+0x192/0xd20 [ 3611.483977][ T9187] __handle_mm_fault+0x1d16/0x2e00 [ 3611.489117][ T9187] handle_mm_fault+0x21b/0x530 [ 3611.493955][ T9187] do_page_fault+0x496/0xa3d [ 3611.498642][ T9187] page_fault+0x34/0x40 [ 3611.502880][ T9187] RIP: 0033:0x40f0c8 05:50:33 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x6, 0x0, 0x800080, 0xffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:33 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3611.506810][ T9187] Code: d9 48 8b 47 78 48 83 f8 ff 0f 84 0b 01 00 00 48 8b 73 18 48 83 fe ff 74 29 48 81 fe e7 03 00 00 0f 87 67 01 00 00 48 c1 e6 04 86 80 80 76 00 01 48 89 86 88 80 76 00 66 2e 0f 1f 84 00 00 00 [ 3611.526420][ T9187] RSP: 002b:00007fff58163fe0 EFLAGS: 00010246 [ 3611.532487][ T9187] RAX: 0000000000000003 RBX: 000000000076bf20 RCX: 0000000000000001 [ 3611.540458][ T9187] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000076bf20 [ 3611.548490][ T9187] RBP: 000000000000002d R08: ffffffffffffffff R09: ffffffffffffffff [ 3611.556461][ T9187] R10: 00007fff581640e0 R11: 0000000000000246 R12: 000000000076bf20 [ 3611.564429][ T9187] R13: 0000000000371ac3 R14: 0000000000371af0 R15: 000000000076bf2c [ 3611.592429][ T9187] memory: usage 307200kB, limit 307200kB, failcnt 246123 [ 3611.612234][ T9187] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3611.623915][ T9187] Memory cgroup stats for /syz1: [ 3611.624204][ T9187] anon 131006464 [ 3611.624204][ T9187] file 98304 [ 3611.624204][ T9187] kernel_stack 17399808 [ 3611.624204][ T9187] slab 28909568 [ 3611.624204][ T9187] sock 4096 [ 3611.624204][ T9187] shmem 0 [ 3611.624204][ T9187] file_mapped 0 [ 3611.624204][ T9187] file_dirty 0 [ 3611.624204][ T9187] file_writeback 0 [ 3611.624204][ T9187] anon_thp 0 [ 3611.624204][ T9187] inactive_anon 135168 [ 3611.624204][ T9187] active_anon 131026944 [ 3611.624204][ T9187] inactive_file 0 [ 3611.624204][ T9187] active_file 0 [ 3611.624204][ T9187] unevictable 0 [ 3611.624204][ T9187] slab_reclaimable 3379200 [ 3611.624204][ T9187] slab_unreclaimable 25530368 [ 3611.624204][ T9187] pgfault 473154 [ 3611.624204][ T9187] pgmajfault 0 [ 3611.624204][ T9187] workingset_refault 1617 [ 3611.624204][ T9187] workingset_activate 1188 [ 3611.624204][ T9187] workingset_nodereclaim 0 [ 3611.624204][ T9187] pgrefill 17287 [ 3611.624204][ T9187] pgscan 17737 [ 3611.624204][ T9187] pgsteal 2406 [ 3611.682835][ T9220] set_target_v1_checkentry: 10 callbacks suppressed [ 3611.682843][ T9220] Cannot find add_set index 0 as target 05:50:33 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:33 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:33 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, 0x0) r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x20000, 0x8) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000080)) r4 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000000)={0x22}) r5 = dup3(r4, r0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3611.761228][ T9187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9167,uid=0 05:50:33 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [0x0], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3611.821853][ T9187] Memory cgroup out of memory: Killed process 9167 (syz-executor.1) total-vm:74836kB, anon-rss:180kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:50:33 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x6}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3611.928968][ T9198] tipc: Enabling of bearer rejected, illegal name 05:50:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r0, &(0x7f00000001c0)=@tipc=@id, &(0x7f0000000240)=0x80) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x2000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x130, r4, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff56}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @remote, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9132}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc000}, 0x20000041) r5 = getpid() pidfd_open(r5, 0x0) get_robust_list(r5, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) 05:50:34 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3612.203029][ T9255] Cannot find add_set index 0 as target 05:50:34 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [0xff, 0x0], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3612.255002][ T9268] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3612.268771][ T9286] Cannot find add_set index 0 as target [ 3612.303700][ T9268] CPU: 1 PID: 9268 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3612.312326][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3612.322485][ T9268] Call Trace: [ 3612.325794][ T9268] dump_stack+0x11d/0x181 [ 3612.330137][ T9268] dump_header+0xaa/0x39c [ 3612.334545][ T9268] oom_kill_process.cold+0x10/0x15 [ 3612.339668][ T9268] out_of_memory+0x231/0xa60 [ 3612.344355][ T9268] mem_cgroup_out_of_memory+0x128/0x150 [ 3612.349964][ T9268] try_charge+0xb6c/0xbf0 [ 3612.354374][ T9268] mem_cgroup_try_charge+0xd2/0x260 [ 3612.359590][ T9268] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3612.365240][ T9268] wp_page_copy+0x322/0xf20 [ 3612.369767][ T9268] ? __read_once_size+0x41/0xe0 [ 3612.374756][ T9268] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3612.380671][ T9268] do_wp_page+0x192/0xd20 [ 3612.385015][ T9268] __handle_mm_fault+0x1d16/0x2e00 [ 3612.390153][ T9268] handle_mm_fault+0x21b/0x530 [ 3612.394939][ T9268] do_page_fault+0x496/0xa3d [ 3612.399618][ T9268] page_fault+0x34/0x40 [ 3612.403782][ T9268] RIP: 0033:0x40f0c8 [ 3612.407738][ T9268] Code: d9 48 8b 47 78 48 83 f8 ff 0f 84 0b 01 00 00 48 8b 73 18 48 83 fe ff 74 29 48 81 fe e7 03 00 00 0f 87 67 01 00 00 48 c1 e6 04 86 80 80 76 00 01 48 89 86 88 80 76 00 66 2e 0f 1f 84 00 00 00 [ 3612.427418][ T9268] RSP: 002b:00007fff58163fe0 EFLAGS: 00010246 [ 3612.433489][ T9268] RAX: 0000000000000004 RBX: 000000000076bf20 RCX: 0000000000000001 [ 3612.441492][ T9268] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000076bf20 05:50:34 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:34 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01"], 0x3}}, 0x0) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}}, 0x4000040) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x8038, 0x0, 0x7, 0x6}) r6 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3612.449468][ T9268] RBP: 000000000000002d R08: ffffffffffffffff R09: ffffffffffffffff [ 3612.457625][ T9268] R10: 00007fff581640e0 R11: 0000000000000246 R12: 000000000076bf20 [ 3612.465616][ T9268] R13: 0000000000371df7 R14: 0000000000371e24 R15: 000000000076bf2c [ 3612.484802][ T9268] memory: usage 307200kB, limit 307200kB, failcnt 246145 [ 3612.493036][ T9268] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3612.500967][ T9268] Memory cgroup stats for /syz1: [ 3612.501129][ T9268] anon 131006464 [ 3612.501129][ T9268] file 98304 [ 3612.501129][ T9268] kernel_stack 17399808 [ 3612.501129][ T9268] slab 28909568 [ 3612.501129][ T9268] sock 4096 [ 3612.501129][ T9268] shmem 0 [ 3612.501129][ T9268] file_mapped 0 [ 3612.501129][ T9268] file_dirty 0 [ 3612.501129][ T9268] file_writeback 0 [ 3612.501129][ T9268] anon_thp 0 [ 3612.501129][ T9268] inactive_anon 135168 [ 3612.501129][ T9268] active_anon 131026944 [ 3612.501129][ T9268] inactive_file 0 [ 3612.501129][ T9268] active_file 0 05:50:34 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:34 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x7}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3612.501129][ T9268] unevictable 0 [ 3612.501129][ T9268] slab_reclaimable 3379200 [ 3612.501129][ T9268] slab_unreclaimable 25530368 [ 3612.501129][ T9268] pgfault 473253 [ 3612.501129][ T9268] pgmajfault 0 [ 3612.501129][ T9268] workingset_refault 1617 [ 3612.501129][ T9268] workingset_activate 1188 [ 3612.501129][ T9268] workingset_nodereclaim 0 [ 3612.501129][ T9268] pgrefill 17287 [ 3612.501129][ T9268] pgscan 17737 [ 3612.501129][ T9268] pgsteal 2406 05:50:34 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:34 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3612.717155][ T9308] Cannot find add_set index 0 as target 05:50:34 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xafbf5503c92a9b7, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0xdf0, 0x4) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000840)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000880)=0x28) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r3 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x22}) dup3(r3, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = getpid() pidfd_open(r5, 0x0) clone3(&(0x7f0000000600)={0x40800, &(0x7f0000000380)=0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400), {0x8}, &(0x7f0000000440)=""/143, 0x8f, &(0x7f0000000500)=""/184, &(0x7f00000005c0)=[r5], 0x1}, 0x50) fcntl$setsig(r6, 0xa, 0x22) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/172, 0xac, 0x100, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000000c0)=0x401, 0x4) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x40100, 0x0) ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000340)) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f00000006c0)={0x80000000022}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0106434, 0x0) connect$inet(r8, &(0x7f00000008c0)={0x2, 0x4e22, @multicast2}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) r10 = dup(r9) setsockopt$packet_int(r10, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000800)={0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0xa20001, 0x7, [], @string=&(0x7f0000000780)=0x4}}) perf_event_open(&(0x7f0000000700)={0x2, 0x70, 0xab, 0x0, 0x8, 0xb4, 0x0, 0x7, 0xa040, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000680), 0x2}, 0xc11, 0x7, 0x10001, 0x0, 0x1ff, 0x3, 0xfff}, 0x0, 0x4, r11, 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000100)=0x4003) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f00000002c0)=0x1) 05:50:34 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1=0xe0000002}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3612.843506][ T9268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9239,uid=0 [ 3612.908661][ T9268] Memory cgroup out of memory: Killed process 9239 (syz-executor.1) total-vm:74704kB, anon-rss:180kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:50:35 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x8}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3613.073852][ T9330] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3613.132889][ T9330] CPU: 1 PID: 9330 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3613.141610][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3613.151663][ T9330] Call Trace: [ 3613.154972][ T9330] dump_stack+0x11d/0x181 [ 3613.159350][ T9330] dump_header+0xaa/0x39c [ 3613.163842][ T9330] oom_kill_process.cold+0x10/0x15 [ 3613.169051][ T9330] out_of_memory+0x231/0xa60 [ 3613.173700][ T9330] mem_cgroup_out_of_memory+0x128/0x150 [ 3613.179289][ T9330] try_charge+0xb6c/0xbf0 [ 3613.183650][ T9330] mem_cgroup_try_charge+0xd2/0x260 [ 3613.188871][ T9330] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3613.194524][ T9330] wp_page_copy+0x322/0xf20 [ 3613.199132][ T9330] ? __schedule+0x30e/0x690 [ 3613.203653][ T9330] ? preempt_schedule_irq+0x72/0x90 [ 3613.208868][ T9330] ? retint_kernel+0x1b/0x1b [ 3613.213474][ T9330] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3613.219278][ T9330] do_wp_page+0x192/0xd20 [ 3613.223685][ T9330] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3613.229653][ T9330] __handle_mm_fault+0x1d16/0x2e00 [ 3613.234809][ T9330] handle_mm_fault+0x21b/0x530 [ 3613.239593][ T9330] do_page_fault+0x496/0xa3d [ 3613.244268][ T9330] page_fault+0x34/0x40 [ 3613.249131][ T9330] RIP: 0033:0x411718 [ 3613.253034][ T9330] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0b 20 4c 00 31 c0 e8 93 07 ff ff 31 ff e8 dc 03 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 2e 0f 87 00 [ 3613.272650][ T9330] RSP: 002b:00007ffec8967350 EFLAGS: 00010246 05:50:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) getsockname$l2tp(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066690000000000000000000000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x2b0) 05:50:35 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3613.278717][ T9330] RAX: 000000009e643952 RBX: 000000008450868b RCX: 0000001b31120000 [ 3613.286690][ T9330] RDX: 0000000000000000 RSI: 0000000000001952 RDI: ffffffff9e643952 [ 3613.294662][ T9330] RBP: 0000000000000001 R08: 000000009e643952 R09: 000000009e643956 [ 3613.302635][ T9330] R10: 00007ffec89674f0 R11: 0000000000000246 R12: 000000000076bfa8 [ 3613.310607][ T9330] R13: 0000000080000000 R14: 00007f1b94e78008 R15: 0000000000000001 [ 3613.355105][ T9330] memory: usage 307200kB, limit 307200kB, failcnt 277014 [ 3613.363655][ T9330] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3613.371471][ T9330] Memory cgroup stats for /syz0: [ 3613.371662][ T9330] anon 174047232 [ 3613.371662][ T9330] file 0 [ 3613.371662][ T9330] kernel_stack 12423168 [ 3613.371662][ T9330] slab 22646784 [ 3613.371662][ T9330] sock 0 [ 3613.371662][ T9330] shmem 0 [ 3613.371662][ T9330] file_mapped 135168 [ 3613.371662][ T9330] file_dirty 0 [ 3613.371662][ T9330] file_writeback 0 [ 3613.371662][ T9330] anon_thp 71303168 [ 3613.371662][ T9330] inactive_anon 0 [ 3613.371662][ T9330] active_anon 173957120 [ 3613.371662][ T9330] inactive_file 0 [ 3613.371662][ T9330] active_file 0 [ 3613.371662][ T9330] unevictable 0 [ 3613.371662][ T9330] slab_reclaimable 3649536 [ 3613.371662][ T9330] slab_unreclaimable 18997248 [ 3613.371662][ T9330] pgfault 400290 [ 3613.371662][ T9330] pgmajfault 0 [ 3613.371662][ T9330] workingset_refault 825 [ 3613.371662][ T9330] workingset_activate 561 [ 3613.371662][ T9330] workingset_nodereclaim 0 05:50:35 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @default, @rose={'rose', 0x0}, 0x0, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1f, 0x3, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3613.371662][ T9330] pgrefill 7472 [ 3613.371662][ T9330] pgscan 7920 [ 3613.371662][ T9330] pgsteal 1292 [ 3613.469538][ T9330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9318,uid=0 [ 3613.486783][ T9330] Memory cgroup out of memory: Killed process 9318 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3613.569355][ T9369] xt_socket: unknown flags 0x8 05:50:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x66, 0x9, 0x3, 0x2, 0x0, 0x1, 0x4, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x21080, 0x4, 0x7, 0x1, 0x2, 0x92, 0x7f}, r1, 0x0, 0xffffffffffffffff, 0xb) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000180)={{r2, r3/1000+10000}, {0x77359400}}, &(0x7f00000001c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000100)) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2b0) 05:50:35 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:35 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:35 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3613.626879][ T9380] Cannot find add_set index 0 as target 05:50:35 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) delete_module(&(0x7f0000000040)='/dev/cec#\x00', 0x600) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:35 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1=0xe0000003}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3613.880261][ T9392] Cannot find add_set index 0 as target 05:50:35 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:35 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f00000001c0)) dup3(r1, r0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000040), 0x80800) fremovexattr(r3, &(0x7f0000000080)=@random={'system.', '/dev/cec#\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f00000000c0)={0xfffffffffffff005, 0x9b9, 0x87f, 0x20ffc}) [ 3613.954115][ T9414] Cannot find add_set index 0 as target [ 3613.980256][ T9397] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3614.023935][ T9397] CPU: 0 PID: 9397 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3614.032671][ T9397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3614.042723][ T9397] Call Trace: [ 3614.046035][ T9397] dump_stack+0x11d/0x181 [ 3614.050385][ T9397] dump_header+0xaa/0x39c [ 3614.054738][ T9397] oom_kill_process.cold+0x10/0x15 [ 3614.059987][ T9397] out_of_memory+0x231/0xa60 [ 3614.064598][ T9397] mem_cgroup_out_of_memory+0x128/0x150 05:50:36 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3614.070187][ T9397] try_charge+0xb6c/0xbf0 [ 3614.074530][ T9397] ? vmpressure+0x19e/0x290 [ 3614.079050][ T9397] ? __rcu_read_unlock+0x77/0x3a0 [ 3614.084202][ T9397] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3614.089793][ T9397] __memcg_kmem_charge+0xcf/0x1b0 [ 3614.094892][ T9397] copy_process+0x12bc/0x3b40 [ 3614.099576][ T9397] ? record_times+0x16/0x90 [ 3614.104089][ T9397] ? psi_task_change+0x1ad/0x2d0 [ 3614.109047][ T9397] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3614.115135][ T9397] _do_fork+0xfe/0x7a0 [ 3614.119217][ T9397] ? cgroup_file_notify+0xff/0x130 [ 3614.124342][ T9397] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3614.130454][ T9397] __x64_sys_clone+0x130/0x170 [ 3614.135247][ T9397] do_syscall_64+0xcc/0x3a0 [ 3614.139825][ T9397] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3614.145717][ T9397] RIP: 0033:0x45f099 [ 3614.149719][ T9397] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 05:50:36 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3614.169740][ T9397] RSP: 002b:00007fff58163ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3614.178165][ T9397] RAX: ffffffffffffffda RBX: 00007f9ecc737700 RCX: 000000000045f099 [ 3614.186500][ T9397] RDX: 00007f9ecc7379d0 RSI: 00007f9ecc736db0 RDI: 00000000003d0f00 [ 3614.194485][ T9397] RBP: 00007fff581640f0 R08: 00007f9ecc737700 R09: 00007f9ecc737700 [ 3614.202500][ T9397] R10: 00007f9ecc7379d0 R11: 0000000000000202 R12: 0000000000000000 [ 3614.210603][ T9397] R13: 00007fff58163f8f R14: 00007f9ecc7379c0 R15: 000000000076bf2c 05:50:36 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3614.274161][ T9435] Cannot find add_set index 0 as target [ 3614.280031][ T9397] memory: usage 307200kB, limit 307200kB, failcnt 246211 [ 3614.355784][ T9397] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3614.365550][ T9397] Memory cgroup stats for /syz1: [ 3614.367895][ T9397] anon 131006464 [ 3614.367895][ T9397] file 98304 [ 3614.367895][ T9397] kernel_stack 17362944 [ 3614.367895][ T9397] slab 28909568 [ 3614.367895][ T9397] sock 4096 [ 3614.367895][ T9397] shmem 0 [ 3614.367895][ T9397] file_mapped 0 [ 3614.367895][ T9397] file_dirty 0 [ 3614.367895][ T9397] file_writeback 0 [ 3614.367895][ T9397] anon_thp 0 [ 3614.367895][ T9397] inactive_anon 135168 [ 3614.367895][ T9397] active_anon 131162112 [ 3614.367895][ T9397] inactive_file 0 [ 3614.367895][ T9397] active_file 0 [ 3614.367895][ T9397] unevictable 0 [ 3614.367895][ T9397] slab_reclaimable 3379200 [ 3614.367895][ T9397] slab_unreclaimable 25530368 [ 3614.367895][ T9397] pgfault 473418 [ 3614.367895][ T9397] pgmajfault 0 [ 3614.367895][ T9397] workingset_refault 1617 [ 3614.367895][ T9397] workingset_activate 1188 [ 3614.367895][ T9397] workingset_nodereclaim 0 [ 3614.367895][ T9397] pgrefill 17287 05:50:36 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3614.367895][ T9397] pgscan 17737 [ 3614.367895][ T9397] pgsteal 2406 [ 3614.538783][ T9397] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9370,uid=0 [ 3614.580018][ T9397] Memory cgroup out of memory: Killed process 9370 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3614.659697][ T9460] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3614.678792][ T9460] CPU: 1 PID: 9460 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3614.687446][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3614.697496][ T9460] Call Trace: [ 3614.700811][ T9460] dump_stack+0x11d/0x181 [ 3614.705153][ T9460] dump_header+0xaa/0x39c [ 3614.709500][ T9460] oom_kill_process.cold+0x10/0x15 [ 3614.714629][ T9460] out_of_memory+0x231/0xa60 [ 3614.719235][ T9460] mem_cgroup_out_of_memory+0x128/0x150 [ 3614.724805][ T9460] try_charge+0xb6c/0xbf0 [ 3614.729207][ T9460] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3614.734724][ T9460] __memcg_kmem_charge+0xcf/0x1b0 [ 3614.739902][ T9460] __alloc_pages_nodemask+0x26c/0x310 [ 3614.745297][ T9460] alloc_pages_current+0xd1/0x170 [ 3614.750342][ T9460] pte_alloc_one+0x18/0x50 [ 3614.754771][ T9460] __pte_alloc+0x2d/0x220 05:50:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @rand_addr=0xffffff12}]}, &(0x7f0000000080)=0x10) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:36 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x210000, 0x110) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000100)={0x22, 0x0, 0x4, 0x1ff}) r3 = dup3(r1, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r12, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x4}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@exit, @jmp={0x5, 0x1, 0x4, 0x5, 0x1, 0xfffffffffffffff4, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x80000001}, @ldst={0x3, 0x0, 0x3, 0x0, 0x4, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0xc, [], r12, 0x17, r5, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x6e, 0x53a}, 0x10, 0xffffffffffffffff, r4}, 0x78) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:36 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1=0xe0000004}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:36 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:36 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3614.759165][ T9460] __handle_mm_fault+0x1ffb/0x2e00 [ 3614.764389][ T9460] handle_mm_fault+0x21b/0x530 [ 3614.769374][ T9460] do_page_fault+0x496/0xa3d [ 3614.773984][ T9460] page_fault+0x34/0x40 [ 3614.778142][ T9460] RIP: 0033:0x40f87c [ 3614.782179][ T9460] Code: 8c 02 50 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 76 00 e8 14 3a ff ff <83> 05 81 07 76 00 01 80 7c 24 59 00 74 0b f6 44 24 08 01 0f 84 98 [ 3614.802046][ T9460] RSP: 002b:00007ffec8967420 EFLAGS: 00010217 [ 3614.808347][ T9460] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045c6c9 [ 3614.816334][ T9460] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf28 [ 3614.824308][ T9460] RBP: 000000000076bf2c R08: 00007f1b92e77700 R09: ffffffffffffffff [ 3614.832291][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf20 [ 3614.840326][ T9460] R13: 0000000000000004 R14: 0000000000000000 R15: 000000000076bf2c [ 3614.851911][ T9460] memory: usage 307200kB, limit 307200kB, failcnt 277066 [ 3614.864459][ T9460] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3614.875710][ T9460] Memory cgroup stats for /syz0: [ 3614.875912][ T9460] anon 173875200 [ 3614.875912][ T9460] file 0 [ 3614.875912][ T9460] kernel_stack 12423168 [ 3614.875912][ T9460] slab 22646784 [ 3614.875912][ T9460] sock 0 [ 3614.875912][ T9460] shmem 0 [ 3614.875912][ T9460] file_mapped 135168 [ 3614.875912][ T9460] file_dirty 0 [ 3614.875912][ T9460] file_writeback 0 [ 3614.875912][ T9460] anon_thp 71303168 [ 3614.875912][ T9460] inactive_anon 0 [ 3614.875912][ T9460] active_anon 173875200 [ 3614.875912][ T9460] inactive_file 0 [ 3614.875912][ T9460] active_file 0 [ 3614.875912][ T9460] unevictable 0 [ 3614.875912][ T9460] slab_reclaimable 3649536 [ 3614.875912][ T9460] slab_unreclaimable 18997248 [ 3614.875912][ T9460] pgfault 400521 [ 3614.875912][ T9460] pgmajfault 0 [ 3614.875912][ T9460] workingset_refault 825 [ 3614.875912][ T9460] workingset_activate 561 [ 3614.875912][ T9460] workingset_nodereclaim 0 [ 3614.875912][ T9460] pgrefill 7472 [ 3614.875912][ T9460] pgscan 7953 [ 3614.875912][ T9460] pgsteal 1292 [ 3614.953596][ T9491] xt_socket: unknown flags 0x8 [ 3614.987496][ T9460] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9436,uid=0 [ 3615.007015][ T9460] Memory cgroup out of memory: Killed process 9436 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:50:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000000)=0x2) [ 3615.092111][ T9464] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3615.120124][ T9464] CPU: 1 PID: 9464 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3615.128736][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3615.138795][ T9464] Call Trace: [ 3615.142131][ T9464] dump_stack+0x11d/0x181 05:50:37 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x4]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3615.146475][ T9464] dump_header+0xaa/0x39c [ 3615.150893][ T9464] oom_kill_process.cold+0x10/0x15 [ 3615.156089][ T9464] out_of_memory+0x231/0xa60 [ 3615.160699][ T9464] mem_cgroup_out_of_memory+0x128/0x150 [ 3615.166263][ T9464] try_charge+0x800/0xbf0 [ 3615.170623][ T9464] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3615.176117][ T9464] __memcg_kmem_charge+0xcf/0x1b0 [ 3615.181162][ T9464] __alloc_pages_nodemask+0x26c/0x310 [ 3615.186611][ T9464] alloc_pages_current+0xd1/0x170 [ 3615.191686][ T9464] pte_alloc_one+0x18/0x50 [ 3615.196151][ T9464] __pte_alloc+0x2d/0x220 [ 3615.200497][ T9464] __handle_mm_fault+0x1ffb/0x2e00 [ 3615.205637][ T9464] handle_mm_fault+0x21b/0x530 [ 3615.210424][ T9464] do_page_fault+0x496/0xa3d [ 3615.215031][ T9464] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3615.221302][ T9464] page_fault+0x34/0x40 [ 3615.225485][ T9464] RIP: 0010:__put_user_4+0x1c/0x30 [ 3615.230605][ T9464] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 8c 01 00 48 8b 9b 50 0b 00 00 48 83 eb 03 48 39 d9 73 4a 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 3615.250232][ T9464] RSP: 0018:ffffc90016d5fe78 EFLAGS: 00010293 [ 3615.256292][ T9464] RAX: 0000000000000003 RBX: 00007fffffffeffd RCX: 0000000020000140 [ 3615.264378][ T9464] RDX: 0000000000000060 RSI: ffffffff83be0c85 RDI: 0000000000000005 [ 3615.272335][ T9464] RBP: ffffc90016d5fed8 R08: ffff88806b7d0040 R09: 0000ffff85c5a730 [ 3615.280287][ T9464] R10: 0000ffffffffffff R11: 0000ffff85c5a737 R12: 0000000000000003 [ 3615.288254][ T9464] R13: 0000000000000004 R14: 0000000000000001 R15: 0000000000000000 [ 3615.296248][ T9464] ? __sys_socketpair+0xa5/0x450 [ 3615.301198][ T9464] ? __sys_socketpair+0xb1/0x450 [ 3615.306134][ T9464] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3615.312365][ T9464] __x64_sys_socketpair+0x5e/0x80 [ 3615.317405][ T9464] do_syscall_64+0xcc/0x3a0 [ 3615.321903][ T9464] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3615.327773][ T9464] RIP: 0033:0x45c6c9 [ 3615.331680][ T9464] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3615.351381][ T9464] RSP: 002b:00007f1b92e76c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 3615.359807][ T9464] RAX: ffffffffffffffda RBX: 00007f1b92e776d4 RCX: 000000000045c6c9 [ 3615.367765][ T9464] RDX: 0000000000000000 RSI: 0040000000000001 RDI: 0000000000000001 [ 3615.375724][ T9464] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3615.383695][ T9464] R10: 0000000020000140 R11: 0000000000000246 R12: 00000000ffffffff 05:50:37 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000080)={0x22, 0x2, 0x3, 0x1}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/221) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) [ 3615.391704][ T9464] R13: 0000000000000b6d R14: 00000000004cd8a7 R15: 000000000076bf2c [ 3615.409817][ T9464] memory: usage 304996kB, limit 307200kB, failcnt 277066 [ 3615.427436][ T9464] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3615.437852][ T9464] Memory cgroup stats for /syz0: [ 3615.438036][ T9464] anon 171667456 [ 3615.438036][ T9464] file 0 [ 3615.438036][ T9464] kernel_stack 12423168 [ 3615.438036][ T9464] slab 22646784 [ 3615.438036][ T9464] sock 0 [ 3615.438036][ T9464] shmem 0 [ 3615.438036][ T9464] file_mapped 135168 [ 3615.438036][ T9464] file_dirty 0 [ 3615.438036][ T9464] file_writeback 0 [ 3615.438036][ T9464] anon_thp 69206016 [ 3615.438036][ T9464] inactive_anon 0 [ 3615.438036][ T9464] active_anon 171667456 [ 3615.438036][ T9464] inactive_file 0 [ 3615.438036][ T9464] active_file 0 [ 3615.438036][ T9464] unevictable 0 [ 3615.438036][ T9464] slab_reclaimable 3649536 05:50:37 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1=0xe0000006}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3615.438036][ T9464] slab_unreclaimable 18997248 [ 3615.438036][ T9464] pgfault 400521 [ 3615.438036][ T9464] pgmajfault 0 [ 3615.438036][ T9464] workingset_refault 825 [ 3615.438036][ T9464] workingset_activate 561 [ 3615.438036][ T9464] workingset_nodereclaim 0 [ 3615.438036][ T9464] pgrefill 7472 [ 3615.438036][ T9464] pgscan 7953 [ 3615.438036][ T9464] pgsteal 1292 [ 3615.534426][ T9464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9221,uid=0 05:50:37 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) pwrite64(r3, &(0x7f0000000180)="4a1ffab70032f06aeb3336b397a2957e318bc1dd08e697300826285dce3d3f2285b216da1c0795fc5d35ef66c02ad6d6cf166ead064ce2020c004365f39430af1772692373f0c64a18137d8bc79aa87d368ef65843e891c7a82397f802977f0589cfbb0b672c5317db41afb9afed1b804619e72ab0e7cdd3844efe3c4483a999afb7d22cb50c290b52d17e337c27dc76474c99c9174fa2645c057cca1a725a50d3ad0e7a307e278bcd6326f601561895ae416b6c828d780f7aaee8a6a97433c369ab322d14792c60a51dabb5354415e0bab6974b576bf0b1b169fcebc414ab481258696eb2827a", 0xe7, 0x4) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) setsockopt$packet_int(r6, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000040)={0xfff, 0x8000, 0x4a0b, 0x6, 0x6, 0xc, 0x4, "650083732ccec782442e7fe799b3aeb9191905c9", "ed0a3bb2d3595ecc2ffa9d34138c0ba29fd17537"}) [ 3615.581313][ T9464] Memory cgroup out of memory: Killed process 9221 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3615.642753][ T9484] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3615.657727][ T9484] CPU: 1 PID: 9484 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 3615.666443][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3615.676495][ T9484] Call Trace: [ 3615.679852][ T9484] dump_stack+0x11d/0x181 [ 3615.684228][ T9484] dump_header+0xaa/0x39c [ 3615.688646][ T9484] oom_kill_process.cold+0x10/0x15 [ 3615.693767][ T9484] out_of_memory+0x231/0xa60 [ 3615.698476][ T9484] mem_cgroup_out_of_memory+0x128/0x150 [ 3615.704083][ T9484] try_charge+0xb6c/0xbf0 [ 3615.708445][ T9484] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3615.713925][ T9484] __memcg_kmem_charge+0xcf/0x1b0 [ 3615.719099][ T9484] copy_process+0x12bc/0x3b40 [ 3615.723789][ T9484] ? record_times+0x16/0x90 [ 3615.728296][ T9484] ? psi_task_change+0x1ad/0x2d0 [ 3615.733333][ T9484] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3615.739466][ T9484] _do_fork+0xfe/0x7a0 [ 3615.743604][ T9484] ? cgroup_file_notify+0xff/0x130 [ 3615.748727][ T9484] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3615.754799][ T9484] __x64_sys_clone+0x130/0x170 [ 3615.759580][ T9484] do_syscall_64+0xcc/0x3a0 [ 3615.764186][ T9484] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3615.770088][ T9484] RIP: 0033:0x45f099 [ 3615.774060][ T9484] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3615.793669][ T9484] RSP: 002b:00007ffdcad8a278 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3615.802088][ T9484] RAX: ffffffffffffffda RBX: 00007fb394e9a700 RCX: 000000000045f099 [ 3615.810067][ T9484] RDX: 00007fb394e9a9d0 RSI: 00007fb394e99db0 RDI: 00000000003d0f00 [ 3615.818038][ T9484] RBP: 00007ffdcad8a490 R08: 00007fb394e9a700 R09: 00007fb394e9a700 [ 3615.826008][ T9484] R10: 00007fb394e9a9d0 R11: 0000000000000202 R12: 0000000000000000 [ 3615.833970][ T9484] R13: 00007ffdcad8a32f R14: 00007fb394e9a9c0 R15: 000000000076bfd4 [ 3615.846052][ T9484] memory: usage 307200kB, limit 307200kB, failcnt 216592 [ 3615.860704][ T9484] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3615.877636][ T9484] Memory cgroup stats for /syz2: [ 3615.877810][ T9484] anon 229605376 [ 3615.877810][ T9484] file 77824 [ 3615.877810][ T9484] kernel_stack 7630848 [ 3615.877810][ T9484] slab 14262272 [ 3615.877810][ T9484] sock 0 [ 3615.877810][ T9484] shmem 0 [ 3615.877810][ T9484] file_mapped 0 [ 3615.877810][ T9484] file_dirty 135168 [ 3615.877810][ T9484] file_writeback 0 [ 3615.877810][ T9484] anon_thp 167772160 [ 3615.877810][ T9484] inactive_anon 0 [ 3615.877810][ T9484] active_anon 229621760 [ 3615.877810][ T9484] inactive_file 0 [ 3615.877810][ T9484] active_file 40960 [ 3615.877810][ T9484] unevictable 0 [ 3615.877810][ T9484] slab_reclaimable 2297856 [ 3615.877810][ T9484] slab_unreclaimable 11964416 [ 3615.877810][ T9484] pgfault 489753 05:50:37 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:37 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3615.877810][ T9484] pgmajfault 0 [ 3615.877810][ T9484] workingset_refault 1122 [ 3615.877810][ T9484] workingset_activate 792 [ 3615.877810][ T9484] workingset_nodereclaim 0 [ 3615.877810][ T9484] pgrefill 11049 [ 3615.877810][ T9484] pgscan 11262 [ 3615.877810][ T9484] pgsteal 1975 [ 3615.878430][ T9464] Cannot find add_set index 0 as target [ 3615.885657][ T9484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16234,uid=0 [ 3615.993995][ T9484] Memory cgroup out of memory: Killed process 16234 (syz-executor.2) total-vm:74836kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 3616.016958][ T1077] oom_reaper: reaped process 16234 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 3616.019398][ T9506] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3616.055638][ T9506] CPU: 1 PID: 9506 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3616.064244][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3616.074299][ T9506] Call Trace: [ 3616.077599][ T9506] dump_stack+0x11d/0x181 [ 3616.081950][ T9506] dump_header+0xaa/0x39c [ 3616.086289][ T9506] oom_kill_process.cold+0x10/0x15 [ 3616.091506][ T9506] out_of_memory+0x231/0xa60 [ 3616.096115][ T9506] mem_cgroup_out_of_memory+0x128/0x150 [ 3616.101680][ T9506] try_charge+0xb6c/0xbf0 05:50:38 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x22}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x15, 0x75, &(0x7f0000000040)="f1664584f9601d14e87d62f9e35c20fc306f45b27beeabee8ad771684bc785441304e0b7176db9be38a0e4ec4b510e27904f9e6ae7abb4d9b4dce66d53da35c64ea277c60d9bceddf9f2f5fb97bc340e09f57280a4368ee6b3a716dc7886ff79967c445a20d24a7ce872752e6fee69234c4acb607c"}) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:38 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1=0xe0000008}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3616.106194][ T9506] mem_cgroup_try_charge+0xd2/0x260 [ 3616.111418][ T9506] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3616.117060][ T9506] __handle_mm_fault+0x197f/0x2e00 [ 3616.122225][ T9506] handle_mm_fault+0x21b/0x530 [ 3616.127001][ T9506] do_page_fault+0x496/0xa3d [ 3616.131649][ T9506] page_fault+0x34/0x40 [ 3616.135800][ T9506] RIP: 0033:0x40f87c [ 3616.139705][ T9506] Code: 8c 02 50 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 76 00 e8 14 3a ff ff <83> 05 81 07 76 00 01 80 7c 24 59 00 74 0b f6 44 24 08 01 0f 84 98 [ 3616.159307][ T9506] RSP: 002b:00007fff58164010 EFLAGS: 00010217 [ 3616.165449][ T9506] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045c6c9 [ 3616.173426][ T9506] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf28 [ 3616.181402][ T9506] RBP: 000000000076bf2c R08: 00007f9ecc737700 R09: ffffffffffffffff [ 3616.189378][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf20 [ 3616.197429][ T9506] R13: 0000000000000003 R14: 0000000000000000 R15: 000000000076bf2c 05:50:38 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:38 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3616.267852][ T9552] Cannot find add_set index 0 as target [ 3616.284374][ T9506] memory: usage 307200kB, limit 307200kB, failcnt 246273 [ 3616.353729][ T9506] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3616.369457][ T9506] Memory cgroup stats for /syz1: [ 3616.369620][ T9506] anon 131141632 [ 3616.369620][ T9506] file 98304 [ 3616.369620][ T9506] kernel_stack 17399808 [ 3616.369620][ T9506] slab 28909568 [ 3616.369620][ T9506] sock 4096 [ 3616.369620][ T9506] shmem 0 [ 3616.369620][ T9506] file_mapped 0 [ 3616.369620][ T9506] file_dirty 0 [ 3616.369620][ T9506] file_writeback 135168 [ 3616.369620][ T9506] anon_thp 0 [ 3616.369620][ T9506] inactive_anon 135168 [ 3616.369620][ T9506] active_anon 131162112 [ 3616.369620][ T9506] inactive_file 0 [ 3616.369620][ T9506] active_file 0 [ 3616.369620][ T9506] unevictable 0 [ 3616.369620][ T9506] slab_reclaimable 3379200 [ 3616.369620][ T9506] slab_unreclaimable 25530368 [ 3616.369620][ T9506] pgfault 473550 [ 3616.369620][ T9506] pgmajfault 0 [ 3616.369620][ T9506] workingset_refault 1617 [ 3616.369620][ T9506] workingset_activate 1188 [ 3616.369620][ T9506] workingset_nodereclaim 0 05:50:38 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f00000000c0)={0x80000000022, 0x0, 0x0, 0x4100}) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x20) [ 3616.369620][ T9506] pgrefill 17287 [ 3616.369620][ T9506] pgscan 17737 [ 3616.369620][ T9506] pgsteal 2406 [ 3616.518851][ T9506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6475,uid=0 [ 3616.552358][ T9506] Memory cgroup out of memory: Killed process 6475 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3616.648321][ T1077] oom_reaper: reaped process 6475 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 3616.667696][ T9563] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3616.680677][ T9511] xt_socket: unknown flags 0x8 [ 3616.697731][ T9586] xt_socket: unknown flags 0x8 [ 3616.707499][ T9563] CPU: 0 PID: 9563 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 3616.716131][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3616.726182][ T9563] Call Trace: [ 3616.729480][ T9563] dump_stack+0x11d/0x181 [ 3616.733820][ T9563] dump_header+0xaa/0x39c [ 3616.738218][ T9563] oom_kill_process.cold+0x10/0x15 [ 3616.743347][ T9563] out_of_memory+0x231/0xa60 [ 3616.748026][ T9563] mem_cgroup_out_of_memory+0x128/0x150 [ 3616.753589][ T9563] try_charge+0xb6c/0xbf0 [ 3616.757975][ T9563] mem_cgroup_try_charge+0xd2/0x260 [ 3616.763194][ T9563] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3616.768933][ T9563] wp_page_copy+0x322/0xf20 [ 3616.773538][ T9563] ? __read_once_size+0x41/0xe0 [ 3616.778400][ T9563] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3616.784301][ T9563] do_wp_page+0x192/0xd20 [ 3616.788639][ T9563] __handle_mm_fault+0x1d16/0x2e00 [ 3616.793772][ T9563] handle_mm_fault+0x21b/0x530 [ 3616.798545][ T9563] do_page_fault+0x496/0xa3d [ 3616.803146][ T9563] page_fault+0x34/0x40 [ 3616.807384][ T9563] RIP: 0033:0x40ee88 [ 3616.811325][ T9563] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 d8 2c 00 00 8b 05 82 91 33 00 48 8b 15 f3 37 87 00 83 c0 01 <89> 05 72 91 33 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 3616.830922][ T9563] RSP: 002b:00007ffdcad8a340 EFLAGS: 00010202 [ 3616.836980][ T9563] RAX: 0000000000000001 RBX: 0000001b30b20014 RCX: 0000001b31b20000 [ 3616.844944][ T9563] RDX: 0000001b30b20000 RSI: 0000000000001ab3 RDI: fffffffffd0b1ab3 [ 3616.852910][ T9563] RBP: 0000001b30b20018 R08: 00000000fd0b1ab3 R09: 00000000fd0b1ab7 [ 3616.860874][ T9563] R10: 00007ffdcad8a480 R11: 0000000000000246 R12: 0000001b30b2001c [ 3616.868959][ T9563] R13: 0000000000372e7a R14: 000000000076bf20 R15: 000000000076bf2c [ 3616.910804][ T9563] memory: usage 307196kB, limit 307200kB, failcnt 216605 [ 3616.917904][ T9563] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3616.924811][ T9563] Memory cgroup stats for /syz2: [ 3616.925016][ T9563] anon 229638144 [ 3616.925016][ T9563] file 77824 [ 3616.925016][ T9563] kernel_stack 7593984 [ 3616.925016][ T9563] slab 14262272 [ 3616.925016][ T9563] sock 0 [ 3616.925016][ T9563] shmem 0 [ 3616.925016][ T9563] file_mapped 0 [ 3616.925016][ T9563] file_dirty 135168 [ 3616.925016][ T9563] file_writeback 0 05:50:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2b0) 05:50:38 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:38 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:38 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1=0xe00001b6}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:38 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x1, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f00000001c0)={r4, 0x3ff}) getsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000040)=""/220, &(0x7f0000000180)=0xdc) [ 3616.925016][ T9563] anon_thp 167772160 [ 3616.925016][ T9563] inactive_anon 0 [ 3616.925016][ T9563] active_anon 229638144 [ 3616.925016][ T9563] inactive_file 0 [ 3616.925016][ T9563] active_file 40960 [ 3616.925016][ T9563] unevictable 0 [ 3616.925016][ T9563] slab_reclaimable 2297856 [ 3616.925016][ T9563] slab_unreclaimable 11964416 [ 3616.925016][ T9563] pgfault 489819 [ 3616.925016][ T9563] pgmajfault 0 [ 3616.925016][ T9563] workingset_refault 1122 [ 3616.925016][ T9563] workingset_activate 792 [ 3616.925016][ T9563] workingset_nodereclaim 0 [ 3616.925016][ T9563] pgrefill 11049 [ 3616.925016][ T9563] pgscan 11262 [ 3616.925016][ T9563] pgsteal 1975 05:50:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r4, r5/1000+30000}, {0x0, 0x7530}}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:39 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000040)) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) getsockname$ax25(r2, &(0x7f0000000180)={{0x3, @null}, [@bcast, @rose, @bcast, @default, @remote, @remote, @null, @rose]}, &(0x7f0000000100)=0x48) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r3 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x5, 0x0, 0x2}) 05:50:39 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3617.132847][ T9606] set_target_v1_checkentry: 2 callbacks suppressed [ 3617.132874][ T9606] Cannot find add_set index 0 as target [ 3617.165591][ T9563] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=11929,uid=0 [ 3617.199767][ T9563] Memory cgroup out of memory: Killed process 11929 (syz-executor.2) total-vm:74836kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 3617.300226][ T1077] oom_reaper: reaped process 11929 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 05:50:39 executing program 3: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x22}) fcntl$getown(r0, 0x9) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:39 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3617.341816][ T9628] xt_socket: unknown flags 0x8 [ 3617.358183][ T9637] Cannot find add_set index 0 as target 05:50:39 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3617.424043][ T9634] xt_socket: unknown flags 0x8 05:50:39 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:39 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0x0}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x294300, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000001c0)={r8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r8, 0x7f}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e24, @broadcast}}}, 0x84) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYRES32=r11], 0x1) 05:50:39 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:39 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x401}) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3617.710668][ T9657] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3617.724558][ T9679] Cannot find add_set index 0 as target [ 3617.732390][ T9657] CPU: 1 PID: 9657 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3617.740999][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3617.751165][ T9657] Call Trace: [ 3617.754470][ T9657] dump_stack+0x11d/0x181 [ 3617.758813][ T9657] dump_header+0xaa/0x39c [ 3617.763190][ T9657] oom_kill_process.cold+0x10/0x15 [ 3617.768385][ T9657] out_of_memory+0x231/0xa60 [ 3617.772995][ T9657] mem_cgroup_out_of_memory+0x128/0x150 [ 3617.778569][ T9657] try_charge+0xb6c/0xbf0 [ 3617.782923][ T9657] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3617.788513][ T9657] __memcg_kmem_charge+0xcf/0x1b0 [ 3617.793587][ T9657] copy_process+0x12bc/0x3b40 [ 3617.798270][ T9657] ? record_times+0x16/0x90 [ 3617.802885][ T9657] ? psi_task_change+0x1ad/0x2d0 [ 3617.808081][ T9657] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3617.814478][ T9657] _do_fork+0xfe/0x7a0 [ 3617.818536][ T9657] ? cgroup_file_notify+0xff/0x130 [ 3617.823778][ T9657] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3617.829864][ T9657] __x64_sys_clone+0x130/0x170 [ 3617.834755][ T9657] do_syscall_64+0xcc/0x3a0 [ 3617.839283][ T9657] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3617.845175][ T9657] RIP: 0033:0x45f099 [ 3617.849066][ T9657] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3617.868893][ T9657] RSP: 002b:00007fff58163ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3617.877301][ T9657] RAX: ffffffffffffffda RBX: 00007f9ecc737700 RCX: 000000000045f099 [ 3617.885441][ T9657] RDX: 00007f9ecc7379d0 RSI: 00007f9ecc736db0 RDI: 00000000003d0f00 [ 3617.893468][ T9657] RBP: 00007fff581640f0 R08: 00007f9ecc737700 R09: 00007f9ecc737700 [ 3617.901510][ T9657] R10: 00007f9ecc7379d0 R11: 0000000000000202 R12: 0000000000000000 05:50:39 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3617.909499][ T9657] R13: 00007fff58163f8f R14: 00007f9ecc7379c0 R15: 000000000076bf2c 05:50:39 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3618.005425][ T9657] memory: usage 307200kB, limit 307200kB, failcnt 246303 [ 3618.023413][ T9657] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3618.042695][ T9657] Memory cgroup stats for /syz1: [ 3618.042839][ T9657] anon 131067904 [ 3618.042839][ T9657] file 98304 [ 3618.042839][ T9657] kernel_stack 17399808 [ 3618.042839][ T9657] slab 28909568 [ 3618.042839][ T9657] sock 4096 [ 3618.042839][ T9657] shmem 0 [ 3618.042839][ T9657] file_mapped 0 [ 3618.042839][ T9657] file_dirty 0 [ 3618.042839][ T9657] file_writeback 135168 [ 3618.042839][ T9657] anon_thp 0 [ 3618.042839][ T9657] inactive_anon 135168 [ 3618.042839][ T9657] active_anon 131026944 [ 3618.042839][ T9657] inactive_file 0 [ 3618.042839][ T9657] active_file 0 [ 3618.042839][ T9657] unevictable 0 [ 3618.042839][ T9657] slab_reclaimable 3379200 05:50:40 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x2}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3618.042839][ T9657] slab_unreclaimable 25530368 [ 3618.042839][ T9657] pgfault 473748 [ 3618.042839][ T9657] pgmajfault 0 [ 3618.042839][ T9657] workingset_refault 1617 [ 3618.042839][ T9657] workingset_activate 1188 [ 3618.042839][ T9657] workingset_nodereclaim 0 [ 3618.042839][ T9657] pgrefill 17287 [ 3618.042839][ T9657] pgscan 17737 [ 3618.042839][ T9657] pgsteal 2406 [ 3618.093119][ T9702] Cannot find add_set index 0 as target 05:50:40 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3618.203935][ T9657] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9634,uid=0 05:50:40 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0x9f0000, 0x1, 0x100, r2, 0x0, &(0x7f00000000c0)={0x9b0901, 0x13, [], @p_u32=&(0x7f0000000080)=0x2}}) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0x6c00000}) dup3(r1, r0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2e0, r6, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24e4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x333}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xec}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa39}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200)={0x80000000025, 0x8001, 0x8, 0x3}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = dup(r9) setsockopt$packet_int(r10, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r11 = socket$inet6(0xa, 0x2, 0x1f) sendmsg$inet(r11, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e21}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="0cee35a625237a1d7563e378aea4070872d852565e0d4a4e05603e8ba0f7ac4ee93feb4dc752af54d9fd526ab07cb59103393d8f9c36e254fb1cca021a647926357723d43e1ccabc8c1f642b08a4139f8b69006915559ffcac5326b177eccebe9b3802cee69608c6c675f13777ed93b4d8b774a8c05fbad8632a66d12916fa3002932c6df8792806fbe05def746516dac6", 0x91}, {&(0x7f0000000300)="6db4a5b66b9ae2305a2d15cc4425b2511f43b2f911e6437d2b5d90f1e6f8dd7a2d038746e3c25c7b514ae7a4dbe472ce801f12066e47744749339b3edac114043d98e68389cf6047dfb71cfb4fd2a45e75e2b8fb9729fca6001dda4829f8cde06a02d815ec3f09696947ab276b2eb873292bbf848510e86de971187228021ce928b2dad0916a", 0x86}], 0x2, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @generic={0x88, 0xe, "5e8c915c4750a2bad689e95f"}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @rr={0x7, 0x1b, 0x3c, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @loopback]}, @lsrr={0x83, 0xf, 0xed, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x5]}, @ssrr={0x89, 0x7, 0x8b, [@empty]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0x3, 'k'}, {0x7, 0x7, "e7d0f92674"}, {0x5, 0x4, 'Bq'}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x74ce577d}}], 0xd0}, 0x24044000) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r10, 0x111, 0x4, 0x1, 0x4) 05:50:40 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:40 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:40 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x3}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:40 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3618.491824][ T9657] Memory cgroup out of memory: Killed process 9634 (syz-executor.1) total-vm:75100kB, anon-rss:192kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3618.526164][ T9747] Cannot find add_set index 0 as target [ 3618.587010][ T1077] oom_reaper: reaped process 9634 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 05:50:40 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x80, 0x80800) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = accept$netrom(r2, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @null, @bcast, @netrom, @default, @null]}, &(0x7f0000000080)=0x48) connect(r3, &(0x7f00000000c0)=@x25={0x9, @null=' \x00'}, 0x80) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:40 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:40 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0f0000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0500252e895f0000"], 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r12, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x4}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x64}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @local}, &(0x7f00000000c0)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r5, 0x504, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 05:50:40 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:40 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x4}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3618.853147][ T9778] Cannot find add_set index 0 as target [ 3618.920016][ T9797] Cannot find add_set index 0 as target 05:50:41 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:41 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:41 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7, @remote, 0xe9}, @in6={0xa, 0x4e22, 0x8, @empty, 0x40}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0xfffffff7, @mcast1, 0x7fffffff}, @in6={0xa, 0x4e21, 0x18d, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x90) r3 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x80000000022}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) [ 3619.136003][ T9825] xt_socket: unknown flags 0x8 05:50:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3040800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x298, 0x100, 0x100, 0x0, 0x0, 0x100, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x0, 0x6a, 0x5, 'syz1\x00', 'syz1\x00', {0x80}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f8) 05:50:41 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:41 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:41 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3619.297217][ T9843] Cannot find add_set index 0 as target 05:50:41 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(0x0, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x294300, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000001c0)={r8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYBLOB="4a00f7633e0a247507a122cbfa7efd86df1cbd9b5f3e62bde4587eff0f88460a16f9c61d41526fa18a990c127ddeb1b08890825f8d63c2634c7f29987500ea881a0d78ed85090e265e1e"], &(0x7f0000000100)=0x52) write$P9_RGETATTR(r1, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x38, {0x10, 0x3, 0x2}, 0x1f8, r2, 0xee00, 0x1, 0x3, 0xffffffff, 0x1, 0x9, 0x4, 0x6, 0x8, 0x67c, 0x1, 0x3, 0x4000000, 0x7048, 0x5, 0x105}}, 0xa0) r9 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000000)={0x22}) r10 = dup3(r9, r0, 0x0) ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000000)={0x80000000022, 0x2000000000007, 0x0, 0x9}) [ 3619.537534][ T9837] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3619.583681][ T9837] CPU: 1 PID: 9837 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3619.592310][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3619.602369][ T9837] Call Trace: [ 3619.605670][ T9837] dump_stack+0x11d/0x181 [ 3619.610092][ T9837] dump_header+0xaa/0x39c [ 3619.614434][ T9837] oom_kill_process.cold+0x10/0x15 [ 3619.619604][ T9837] out_of_memory+0x231/0xa60 [ 3619.624307][ T9837] mem_cgroup_out_of_memory+0x128/0x150 [ 3619.629889][ T9837] try_charge+0xb6c/0xbf0 [ 3619.634245][ T9837] mem_cgroup_try_charge+0xd2/0x260 [ 3619.639462][ T9837] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3619.645139][ T9837] wp_page_copy+0x322/0xf20 [ 3619.649654][ T9837] ? sched_clock+0x13/0x20 [ 3619.654072][ T9837] ? sched_clock_cpu+0x15/0xe0 [ 3619.658835][ T9837] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3619.664588][ T9837] do_wp_page+0x192/0xd20 [ 3619.669022][ T9837] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3619.675010][ T9837] __handle_mm_fault+0x1d16/0x2e00 [ 3619.680327][ T9837] handle_mm_fault+0x21b/0x530 [ 3619.685079][ T9837] do_page_fault+0x496/0xa3d [ 3619.689671][ T9837] page_fault+0x34/0x40 [ 3619.693843][ T9837] RIP: 0033:0x411718 [ 3619.697783][ T9837] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0b 20 4c 00 31 c0 e8 93 07 ff ff 31 ff e8 dc 03 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 2e 0f 87 00 [ 3619.717456][ T9837] RSP: 002b:00007fff58163f40 EFLAGS: 00010246 [ 3619.723509][ T9837] RAX: 00000000cfc57591 RBX: 0000000004110f6e RCX: 0000001b31620000 05:50:41 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3619.731475][ T9837] RDX: 0000000000000000 RSI: 0000000000001591 RDI: ffffffffcfc57591 [ 3619.739450][ T9837] RBP: 0000000000000004 R08: 00000000cfc57591 R09: 00000000cfc57595 [ 3619.747430][ T9837] R10: 00007fff581640e0 R11: 0000000000000246 R12: 000000000076bfa8 [ 3619.755405][ T9837] R13: 0000000080000000 R14: 00007f9ece738008 R15: 0000000000000004 [ 3619.839120][ T9882] Cannot find add_set index 0 as target [ 3619.848538][ T9837] memory: usage 307200kB, limit 307200kB, failcnt 246349 [ 3619.866019][ T9837] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3619.875002][ T9837] Memory cgroup stats for /syz1: [ 3619.875177][ T9837] anon 131063808 [ 3619.875177][ T9837] file 98304 [ 3619.875177][ T9837] kernel_stack 17399808 [ 3619.875177][ T9837] slab 28909568 [ 3619.875177][ T9837] sock 4096 [ 3619.875177][ T9837] shmem 0 [ 3619.875177][ T9837] file_mapped 0 [ 3619.875177][ T9837] file_dirty 0 [ 3619.875177][ T9837] file_writeback 0 [ 3619.875177][ T9837] anon_thp 0 [ 3619.875177][ T9837] inactive_anon 135168 [ 3619.875177][ T9837] active_anon 131026944 [ 3619.875177][ T9837] inactive_file 0 [ 3619.875177][ T9837] active_file 0 [ 3619.875177][ T9837] unevictable 0 [ 3619.875177][ T9837] slab_reclaimable 3379200 [ 3619.875177][ T9837] slab_unreclaimable 25530368 05:50:41 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) syz_open_dev$cec(0x0, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:41 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:41 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x6}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3619.875177][ T9837] pgfault 473946 [ 3619.875177][ T9837] pgmajfault 0 [ 3619.875177][ T9837] workingset_refault 1617 [ 3619.875177][ T9837] workingset_activate 1188 [ 3619.875177][ T9837] workingset_nodereclaim 0 [ 3619.875177][ T9837] pgrefill 17287 [ 3619.875177][ T9837] pgscan 17770 [ 3619.875177][ T9837] pgsteal 2406 [ 3619.973806][ T9892] Cannot find add_set index 0 as target 05:50:41 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:42 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3620.096729][ T9837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=9826,uid=0 [ 3620.112300][ T9837] Memory cgroup out of memory: Killed process 9826 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3620.161180][ T9859] xt_CT: You must specify a L4 protocol and not use inversions on it 05:50:42 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) write$sndseq(r2, &(0x7f00000000c0)=[{0xda, 0xde, 0x20, 0x0, @tick=0x2, {0xf2, 0x8}, {0x83, 0x8}, @quote={{0x4, 0xb4}, 0x5, &(0x7f0000000080)={0x6, 0x81, 0x5, 0x1, @time={0xff, 0xaf}, {0x6, 0x80}, {0x9, 0x1}, @quote={{0xa8}, 0x6, &(0x7f0000000040)={0xac, 0x7, 0x3, 0x0, @time={0x94b, 0x4}, {0x4, 0xff}, {0x6, 0x10}, @connect={{0x8e, 0x4}, {0x39, 0x1}}}}}}}, {0x3, 0x20, 0x78, 0x1, @tick=0x200, {0x40, 0x7}, {0x5, 0x4}, @raw8={"5f56a50936f943c6c1edd555"}}, {0x6, 0x1, 0x7f, 0x7f, @tick=0xab84, {0x40, 0x2b}, {0x5, 0x2}, @connect={{0x7f, 0x5}, {0x0, 0xff}}}, {0x1, 0x0, 0x2, 0x0, @time={0x8, 0x3}, {0xc7, 0xa6}, {0x0, 0x6a}, @raw32={[0x4e, 0x4, 0x800]}}], 0x70) 05:50:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) r4 = accept4$bt_l2cap(r3, 0x0, &(0x7f0000000000), 0x400) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 05:50:42 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x8}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:42 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:42 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:42 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0x80000000022, 0x0, 0x10}) 05:50:42 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3620.544270][ T9951] xt_socket: unknown flags 0x8 [ 3620.645909][ T9966] xt_socket: unknown flags 0x8 05:50:42 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:42 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) dup3(r1, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022, 0x40000, 0x7a}) 05:50:42 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x4]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000002c0)={0x0, @bt={0x9, 0x81, 0x0, 0x0, 0x6, 0x20, 0xff, 0x3, 0xd4be, 0xb81d, 0x9, 0x81, 0x3f, 0xfffffffd, 0x18, 0x2, {0x800, 0x2}, 0x5, 0x9}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/812], 0x2b0) 05:50:42 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x23, 0x0, 0xffffffff, 0xffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:42 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:42 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:43 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000600)=ANY=[@ANYRES64], 0x1) 05:50:43 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:43 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) recvfrom$rxrpc(r5, &(0x7f0000000180)=""/172, 0xac, 0x2, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}}, 0x24) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) 05:50:43 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:43 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:43 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:43 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:43 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:43 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r4 = dup(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x1, 0x3f, 0x7, 0x7, 0x5, 0xff, 0x1f, 0x2, 0x4, 0x53, 0x7, 0x8, 0x8}, 0xe) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40000, 0x0) ioctl$VIDIOC_G_EDID(r6, 0xc0285628, &(0x7f0000000100)={0x0, 0x8, 0x9, [], &(0x7f00000000c0)=0x3}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b00000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/688], 0x2b0) 05:50:43 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:43 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:43 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0xab, @rand_addr=0xbdd0, 0x4e23, 0x1, 'rr\x00', 0x11, 0x5, 0x41}, 0x2c) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') r6 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000240)={0x1f, 0x52}) r7 = dup(r6) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) recvfrom$llc(r7, &(0x7f0000000180)=""/156, 0x9c, 0x20000, 0x0, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4005}, 0x10) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x294300, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r11}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f00000001c0)={r11}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000005c0)={r11, @in6={{0xa, 0x4e24, 0x5, @ipv4={[], [], @loopback}, 0x800}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000002c0)={r12, 0x6}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x288) 05:50:44 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0x21, 0x40000000}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:50:44 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3622.194530][T10168] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3622.240552][T10168] CPU: 1 PID: 10168 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3622.249256][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3622.259309][T10168] Call Trace: [ 3622.262613][T10168] dump_stack+0x11d/0x181 [ 3622.266991][T10168] dump_header+0xaa/0x39c [ 3622.271435][T10168] oom_kill_process.cold+0x10/0x15 [ 3622.276641][T10168] out_of_memory+0x231/0xa60 [ 3622.281271][T10168] mem_cgroup_out_of_memory+0x128/0x150 [ 3622.286858][T10168] try_charge+0xb6c/0xbf0 [ 3622.291212][T10168] mem_cgroup_try_charge+0xd2/0x260 [ 3622.296434][T10168] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3622.302085][T10168] __handle_mm_fault+0x197f/0x2e00 [ 3622.307299][T10168] handle_mm_fault+0x21b/0x530 [ 3622.312078][T10168] do_page_fault+0x496/0xa3d [ 3622.316727][T10168] page_fault+0x34/0x40 [ 3622.320884][T10168] RIP: 0033:0x40f87c [ 3622.324840][T10168] Code: 8c 02 50 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 76 00 e8 14 3a ff ff <83> 05 81 07 76 00 01 80 7c 24 59 00 74 0b f6 44 24 08 01 0f 84 98 [ 3622.344444][T10168] RSP: 002b:00007fff58164010 EFLAGS: 00010217 [ 3622.350567][T10168] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045c6c9 [ 3622.358603][T10168] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf28 [ 3622.363458][T10201] set_target_v1_checkentry: 10 callbacks suppressed [ 3622.363466][T10201] Cannot find add_set index 0 as target [ 3622.366678][T10168] RBP: 000000000076bf2c R08: 00007f9ecc737700 R09: ffffffffffffffff 05:50:44 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:44 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3622.366690][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf20 [ 3622.366709][T10168] R13: 0000000000000003 R14: 0000000000000000 R15: 000000000076bf2c [ 3622.429200][T10168] memory: usage 307200kB, limit 307200kB, failcnt 246382 [ 3622.444983][T10168] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3622.490324][T10168] Memory cgroup stats for /syz1: [ 3622.490634][T10168] anon 131022848 [ 3622.490634][T10168] file 98304 [ 3622.490634][T10168] kernel_stack 17399808 [ 3622.490634][T10168] slab 28909568 [ 3622.490634][T10168] sock 4096 [ 3622.490634][T10168] shmem 0 [ 3622.490634][T10168] file_mapped 0 [ 3622.490634][T10168] file_dirty 0 [ 3622.490634][T10168] file_writeback 0 [ 3622.490634][T10168] anon_thp 0 [ 3622.490634][T10168] inactive_anon 135168 [ 3622.490634][T10168] active_anon 131026944 [ 3622.490634][T10168] inactive_file 0 [ 3622.490634][T10168] active_file 0 [ 3622.490634][T10168] unevictable 0 [ 3622.490634][T10168] slab_reclaimable 3379200 [ 3622.490634][T10168] slab_unreclaimable 25530368 [ 3622.490634][T10168] pgfault 474276 [ 3622.490634][T10168] pgmajfault 0 [ 3622.490634][T10168] workingset_refault 1650 [ 3622.490634][T10168] workingset_activate 1188 [ 3622.490634][T10168] workingset_nodereclaim 0 [ 3622.490634][T10168] pgrefill 17320 [ 3622.490634][T10168] pgscan 17803 [ 3622.490634][T10168] pgsteal 2406 05:50:44 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:44 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3622.606793][T10168] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10142,uid=0 [ 3622.637782][T10168] Memory cgroup out of memory: Killed process 10142 (syz-executor.1) total-vm:74968kB, anon-rss:184kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:50:44 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:44 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3622.717160][T10229] Cannot find add_set index 0 as target 05:50:44 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x6]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:44 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:45 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3623.068580][T10268] Cannot find add_set index 0 as target 05:50:45 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @descriptor="ae24cffe3f166ac5"}}) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000030000003002000000000000e00000000000000000000000e00000009801000098010000980100009801000098010000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e00000000000000000000000000000000000000000002800736f636b65740000000000000000000000000000000000000000000000030800000001000000480043542000000000000000000000000000000000000000000000000000000000000000ff7f00002000000070707470000000000000000000000000000000005a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000327ccfa0cdcafbea6e3c4238e236ca981601bfcbaa5db930e1091db9c996731eb2ade7260032509c83d47c96181f46755ece440e858bebc3b7f4481a7a63770923a280fcba98d804d697bfad156af5dd7cee45e6a146c5d12685480e98fce42d35843b722f5ebd95c26e882638b6b9cfd2"], 0x290) 05:50:45 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:45 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3623.422581][T10306] Cannot find add_set index 0 as target 05:50:45 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:45 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:45 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x18101000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) [ 3623.712430][T10325] Cannot find add_set index 0 as target [ 3623.796511][T10331] xt_socket: unknown flags 0x8 05:50:45 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:45 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3623.827889][T10342] xt_socket: unknown flags 0x8 [ 3623.888284][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3623.944390][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3623.953209][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3623.963259][ T8006] Call Trace: [ 3623.966551][ T8006] dump_stack+0x11d/0x181 [ 3623.970890][ T8006] dump_header+0xaa/0x39c [ 3623.975244][ T8006] oom_kill_process.cold+0x10/0x15 [ 3623.980410][ T8006] out_of_memory+0x231/0xa60 [ 3623.985085][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3623.990776][ T8006] try_charge+0xb6c/0xbf0 [ 3623.995132][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3624.000604][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3624.005636][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3624.011024][ T8006] alloc_pages_current+0xd1/0x170 [ 3624.016140][ T8006] get_zeroed_page+0x14/0x50 [ 3624.020735][ T8006] __pud_alloc+0x48/0x250 [ 3624.025083][ T8006] ? __anon_vma_interval_tree_augment_rotate+0xfd/0x110 [ 3624.032039][ T8006] pud_alloc+0xc3/0x100 [ 3624.036284][ T8006] copy_page_range+0x270/0x1a00 [ 3624.041199][ T8006] ? __rcu_read_unlock+0x77/0x3a0 [ 3624.046253][ T8006] ? __write_once_size.constprop.0+0x20/0x20 [ 3624.052350][ T8006] ? __rb_rotate_set_parents+0x9a/0xf0 [ 3624.057882][ T8006] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3624.063616][ T8006] ? vma_gap_callbacks_rotate+0x126/0x190 [ 3624.069339][ T8006] ? vm_get_page_prot+0x90/0x90 [ 3624.074213][ T8006] dup_mm+0x74a/0xba0 [ 3624.078234][ T8006] copy_process+0x39d7/0x3b40 [ 3624.082978][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3624.087776][ T8006] _do_fork+0xfe/0x7a0 [ 3624.091906][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3624.098153][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3624.103019][ T8006] __x64_sys_clone+0x130/0x170 [ 3624.107814][ T8006] do_syscall_64+0xcc/0x3a0 [ 3624.112382][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3624.118278][ T8006] RIP: 0033:0x45ac9a [ 3624.122185][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3624.141790][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3624.150214][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3624.158266][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3624.166298][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3624.174302][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3624.182367][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 05:50:46 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:46 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:46 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:46 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:46 executing program 1: ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f00000005c0)=""/4096) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2300b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@nl, &(0x7f0000000100)=0x80, 0x80000) r5 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) setsockopt$packet_int(r9, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r10 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, &(0x7f00000015c0)=0x12, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r12 = socket$packet(0x11, 0x3, 0x300) r13 = dup(r12) setsockopt$packet_int(r13, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r14 = timerfd_create(0x8, 0x0) r15 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001600)='/dev/ttynull\x00', 0x410680, 0x0) r16 = socket$packet(0x11, 0x3, 0x300) r17 = dup(r16) setsockopt$packet_int(r17, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r18 = syz_open_dev$dri(&(0x7f0000001640)='/dev/dri/card#\x00', 0x4, 0x4000) r19 = socket$can_bcm(0x1d, 0x2, 0x2) r20 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000001680), 0x800) sendmsg$unix(r4, &(0x7f0000001780)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x96e1}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="9006bb978cf3642c24345e9f7f8377e20e358c7f4f09082e5ad4cbd580", 0x1d}, {&(0x7f0000000200)="82b8aa1fbdc7634be9c54ad9d6acdfe638fb6b066be64c", 0x17}], 0x2, &(0x7f00000016c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x24, 0x1, 0x1, [r1, r6, r7, r9, r0]}}, @rights={{0x2c, 0x1, 0x1, [r10, r11, r13, r14, 0xffffffffffffffff, r15, r17]}}, @rights={{0x20, 0x1, 0x1, [r18, r19, r20, 0xffffffffffffffff]}}], 0x90, 0x4000c}, 0x20080) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000000)={0x4, 0xffff, 0x5, 0x5, 0x7, 0x6}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:46 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3624.580874][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277093 [ 3624.591653][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3624.614257][ T8006] Memory cgroup stats for /syz0: [ 3624.614400][ T8006] anon 172544000 [ 3624.614400][ T8006] file 0 [ 3624.614400][ T8006] kernel_stack 12533760 [ 3624.614400][ T8006] slab 22781952 [ 3624.614400][ T8006] sock 0 [ 3624.614400][ T8006] shmem 0 [ 3624.614400][ T8006] file_mapped 135168 [ 3624.614400][ T8006] file_dirty 0 [ 3624.614400][ T8006] file_writeback 0 [ 3624.614400][ T8006] anon_thp 69206016 [ 3624.614400][ T8006] inactive_anon 0 [ 3624.614400][ T8006] active_anon 172605440 [ 3624.614400][ T8006] inactive_file 0 [ 3624.614400][ T8006] active_file 24576 [ 3624.614400][ T8006] unevictable 0 [ 3624.614400][ T8006] slab_reclaimable 3649536 [ 3624.614400][ T8006] slab_unreclaimable 19132416 [ 3624.614400][ T8006] pgfault 402105 [ 3624.614400][ T8006] pgmajfault 0 [ 3624.614400][ T8006] workingset_refault 825 [ 3624.614400][ T8006] workingset_activate 561 [ 3624.614400][ T8006] workingset_nodereclaim 0 [ 3624.614400][ T8006] pgrefill 7604 [ 3624.614400][ T8006] pgscan 8054 [ 3624.614400][ T8006] pgsteal 1292 [ 3624.900322][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9553,uid=0 [ 3624.919865][ T8006] Memory cgroup out of memory: Killed process 9553 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:50:46 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:46 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:47 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x4]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3625.156062][T10417] Cannot find add_set index 0 as target 05:50:47 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:47 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3625.224346][T10425] Cannot find add_set index 0 as target 05:50:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000040)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="de6e4aa65cb9f809bc5ecfba580641c76848d0467f9faaf1411c13a7a3ea8136"}) [ 3625.321745][T10448] xt_socket: unknown flags 0x8 [ 3625.388250][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3625.411833][ T8006] CPU: 1 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3625.420446][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3625.430502][ T8006] Call Trace: [ 3625.433811][ T8006] dump_stack+0x11d/0x181 05:50:47 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0xff, 0x0, 0x7, 0x3}, {0x20, 0x80, 0x40, 0x4}, {0x9, 0x43, 0x4, 0x1f}, {0x6, 0x2, 0x9, 0xffff}, {0xffff, 0x7, 0xff, 0x817}, {0xfff9, 0x0, 0x0, 0x81}, {0x5, 0x8, 0xce, 0x6}, {0x9, 0x8, 0x80, 0x8}, {0x4, 0x2, 0x0, 0x1}]}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="6b0e499b6df7266a"}}) dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r6 = dup(r2) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000140)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000a06775a14b41f200201b450d242a771f24df25d15ed76bf3abb5f26110767c05c59c1381fce498fa14fa80de2eb9e2ce72b3ef18314ed25e7c3734fa0086db4bdf4c085075128f887ad2a9474c591f599e3f71dd1d12e5786ca881c4e11b9a19836617aed2970e1204d5fb3b6fb8a4a68cfc0fcccc391f1cebde7cf397daa44b0c161375eac5f2a2ead283810a3e8d50b668355f2a1612956bde697aef6edd442b3055b77b765839617f2d6e8f5c7fe8c61365cb6350847c9a017d90bfa9b17c707150ba70c9a4129933980a53b8c899d2f0de8fba32e11edffaa2d0ff1c29e7f5767c124bb8957087c9c3220af5afecfb44feebb2c2997ad5ffb0b1c4c58f652e4bf4026c4221bc38139d5e6185bd6ca613e7dabfd35caefba8feb64abd21bf844fe21476da0763a0"], 0x270) [ 3625.438153][ T8006] dump_header+0xaa/0x39c [ 3625.442501][ T8006] oom_kill_process.cold+0x10/0x15 [ 3625.447622][ T8006] out_of_memory+0x231/0xa60 [ 3625.452431][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3625.458006][ T8006] try_charge+0xb6c/0xbf0 [ 3625.462388][ T8006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3625.468642][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3625.474158][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3625.479192][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3625.484584][ T8006] alloc_pages_current+0xd1/0x170 [ 3625.489789][ T8006] pte_alloc_one+0x18/0x50 [ 3625.494212][ T8006] __pte_alloc+0x2d/0x220 [ 3625.498610][ T8006] copy_page_range+0x13a2/0x1a00 [ 3625.503665][ T8006] ? __vma_link_rb+0x3f4/0x440 [ 3625.508446][ T8006] dup_mm+0x74a/0xba0 [ 3625.512457][ T8006] copy_process+0x39d7/0x3b40 [ 3625.517152][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3625.521948][ T8006] _do_fork+0xfe/0x7a0 [ 3625.526040][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3625.532343][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3625.537278][ T8006] __x64_sys_clone+0x130/0x170 [ 3625.542064][ T8006] do_syscall_64+0xcc/0x3a0 [ 3625.546585][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3625.552486][ T8006] RIP: 0033:0x45ac9a [ 3625.556409][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3625.576016][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3625.584429][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3625.592401][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3625.600372][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3625.608460][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3625.616438][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3625.633995][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277144 [ 3625.643301][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3625.660200][ T8006] Memory cgroup stats for /syz0: [ 3625.660334][ T8006] anon 172515328 [ 3625.660334][ T8006] file 0 [ 3625.660334][ T8006] kernel_stack 12533760 [ 3625.660334][ T8006] slab 22781952 [ 3625.660334][ T8006] sock 0 [ 3625.660334][ T8006] shmem 0 [ 3625.660334][ T8006] file_mapped 135168 [ 3625.660334][ T8006] file_dirty 0 [ 3625.660334][ T8006] file_writeback 0 [ 3625.660334][ T8006] anon_thp 69206016 [ 3625.660334][ T8006] inactive_anon 0 [ 3625.660334][ T8006] active_anon 172576768 [ 3625.660334][ T8006] inactive_file 0 [ 3625.660334][ T8006] active_file 24576 [ 3625.660334][ T8006] unevictable 0 [ 3625.660334][ T8006] slab_reclaimable 3649536 [ 3625.660334][ T8006] slab_unreclaimable 19132416 [ 3625.660334][ T8006] pgfault 402171 [ 3625.660334][ T8006] pgmajfault 0 [ 3625.660334][ T8006] workingset_refault 825 [ 3625.660334][ T8006] workingset_activate 561 [ 3625.660334][ T8006] workingset_nodereclaim 0 [ 3625.660334][ T8006] pgrefill 7604 [ 3625.660334][ T8006] pgscan 8087 [ 3625.660334][ T8006] pgsteal 1292 05:50:47 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3625.783478][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10438,uid=0 [ 3625.799870][ T8006] Memory cgroup out of memory: Killed process 10438 (syz-executor.0) total-vm:74968kB, anon-rss:2232kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3625.888797][T10457] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3625.931748][T10457] CPU: 0 PID: 10457 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3625.940448][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3625.950622][T10457] Call Trace: [ 3625.953926][T10457] dump_stack+0x11d/0x181 [ 3625.958273][T10457] dump_header+0xaa/0x39c [ 3625.962695][T10457] oom_kill_process.cold+0x10/0x15 [ 3625.967819][T10457] out_of_memory+0x231/0xa60 [ 3625.972415][T10457] mem_cgroup_out_of_memory+0x128/0x150 [ 3625.977983][T10457] try_charge+0xb6c/0xbf0 [ 3625.982323][T10457] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3625.987831][T10457] __memcg_kmem_charge+0xcf/0x1b0 [ 3625.992938][T10457] __alloc_pages_nodemask+0x26c/0x310 [ 3625.998312][T10457] alloc_pages_current+0xd1/0x170 [ 3626.003628][T10457] pte_alloc_one+0x18/0x50 [ 3626.008038][T10457] __pte_alloc+0x2d/0x220 [ 3626.012439][T10457] __handle_mm_fault+0x1ffb/0x2e00 [ 3626.019492][T10457] handle_mm_fault+0x21b/0x530 [ 3626.024253][T10457] do_page_fault+0x496/0xa3d [ 3626.028990][T10457] page_fault+0x34/0x40 [ 3626.033190][T10457] RIP: 0033:0x40f87c [ 3626.037093][T10457] Code: 8c 02 50 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 76 00 e8 14 3a ff ff <83> 05 81 07 76 00 01 80 7c 24 59 00 74 0b f6 44 24 08 01 0f 84 98 [ 3626.056716][T10457] RSP: 002b:00007fff58164010 EFLAGS: 00010217 [ 3626.062809][T10457] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045c6c9 [ 3626.070774][T10457] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf28 [ 3626.078739][T10457] RBP: 000000000076bf2c R08: 00007f9ecc737700 R09: ffffffffffffffff [ 3626.086702][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf20 [ 3626.094682][T10457] R13: 0000000000000003 R14: 0000000000000000 R15: 000000000076bf2c [ 3626.172567][T10457] memory: usage 307200kB, limit 307200kB, failcnt 246423 [ 3626.181670][T10457] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3626.199319][T10457] Memory cgroup stats for /syz1: [ 3626.205044][T10457] anon 131022848 [ 3626.205044][T10457] file 98304 [ 3626.205044][T10457] kernel_stack 17399808 [ 3626.205044][T10457] slab 28909568 [ 3626.205044][T10457] sock 4096 [ 3626.205044][T10457] shmem 0 [ 3626.205044][T10457] file_mapped 0 [ 3626.205044][T10457] file_dirty 0 [ 3626.205044][T10457] file_writeback 0 [ 3626.205044][T10457] anon_thp 0 [ 3626.205044][T10457] inactive_anon 135168 [ 3626.205044][T10457] active_anon 130891776 [ 3626.205044][T10457] inactive_file 0 [ 3626.205044][T10457] active_file 0 [ 3626.205044][T10457] unevictable 0 [ 3626.205044][T10457] slab_reclaimable 3379200 [ 3626.205044][T10457] slab_unreclaimable 25530368 [ 3626.205044][T10457] pgfault 474672 [ 3626.205044][T10457] pgmajfault 0 [ 3626.205044][T10457] workingset_refault 1650 [ 3626.205044][T10457] workingset_activate 1188 [ 3626.205044][T10457] workingset_nodereclaim 0 [ 3626.205044][T10457] pgrefill 17353 [ 3626.205044][T10457] pgscan 17836 [ 3626.205044][T10457] pgsteal 2406 [ 3626.316819][T10468] Cannot find add_set index 0 as target [ 3626.352934][T10477] Cannot find add_set index 0 as target 05:50:48 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3626.390166][T10457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10450,uid=0 [ 3626.411140][T10457] Memory cgroup out of memory: Killed process 10450 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:50:48 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:48 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:48 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3626.627130][T10514] Cannot find add_set index 0 as target 05:50:48 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:48 executing program 1: r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000780)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000007c0)=0x10, 0x80800) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000800)=@v2={0x2, @adiantum, 0x8, [], "7f3b06714fa3ff1a7d2c6fb44dcd013c"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x303000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(0x0, r5, 0x0) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x200, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(0x0, r10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x8420, &(0x7f0000000600)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, r9}}, {@fowner_lt={'fowner<', r10}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&wlan1'}}, {@smackfsroot={'smackfsroot', 0x3d, 'GPL&user'}}]}}) 05:50:48 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:48 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:48 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3627.029335][T10546] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3627.084714][T10546] CPU: 1 PID: 10546 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3627.093453][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3627.103505][T10546] Call Trace: [ 3627.106805][T10546] dump_stack+0x11d/0x181 [ 3627.111220][T10546] dump_header+0xaa/0x39c [ 3627.115552][T10546] oom_kill_process.cold+0x10/0x15 [ 3627.120663][T10546] out_of_memory+0x231/0xa60 [ 3627.125270][T10546] mem_cgroup_out_of_memory+0x128/0x150 [ 3627.130895][T10546] try_charge+0xb6c/0xbf0 [ 3627.135310][T10546] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3627.140879][T10546] __memcg_kmem_charge+0xcf/0x1b0 [ 3627.145915][T10546] copy_process+0x12bc/0x3b40 [ 3627.150599][T10546] ? record_times+0x16/0x90 [ 3627.155115][T10546] ? psi_task_change+0x1ad/0x2d0 [ 3627.160069][T10546] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3627.166268][T10546] _do_fork+0xfe/0x7a0 [ 3627.170355][T10546] ? cgroup_file_notify+0xff/0x130 [ 3627.175496][T10546] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3627.181576][T10546] __x64_sys_clone+0x130/0x170 [ 3627.186362][T10546] do_syscall_64+0xcc/0x3a0 [ 3627.190878][T10546] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3627.196766][T10546] RIP: 0033:0x45f099 [ 3627.200739][T10546] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3627.220472][T10546] RSP: 002b:00007fff58163ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 05:50:49 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3627.228888][T10546] RAX: ffffffffffffffda RBX: 00007f9ecc737700 RCX: 000000000045f099 [ 3627.236865][T10546] RDX: 00007f9ecc7379d0 RSI: 00007f9ecc736db0 RDI: 00000000003d0f00 [ 3627.244841][T10546] RBP: 00007fff581640f0 R08: 00007f9ecc737700 R09: 00007f9ecc737700 [ 3627.252816][T10546] R10: 00007f9ecc7379d0 R11: 0000000000000202 R12: 0000000000000000 [ 3627.260837][T10546] R13: 00007fff58163f8f R14: 00007f9ecc7379c0 R15: 000000000076bf2c [ 3627.283454][T10546] memory: usage 307200kB, limit 307200kB, failcnt 246466 [ 3627.314860][T10546] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3627.344875][T10546] Memory cgroup stats for /syz1: [ 3627.345155][T10546] anon 131022848 [ 3627.345155][T10546] file 98304 [ 3627.345155][T10546] kernel_stack 17399808 [ 3627.345155][T10546] slab 28909568 [ 3627.345155][T10546] sock 4096 [ 3627.345155][T10546] shmem 0 [ 3627.345155][T10546] file_mapped 0 [ 3627.345155][T10546] file_dirty 0 [ 3627.345155][T10546] file_writeback 0 [ 3627.345155][T10546] anon_thp 0 [ 3627.345155][T10546] inactive_anon 135168 [ 3627.345155][T10546] active_anon 131026944 [ 3627.345155][T10546] inactive_file 0 [ 3627.345155][T10546] active_file 77824 [ 3627.345155][T10546] unevictable 0 [ 3627.345155][T10546] slab_reclaimable 3379200 [ 3627.345155][T10546] slab_unreclaimable 25530368 [ 3627.345155][T10546] pgfault 474738 05:50:49 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:49 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:49 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3627.345155][T10546] pgmajfault 0 [ 3627.345155][T10546] workingset_refault 1650 [ 3627.345155][T10546] workingset_activate 1188 [ 3627.345155][T10546] workingset_nodereclaim 0 [ 3627.345155][T10546] pgrefill 17386 [ 3627.345155][T10546] pgscan 17869 [ 3627.345155][T10546] pgsteal 2406 [ 3627.466249][T10546] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10529,uid=0 [ 3627.483068][T10546] Memory cgroup out of memory: Killed process 10529 (syz-executor.1) total-vm:74836kB, anon-rss:180kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3627.505382][ T1077] oom_reaper: reaped process 10529 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 3627.538915][T10604] xt_socket: unknown flags 0x8 05:50:49 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3627.636830][T10620] set_target_v1_checkentry: 4 callbacks suppressed [ 3627.636838][T10620] Cannot find add_set index 0 as target 05:50:49 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:49 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3627.763647][T10639] xt_socket: unknown flags 0x8 05:50:49 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_delete(r0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000000)=""/127, 0x7f, 0x4, 0x5, 0x7, 0x10000, 0x8}}, 0x120) timer_getoverrun(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:49 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3627.838452][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3627.891646][ T8006] CPU: 1 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3627.900332][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3627.910388][ T8006] Call Trace: [ 3627.913689][ T8006] dump_stack+0x11d/0x181 [ 3627.918031][ T8006] dump_header+0xaa/0x39c [ 3627.922380][ T8006] oom_kill_process.cold+0x10/0x15 [ 3627.927580][ T8006] out_of_memory+0x231/0xa60 [ 3627.932189][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3627.937762][ T8006] try_charge+0xb6c/0xbf0 [ 3627.942129][ T8006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3627.948380][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3627.953853][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3627.958937][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3627.964323][ T8006] alloc_pages_current+0xd1/0x170 [ 3627.969450][ T8006] pte_alloc_one+0x18/0x50 [ 3627.973879][ T8006] __pte_alloc+0x2d/0x220 [ 3627.978248][ T8006] copy_page_range+0x13a2/0x1a00 [ 3627.983222][ T8006] ? __vma_link_rb+0x3f4/0x440 [ 3627.987997][ T8006] dup_mm+0x74a/0xba0 [ 3627.992016][ T8006] copy_process+0x39d7/0x3b40 [ 3627.996702][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3628.001562][ T8006] _do_fork+0xfe/0x7a0 [ 3628.005648][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3628.011894][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3628.016783][ T8006] __x64_sys_clone+0x130/0x170 [ 3628.021651][ T8006] do_syscall_64+0xcc/0x3a0 [ 3628.026173][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3628.032066][ T8006] RIP: 0033:0x45ac9a [ 3628.035969][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3628.055577][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3628.063998][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3628.071975][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3628.079952][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3628.087929][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3628.095904][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 05:50:50 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3628.146634][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277295 [ 3628.171904][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3628.183633][ T8006] Memory cgroup stats for /syz0: [ 3628.183805][ T8006] anon 172752896 [ 3628.183805][ T8006] file 0 [ 3628.183805][ T8006] kernel_stack 12533760 [ 3628.183805][ T8006] slab 22781952 [ 3628.183805][ T8006] sock 0 [ 3628.183805][ T8006] shmem 0 [ 3628.183805][ T8006] file_mapped 135168 [ 3628.183805][ T8006] file_dirty 0 [ 3628.183805][ T8006] file_writeback 0 [ 3628.183805][ T8006] anon_thp 69206016 [ 3628.183805][ T8006] inactive_anon 0 [ 3628.183805][ T8006] active_anon 172658688 [ 3628.183805][ T8006] inactive_file 0 [ 3628.183805][ T8006] active_file 24576 [ 3628.183805][ T8006] unevictable 0 [ 3628.183805][ T8006] slab_reclaimable 3649536 [ 3628.183805][ T8006] slab_unreclaimable 19132416 [ 3628.183805][ T8006] pgfault 402567 [ 3628.183805][ T8006] pgmajfault 0 [ 3628.183805][ T8006] workingset_refault 825 [ 3628.183805][ T8006] workingset_activate 561 [ 3628.183805][ T8006] workingset_nodereclaim 0 [ 3628.183805][ T8006] pgrefill 7604 [ 3628.183805][ T8006] pgscan 8087 [ 3628.183805][ T8006] pgsteal 1325 [ 3628.279913][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10622,uid=0 [ 3628.296740][ T8006] Memory cgroup out of memory: Killed process 10622 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:50:50 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:50 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3628.404255][T10651] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3628.476088][T10651] CPU: 0 PID: 10651 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3628.484794][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3628.494846][T10651] Call Trace: [ 3628.498160][T10651] dump_stack+0x11d/0x181 [ 3628.502501][T10651] dump_header+0xaa/0x39c [ 3628.506884][T10651] oom_kill_process.cold+0x10/0x15 [ 3628.510946][T10685] Cannot find add_set index 0 as target [ 3628.512057][T10651] out_of_memory+0x231/0xa60 [ 3628.512093][T10651] mem_cgroup_out_of_memory+0x128/0x150 [ 3628.527785][T10651] try_charge+0xb6c/0xbf0 [ 3628.532147][T10651] mem_cgroup_try_charge+0xd2/0x260 [ 3628.537360][T10651] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3628.543006][T10651] __handle_mm_fault+0x197f/0x2e00 [ 3628.548147][T10651] handle_mm_fault+0x21b/0x530 [ 3628.552926][T10651] do_page_fault+0x496/0xa3d [ 3628.557519][T10651] page_fault+0x34/0x40 [ 3628.561665][T10651] RIP: 0033:0x45f07d [ 3628.565611][T10651] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8c fb ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 3628.585207][T10651] RSP: 002b:00007fff58163ed8 EFLAGS: 00010202 [ 3628.591319][T10651] RAX: ffffffffffffffea RBX: 00007f9ecc737700 RCX: 00007f9ecc737700 [ 3628.599281][T10651] RDX: 00000000003d0f00 RSI: 00007f9ecc736db0 RDI: 00000000004132b0 [ 3628.607243][T10651] RBP: 00007fff581640f0 R08: 00007f9ecc7379d0 R09: 00007f9ecc737700 [ 3628.615205][T10651] R10: 00007f9ecc736dc0 R11: 0000000000000246 R12: 0000000000000000 05:50:50 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3628.623164][T10651] R13: 00007fff58163f8f R14: 00007f9ecc7379c0 R15: 000000000076bf2c 05:50:50 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3628.791930][T10651] memory: usage 307196kB, limit 307200kB, failcnt 246526 [ 3628.803749][T10651] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3628.811620][T10651] Memory cgroup stats for /syz1: [ 3628.811805][T10651] anon 131022848 [ 3628.811805][T10651] file 98304 [ 3628.811805][T10651] kernel_stack 17399808 [ 3628.811805][T10651] slab 28909568 [ 3628.811805][T10651] sock 4096 [ 3628.811805][T10651] shmem 0 [ 3628.811805][T10651] file_mapped 0 [ 3628.811805][T10651] file_dirty 0 [ 3628.811805][T10651] file_writeback 0 [ 3628.811805][T10651] anon_thp 0 [ 3628.811805][T10651] inactive_anon 135168 [ 3628.811805][T10651] active_anon 131026944 [ 3628.811805][T10651] inactive_file 0 [ 3628.811805][T10651] active_file 77824 [ 3628.811805][T10651] unevictable 0 [ 3628.811805][T10651] slab_reclaimable 3379200 [ 3628.811805][T10651] slab_unreclaimable 25530368 [ 3628.811805][T10651] pgfault 474837 [ 3628.811805][T10651] pgmajfault 0 [ 3628.811805][T10651] workingset_refault 1650 [ 3628.811805][T10651] workingset_activate 1188 [ 3628.811805][T10651] workingset_nodereclaim 0 [ 3628.811805][T10651] pgrefill 17419 [ 3628.811805][T10651] pgscan 17902 [ 3628.811805][T10651] pgsteal 2406 05:50:50 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:51 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3629.090214][T10651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10640,uid=0 05:50:51 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3629.156107][T10651] Memory cgroup out of memory: Killed process 10640 (syz-executor.1) total-vm:74836kB, anon-rss:180kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:50:51 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:51 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3629.374446][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3629.413321][T10743] xt_socket: unknown flags 0x8 [ 3629.431763][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3629.440388][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3629.450442][ T8006] Call Trace: [ 3629.453772][ T8006] dump_stack+0x11d/0x181 [ 3629.458140][ T8006] dump_header+0xaa/0x39c [ 3629.462514][ T8006] oom_kill_process.cold+0x10/0x15 [ 3629.467641][ T8006] out_of_memory+0x231/0xa60 [ 3629.472242][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3629.477806][ T8006] try_charge+0xb6c/0xbf0 [ 3629.482186][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3629.487662][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3629.492697][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3629.498098][ T8006] alloc_pages_current+0xd1/0x170 [ 3629.503157][ T8006] pte_alloc_one+0x18/0x50 [ 3629.507583][ T8006] __pte_alloc+0x2d/0x220 [ 3629.511999][ T8006] copy_page_range+0x13a2/0x1a00 [ 3629.516987][ T8006] ? delay_tsc+0x8f/0xc0 [ 3629.521296][ T8006] ? __vma_link_rb+0x3f4/0x440 [ 3629.526076][ T8006] dup_mm+0x74a/0xba0 [ 3629.530097][ T8006] copy_process+0x39d7/0x3b40 [ 3629.534839][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3629.539635][ T8006] _do_fork+0xfe/0x7a0 [ 3629.543730][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3629.549979][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3629.554869][ T8006] __x64_sys_clone+0x130/0x170 [ 3629.559662][ T8006] do_syscall_64+0xcc/0x3a0 [ 3629.564207][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3629.570124][ T8006] RIP: 0033:0x45ac9a [ 3629.574027][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3629.593654][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3629.602070][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3629.610039][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3629.618003][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3629.625971][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3629.633940][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3629.651326][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277332 [ 3629.661402][T10755] xt_socket: unknown flags 0x8 [ 3629.662956][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3629.683238][ T8006] Memory cgroup stats for /syz0: [ 3629.683435][ T8006] anon 172740608 [ 3629.683435][ T8006] file 0 [ 3629.683435][ T8006] kernel_stack 12533760 [ 3629.683435][ T8006] slab 22781952 [ 3629.683435][ T8006] sock 0 [ 3629.683435][ T8006] shmem 0 [ 3629.683435][ T8006] file_mapped 135168 [ 3629.683435][ T8006] file_dirty 0 [ 3629.683435][ T8006] file_writeback 0 [ 3629.683435][ T8006] anon_thp 69206016 [ 3629.683435][ T8006] inactive_anon 0 [ 3629.683435][ T8006] active_anon 172646400 [ 3629.683435][ T8006] inactive_file 0 [ 3629.683435][ T8006] active_file 24576 [ 3629.683435][ T8006] unevictable 0 [ 3629.683435][ T8006] slab_reclaimable 3649536 [ 3629.683435][ T8006] slab_unreclaimable 19132416 [ 3629.683435][ T8006] pgfault 402666 [ 3629.683435][ T8006] pgmajfault 0 [ 3629.683435][ T8006] workingset_refault 825 [ 3629.683435][ T8006] workingset_activate 561 [ 3629.683435][ T8006] workingset_nodereclaim 0 [ 3629.683435][ T8006] pgrefill 7604 [ 3629.683435][ T8006] pgscan 8087 [ 3629.683435][ T8006] pgsteal 1325 05:50:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac141400000000000000000000000000000072000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/688], 0x2b0) 05:50:51 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x6]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3629.785902][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10690,uid=0 05:50:51 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3629.867311][ T8006] Memory cgroup out of memory: Killed process 10690 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:50:51 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:52 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3630.186464][T10792] Cannot find add_set index 0 as target 05:50:52 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3630.301073][T10811] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3630.340278][T10792] Cannot find add_set index 0 as target [ 3630.342781][T10811] CPU: 1 PID: 10811 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3630.354912][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3630.365035][T10811] Call Trace: [ 3630.368341][T10811] dump_stack+0x11d/0x181 [ 3630.372685][T10811] dump_header+0xaa/0x39c [ 3630.377100][T10811] oom_kill_process.cold+0x10/0x15 [ 3630.382237][T10811] out_of_memory+0x231/0xa60 [ 3630.386871][T10811] mem_cgroup_out_of_memory+0x128/0x150 [ 3630.392439][T10811] try_charge+0xb6c/0xbf0 [ 3630.396796][T10811] ? __rcu_read_unlock+0x77/0x3a0 [ 3630.401838][T10811] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3630.407319][T10811] __memcg_kmem_charge+0xcf/0x1b0 [ 3630.412365][T10811] copy_process+0x12bc/0x3b40 [ 3630.417074][T10811] _do_fork+0xfe/0x7a0 [ 3630.421155][T10811] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3630.427409][T10811] ? ktime_get_ts64+0x286/0x2c0 [ 3630.432365][T10811] __x64_sys_clone+0x130/0x170 [ 3630.437164][T10811] do_syscall_64+0xcc/0x3a0 [ 3630.441687][T10811] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3630.447738][T10811] RIP: 0033:0x45c6c9 [ 3630.451696][T10811] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3630.471499][T10811] RSP: 002b:00007f1b92e34c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3630.479914][T10811] RAX: ffffffffffffffda RBX: 00007f1b92e356d4 RCX: 000000000045c6c9 [ 3630.487890][T10811] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000100 [ 3630.495863][T10811] RBP: 000000000076c070 R08: ffffffffffffffff R09: 0000000000000000 [ 3630.503850][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3630.511848][T10811] R13: 0000000000000070 R14: 00000000004c2f5a R15: 000000000076c07c [ 3630.775478][T10811] memory: usage 307152kB, limit 307200kB, failcnt 277371 [ 3630.782778][T10811] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3630.789620][T10811] Memory cgroup stats for /syz0: [ 3630.789865][T10811] anon 172589056 [ 3630.789865][T10811] file 0 [ 3630.789865][T10811] kernel_stack 12533760 [ 3630.789865][T10811] slab 22781952 [ 3630.789865][T10811] sock 0 [ 3630.789865][T10811] shmem 0 [ 3630.789865][T10811] file_mapped 135168 [ 3630.789865][T10811] file_dirty 0 [ 3630.789865][T10811] file_writeback 0 [ 3630.789865][T10811] anon_thp 69206016 [ 3630.789865][T10811] inactive_anon 0 [ 3630.789865][T10811] active_anon 172589056 [ 3630.789865][T10811] inactive_file 0 [ 3630.789865][T10811] active_file 24576 [ 3630.789865][T10811] unevictable 0 [ 3630.789865][T10811] slab_reclaimable 3649536 [ 3630.789865][T10811] slab_unreclaimable 19132416 [ 3630.789865][T10811] pgfault 402732 [ 3630.789865][T10811] pgmajfault 0 [ 3630.789865][T10811] workingset_refault 825 [ 3630.789865][T10811] workingset_activate 561 [ 3630.789865][T10811] workingset_nodereclaim 0 [ 3630.789865][T10811] pgrefill 7637 [ 3630.789865][T10811] pgscan 8120 [ 3630.789865][T10811] pgsteal 1325 [ 3630.893023][T10811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10780,uid=0 05:50:52 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:52 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = getpgid(0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x7a043, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x27a043, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xffffffffffff23ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x2, 0x4, 0x1}, &(0x7f0000000380)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r0, r1, 0x0, 0x0, 0x0, r3}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='pptp\x00', r3}, 0x30) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x14900, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) setsockopt$packet_int(r6, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x120, 0x120, 0x0, 0x0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @dev, 0xffffffff, 0xffffff00, '\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x0, 0x3}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x0, 0x5, 0x4, 0x5, 0x6], 0x3, 0x4}, {0x3, [0x2, 0x0, 0x6, 0x2, 0x0, 0x1], 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x8, 0x7, 0x80000000, 'pptp\x00', 'syz0\x00', {0x5}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) 05:50:52 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:52 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x4]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3630.910963][T10811] Memory cgroup out of memory: Killed process 10811 (syz-executor.0) total-vm:74968kB, anon-rss:2232kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3630.933934][ T1077] oom_reaper: reaped process 10811 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 05:50:52 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:53 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20002) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0xaa0ca700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) setsockopt$packet_int(r9, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r1, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYRESDEC, @ANYBLOB="c705c0b76a14ec5ec24cfd7b67ba98ed5173eaf6085fd94eccbae776e2d70d69639ef04efceb2a68b085620ce0e80f9eb0e8c613e16594c15d1fd35074bca5d3306a0a8c505292009f8c6dedb43db9f81f855dd6de101164febdd938aca981dcf859f227b397de2304d8a2f68310874134d3c25bbbc935f156b50ddfde824826a14aa0b220eb9d7d74ed348068b526ef61019e6a1fe6f4cff669418f071ec916dc956654a01ef4a4b6c57c4da7fb0575abe29878336eea92142817f69f160218220c89fbcf7274e8d071d33835780919603004753f14d63530609e13daff97290c3134278e50"], @ANYRESHEX=r4, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT=r6, @ANYRES64=0x0, @ANYPTR, @ANYRESDEC=0x0, @ANYRES32=r0], @ANYRES32=r7, @ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX=r9, @ANYRES32]], 0x1) 05:50:53 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:53 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:53 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:53 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3631.391298][T10869] Cannot find add_set index 0 as target 05:50:53 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3631.607342][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3631.640595][ T8006] CPU: 1 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3631.649206][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3631.659258][ T8006] Call Trace: [ 3631.662582][ T8006] dump_stack+0x11d/0x181 [ 3631.666924][ T8006] dump_header+0xaa/0x39c [ 3631.671390][ T8006] oom_kill_process.cold+0x10/0x15 [ 3631.676517][ T8006] out_of_memory+0x231/0xa60 [ 3631.681158][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3631.686728][ T8006] try_charge+0xb6c/0xbf0 [ 3631.691136][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3631.696628][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3631.701795][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3631.707186][ T8006] alloc_pages_current+0xd1/0x170 [ 3631.712228][ T8006] pte_alloc_one+0x18/0x50 [ 3631.716706][ T8006] __pte_alloc+0x2d/0x220 [ 3631.721057][ T8006] copy_page_range+0x13a2/0x1a00 [ 3631.726107][ T8006] ? __vma_link_rb+0x3f4/0x440 [ 3631.731145][ T8006] dup_mm+0x74a/0xba0 [ 3631.735174][ T8006] copy_process+0x39d7/0x3b40 [ 3631.739865][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3631.744679][ T8006] _do_fork+0xfe/0x7a0 [ 3631.748814][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3631.755107][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3631.759985][ T8006] __x64_sys_clone+0x130/0x170 [ 3631.764869][ T8006] do_syscall_64+0xcc/0x3a0 [ 3631.769392][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3631.775282][ T8006] RIP: 0033:0x45ac9a [ 3631.779273][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3631.798880][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3631.807296][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3631.815275][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3631.823278][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3631.831256][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3631.839337][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 05:50:53 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3631.887348][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277422 [ 3631.928654][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3631.938190][ T8006] Memory cgroup stats for /syz0: [ 3631.938532][ T8006] anon 172650496 [ 3631.938532][ T8006] file 0 [ 3631.938532][ T8006] kernel_stack 12533760 [ 3631.938532][ T8006] slab 22781952 [ 3631.938532][ T8006] sock 0 [ 3631.938532][ T8006] shmem 0 [ 3631.938532][ T8006] file_mapped 135168 [ 3631.938532][ T8006] file_dirty 0 [ 3631.938532][ T8006] file_writeback 0 [ 3631.938532][ T8006] anon_thp 69206016 [ 3631.938532][ T8006] inactive_anon 0 [ 3631.938532][ T8006] active_anon 172650496 [ 3631.938532][ T8006] inactive_file 0 [ 3631.938532][ T8006] active_file 24576 [ 3631.938532][ T8006] unevictable 0 [ 3631.938532][ T8006] slab_reclaimable 3649536 [ 3631.938532][ T8006] slab_unreclaimable 19132416 [ 3631.938532][ T8006] pgfault 402831 [ 3631.938532][ T8006] pgmajfault 0 [ 3631.938532][ T8006] workingset_refault 825 [ 3631.938532][ T8006] workingset_activate 561 [ 3631.938532][ T8006] workingset_nodereclaim 0 [ 3631.938532][ T8006] pgrefill 7670 [ 3631.938532][ T8006] pgscan 8120 05:50:53 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3631.938532][ T8006] pgsteal 1325 [ 3632.060605][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10870,uid=0 [ 3632.085092][ T8006] Memory cgroup out of memory: Killed process 10870 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:50:54 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(0x0, r2, 0xee00) r3 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) chown(0x0, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r6, r7) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0106434, 0x0) statx(r8, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r12, r13) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r16, r17) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r19 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r20, r21) setxattr$system_posix_acl(&(0x7f0000000000)='\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x3}, [{0x2, 0x1, r2}, {0x2, 0x6, r3}, {0x2, 0x2, r4}, {}], {0x4, 0x3}, [{0x8, 0x2, r7}, {0x8, 0x0, r9}, {0x8, 0x0, r10}, {0x8, 0x3, r13}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x2, r14}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x4, r17}, {0x8, 0x2, r18}, {0x8, 0x2, r21}], {0x10, 0x1}, {0x20, 0x5}}, 0x94, 0x2) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r22 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r22, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:54 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3632.274622][T10924] xt_socket: unknown flags 0x8 05:50:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:54 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3632.351363][T10939] Cannot find add_set index 0 as target 05:50:54 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:54 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:54 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3632.543670][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3632.593063][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3632.601714][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3632.611951][ T8006] Call Trace: [ 3632.615248][ T8006] dump_stack+0x11d/0x181 [ 3632.619597][ T8006] dump_header+0xaa/0x39c [ 3632.624006][ T8006] oom_kill_process.cold+0x10/0x15 [ 3632.629140][ T8006] out_of_memory+0x231/0xa60 [ 3632.633829][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3632.639397][ T8006] try_charge+0xb6c/0xbf0 [ 3632.643894][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3632.649385][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3632.654575][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3632.659990][ T8006] alloc_pages_current+0xd1/0x170 [ 3632.665037][ T8006] pte_alloc_one+0x18/0x50 [ 3632.669463][ T8006] __pte_alloc+0x2d/0x220 [ 3632.673977][ T8006] copy_page_range+0x13a2/0x1a00 [ 3632.678955][ T8006] ? __vma_link_rb+0x3f4/0x440 [ 3632.683766][ T8006] dup_mm+0x74a/0xba0 [ 3632.687785][ T8006] copy_process+0x39d7/0x3b40 [ 3632.692466][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3632.697345][ T8006] _do_fork+0xfe/0x7a0 [ 3632.701457][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3632.707704][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3632.712822][ T8006] __x64_sys_clone+0x130/0x170 [ 3632.717611][ T8006] do_syscall_64+0xcc/0x3a0 [ 3632.722259][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3632.728150][ T8006] RIP: 0033:0x45ac9a [ 3632.732079][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3632.752383][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3632.760798][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3632.768775][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3632.776759][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3632.784772][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3632.792742][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3632.804749][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277470 [ 3632.823138][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3632.829989][ T8006] Memory cgroup stats for /syz0: [ 3632.830153][ T8006] anon 172670976 [ 3632.830153][ T8006] file 0 [ 3632.830153][ T8006] kernel_stack 12533760 [ 3632.830153][ T8006] slab 22781952 [ 3632.830153][ T8006] sock 0 [ 3632.830153][ T8006] shmem 0 [ 3632.830153][ T8006] file_mapped 135168 [ 3632.830153][ T8006] file_dirty 0 [ 3632.830153][ T8006] file_writeback 0 [ 3632.830153][ T8006] anon_thp 69206016 [ 3632.830153][ T8006] inactive_anon 0 [ 3632.830153][ T8006] active_anon 172670976 [ 3632.830153][ T8006] inactive_file 0 [ 3632.830153][ T8006] active_file 24576 [ 3632.830153][ T8006] unevictable 0 [ 3632.830153][ T8006] slab_reclaimable 3649536 05:50:54 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3632.830153][ T8006] slab_unreclaimable 19132416 [ 3632.830153][ T8006] pgfault 402897 [ 3632.830153][ T8006] pgmajfault 0 [ 3632.830153][ T8006] workingset_refault 825 [ 3632.830153][ T8006] workingset_activate 561 [ 3632.830153][ T8006] workingset_nodereclaim 0 [ 3632.830153][ T8006] pgrefill 7703 [ 3632.830153][ T8006] pgscan 8153 [ 3632.830153][ T8006] pgsteal 1325 05:50:55 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3633.044002][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10941,uid=0 [ 3633.102120][ T8006] Memory cgroup out of memory: Killed process 10941 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:50:55 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3633.242589][T10955] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3633.286599][T10955] CPU: 0 PID: 10955 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3633.295294][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3633.305445][T10955] Call Trace: [ 3633.308804][T10955] dump_stack+0x11d/0x181 [ 3633.313149][T10955] dump_header+0xaa/0x39c [ 3633.317494][T10955] oom_kill_process.cold+0x10/0x15 [ 3633.322625][T10955] out_of_memory+0x231/0xa60 [ 3633.327237][T10955] mem_cgroup_out_of_memory+0x128/0x150 [ 3633.332801][T10955] try_charge+0xb6c/0xbf0 [ 3633.337162][T10955] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3633.342651][T10955] __memcg_kmem_charge+0xcf/0x1b0 [ 3633.347690][T10955] __alloc_pages_nodemask+0x26c/0x310 [ 3633.353078][T10955] alloc_pages_current+0xd1/0x170 [ 3633.358202][T10955] pte_alloc_one+0x18/0x50 [ 3633.362628][T10955] __pte_alloc+0x2d/0x220 [ 3633.366989][T10955] __handle_mm_fault+0x1ffb/0x2e00 [ 3633.372155][T10955] handle_mm_fault+0x21b/0x530 [ 3633.376933][T10955] do_page_fault+0x496/0xa3d [ 3633.381561][T10955] page_fault+0x34/0x40 [ 3633.385743][T10955] RIP: 0033:0x40f87c [ 3633.389750][T10955] Code: 8c 02 50 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 76 00 e8 14 3a ff ff <83> 05 81 07 76 00 01 80 7c 24 59 00 74 0b f6 44 24 08 01 0f 84 98 [ 3633.409495][T10955] RSP: 002b:00007fff58164010 EFLAGS: 00010217 [ 3633.415563][T10955] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045c6c9 [ 3633.423591][T10955] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf28 [ 3633.431564][T10955] RBP: 000000000076bf2c R08: 00007f9ecc737700 R09: ffffffffffffffff [ 3633.439548][T10955] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf20 [ 3633.447523][T10955] R13: 0000000000000003 R14: 0000000000000000 R15: 000000000076bf2c [ 3633.469358][T11008] Cannot find add_set index 0 as target 05:50:55 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:55 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:55 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3633.617342][T10955] memory: usage 307200kB, limit 307200kB, failcnt 246569 [ 3633.655714][T10955] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3633.679367][T10955] Memory cgroup stats for /syz1: [ 3633.679553][T10955] anon 130973696 [ 3633.679553][T10955] file 98304 [ 3633.679553][T10955] kernel_stack 17399808 [ 3633.679553][T10955] slab 28909568 [ 3633.679553][T10955] sock 4096 [ 3633.679553][T10955] shmem 0 [ 3633.679553][T10955] file_mapped 0 [ 3633.679553][T10955] file_dirty 0 [ 3633.679553][T10955] file_writeback 0 [ 3633.679553][T10955] anon_thp 0 [ 3633.679553][T10955] inactive_anon 135168 [ 3633.679553][T10955] active_anon 131026944 [ 3633.679553][T10955] inactive_file 0 [ 3633.679553][T10955] active_file 77824 [ 3633.679553][T10955] unevictable 0 [ 3633.679553][T10955] slab_reclaimable 3379200 [ 3633.679553][T10955] slab_unreclaimable 25530368 [ 3633.679553][T10955] pgfault 475200 [ 3633.679553][T10955] pgmajfault 0 [ 3633.679553][T10955] workingset_refault 1650 [ 3633.679553][T10955] workingset_activate 1188 [ 3633.679553][T10955] workingset_nodereclaim 0 [ 3633.679553][T10955] pgrefill 17452 [ 3633.679553][T10955] pgscan 17902 [ 3633.679553][T10955] pgsteal 2406 05:50:55 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3633.786866][T10955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10925,uid=0 [ 3633.872666][T10955] Memory cgroup out of memory: Killed process 10925 (syz-executor.1) total-vm:74968kB, anon-rss:192kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 3634.018920][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3634.051992][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3634.060657][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3634.070711][ T8006] Call Trace: [ 3634.074066][ T8006] dump_stack+0x11d/0x181 [ 3634.078414][ T8006] dump_header+0xaa/0x39c [ 3634.082756][ T8006] oom_kill_process.cold+0x10/0x15 [ 3634.087878][ T8006] out_of_memory+0x231/0xa60 [ 3634.092491][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3634.098050][ T8006] try_charge+0xb6c/0xbf0 [ 3634.102432][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3634.107939][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3634.112974][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3634.118371][ T8006] alloc_pages_current+0xd1/0x170 [ 3634.123410][ T8006] __pmd_alloc+0x4b/0x2b0 [ 3634.127758][ T8006] copy_page_range+0x14ef/0x1a00 [ 3634.132709][ T8006] ? _raw_spin_unlock_irq+0x68/0x80 [ 3634.137947][ T8006] ? __rcu_read_unlock+0x77/0x3a0 [ 3634.142981][ T8006] ? __rcu_read_unlock+0x77/0x3a0 [ 3634.148156][ T8006] ? __rb_rotate_set_parents+0x9a/0xf0 [ 3634.153636][ T8006] ? vm_get_page_prot+0x90/0x90 [ 3634.158492][ T8006] ? __vma_link_rb+0x3f4/0x440 [ 3634.163294][ T8006] dup_mm+0x74a/0xba0 [ 3634.167418][ T8006] copy_process+0x39d7/0x3b40 [ 3634.172254][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3634.177051][ T8006] _do_fork+0xfe/0x7a0 [ 3634.181150][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3634.187416][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3634.192290][ T8006] __x64_sys_clone+0x130/0x170 [ 3634.197094][ T8006] do_syscall_64+0xcc/0x3a0 [ 3634.201725][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3634.207616][ T8006] RIP: 0033:0x45ac9a [ 3634.211524][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3634.231263][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3634.239788][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3634.247762][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3634.255735][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 05:50:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x18800) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x4, {0x81, 0x227, 0x81, 0x33d}}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00', 0x0, 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000050020000b72f0000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a310000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000274a00000000000000000000000000280000fffd000000000000000000000000000000000000000000000000000004feffffff00"/690], 0x2b0) [ 3634.263804][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3634.272214][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3634.307884][T10963] xt_socket: unknown flags 0x8 05:50:56 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:56 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:56 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x6]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3634.436193][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277514 [ 3634.445747][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3634.456044][ T8006] Memory cgroup stats for /syz0: [ 3634.456251][ T8006] anon 172670976 [ 3634.456251][ T8006] file 0 [ 3634.456251][ T8006] kernel_stack 12533760 [ 3634.456251][ T8006] slab 22781952 [ 3634.456251][ T8006] sock 0 [ 3634.456251][ T8006] shmem 0 [ 3634.456251][ T8006] file_mapped 135168 [ 3634.456251][ T8006] file_dirty 0 [ 3634.456251][ T8006] file_writeback 0 [ 3634.456251][ T8006] anon_thp 69206016 [ 3634.456251][ T8006] inactive_anon 0 [ 3634.456251][ T8006] active_anon 172670976 [ 3634.456251][ T8006] inactive_file 0 [ 3634.456251][ T8006] active_file 24576 [ 3634.456251][ T8006] unevictable 0 [ 3634.456251][ T8006] slab_reclaimable 3649536 [ 3634.456251][ T8006] slab_unreclaimable 19132416 [ 3634.456251][ T8006] pgfault 402996 [ 3634.456251][ T8006] pgmajfault 0 [ 3634.456251][ T8006] workingset_refault 825 [ 3634.456251][ T8006] workingset_activate 561 [ 3634.456251][ T8006] workingset_nodereclaim 0 [ 3634.456251][ T8006] pgrefill 7736 [ 3634.456251][ T8006] pgscan 8186 [ 3634.456251][ T8006] pgsteal 1325 05:50:56 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3634.628889][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11010,uid=0 [ 3634.648782][ T8006] Memory cgroup out of memory: Killed process 11010 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3634.752301][T11055] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3634.783019][T11055] CPU: 1 PID: 11055 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3634.791805][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3634.801886][T11055] Call Trace: [ 3634.805193][T11055] dump_stack+0x11d/0x181 [ 3634.809533][T11055] dump_header+0xaa/0x39c [ 3634.813897][T11055] oom_kill_process.cold+0x10/0x15 [ 3634.819018][T11055] out_of_memory+0x231/0xa60 [ 3634.823668][T11055] mem_cgroup_out_of_memory+0x128/0x150 [ 3634.829240][T11055] try_charge+0xb6c/0xbf0 [ 3634.833600][T11055] mem_cgroup_try_charge+0xd2/0x260 [ 3634.838833][T11055] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3634.844534][T11055] __handle_mm_fault+0x197f/0x2e00 [ 3634.849741][T11055] handle_mm_fault+0x21b/0x530 [ 3634.854554][T11055] do_page_fault+0x496/0xa3d [ 3634.859157][T11055] page_fault+0x34/0x40 [ 3634.863309][T11055] RIP: 0033:0x40f87c [ 3634.867253][T11055] Code: 8c 02 50 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f b6 4c 24 5b 48 69 c0 a8 00 00 00 88 88 c0 bf 76 00 e8 14 3a ff ff <83> 05 81 07 76 00 01 80 7c 24 59 00 74 0b f6 44 24 08 01 0f 84 98 [ 3634.886861][T11055] RSP: 002b:00007fff58164010 EFLAGS: 00010217 [ 3634.893027][T11055] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045c6c9 05:50:56 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3634.901072][T11055] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000076bf28 [ 3634.909045][T11055] RBP: 000000000076bf2c R08: 00007f9ecc737700 R09: ffffffffffffffff [ 3634.917018][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000076bf20 [ 3634.924992][T11055] R13: 0000000000000003 R14: 0000000000000000 R15: 000000000076bf2c 05:50:56 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3635.012699][T11055] memory: usage 307200kB, limit 307200kB, failcnt 246612 [ 3635.039635][T11091] Cannot find add_set index 0 as target [ 3635.050227][T11055] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:50:57 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3635.099303][T11055] Memory cgroup stats for /syz1: [ 3635.099435][T11055] anon 130973696 [ 3635.099435][T11055] file 98304 [ 3635.099435][T11055] kernel_stack 17399808 [ 3635.099435][T11055] slab 28909568 [ 3635.099435][T11055] sock 4096 [ 3635.099435][T11055] shmem 0 [ 3635.099435][T11055] file_mapped 0 [ 3635.099435][T11055] file_dirty 0 [ 3635.099435][T11055] file_writeback 0 [ 3635.099435][T11055] anon_thp 0 [ 3635.099435][T11055] inactive_anon 135168 [ 3635.099435][T11055] active_anon 131026944 [ 3635.099435][T11055] inactive_file 0 [ 3635.099435][T11055] active_file 77824 [ 3635.099435][T11055] unevictable 0 [ 3635.099435][T11055] slab_reclaimable 3379200 [ 3635.099435][T11055] slab_unreclaimable 25530368 [ 3635.099435][T11055] pgfault 475266 [ 3635.099435][T11055] pgmajfault 0 [ 3635.099435][T11055] workingset_refault 1650 [ 3635.099435][T11055] workingset_activate 1188 [ 3635.099435][T11055] workingset_nodereclaim 0 [ 3635.099435][T11055] pgrefill 17485 [ 3635.099435][T11055] pgscan 17935 [ 3635.099435][T11055] pgsteal 2406 05:50:57 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3635.337996][T11055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11051,uid=0 [ 3635.382044][T11055] Memory cgroup out of memory: Killed process 11051 (syz-executor.1) total-vm:74968kB, anon-rss:188kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:50:57 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:57 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3635.537981][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3635.613441][ T8006] CPU: 1 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3635.622048][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3635.632096][ T8006] Call Trace: [ 3635.635393][ T8006] dump_stack+0x11d/0x181 [ 3635.639741][ T8006] dump_header+0xaa/0x39c [ 3635.644084][ T8006] oom_kill_process.cold+0x10/0x15 [ 3635.649198][ T8006] out_of_memory+0x231/0xa60 [ 3635.653801][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3635.659446][ T8006] try_charge+0xb6c/0xbf0 [ 3635.663800][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3635.669270][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3635.674304][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3635.679697][ T8006] alloc_pages_current+0xd1/0x170 [ 3635.684735][ T8006] __pmd_alloc+0x4b/0x2b0 [ 3635.689067][ T8006] copy_page_range+0x14ef/0x1a00 [ 3635.694014][ T8006] ? __rcu_read_unlock+0x77/0x3a0 [ 3635.699045][ T8006] ? __rcu_read_unlock+0x77/0x3a0 [ 3635.704097][ T8006] ? __rb_rotate_set_parents+0x9a/0xf0 [ 3635.709572][ T8006] ? vm_get_page_prot+0x90/0x90 [ 3635.714432][ T8006] ? __vma_link_rb+0x3f4/0x440 [ 3635.719205][ T8006] dup_mm+0x74a/0xba0 [ 3635.723212][ T8006] copy_process+0x39d7/0x3b40 [ 3635.727897][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3635.732694][ T8006] _do_fork+0xfe/0x7a0 [ 3635.736783][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3635.743026][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3635.747895][ T8006] __x64_sys_clone+0x130/0x170 [ 3635.752681][ T8006] do_syscall_64+0xcc/0x3a0 [ 3635.757201][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3635.763266][ T8006] RIP: 0033:0x45ac9a [ 3635.767237][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3635.786841][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3635.795258][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3635.803284][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 05:50:57 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3635.811258][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3635.819227][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3635.827202][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 05:50:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000a80)={0x3, "2563d5a5f5f96ff6f823b04d6a5e44b583d6a96833d90c1c88a1c9e500cad99bbe521f1186fbca00946afef9ebbf54c239923b06660c535caf21e60172db86241c0113cf579f066ffc9216ecc48686a070912784598c71b0e62e52b2cd8f52e8decf4b694704b71e037fa9aa4b36c4cb467486bb80cd9ba7a15ab161ba647db8cc3d7b811989e7f98b40b30b7eb7dd9f59c071a5e51205e9a38dee95910437db55fcc20e8c55b08f7b09befdea12744bbe4baf69a7667cd0d2dc77140d576b7ed3b77c6a285151dc3dcd005f08de5545785f9b70fa5a80a43d97600ba020496870fee12a3db24b62737b864978a6d02d41d0bf736dc5820e805fad2ee3e4161f3ad9ffc1338ce84601b6435d0bb7f08cc50660e1747cedaac5c245e6cb137a96b2da34a4090900c89b31e0ec875ba4aff96f6f087d13e3a9aa5bbb24ee780ac8d69db46b95fbb143bc59c6a8f98a8361372d5c20d94bbd83ff3c848eecdcbfa677163149bc13849f8b7b685cf4a91c5faceea008233f390b24bccfc39efce96ce00079943970318dd826e48536b6d5415efb84f0f7b799f8f72f930a890e0de68521baba35c9b3e3d4b8b7ae1fbfce502576bf618d1b2829c16ae557fee570ebb6a11b88f5ee745b133217ec93a4a658ed1a43ede76628f9f0199c22d85395a6df5c0e3bf5bf95fe021746b37f06e38fd02d69f1a47348466b77ec9be7c0efe6"}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x4c202, 0x42) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)) r2 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x28) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000dc0)={r3, &(0x7f0000000cc0)="2f8afe00a7a9888dd34c04fed826fba6368448c3cbf5126a91f347e53ccaf4941d32f3b9b4b5bb99317ebd35afe6447bfa7e27568f3511aab6da54654019ca2d0ff1fcb67de4e95077ff60b3d71c56ab7a3ec04e3f6e6ebcacc6436d557dbc3413a8f8bb486620643e40d88687e8fdacf3c56e5454bb89", &(0x7f0000000d40)=""/80}, 0x20) write$binfmt_elf32(r2, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x80, 0xff, 0x0, 0x3, 0x3, 0x5, 0x3e0, 0x38, 0x3e5, 0x1, 0x0, 0x20, 0x1, 0x1, 0x4, 0x3ea}, [{0x7, 0x3, 0x8000, 0x7, 0x1000, 0x4, 0x7, 0x2}], "728123680f90bbe3b1c37691b65b5121453759e50eb5f879fdd603743531086567bc319b1a593ca8981d7b88df7763ee1d68089d5a8a", [[], [], [], []]}, 0x48e) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x50000, 0x5, 0x3f9000, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x990aff, 0x7fffffff, [], @value64=0x7fffffff}}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="780018391fd7a6a02137baf82edb953a0942dc8d0dc30fd0bdbaf8345306b95019f4b0b2a814b9050e7def64f231858ad3d5fb70c3a52e4775769d1010fea453567d8f5508e5c7f9498fe3a0ddeb152ac0892dca194920c39e7e8ed37831efdb9901fa5e776be2d0d88c460dde42603b747e964eec6f468b707c3dd7a814dbce22794ab65099e4aea084c53a7d5dd9ae527465c34567bc6b0f793595fb090470159e4849157e6041ffc09f37c11ed865bf4e024bd804073933e8d3a072750c6515f33343a236605881e82743a80165093930219f60fcc715c76d697911fb25e65fdd32e7c07c5d4dbaf6443c8e077e9a13", 0xf1) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:57 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:57 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3636.086352][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277547 [ 3636.101576][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3636.112866][T11157] xt_socket: unknown flags 0x8 [ 3636.125330][ T8006] Memory cgroup stats for /syz0: [ 3636.125650][ T8006] anon 172634112 [ 3636.125650][ T8006] file 0 [ 3636.125650][ T8006] kernel_stack 12533760 [ 3636.125650][ T8006] slab 22781952 [ 3636.125650][ T8006] sock 0 [ 3636.125650][ T8006] shmem 0 [ 3636.125650][ T8006] file_mapped 135168 [ 3636.125650][ T8006] file_dirty 0 [ 3636.125650][ T8006] file_writeback 0 [ 3636.125650][ T8006] anon_thp 69206016 [ 3636.125650][ T8006] inactive_anon 0 [ 3636.125650][ T8006] active_anon 172634112 [ 3636.125650][ T8006] inactive_file 0 [ 3636.125650][ T8006] active_file 24576 [ 3636.125650][ T8006] unevictable 0 [ 3636.125650][ T8006] slab_reclaimable 3649536 [ 3636.125650][ T8006] slab_unreclaimable 19132416 [ 3636.125650][ T8006] pgfault 403062 [ 3636.125650][ T8006] pgmajfault 0 [ 3636.125650][ T8006] workingset_refault 825 [ 3636.125650][ T8006] workingset_activate 561 [ 3636.125650][ T8006] workingset_nodereclaim 0 [ 3636.125650][ T8006] pgrefill 7736 [ 3636.125650][ T8006] pgscan 8186 [ 3636.125650][ T8006] pgsteal 1325 05:50:58 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3636.283551][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11092,uid=0 [ 3636.311645][T11182] xt_socket: unknown flags 0x8 05:50:58 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b65740000001f0000000000080000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a3100000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000005000000000000004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x2b0) [ 3636.332696][ T8006] Memory cgroup out of memory: Killed process 11092 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:50:58 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:58 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3636.510763][T11199] Cannot find add_set index 0 as target 05:50:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000000)={0x10002, 0x0, [0x4, 0x2, 0x0, 0x539f, 0x9, 0xffff, 0x8, 0x9]}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:58 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:58 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3636.777324][T11237] Cannot find add_set index 0 as target 05:50:58 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x4]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:50:58 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3636.836760][T11243] xt_socket: unknown flags 0x8 [ 3636.906197][T11246] xt_socket: unknown flags 0x8 05:50:58 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:50:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@rand_addr=0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:50:59 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:59 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3637.109426][T11276] Cannot find add_set index 0 as target [ 3637.273190][T11291] xt_socket: unknown flags 0x8 05:50:59 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3637.340930][T11296] Cannot find add_set index 0 as target 05:50:59 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3637.517616][T11316] xt_socket: unknown flags 0x8 05:50:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x90801, 0x0) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0xb, [], "3f084ebac62bc24fcd0a7334419b31c4"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r8, @ANYBLOB="04002a00538a3489c991296c06001ef2317a3e55aaa3329bb5e72e8c4e489a04556a6523375cdce8dd29179922a7"], 0x32) r9 = getpid() pidfd_open(r9, 0x0) r10 = gettid() tkill(r10, 0x3b) ptrace$cont(0x7, r10, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) r12 = getpgrp(r11) sched_setparam(r12, &(0x7f0000000080)=0x8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r15, 0xc0106434, 0x0) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r17 = socket$packet(0x11, 0x3, 0x300) dup(r17) r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r17, &(0x7f0000000640)={0x11, 0x0, r19, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r17, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES16=r14, @ANYRES64, @ANYRESDEC=r15, @ANYRESDEC=r17], 0x5) 05:50:59 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:59 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3637.699457][T11333] Cannot find add_set index 0 as target 05:50:59 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:50:59 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3637.911870][T11330] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3637.947828][T11330] CPU: 1 PID: 11330 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3637.956528][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3637.966667][T11330] Call Trace: [ 3637.970003][T11330] dump_stack+0x11d/0x181 [ 3637.974416][T11330] dump_header+0xaa/0x39c [ 3637.978754][T11330] oom_kill_process.cold+0x10/0x15 [ 3637.983874][T11330] out_of_memory+0x231/0xa60 [ 3637.988475][T11330] mem_cgroup_out_of_memory+0x128/0x150 [ 3637.994057][T11330] try_charge+0xb6c/0xbf0 [ 3637.998490][T11330] mem_cgroup_try_charge+0xd2/0x260 [ 3638.003792][T11330] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3638.009588][T11330] wp_page_copy+0x322/0xf20 [ 3638.014459][T11330] ? sched_clock+0x13/0x20 [ 3638.018992][T11330] ? sched_clock_cpu+0x15/0xe0 [ 3638.023766][T11330] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3638.029558][T11330] do_wp_page+0x192/0xd20 [ 3638.033939][T11330] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3638.039850][T11330] __handle_mm_fault+0x1d16/0x2e00 [ 3638.044993][T11330] handle_mm_fault+0x21b/0x530 [ 3638.049776][T11330] do_page_fault+0x496/0xa3d [ 3638.054427][T11330] page_fault+0x34/0x40 [ 3638.058578][T11330] RIP: 0033:0x411718 [ 3638.062479][T11330] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0b 20 4c 00 31 c0 e8 93 07 ff ff 31 ff e8 dc 03 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 2e 0f 87 00 [ 3638.082161][T11330] RSP: 002b:00007fff58163f40 EFLAGS: 00010246 [ 3638.088229][T11330] RAX: 0000000087af0454 RBX: 000000009da6143b RCX: 0000001b31620000 [ 3638.096201][T11330] RDX: 0000000000000000 RSI: 0000000000000454 RDI: ffffffff87af0454 [ 3638.104199][T11330] RBP: 0000000000000005 R08: 0000000087af0454 R09: 0000000087af0458 05:51:00 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3638.112306][T11330] R10: 00007fff581640e0 R11: 0000000000000246 R12: 000000000076bfa8 [ 3638.120277][T11330] R13: 0000000080000000 R14: 00007f9ece738008 R15: 0000000000000005 [ 3638.133146][T11330] memory: usage 307200kB, limit 307200kB, failcnt 246651 [ 3638.140786][T11330] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3638.148589][T11330] Memory cgroup stats for /syz1: [ 3638.148788][T11330] anon 131108864 [ 3638.148788][T11330] file 98304 [ 3638.148788][T11330] kernel_stack 17399808 [ 3638.148788][T11330] slab 28909568 [ 3638.148788][T11330] sock 4096 [ 3638.148788][T11330] shmem 0 [ 3638.148788][T11330] file_mapped 0 [ 3638.148788][T11330] file_dirty 0 [ 3638.148788][T11330] file_writeback 0 [ 3638.148788][T11330] anon_thp 0 [ 3638.148788][T11330] inactive_anon 135168 [ 3638.148788][T11330] active_anon 131026944 [ 3638.148788][T11330] inactive_file 0 [ 3638.148788][T11330] active_file 77824 [ 3638.148788][T11330] unevictable 0 [ 3638.148788][T11330] slab_reclaimable 3379200 [ 3638.148788][T11330] slab_unreclaimable 25530368 [ 3638.148788][T11330] pgfault 475695 [ 3638.148788][T11330] pgmajfault 0 [ 3638.148788][T11330] workingset_refault 1650 [ 3638.148788][T11330] workingset_activate 1188 [ 3638.148788][T11330] workingset_nodereclaim 0 [ 3638.148788][T11330] pgrefill 17552 [ 3638.148788][T11330] pgscan 18001 [ 3638.148788][T11330] pgsteal 2406 [ 3638.194571][T11358] Cannot find add_set index 0 as target 05:51:00 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:00 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:00 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3638.542357][T11330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11317,uid=0 05:51:00 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3638.618350][T11330] Memory cgroup out of memory: Killed process 11317 (syz-executor.1) total-vm:74968kB, anon-rss:184kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:51:00 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:00 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3638.697757][T11402] Cannot find add_set index 0 as target [ 3638.730299][ T1077] oom_reaper: reaped process 11317 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 3638.980542][T11414] Cannot find add_set index 0 as target 05:51:01 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:01 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:01 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "8bad0e06db7399d7", "5d210240d80f4d0bbe7cbeaa2640d6af96169835e8711edb699de757a65c6352", "d268dc8f", "deaf3e51d88ed87a"}, 0x38) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2b0) 05:51:01 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3639.256198][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3639.297806][ T8006] CPU: 1 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3639.306539][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3639.316602][ T8006] Call Trace: [ 3639.319956][ T8006] dump_stack+0x11d/0x181 [ 3639.324399][ T8006] dump_header+0xaa/0x39c [ 3639.328747][ T8006] oom_kill_process.cold+0x10/0x15 [ 3639.333912][ T8006] out_of_memory+0x231/0xa60 [ 3639.338526][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3639.344099][ T8006] try_charge+0xb6c/0xbf0 [ 3639.348463][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3639.353943][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3639.358981][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3639.364374][ T8006] alloc_pages_current+0xd1/0x170 [ 3639.369526][ T8006] pte_alloc_one+0x18/0x50 [ 3639.374062][ T8006] __pte_alloc+0x2d/0x220 [ 3639.378460][ T8006] copy_page_range+0x13a2/0x1a00 [ 3639.383416][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3639.389726][ T8006] ? __vma_link_rb+0x3f4/0x440 [ 3639.394513][ T8006] dup_mm+0x74a/0xba0 [ 3639.398529][ T8006] copy_process+0x39d7/0x3b40 [ 3639.403215][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3639.408112][ T8006] _do_fork+0xfe/0x7a0 [ 3639.412197][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3639.418485][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3639.423355][ T8006] __x64_sys_clone+0x130/0x170 [ 3639.428208][ T8006] do_syscall_64+0xcc/0x3a0 [ 3639.432722][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3639.438626][ T8006] RIP: 0033:0x45ac9a [ 3639.442596][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3639.462342][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3639.470769][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3639.478833][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3639.486825][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3639.494800][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3639.502873][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3639.521371][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277586 [ 3639.528622][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3639.536236][ T8006] Memory cgroup stats for /syz0: [ 3639.536371][ T8006] anon 171446272 [ 3639.536371][ T8006] file 0 [ 3639.536371][ T8006] kernel_stack 12644352 [ 3639.536371][ T8006] slab 22781952 [ 3639.536371][ T8006] sock 0 [ 3639.536371][ T8006] shmem 0 [ 3639.536371][ T8006] file_mapped 135168 [ 3639.536371][ T8006] file_dirty 0 [ 3639.536371][ T8006] file_writeback 0 [ 3639.536371][ T8006] anon_thp 67108864 [ 3639.536371][ T8006] inactive_anon 0 [ 3639.536371][ T8006] active_anon 171446272 [ 3639.536371][ T8006] inactive_file 0 [ 3639.536371][ T8006] active_file 24576 [ 3639.536371][ T8006] unevictable 0 [ 3639.536371][ T8006] slab_reclaimable 3649536 [ 3639.536371][ T8006] slab_unreclaimable 19132416 [ 3639.536371][ T8006] pgfault 403623 [ 3639.536371][ T8006] pgmajfault 0 [ 3639.536371][ T8006] workingset_refault 825 [ 3639.536371][ T8006] workingset_activate 561 [ 3639.536371][ T8006] workingset_nodereclaim 0 [ 3639.536371][ T8006] pgrefill 7736 [ 3639.536371][ T8006] pgscan 8219 [ 3639.536371][ T8006] pgsteal 1325 [ 3639.737606][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=27276,uid=0 [ 3639.782751][ T8006] Memory cgroup out of memory: Killed process 27276 (syz-executor.0) total-vm:74704kB, anon-rss:2200kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3639.819119][ T8016] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3639.855496][ T8016] CPU: 1 PID: 8016 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 3639.864121][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3639.874171][ T8016] Call Trace: [ 3639.877470][ T8016] dump_stack+0x11d/0x181 [ 3639.881819][ T8016] dump_header+0xaa/0x39c [ 3639.886260][ T8016] oom_kill_process.cold+0x10/0x15 [ 3639.891455][ T8016] out_of_memory+0x231/0xa60 [ 3639.896085][ T8016] mem_cgroup_out_of_memory+0x128/0x150 [ 3639.901654][ T8016] try_charge+0xb6c/0xbf0 [ 3639.906012][ T8016] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3639.911513][ T8016] __memcg_kmem_charge+0xcf/0x1b0 [ 3639.916548][ T8016] __alloc_pages_nodemask+0x26c/0x310 [ 3639.921944][ T8016] alloc_pages_current+0xd1/0x170 [ 3639.927039][ T8016] pte_alloc_one+0x18/0x50 [ 3639.931482][ T8016] __pte_alloc+0x2d/0x220 [ 3639.935828][ T8016] copy_page_range+0x13a2/0x1a00 [ 3639.940870][ T8016] ? __vma_link_rb+0x3f4/0x440 [ 3639.945830][ T8016] dup_mm+0x74a/0xba0 [ 3639.949921][ T8016] copy_process+0x39d7/0x3b40 [ 3639.954606][ T8016] ? wp_page_reuse+0x10d/0x130 [ 3639.959404][ T8016] _do_fork+0xfe/0x7a0 [ 3639.963485][ T8016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3639.969729][ T8016] ? ktime_get_ts64+0x286/0x2c0 [ 3639.974596][ T8016] __x64_sys_clone+0x130/0x170 [ 3639.979395][ T8016] do_syscall_64+0xcc/0x3a0 [ 3639.983976][ T8016] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3639.989887][ T8016] RIP: 0033:0x45ac9a [ 3639.993794][ T8016] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3640.013628][ T8016] RSP: 002b:00007ffdcad8a510 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3640.022118][ T8016] RAX: ffffffffffffffda RBX: 00007ffdcad8a510 RCX: 000000000045ac9a [ 3640.030188][ T8016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3640.038162][ T8016] RBP: 00007ffdcad8a550 R08: 0000000000000001 R09: 0000000001e6f940 [ 3640.046137][ T8016] R10: 0000000001e6fc10 R11: 0000000000000246 R12: 0000000000000001 [ 3640.054178][ T8016] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdcad8a5a0 [ 3640.066246][ T8016] memory: usage 307200kB, limit 307200kB, failcnt 216837 [ 3640.074034][ T8016] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3640.081551][ T8016] Memory cgroup stats for /syz2: [ 3640.081722][ T8016] anon 228372480 [ 3640.081722][ T8016] file 77824 [ 3640.081722][ T8016] kernel_stack 7741440 [ 3640.081722][ T8016] slab 14397440 [ 3640.081722][ T8016] sock 0 [ 3640.081722][ T8016] shmem 0 [ 3640.081722][ T8016] file_mapped 0 [ 3640.081722][ T8016] file_dirty 135168 [ 3640.081722][ T8016] file_writeback 0 [ 3640.081722][ T8016] anon_thp 165675008 [ 3640.081722][ T8016] inactive_anon 0 [ 3640.081722][ T8016] active_anon 228519936 [ 3640.081722][ T8016] inactive_file 0 [ 3640.081722][ T8016] active_file 0 [ 3640.081722][ T8016] unevictable 0 [ 3640.081722][ T8016] slab_reclaimable 2297856 [ 3640.081722][ T8016] slab_unreclaimable 12099584 [ 3640.081722][ T8016] pgfault 494208 [ 3640.081722][ T8016] pgmajfault 0 05:51:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r8 = socket$packet(0x11, 0x3, 0x300) dup(r8) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r8, &(0x7f0000000640)={0x11, 0xf7, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r8, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r11, 0xc0106434, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) r13 = dup(r12) setsockopt$packet_int(r13, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r14, 0xc0106434, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) dup(r15) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r15, &(0x7f0000000640)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r15, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r18 = socket$packet(0x11, 0x3, 0x300) r19 = dup(r18) r20 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r18, &(0x7f0000000640)={0x11, 0x0, r21, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r18, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r22 = socket$packet(0x11, 0x3, 0x300) r23 = dup(r22) setsockopt$packet_int(r23, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r24 = socket$packet(0x11, 0x3, 0x300) dup(r24) r25 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r25, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r24, &(0x7f0000000640)={0x11, 0x0, r26, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r24, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r27 = socket$packet(0x11, 0x3, 0x300) dup(r27) r28 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r28, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r27, &(0x7f0000000640)={0x11, 0x0, r29, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r27, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r30 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r30, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r31, 0xc0106434, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX, @ANYRES32=r1, @ANYRESHEX=r19, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESHEX=r27, @ANYRESHEX=r8], @ANYRES16=r11, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="a25a24f97aa798419fb098bde0951892304328129424", @ANYRESDEC=r13], @ANYRES64=r4, @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="c03eac16fdbf74db7c3e206f18030482a90add91745bf9160ee5930d08db035abe75cce710ff9dccd880dbc1bd1d5004a566b454b127a028fcdc62cbcb4e61df2004749843b799c0c26f3348cb6bd30a03ed59a24513470d2573cc6a169f598ecae0e3d363f7b4c62980706d9ab58316d6e85617052d4e9b38f27a9a3468762efdc9bc5522bf63c57ed45c0b834f97b641cc9a853c8432f13c955ea40f19f7ae12d27b8682e97c01a46b7e2dfe8d407b137b49c04b322d96ae169502c23eb986af546e4133ad9dd436151787bd", @ANYRES16=r14, @ANYPTR, @ANYRES16, @ANYRES16=r15, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="cd548491c1611fa7f2c411f4ce9b69ba31adc374532eeecef9f0b792729c846732d41a44b6e2a60000000000", @ANYBLOB="33c2d53315a693050f1eab3b9917301764076a0727cb5bd98cd072afdb952eff34491274236e6ac3c0a93217c2a4ce9e000044fe88773a7047c8aa1acfe24ea00b2660482c485c6ad3c85d9aeb15d32a545a617d99b4897a84ccab3facaa53a8c8c7c17f89461177d694d7dbd63a20cb9115be29ae6e55d8a3002a50a728eec573f078bb1e74c5043d5f472b3301b7e2d3cceb7fb0f328cc0cdce3056757f57a183ca409469124a531d08400"/187, @ANYRESOCT, @ANYRESDEC=r21, @ANYRES32, @ANYRESHEX=r30, @ANYBLOB="e2ebed873d7d5721539254bc2044d056cf9434ec73b4cf0b0514daf977a934bc595e39e01ab5794f51016d41a6298f3febbe6ee34505fdc545a511647b5a5445ef316c43babbbba80f64166d1a7474435aeedcb6f1b62707482157bd8533a430543907cad30a331a94980465b69354d011fb5e34acdecdf42e283a9c1f4561ae7b21182ace34e3f8a6aee16d5e63371972d68bae", @ANYRESHEX=r31], @ANYRESHEX=r18], @ANYRES64=r23]], 0x5) [ 3640.081722][ T8016] workingset_refault 1122 [ 3640.081722][ T8016] workingset_activate 792 [ 3640.081722][ T8016] workingset_nodereclaim 0 [ 3640.081722][ T8016] pgrefill 11280 [ 3640.081722][ T8016] pgscan 11526 [ 3640.081722][ T8016] pgsteal 1975 [ 3640.155002][T11461] Cannot find add_set index 0 as target [ 3640.226568][ T8016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9870,uid=0 [ 3640.256980][ T8016] Memory cgroup out of memory: Killed process 9870 (syz-executor.2) total-vm:75100kB, anon-rss:2220kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 05:51:02 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:02 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3640.281254][ T1077] oom_reaper: reaped process 9870 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 3640.441519][T11468] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3640.508318][T11468] CPU: 1 PID: 11468 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 3640.517124][T11468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3640.525423][T11474] Cannot find add_set index 0 as target [ 3640.527356][T11468] Call Trace: [ 3640.527385][T11468] dump_stack+0x11d/0x181 [ 3640.527538][T11468] dump_header+0xaa/0x39c [ 3640.544959][T11468] oom_kill_process.cold+0x10/0x15 [ 3640.550202][T11468] out_of_memory+0x231/0xa60 [ 3640.554846][T11468] mem_cgroup_out_of_memory+0x128/0x150 [ 3640.560494][T11468] try_charge+0xb6c/0xbf0 [ 3640.564891][T11468] mem_cgroup_try_charge+0xd2/0x260 [ 3640.570178][T11468] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3640.575823][T11468] wp_page_copy+0x322/0xf20 [ 3640.580337][T11468] ? sched_clock+0x13/0x20 [ 3640.584828][T11468] ? sched_clock_cpu+0x15/0xe0 [ 3640.589621][T11468] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3640.595353][T11468] do_wp_page+0x192/0xd20 [ 3640.599690][T11468] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3640.605599][T11468] __handle_mm_fault+0x1d16/0x2e00 [ 3640.610767][T11468] handle_mm_fault+0x21b/0x530 [ 3640.615540][T11468] do_page_fault+0x496/0xa3d [ 3640.620137][T11468] page_fault+0x34/0x40 [ 3640.624285][T11468] RIP: 0033:0x411718 [ 3640.628196][T11468] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 0b 20 4c 00 31 c0 e8 93 07 ff ff 31 ff e8 dc 03 ff ff 0f 1f 40 00 <89> 3c b5 00 00 74 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 2e 0f 87 00 [ 3640.647794][T11468] RSP: 002b:00007ffdcad8a2e0 EFLAGS: 00010246 [ 3640.653860][T11468] RAX: 0000000087af1f22 RBX: 00000000a0cb5ef3 RCX: 0000001b31b20000 [ 3640.661956][T11468] RDX: 0000000000000000 RSI: 0000000000001f22 RDI: ffffffff87af1f22 [ 3640.669922][T11468] RBP: 0000000000000005 R08: 0000000087af1f22 R09: 0000000087af1f26 [ 3640.677965][T11468] R10: 00007ffdcad8a480 R11: 0000000000000246 R12: 000000000076bfa8 [ 3640.686066][T11468] R13: 0000000080000000 R14: 00007fb396ebc008 R15: 0000000000000005 05:51:02 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3640.714953][T11487] Cannot find add_set index 0 as target [ 3640.723133][T11468] memory: usage 307200kB, limit 307200kB, failcnt 216851 [ 3640.751322][T11468] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3640.763375][T11468] Memory cgroup stats for /syz2: [ 3640.763559][T11468] anon 228245504 [ 3640.763559][T11468] file 77824 [ 3640.763559][T11468] kernel_stack 7741440 [ 3640.763559][T11468] slab 14397440 [ 3640.763559][T11468] sock 0 [ 3640.763559][T11468] shmem 0 [ 3640.763559][T11468] file_mapped 0 [ 3640.763559][T11468] file_dirty 135168 [ 3640.763559][T11468] file_writeback 0 [ 3640.763559][T11468] anon_thp 165675008 [ 3640.763559][T11468] inactive_anon 0 [ 3640.763559][T11468] active_anon 228323328 [ 3640.763559][T11468] inactive_file 0 [ 3640.763559][T11468] active_file 0 [ 3640.763559][T11468] unevictable 0 [ 3640.763559][T11468] slab_reclaimable 2297856 [ 3640.763559][T11468] slab_unreclaimable 12099584 [ 3640.763559][T11468] pgfault 494241 [ 3640.763559][T11468] pgmajfault 0 [ 3640.763559][T11468] workingset_refault 1122 [ 3640.763559][T11468] workingset_activate 792 [ 3640.763559][T11468] workingset_nodereclaim 0 [ 3640.763559][T11468] pgrefill 11313 [ 3640.763559][T11468] pgscan 11526 [ 3640.763559][T11468] pgsteal 1975 [ 3640.863490][T11468] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=3139,uid=0 05:51:02 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:02 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x6]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3640.930925][T11468] Memory cgroup out of memory: Killed process 3139 (syz-executor.2) total-vm:74836kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 05:51:03 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3641.082138][T11513] Cannot find add_set index 0 as target 05:51:03 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:03 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:03 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3641.312361][T11538] Cannot find add_set index 0 as target 05:51:03 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@delqdisc={0xec, 0x25, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x2}, {0xfff2, 0x5}, {0xa, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x62, 0x20}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xce, 0xbb4, 0x12000, 0x0, 0x7, 0x8, 0x9}}, {0x16, 0x2, [0x7fff, 0x0, 0x8, 0x6, 0x9e1b, 0x1, 0x0, 0x90c3, 0x7f]}}, {{0x1c, 0x1, {0x5, 0x40, 0x1, 0x3ff, 0x0, 0xefd, 0x0, 0x6}}, {0x10, 0x2, [0x5, 0x6, 0x9, 0x8, 0x5, 0x7ff]}}, {{0x1c, 0x1, {0x3, 0x6, 0x0, 0x1ff, 0x0, 0xc, 0x8, 0x5}}, {0xe, 0x2, [0x8, 0xdf28, 0x33d0, 0x1, 0x7f]}}]}, @qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xe1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x24048044}, 0x20048801) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:51:03 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:03 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3641.525123][T11563] Cannot find add_set index 0 as target 05:51:03 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:03 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3641.779282][T11589] Cannot find add_set index 0 as target [ 3641.792889][T11576] xt_socket: unknown flags 0x8 05:51:03 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3641.849803][T11598] xt_socket: unknown flags 0x8 05:51:03 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) [ 3642.081910][T11615] Cannot find add_set index 0 as target 05:51:04 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:04 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3642.264234][T11638] xt_socket: unknown flags 0x8 05:51:04 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:51:04 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:04 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:04 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3642.590288][T11678] xt_socket: unknown flags 0x8 05:51:04 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:04 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:04 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:04 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3643.067722][T11725] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3643.085378][T11725] CPU: 0 PID: 11725 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3643.094096][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3643.104585][T11725] Call Trace: [ 3643.107932][T11725] dump_stack+0x11d/0x181 [ 3643.112343][T11725] dump_header+0xaa/0x39c [ 3643.116690][T11725] oom_kill_process.cold+0x10/0x15 [ 3643.121809][T11725] out_of_memory+0x231/0xa60 [ 3643.126423][T11725] mem_cgroup_out_of_memory+0x128/0x150 [ 3643.132101][T11725] try_charge+0xb6c/0xbf0 [ 3643.136487][T11725] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3643.142017][T11725] __memcg_kmem_charge+0xcf/0x1b0 [ 3643.147064][T11725] copy_process+0x12bc/0x3b40 [ 3643.151750][T11725] ? record_times+0x16/0x90 [ 3643.156260][T11725] ? psi_task_change+0x1ad/0x2d0 [ 3643.161209][T11725] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3643.167330][T11725] _do_fork+0xfe/0x7a0 [ 3643.171411][T11725] ? cgroup_file_notify+0xff/0x130 [ 3643.176580][T11725] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3643.182703][T11725] __x64_sys_clone+0x130/0x170 [ 3643.187502][T11725] do_syscall_64+0xcc/0x3a0 [ 3643.192030][T11725] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3643.197926][T11725] RIP: 0033:0x45f099 05:51:05 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3643.201832][T11725] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3643.221434][T11725] RSP: 002b:00007ffec89672e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3643.229849][T11725] RAX: ffffffffffffffda RBX: 00007f1b92e77700 RCX: 000000000045f099 [ 3643.237849][T11725] RDX: 00007f1b92e779d0 RSI: 00007f1b92e76db0 RDI: 00000000003d0f00 [ 3643.245821][T11725] RBP: 00007ffec8967500 R08: 00007f1b92e77700 R09: 00007f1b92e77700 [ 3643.253789][T11725] R10: 00007f1b92e779d0 R11: 0000000000000202 R12: 0000000000000000 [ 3643.261756][T11725] R13: 00007ffec896739f R14: 00007f1b92e779c0 R15: 000000000076bf2c [ 3643.288592][T11725] memory: usage 307200kB, limit 307200kB, failcnt 277629 [ 3643.297219][T11725] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3643.310192][T11725] Memory cgroup stats for /syz0: [ 3643.310385][T11725] anon 170225664 [ 3643.310385][T11725] file 0 [ 3643.310385][T11725] kernel_stack 12718080 [ 3643.310385][T11725] slab 22917120 [ 3643.310385][T11725] sock 0 [ 3643.310385][T11725] shmem 0 [ 3643.310385][T11725] file_mapped 135168 [ 3643.310385][T11725] file_dirty 0 [ 3643.310385][T11725] file_writeback 0 [ 3643.310385][T11725] anon_thp 65011712 [ 3643.310385][T11725] inactive_anon 0 [ 3643.310385][T11725] active_anon 170225664 [ 3643.310385][T11725] inactive_file 114688 [ 3643.310385][T11725] active_file 24576 [ 3643.310385][T11725] unevictable 0 [ 3643.310385][T11725] slab_reclaimable 3649536 [ 3643.310385][T11725] slab_unreclaimable 19267584 [ 3643.310385][T11725] pgfault 404382 [ 3643.310385][T11725] pgmajfault 0 [ 3643.310385][T11725] workingset_refault 825 [ 3643.310385][T11725] workingset_activate 561 [ 3643.310385][T11725] workingset_nodereclaim 0 [ 3643.310385][T11725] pgrefill 7769 [ 3643.310385][T11725] pgscan 8252 [ 3643.310385][T11725] pgsteal 1325 05:51:05 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3643.457191][T11725] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8799,uid=0 [ 3643.475453][T11725] Memory cgroup out of memory: Killed process 8799 (syz-executor.0) total-vm:74704kB, anon-rss:2200kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:51:05 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:05 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:05 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3643.828667][T11782] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3643.839303][T11782] CPU: 0 PID: 11782 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3643.847987][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3643.858157][T11782] Call Trace: [ 3643.861465][T11782] dump_stack+0x11d/0x181 [ 3643.865805][T11782] dump_header+0xaa/0x39c [ 3643.870153][T11782] oom_kill_process.cold+0x10/0x15 [ 3643.875279][T11782] out_of_memory+0x231/0xa60 [ 3643.879953][T11782] mem_cgroup_out_of_memory+0x128/0x150 [ 3643.885548][T11782] try_charge+0xb6c/0xbf0 [ 3643.889919][T11782] mem_cgroup_try_charge+0xd2/0x260 [ 3643.895136][T11782] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3643.900782][T11782] __handle_mm_fault+0x197f/0x2e00 [ 3643.905967][T11782] handle_mm_fault+0x21b/0x530 [ 3643.910750][T11782] do_page_fault+0x496/0xa3d [ 3643.915452][T11782] page_fault+0x34/0x40 [ 3643.919603][T11782] RIP: 0033:0x413ebf [ 3643.923592][T11782] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 3643.943197][T11782] RSP: 002b:00007ffec8967330 EFLAGS: 00010206 [ 3643.949264][T11782] RAX: 00007f1b92e57000 RBX: 0000000000020000 RCX: 000000000045c71a [ 3643.957421][T11782] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 3643.965393][T11782] RBP: 00007ffec8967410 R08: ffffffffffffffff R09: 0000000000000000 05:51:05 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3643.973366][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec8967500 [ 3643.981355][T11782] R13: 00007f1b92e77700 R14: 0000000000000000 R15: 000000000076bf2c [ 3644.024477][T11782] memory: usage 307200kB, limit 307200kB, failcnt 277682 [ 3644.048606][T11782] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3644.097865][T11782] Memory cgroup stats for /syz0: [ 3644.098082][T11782] anon 170090496 [ 3644.098082][T11782] file 0 [ 3644.098082][T11782] kernel_stack 12718080 [ 3644.098082][T11782] slab 22917120 [ 3644.098082][T11782] sock 0 [ 3644.098082][T11782] shmem 0 [ 3644.098082][T11782] file_mapped 135168 [ 3644.098082][T11782] file_dirty 0 [ 3644.098082][T11782] file_writeback 0 [ 3644.098082][T11782] anon_thp 65011712 [ 3644.098082][T11782] inactive_anon 0 [ 3644.098082][T11782] active_anon 170090496 [ 3644.098082][T11782] inactive_file 114688 05:51:06 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:06 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3644.098082][T11782] active_file 24576 [ 3644.098082][T11782] unevictable 0 [ 3644.098082][T11782] slab_reclaimable 3649536 [ 3644.098082][T11782] slab_unreclaimable 19267584 [ 3644.098082][T11782] pgfault 404448 [ 3644.098082][T11782] pgmajfault 0 [ 3644.098082][T11782] workingset_refault 825 [ 3644.098082][T11782] workingset_activate 561 [ 3644.098082][T11782] workingset_nodereclaim 0 [ 3644.098082][T11782] pgrefill 7802 [ 3644.098082][T11782] pgscan 8252 [ 3644.098082][T11782] pgsteal 1325 [ 3644.212919][T11782] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11767,uid=0 [ 3644.229207][T11782] Memory cgroup out of memory: Killed process 11767 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3644.390071][T11825] set_target_v1_checkentry: 5 callbacks suppressed [ 3644.390079][T11825] Cannot find add_set index 0 as target 05:51:06 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:06 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3644.482463][T11839] Cannot find add_set index 0 as target [ 3644.636312][T11845] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3644.658410][T11845] CPU: 0 PID: 11845 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3644.667240][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3644.677288][T11845] Call Trace: [ 3644.680600][T11845] dump_stack+0x11d/0x181 [ 3644.684979][T11845] dump_header+0xaa/0x39c [ 3644.689379][T11845] oom_kill_process.cold+0x10/0x15 [ 3644.694502][T11845] out_of_memory+0x231/0xa60 [ 3644.699114][T11845] mem_cgroup_out_of_memory+0x128/0x150 [ 3644.704710][T11845] try_charge+0xb6c/0xbf0 [ 3644.709107][T11845] mem_cgroup_try_charge+0xd2/0x260 [ 3644.714323][T11845] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3644.720172][T11845] wp_page_copy+0x322/0xf20 [ 3644.724714][T11845] ? __read_once_size+0x41/0xe0 [ 3644.729576][T11845] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3644.735477][T11845] do_wp_page+0x192/0xd20 [ 3644.739825][T11845] __handle_mm_fault+0x1d16/0x2e00 [ 3644.744963][T11845] handle_mm_fault+0x21b/0x530 [ 3644.749742][T11845] do_page_fault+0x496/0xa3d [ 3644.754477][T11845] page_fault+0x34/0x40 [ 3644.758634][T11845] RIP: 0033:0x45ad1b [ 3644.762540][T11845] Code: 25 20 06 00 00 b8 40 70 41 00 48 89 15 8e dc 82 00 48 85 c0 74 08 4c 89 cf e8 31 c3 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 6a 52 2c 00 00 00 00 00 48 c7 05 4f 52 2c 00 00 00 00 00 [ 3644.782746][T11845] RSP: 002b:00007ffec8967580 EFLAGS: 00010202 [ 3644.789014][T11845] RAX: 0000000000000000 RBX: 00007ffec8967580 RCX: 0000000000417053 [ 3644.796986][T11845] RDX: 000007a17be621f6 RSI: 0000000000000018 RDI: 0000000002307c20 [ 3644.804960][T11845] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3644.813008][T11845] R10: 0000000002307c10 R11: 0000000000000202 R12: 0000000000000001 [ 3644.821029][T11845] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 05:51:06 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3644.852801][T11845] memory: usage 307200kB, limit 307200kB, failcnt 277720 [ 3644.860375][T11845] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3644.892820][T11845] Memory cgroup stats for /syz0: [ 3644.892968][T11845] anon 170098688 [ 3644.892968][T11845] file 0 [ 3644.892968][T11845] kernel_stack 12718080 [ 3644.892968][T11845] slab 22917120 [ 3644.892968][T11845] sock 0 [ 3644.892968][T11845] shmem 0 [ 3644.892968][T11845] file_mapped 135168 [ 3644.892968][T11845] file_dirty 0 [ 3644.892968][T11845] file_writeback 0 [ 3644.892968][T11845] anon_thp 65011712 [ 3644.892968][T11845] inactive_anon 0 [ 3644.892968][T11845] active_anon 170098688 [ 3644.892968][T11845] inactive_file 0 [ 3644.892968][T11845] active_file 24576 [ 3644.892968][T11845] unevictable 0 [ 3644.892968][T11845] slab_reclaimable 3649536 [ 3644.892968][T11845] slab_unreclaimable 19267584 [ 3644.892968][T11845] pgfault 404514 [ 3644.892968][T11845] pgmajfault 0 [ 3644.892968][T11845] workingset_refault 825 [ 3644.892968][T11845] workingset_activate 561 [ 3644.892968][T11845] workingset_nodereclaim 0 [ 3644.892968][T11845] pgrefill 7835 [ 3644.892968][T11845] pgscan 8285 [ 3644.892968][T11845] pgsteal 1325 05:51:06 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:06 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:07 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3645.242719][T11845] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11841,uid=0 [ 3645.309477][T11845] Memory cgroup out of memory: Killed process 11841 (syz-executor.0) total-vm:74968kB, anon-rss:2232kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:51:07 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3645.529958][T11900] Cannot find add_set index 0 as target 05:51:07 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:07 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:07 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3645.766896][T11926] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3645.813827][T11926] CPU: 1 PID: 11926 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3645.822683][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3645.832736][T11926] Call Trace: [ 3645.836075][T11926] dump_stack+0x11d/0x181 [ 3645.840434][T11926] dump_header+0xaa/0x39c [ 3645.845038][T11926] oom_kill_process.cold+0x10/0x15 [ 3645.850162][T11926] out_of_memory+0x231/0xa60 [ 3645.854864][T11926] mem_cgroup_out_of_memory+0x128/0x150 [ 3645.860432][T11926] try_charge+0xb6c/0xbf0 [ 3645.864788][T11926] mem_cgroup_try_charge+0xd2/0x260 [ 3645.870049][T11926] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3645.875690][T11926] wp_page_copy+0x322/0xf20 [ 3645.880276][T11926] ? __read_once_size+0x41/0xe0 [ 3645.885145][T11926] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3645.891093][T11926] do_wp_page+0x192/0xd20 [ 3645.895571][T11926] __handle_mm_fault+0x1d16/0x2e00 [ 3645.900709][T11926] handle_mm_fault+0x21b/0x530 [ 3645.905495][T11926] do_page_fault+0x496/0xa3d [ 3645.910145][T11926] page_fault+0x34/0x40 [ 3645.914304][T11926] RIP: 0033:0x45ad1b [ 3645.918206][T11926] Code: 25 20 06 00 00 b8 40 70 41 00 48 89 15 8e dc 82 00 48 85 c0 74 08 4c 89 cf e8 31 c3 fb ff 45 85 f6 0f 85 58 01 00 00 48 85 db <48> c7 05 6a 52 2c 00 00 00 00 00 48 c7 05 4f 52 2c 00 00 00 00 00 [ 3645.937901][T11926] RSP: 002b:00007ffec8967580 EFLAGS: 00010202 [ 3645.943974][T11926] RAX: 0000000000000000 RBX: 00007ffec8967580 RCX: 0000000000417053 [ 3645.951949][T11926] RDX: 000007a215bbcdb9 RSI: 0000000000000018 RDI: 0000000002307c20 05:51:07 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3645.959930][T11926] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3645.967963][T11926] R10: 0000000002307c10 R11: 0000000000000202 R12: 0000000000000001 [ 3645.975937][T11926] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3645.997141][T11926] memory: usage 307200kB, limit 307200kB, failcnt 277746 [ 3646.017030][T11926] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3646.051374][T11926] Memory cgroup stats for /syz0: [ 3646.051586][T11926] anon 170250240 [ 3646.051586][T11926] file 0 [ 3646.051586][T11926] kernel_stack 12754944 [ 3646.051586][T11926] slab 23052288 [ 3646.051586][T11926] sock 0 [ 3646.051586][T11926] shmem 0 [ 3646.051586][T11926] file_mapped 135168 [ 3646.051586][T11926] file_dirty 0 [ 3646.051586][T11926] file_writeback 0 [ 3646.051586][T11926] anon_thp 65011712 [ 3646.051586][T11926] inactive_anon 0 [ 3646.051586][T11926] active_anon 170250240 [ 3646.051586][T11926] inactive_file 0 [ 3646.051586][T11926] active_file 24576 [ 3646.051586][T11926] unevictable 0 [ 3646.051586][T11926] slab_reclaimable 3649536 05:51:08 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3646.051586][T11926] slab_unreclaimable 19402752 [ 3646.051586][T11926] pgfault 404580 [ 3646.051586][T11926] pgmajfault 0 [ 3646.051586][T11926] workingset_refault 825 [ 3646.051586][T11926] workingset_activate 561 [ 3646.051586][T11926] workingset_nodereclaim 0 [ 3646.051586][T11926] pgrefill 7835 [ 3646.051586][T11926] pgscan 8318 [ 3646.051586][T11926] pgsteal 1325 05:51:08 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:08 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3646.352801][T11926] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11908,uid=0 05:51:08 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3646.394813][T11926] Memory cgroup out of memory: Killed process 11908 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:51:08 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3646.469935][T11975] Cannot find add_set index 0 as target 05:51:08 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3646.635558][T11994] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3646.712733][T11994] CPU: 1 PID: 11994 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3646.721513][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3646.731661][T11994] Call Trace: [ 3646.734954][T11994] dump_stack+0x11d/0x181 [ 3646.739281][T11994] dump_header+0xaa/0x39c [ 3646.743626][T11994] oom_kill_process.cold+0x10/0x15 [ 3646.748783][T11994] out_of_memory+0x231/0xa60 [ 3646.753418][T11994] mem_cgroup_out_of_memory+0x128/0x150 [ 3646.759178][T11994] try_charge+0xb6c/0xbf0 [ 3646.763562][T11994] mem_cgroup_try_charge+0xd2/0x260 [ 3646.768780][T11994] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3646.774491][T11994] wp_page_copy+0x322/0xf20 [ 3646.779093][T11994] ? __read_once_size+0x41/0xe0 [ 3646.783979][T11994] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3646.789933][T11994] do_wp_page+0x192/0xd20 [ 3646.794341][T11994] __handle_mm_fault+0x1d16/0x2e00 [ 3646.799507][T11994] handle_mm_fault+0x21b/0x530 [ 3646.804370][T11994] do_page_fault+0x496/0xa3d [ 3646.808976][T11994] page_fault+0x34/0x40 [ 3646.813213][T11994] RIP: 0033:0x45acce [ 3646.817220][T11994] Code: 00 00 85 c0 41 89 c5 0f 85 fc 00 00 00 64 8b 04 25 d0 02 00 00 41 39 c4 0f 84 12 02 00 00 48 8b 05 57 dc 82 00 48 85 c0 74 04 <48> 83 00 04 64 8b 04 25 d0 02 00 00 64 89 04 25 d4 02 00 00 0f 31 [ 3646.836824][T11994] RSP: 002b:00007ffec8967580 EFLAGS: 00010206 [ 3646.842893][T11994] RAX: 0000000000c88428 RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3646.850868][T11994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 05:51:08 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x6]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3646.858892][T11994] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3646.866924][T11994] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3646.874899][T11994] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3646.898554][T11994] memory: usage 307200kB, limit 307200kB, failcnt 277774 05:51:08 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3646.925904][T11994] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:51:09 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:09 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3647.232184][T11994] Memory cgroup stats for /syz0: [ 3647.232349][T11994] anon 170115072 [ 3647.232349][T11994] file 0 [ 3647.232349][T11994] kernel_stack 12718080 [ 3647.232349][T11994] slab 23052288 [ 3647.232349][T11994] sock 0 [ 3647.232349][T11994] shmem 0 [ 3647.232349][T11994] file_mapped 135168 [ 3647.232349][T11994] file_dirty 0 [ 3647.232349][T11994] file_writeback 0 [ 3647.232349][T11994] anon_thp 65011712 [ 3647.232349][T11994] inactive_anon 0 [ 3647.232349][T11994] active_anon 170115072 [ 3647.232349][T11994] inactive_file 0 [ 3647.232349][T11994] active_file 24576 [ 3647.232349][T11994] unevictable 0 [ 3647.232349][T11994] slab_reclaimable 3649536 [ 3647.232349][T11994] slab_unreclaimable 19402752 [ 3647.232349][T11994] pgfault 404679 [ 3647.232349][T11994] pgmajfault 0 [ 3647.232349][T11994] workingset_refault 825 [ 3647.232349][T11994] workingset_activate 561 [ 3647.232349][T11994] workingset_nodereclaim 0 [ 3647.232349][T11994] pgrefill 7868 [ 3647.232349][T11994] pgscan 8318 [ 3647.232349][T11994] pgsteal 1325 [ 3647.327325][T11994] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11982,uid=0 [ 3647.344131][T11994] Memory cgroup out of memory: Killed process 11982 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:51:09 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = fsopen(&(0x7f0000000140)='coda\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000000c0)='user_id', &(0x7f0000000180)='./file0\x00', r5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000340)={r6, 0x1, 0x2, 0x0, 0x8, 0x0, 0x8, 0x9, 0x100, 0x0, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f00000001c0)={r6, 0x1000, 0xfffffffb, 0x7, 0x100, 0x3, 0x9, 0x4, 0x4, 0x80000001, 0x7, 0x6}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_buf(r1, 0x29, 0x2d, &(0x7f0000000040)=""/235, &(0x7f0000000140)=0xeb) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) setsockopt$packet_int(r9, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) r10 = socket$packet(0x11, 0x3, 0x300) dup(r10) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) r14 = dup(r13) setsockopt$packet_int(r14, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$VIDIOC_S_EXT_CTRLS(r14, 0xc0205648, &(0x7f0000000280)={0xa00000, 0x2, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x9c0908, 0x2, [], @p_u8=&(0x7f0000000200)=0xed}}) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r20, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r20, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r20, {0x4}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x64}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r25, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r22, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r25, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r25, {0x4}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x64}}, 0x0) bind$packet(r15, &(0x7f0000000640)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @random="5d96e425d14b"}, 0x14) sendto$inet6(r10, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0], 0x1) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000000)=0xffff7fff) [ 3647.438803][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3647.495854][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3647.504465][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3647.514521][ T8006] Call Trace: [ 3647.517819][ T8006] dump_stack+0x11d/0x181 [ 3647.522179][ T8006] dump_header+0xaa/0x39c [ 3647.526562][ T8006] oom_kill_process.cold+0x10/0x15 [ 3647.531734][ T8006] out_of_memory+0x231/0xa60 [ 3647.536345][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3647.541925][ T8006] try_charge+0x800/0xbf0 [ 3647.546284][ T8006] mem_cgroup_try_charge+0xd2/0x260 [ 3647.551582][ T8006] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3647.557381][ T8006] wp_page_copy+0x322/0xf20 [ 3647.561907][ T8006] ? __read_once_size+0x41/0xe0 [ 3647.566775][ T8006] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3647.572684][ T8006] do_wp_page+0x192/0xd20 [ 3647.577034][ T8006] __handle_mm_fault+0x1d16/0x2e00 [ 3647.582179][ T8006] handle_mm_fault+0x21b/0x530 [ 3647.586955][ T8006] do_page_fault+0x496/0xa3d [ 3647.591560][ T8006] page_fault+0x34/0x40 05:51:09 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3647.595716][ T8006] RIP: 0033:0x4102c1 [ 3647.599615][ T8006] Code: 3d d3 7d 35 00 00 0f 85 d8 08 00 00 e8 18 a9 04 00 85 c0 89 c5 0f 88 39 06 00 00 0f 84 ba 05 00 00 89 c6 bf bb 22 4c 00 31 c0 da 1b ff ff c7 44 24 30 00 00 00 00 e8 ad 23 ff ff 49 89 c6 48 [ 3647.619214][ T8006] RSP: 002b:00007ffec89675d0 EFLAGS: 00010246 [ 3647.625329][ T8006] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045ac9a [ 3647.633430][ T8006] RDX: 0000000000000000 RSI: 000000000000559f RDI: 00000000004c22bb [ 3647.641514][ T8006] RBP: 000000000000559f R08: 0000000000000001 R09: 0000000002307940 [ 3647.649487][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3647.657456][ T8006] R13: 00007ffec8967600 R14: 0000000000000000 R15: 00007ffec8967610 [ 3647.692937][ T8006] memory: usage 307004kB, limit 307200kB, failcnt 277774 [ 3647.720411][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3647.741926][ T8006] Memory cgroup stats for /syz0: [ 3647.742177][ T8006] anon 170082304 [ 3647.742177][ T8006] file 0 [ 3647.742177][ T8006] kernel_stack 12718080 [ 3647.742177][ T8006] slab 23052288 [ 3647.742177][ T8006] sock 0 [ 3647.742177][ T8006] shmem 0 [ 3647.742177][ T8006] file_mapped 135168 [ 3647.742177][ T8006] file_dirty 0 [ 3647.742177][ T8006] file_writeback 0 [ 3647.742177][ T8006] anon_thp 65011712 [ 3647.742177][ T8006] inactive_anon 0 [ 3647.742177][ T8006] active_anon 170082304 [ 3647.742177][ T8006] inactive_file 0 [ 3647.742177][ T8006] active_file 24576 [ 3647.742177][ T8006] unevictable 0 [ 3647.742177][ T8006] slab_reclaimable 3649536 [ 3647.742177][ T8006] slab_unreclaimable 19402752 [ 3647.742177][ T8006] pgfault 404712 [ 3647.742177][ T8006] pgmajfault 0 [ 3647.742177][ T8006] workingset_refault 825 [ 3647.742177][ T8006] workingset_activate 561 [ 3647.742177][ T8006] workingset_nodereclaim 0 [ 3647.742177][ T8006] pgrefill 7868 [ 3647.742177][ T8006] pgscan 8318 [ 3647.742177][ T8006] pgsteal 1325 [ 3647.843279][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8689,uid=0 [ 3647.859332][ T8006] Memory cgroup out of memory: Killed process 8689 (syz-executor.0) total-vm:74704kB, anon-rss:2200kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3647.894423][T12073] Cannot find add_set index 0 as target [ 3647.919141][ T8016] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3647.942808][ T8016] CPU: 0 PID: 8016 Comm: syz-executor.2 Not tainted 5.6.0-rc1-syzkaller #0 [ 3647.951523][ T8016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3647.961576][ T8016] Call Trace: [ 3647.964885][ T8016] dump_stack+0x11d/0x181 [ 3647.969228][ T8016] dump_header+0xaa/0x39c [ 3647.973649][ T8016] oom_kill_process.cold+0x10/0x15 [ 3647.978778][ T8016] out_of_memory+0x231/0xa60 [ 3647.983386][ T8016] mem_cgroup_out_of_memory+0x128/0x150 [ 3647.988953][ T8016] try_charge+0xb6c/0xbf0 [ 3647.993356][ T8016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3647.999618][ T8016] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3648.005093][ T8016] __memcg_kmem_charge+0xcf/0x1b0 [ 3648.010135][ T8016] __alloc_pages_nodemask+0x26c/0x310 [ 3648.015565][ T8016] alloc_pages_current+0xd1/0x170 [ 3648.020744][ T8016] pte_alloc_one+0x18/0x50 [ 3648.025175][ T8016] __pte_alloc+0x2d/0x220 [ 3648.029654][ T8016] copy_page_range+0x13a2/0x1a00 [ 3648.034669][ T8016] ? __vma_link_rb+0x3f4/0x440 [ 3648.039518][ T8016] dup_mm+0x74a/0xba0 05:51:10 executing program 3: syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r0 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000000)={0x22}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x220000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, 0x1, 0x80000001}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)={0x1, r2, 0x2}) r3 = dup3(r0, r1, 0x0) r4 = socket$inet(0x2, 0x800, 0xc3) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6, @link_local}, 0x42, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'batadv_slave_0\x00'}) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3648.043536][ T8016] copy_process+0x39d7/0x3b40 [ 3648.048225][ T8016] ? wp_page_reuse+0x10d/0x130 [ 3648.053024][ T8016] _do_fork+0xfe/0x7a0 [ 3648.057111][ T8016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3648.063369][ T8016] ? ktime_get_ts64+0x286/0x2c0 [ 3648.068418][ T8016] __x64_sys_clone+0x130/0x170 [ 3648.073327][ T8016] do_syscall_64+0xcc/0x3a0 [ 3648.077877][ T8016] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3648.083766][ T8016] RIP: 0033:0x45ac9a [ 3648.087674][ T8016] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3648.107455][ T8016] RSP: 002b:00007ffdcad8a510 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3648.115870][ T8016] RAX: ffffffffffffffda RBX: 00007ffdcad8a510 RCX: 000000000045ac9a [ 3648.123844][ T8016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3648.131816][ T8016] RBP: 00007ffdcad8a550 R08: 0000000000000001 R09: 0000000001e6f940 05:51:10 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3648.139788][ T8016] R10: 0000000001e6fc10 R11: 0000000000000246 R12: 0000000000000001 [ 3648.147761][ T8016] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdcad8a5a0 [ 3648.165666][ T8016] memory: usage 307200kB, limit 307200kB, failcnt 217113 [ 3648.206107][ T8016] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3648.232723][ T8016] Memory cgroup stats for /syz2: [ 3648.234172][ T8016] anon 228462592 [ 3648.234172][ T8016] file 77824 [ 3648.234172][ T8016] kernel_stack 7704576 [ 3648.234172][ T8016] slab 14397440 [ 3648.234172][ T8016] sock 0 [ 3648.234172][ T8016] shmem 0 [ 3648.234172][ T8016] file_mapped 0 [ 3648.234172][ T8016] file_dirty 135168 [ 3648.234172][ T8016] file_writeback 0 [ 3648.234172][ T8016] anon_thp 165675008 [ 3648.234172][ T8016] inactive_anon 0 [ 3648.234172][ T8016] active_anon 228372480 [ 3648.234172][ T8016] inactive_file 0 [ 3648.234172][ T8016] active_file 0 [ 3648.234172][ T8016] unevictable 0 [ 3648.234172][ T8016] slab_reclaimable 2297856 [ 3648.234172][ T8016] slab_unreclaimable 12099584 [ 3648.234172][ T8016] pgfault 495528 [ 3648.234172][ T8016] pgmajfault 0 05:51:10 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000ffa000/0x3000)=nil}) getrusage(0xffffffffffffffff, &(0x7f0000000040)) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:51:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x2b8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x60c842) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) setsockopt$packet_int(r6, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000140)) r7 = dup(r4) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000100)) write$P9_RSTATFS(r3, &(0x7f0000000080)={0x43, 0x9, 0x2, {0x0, 0x9, 0x8, 0x4, 0x7fff, 0x4, 0x1ff, 0x1ff, 0x1000}}, 0x43) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000040)) [ 3648.234172][ T8016] workingset_refault 1188 [ 3648.234172][ T8016] workingset_activate 792 [ 3648.234172][ T8016] workingset_nodereclaim 0 [ 3648.234172][ T8016] pgrefill 11478 [ 3648.234172][ T8016] pgscan 11691 [ 3648.234172][ T8016] pgsteal 1975 05:51:10 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3648.457882][T12097] Cannot find add_set index 0 as target 05:51:10 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000002640)='/dev/input/mouse#\x00', 0xff, 0x800600) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000026c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x5c, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1ff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48004}, 0x40) r3 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) [ 3648.537680][ T8016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=12024,uid=0 [ 3648.632785][ T8016] Memory cgroup out of memory: Killed process 12024 (syz-executor.2) total-vm:74968kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 05:51:10 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3648.755159][T12122] xt_socket: unknown flags 0x8 [ 3648.775977][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3648.802593][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3648.811212][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3648.821699][ T8006] Call Trace: [ 3648.825087][ T8006] dump_stack+0x11d/0x181 [ 3648.829432][ T8006] dump_header+0xaa/0x39c [ 3648.833780][ T8006] oom_kill_process.cold+0x10/0x15 [ 3648.838899][ T8006] out_of_memory+0x231/0xa60 [ 3648.843543][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3648.849109][ T8006] try_charge+0xb6c/0xbf0 [ 3648.853464][ T8006] mem_cgroup_try_charge+0xd2/0x260 [ 3648.858858][ T8006] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3648.864515][ T8006] wp_page_copy+0x322/0xf20 [ 3648.869052][ T8006] ? __read_once_size+0x41/0xe0 [ 3648.873910][ T8006] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3648.879819][ T8006] do_wp_page+0x192/0xd20 [ 3648.884167][ T8006] __handle_mm_fault+0x1d16/0x2e00 [ 3648.889413][ T8006] handle_mm_fault+0x21b/0x530 [ 3648.894194][ T8006] do_page_fault+0x496/0xa3d [ 3648.898800][ T8006] page_fault+0x34/0x40 [ 3648.903091][ T8006] RIP: 0033:0x45adfa [ 3648.906998][ T8006] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba [ 3648.926605][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00010246 [ 3648.932675][ T8006] RAX: 0000000000000000 RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3648.940738][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000c871a8 [ 3648.948711][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3648.956687][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 00000000000000ca [ 3648.964660][ T8006] R13: 00000000000055a8 R14: 0000000000000000 R15: 00007ffec8967610 [ 3649.012751][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277792 [ 3649.026763][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3649.056510][ T8006] Memory cgroup stats for /syz0: [ 3649.056757][ T8006] anon 170209280 [ 3649.056757][ T8006] file 0 [ 3649.056757][ T8006] kernel_stack 12718080 [ 3649.056757][ T8006] slab 23052288 [ 3649.056757][ T8006] sock 0 [ 3649.056757][ T8006] shmem 0 [ 3649.056757][ T8006] file_mapped 135168 [ 3649.056757][ T8006] file_dirty 0 [ 3649.056757][ T8006] file_writeback 0 [ 3649.056757][ T8006] anon_thp 65011712 [ 3649.056757][ T8006] inactive_anon 0 [ 3649.056757][ T8006] active_anon 170209280 [ 3649.056757][ T8006] inactive_file 0 [ 3649.056757][ T8006] active_file 24576 [ 3649.056757][ T8006] unevictable 0 [ 3649.056757][ T8006] slab_reclaimable 3649536 [ 3649.056757][ T8006] slab_unreclaimable 19402752 [ 3649.056757][ T8006] pgfault 404811 [ 3649.056757][ T8006] pgmajfault 0 [ 3649.056757][ T8006] workingset_refault 825 [ 3649.056757][ T8006] workingset_activate 561 [ 3649.056757][ T8006] workingset_nodereclaim 0 [ 3649.056757][ T8006] pgrefill 7901 [ 3649.056757][ T8006] pgscan 8351 [ 3649.056757][ T8006] pgsteal 1325 05:51:11 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000300)={0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3, 0x0, [], &(0x7f0000000380)}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b65740000000000000000000000000000000700000000000000030800000000000000680043540000000000000000000000eb000000002000000000000000000000016e657462696f732d6e7300000000000073797a3100000000000000000000000000000000003db1000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000000000000000000002004004f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000007000980000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000004feffffff00000000eb6b690ccc0f00"/694], 0x1) 05:51:11 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x40024, 0x0, 0xfffffffc}) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r5, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r9 = socket$packet(0x11, 0x3, 0x300) dup(r9) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00082cbd7000fedbdf25050000000500380000000000050030000000000005002e000100000008003c00a5070000080dc15452ed37b73b310a8367585b8b078be00000000a0009000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bind$packet(r9, &(0x7f0000000640)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r9, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) r13 = socket$packet(0x11, 0x3, 0x300) r14 = dup(r13) setsockopt$packet_int(r14, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) write$binfmt_script(r14, &(0x7f0000000080)=ANY=[@ANYRESDEC=r5, @ANYPTR], 0xfffffffffffffe6a) r15 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r15, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3649.375233][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12104,uid=0 05:51:11 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:11 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:11 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3649.443706][ T8006] Memory cgroup out of memory: Killed process 12104 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 3649.549245][ T1077] oom_reaper: reaped process 12104 (syz-executor.0), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 3649.585721][T12144] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3649.612841][T12144] CPU: 1 PID: 12144 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3649.621741][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3649.631791][T12144] Call Trace: [ 3649.635094][T12144] dump_stack+0x11d/0x181 [ 3649.639518][T12144] dump_header+0xaa/0x39c [ 3649.643918][T12144] oom_kill_process.cold+0x10/0x15 [ 3649.649139][T12144] out_of_memory+0x231/0xa60 [ 3649.653754][T12144] mem_cgroup_out_of_memory+0x128/0x150 [ 3649.659320][T12144] try_charge+0xb6c/0xbf0 [ 3649.663653][T12144] ? vmpressure+0x19e/0x290 [ 3649.668175][T12144] ? __rcu_read_unlock+0x77/0x3a0 [ 3649.673279][T12144] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3649.678755][T12144] __memcg_kmem_charge+0xcf/0x1b0 [ 3649.683794][T12144] copy_process+0x12bc/0x3b40 [ 3649.688521][T12144] ? record_times+0x16/0x90 [ 3649.693031][T12144] ? psi_task_change+0x1ad/0x2d0 [ 3649.698018][T12144] ? try_to_free_mem_cgroup_pages+0x258/0x4d0 [ 3649.704114][T12144] _do_fork+0xfe/0x7a0 [ 3649.708192][T12144] ? cgroup_file_notify+0xff/0x130 [ 3649.713320][T12144] ? blkcg_maybe_throttle_current+0x23d/0x580 [ 3649.719688][T12144] __x64_sys_clone+0x130/0x170 [ 3649.724477][T12144] do_syscall_64+0xcc/0x3a0 [ 3649.728995][T12144] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3649.734890][T12144] RIP: 0033:0x45f099 [ 3649.738803][T12144] Code: ff 48 85 f6 0f 84 d7 8c fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8c fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 3649.758516][T12144] RSP: 002b:00007fff58163ed8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 3649.766960][T12144] RAX: ffffffffffffffda RBX: 00007f9ecc716700 RCX: 000000000045f099 [ 3649.774935][T12144] RDX: 00007f9ecc7169d0 RSI: 00007f9ecc715db0 RDI: 00000000003d0f00 [ 3649.782974][T12144] RBP: 00007fff581640f0 R08: 00007f9ecc716700 R09: 00007f9ecc716700 [ 3649.790966][T12144] R10: 00007f9ecc7169d0 R11: 0000000000000202 R12: 0000000000000000 [ 3649.799043][T12144] R13: 00007fff58163f8f R14: 00007f9ecc7169c0 R15: 000000000076bfd4 05:51:11 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0x9, 0x0, 0x20000000, 0xffff7ffd}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) 05:51:11 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3649.882755][T12144] memory: usage 307200kB, limit 307200kB, failcnt 246720 [ 3649.906096][T12144] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3649.956803][T12144] Memory cgroup stats for /syz1: [ 3649.956986][T12144] anon 131059712 [ 3649.956986][T12144] file 98304 [ 3649.956986][T12144] kernel_stack 17399808 [ 3649.956986][T12144] slab 28909568 [ 3649.956986][T12144] sock 4096 [ 3649.956986][T12144] shmem 0 [ 3649.956986][T12144] file_mapped 0 [ 3649.956986][T12144] file_dirty 0 [ 3649.956986][T12144] file_writeback 0 [ 3649.956986][T12144] anon_thp 0 [ 3649.956986][T12144] inactive_anon 135168 [ 3649.956986][T12144] active_anon 131026944 [ 3649.956986][T12144] inactive_file 0 [ 3649.956986][T12144] active_file 77824 [ 3649.956986][T12144] unevictable 0 [ 3649.956986][T12144] slab_reclaimable 3379200 [ 3649.956986][T12144] slab_unreclaimable 25530368 [ 3649.956986][T12144] pgfault 476355 [ 3649.956986][T12144] pgmajfault 0 [ 3649.956986][T12144] workingset_refault 1650 [ 3649.956986][T12144] workingset_activate 1188 [ 3649.956986][T12144] workingset_nodereclaim 0 [ 3649.956986][T12144] pgrefill 17585 [ 3649.956986][T12144] pgscan 18067 [ 3649.956986][T12144] pgsteal 2406 [ 3650.077815][T12144] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12070,uid=0 05:51:12 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r3, &(0x7f0000000040)=""/193, 0xc1, 0x0, &(0x7f0000000180)=@isdn={0x22, 0x8, 0x80, 0x6, 0xff}, 0x80) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3650.119309][T12144] Memory cgroup out of memory: Killed process 12070 (syz-executor.1) total-vm:74836kB, anon-rss:180kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3650.159177][T12170] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3650.184400][T12170] CPU: 0 PID: 12170 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3650.193213][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3650.203814][T12170] Call Trace: [ 3650.207130][T12170] dump_stack+0x11d/0x181 [ 3650.211524][T12170] dump_header+0xaa/0x39c [ 3650.215883][T12170] oom_kill_process.cold+0x10/0x15 [ 3650.221058][T12170] out_of_memory+0x231/0xa60 [ 3650.225685][T12170] mem_cgroup_out_of_memory+0x128/0x150 [ 3650.231250][T12170] try_charge+0xb6c/0xbf0 [ 3650.235662][T12170] mem_cgroup_try_charge+0xd2/0x260 [ 3650.240913][T12170] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3650.246563][T12170] wp_page_copy+0x322/0xf20 [ 3650.251172][T12170] ? __read_once_size+0x41/0xe0 [ 3650.256069][T12170] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3650.261986][T12170] do_wp_page+0x192/0xd20 [ 3650.266395][T12170] __handle_mm_fault+0x1d16/0x2e00 [ 3650.271554][T12170] handle_mm_fault+0x21b/0x530 [ 3650.276318][T12170] do_page_fault+0x496/0xa3d [ 3650.280918][T12170] page_fault+0x34/0x40 [ 3650.285191][T12170] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3650.291536][T12170] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3650.311127][T12170] RSP: 0018:ffffc900155e3c98 EFLAGS: 00010206 [ 3650.317275][T12170] RAX: 0000000000000bbe RBX: 0000000000000028 RCX: 0000000000000005 [ 3650.325242][T12170] RDX: 0000000000000000 RSI: ffffc900155e3cf0 RDI: 0000000000719058 [ 3650.333215][T12170] RBP: ffffc900155e3cd0 R08: 0000000000006f6c R09: 000088801546ab90 [ 3650.341273][T12170] R10: 0000ffffffffffff R11: 000088801546ab97 R12: 0000000000719058 [ 3650.349309][T12170] R13: 0000000000719080 R14: ffffc900155e3cf0 R15: 00007ffffffff000 [ 3650.357303][T12170] ? _copy_to_user+0xb9/0xc0 [ 3650.361907][T12170] inet_gifconf+0x12c/0x280 [ 3650.366474][T12170] ? inet_abc_len.part.0+0xd0/0xd0 [ 3650.371585][T12170] dev_ifconf+0x8f/0x170 [ 3650.375871][T12170] sock_do_ioctl+0x16b/0x230 [ 3650.380464][T12170] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3650.386352][T12170] sock_ioctl+0x3a3/0x5e0 [ 3650.390696][T12170] ? tomoyo_file_ioctl+0x34/0x40 [ 3650.395790][T12170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3650.402028][T12170] ? dlci_ioctl_set+0x50/0x50 [ 3650.406715][T12170] ksys_ioctl+0x109/0x150 [ 3650.411045][T12170] __x64_sys_ioctl+0x4c/0x60 [ 3650.415711][T12170] do_syscall_64+0xcc/0x3a0 [ 3650.420228][T12170] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3650.426175][T12170] RIP: 0033:0x45c6c9 [ 3650.430071][T12170] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3650.449743][T12170] RSP: 002b:00007f1b92e76c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3650.458374][T12170] RAX: ffffffffffffffda RBX: 00007f1b92e776d4 RCX: 000000000045c6c9 [ 3650.466347][T12170] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000006 [ 3650.474445][T12170] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3650.482409][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3650.490377][T12170] R13: 0000000000000409 R14: 00000000004c6933 R15: 000000000076bf2c [ 3650.506381][T12170] memory: usage 307052kB, limit 307200kB, failcnt 277811 [ 3650.515682][T12170] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3650.522585][T12170] Memory cgroup stats for /syz0: [ 3650.522801][T12170] anon 170209280 [ 3650.522801][T12170] file 0 [ 3650.522801][T12170] kernel_stack 12754944 [ 3650.522801][T12170] slab 23052288 [ 3650.522801][T12170] sock 0 [ 3650.522801][T12170] shmem 0 [ 3650.522801][T12170] file_mapped 135168 [ 3650.522801][T12170] file_dirty 0 [ 3650.522801][T12170] file_writeback 0 [ 3650.522801][T12170] anon_thp 65011712 [ 3650.522801][T12170] inactive_anon 0 [ 3650.522801][T12170] active_anon 170209280 [ 3650.522801][T12170] inactive_file 0 [ 3650.522801][T12170] active_file 24576 [ 3650.522801][T12170] unevictable 0 [ 3650.522801][T12170] slab_reclaimable 3649536 [ 3650.522801][T12170] slab_unreclaimable 19402752 [ 3650.522801][T12170] pgfault 404877 [ 3650.522801][T12170] pgmajfault 0 [ 3650.522801][T12170] workingset_refault 825 [ 3650.522801][T12170] workingset_activate 561 [ 3650.522801][T12170] workingset_nodereclaim 0 [ 3650.522801][T12170] pgrefill 7901 [ 3650.522801][T12170] pgscan 8351 [ 3650.522801][T12170] pgsteal 1325 [ 3650.619456][T12170] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12074,uid=0 [ 3650.637448][T12170] Memory cgroup out of memory: Killed process 12074 (syz-executor.0) total-vm:74968kB, anon-rss:2232kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:51:12 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x4055}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x0, 0x2, '\x00', 0x3, 0xe9}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 05:51:12 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3650.707482][T12170] Cannot find add_set index 0 as target 05:51:12 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3650.776655][T12232] xt_socket: unknown flags 0x8 05:51:12 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000b80)={{{@in6, @in=@local}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000c80)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) [ 3650.995005][T12246] Cannot find add_set index 0 as target [ 3651.024210][T12259] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3651.035882][T12259] CPU: 1 PID: 12259 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3651.044581][T12259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3651.054632][T12259] Call Trace: [ 3651.057924][T12259] dump_stack+0x11d/0x181 [ 3651.062375][T12259] dump_header+0xaa/0x39c [ 3651.066721][T12259] oom_kill_process.cold+0x10/0x15 [ 3651.071840][T12259] out_of_memory+0x231/0xa60 [ 3651.076518][T12259] mem_cgroup_out_of_memory+0x128/0x150 [ 3651.082094][T12259] try_charge+0xb6c/0xbf0 [ 3651.086496][T12259] mem_cgroup_try_charge+0xd2/0x260 [ 3651.091704][T12259] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3651.097386][T12259] wp_page_copy+0x322/0xf20 [ 3651.101907][T12259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3651.108237][T12259] ? __read_once_size+0x41/0xe0 [ 3651.113101][T12259] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3651.119001][T12259] do_wp_page+0x192/0xd20 [ 3651.123360][T12259] __handle_mm_fault+0x1d16/0x2e00 [ 3651.128570][T12259] handle_mm_fault+0x21b/0x530 [ 3651.133350][T12259] do_page_fault+0x496/0xa3d [ 3651.137948][T12259] page_fault+0x34/0x40 [ 3651.142113][T12259] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 3651.148445][T12259] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 3651.168054][T12259] RSP: 0018:ffffc900157cfc98 EFLAGS: 00010206 [ 3651.174120][T12259] RAX: 000000000000032d RBX: 0000000000000028 RCX: 0000000000000005 [ 3651.182104][T12259] RDX: 0000000000000000 RSI: ffffc900157cfcf0 RDI: 0000000000719058 [ 3651.190085][T12259] RBP: ffffc900157cfcd0 R08: 000000306c6e7574 R09: 000088805fa10b50 [ 3651.198062][T12259] R10: 0000ffffffffffff R11: 000088805fa10b57 R12: 0000000000719058 [ 3651.206111][T12259] R13: 0000000000719080 R14: ffffc900157cfcf0 R15: 00007ffffffff000 [ 3651.214225][T12259] ? _copy_to_user+0xb9/0xc0 [ 3651.218841][T12259] inet_gifconf+0x12c/0x280 [ 3651.223353][T12259] ? inet_abc_len.part.0+0xd0/0xd0 [ 3651.228614][T12259] dev_ifconf+0x8f/0x170 [ 3651.232871][T12259] sock_do_ioctl+0x16b/0x230 [ 3651.237477][T12259] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3651.243382][T12259] sock_ioctl+0x3a3/0x5e0 [ 3651.247756][T12259] ? tomoyo_file_ioctl+0x34/0x40 [ 3651.252694][T12259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3651.259550][T12259] ? dlci_ioctl_set+0x50/0x50 [ 3651.264235][T12259] ksys_ioctl+0x109/0x150 [ 3651.268608][T12259] __x64_sys_ioctl+0x4c/0x60 [ 3651.273308][T12259] do_syscall_64+0xcc/0x3a0 [ 3651.277903][T12259] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3651.283786][T12259] RIP: 0033:0x45c6c9 [ 3651.287760][T12259] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3651.307354][T12259] RSP: 002b:00007f9ecc736c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3651.315759][T12259] RAX: ffffffffffffffda RBX: 00007f9ecc7376d4 RCX: 000000000045c6c9 [ 3651.323806][T12259] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000004 [ 3651.331767][T12259] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3651.339735][T12259] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3651.347871][T12259] R13: 0000000000000409 R14: 00000000004c6933 R15: 000000000076bf2c [ 3651.368811][T12280] Cannot find add_set index 0 as target [ 3651.370845][T12259] memory: usage 307200kB, limit 307200kB, failcnt 246733 [ 3651.384806][T12259] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 05:51:13 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x6}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3651.405729][T12259] Memory cgroup stats for /syz1: [ 3651.405947][T12259] anon 131059712 [ 3651.405947][T12259] file 98304 [ 3651.405947][T12259] kernel_stack 17362944 [ 3651.405947][T12259] slab 28909568 [ 3651.405947][T12259] sock 4096 [ 3651.405947][T12259] shmem 0 [ 3651.405947][T12259] file_mapped 0 [ 3651.405947][T12259] file_dirty 0 [ 3651.405947][T12259] file_writeback 0 [ 3651.405947][T12259] anon_thp 0 [ 3651.405947][T12259] inactive_anon 135168 [ 3651.405947][T12259] active_anon 131026944 [ 3651.405947][T12259] inactive_file 0 [ 3651.405947][T12259] active_file 77824 [ 3651.405947][T12259] unevictable 0 [ 3651.405947][T12259] slab_reclaimable 3379200 [ 3651.405947][T12259] slab_unreclaimable 25530368 [ 3651.405947][T12259] pgfault 476520 [ 3651.405947][T12259] pgmajfault 0 [ 3651.405947][T12259] workingset_refault 1650 [ 3651.405947][T12259] workingset_activate 1188 [ 3651.405947][T12259] workingset_nodereclaim 0 [ 3651.405947][T12259] pgrefill 17618 [ 3651.405947][T12259] pgscan 18067 [ 3651.405947][T12259] pgsteal 2406 [ 3651.528910][T12259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12240,uid=0 [ 3651.547355][T12259] Memory cgroup out of memory: Killed process 12240 (syz-executor.1) total-vm:74968kB, anon-rss:184kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:51:13 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x53, 0x9, 0xcfc6, {0x1, 0x7}, {0xcf, 0x8}, @cond=[{0x1, 0x8, 0x9620, 0x20, 0x8, 0x8}, {0x676a, 0x200, 0x8719, 0x2, 0xff, 0x7f}]}) 05:51:13 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:13 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3651.592471][ T1077] oom_reaper: reaped process 12240 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 3651.650404][T12259] xt_socket: unknown flags 0x8 [ 3651.663746][T12290] xt_socket: unknown flags 0x8 05:51:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @dev={[], 0x31}, 'veth1_to_hsr\x00'}}, 0x80) dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000500200000000000000000500000000000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000ac1414bbac14140000000000000000000000000000000000000000000000000069705f76746930000000000000000000000000ca8c4fcf000000000000000000000000000000000000000000000000000000000000000000980000010000000000000000000000000000000000001ffc8e58736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a31000000ecff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74657200000000000000000000000600000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00"/688], 0x2b0) 05:51:13 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3651.766905][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3651.805733][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3651.814610][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3651.824661][ T8006] Call Trace: [ 3651.827957][ T8006] dump_stack+0x11d/0x181 [ 3651.832409][ T8006] dump_header+0xaa/0x39c [ 3651.836760][ T8006] oom_kill_process.cold+0x10/0x15 [ 3651.841884][ T8006] out_of_memory+0x231/0xa60 [ 3651.846502][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3651.852146][ T8006] try_charge+0xb6c/0xbf0 [ 3651.856500][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3651.861971][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3651.867156][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3651.872584][ T8006] alloc_pages_current+0xd1/0x170 [ 3651.877687][ T8006] get_zeroed_page+0x14/0x50 [ 3651.882445][ T8006] __pud_alloc+0x48/0x250 [ 3651.886807][ T8006] ? __anon_vma_interval_tree_augment_rotate+0xfd/0x110 [ 3651.893756][ T8006] pud_alloc+0xc3/0x100 [ 3651.897933][ T8006] copy_page_range+0x270/0x1a00 [ 3651.902939][ T8006] ? __rcu_read_unlock+0x77/0x3a0 [ 3651.907970][ T8006] ? __write_once_size.constprop.0+0x20/0x20 05:51:13 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x294300, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x0, 0x1, 0xffc000, r5}, &(0x7f00000000c0)=0x10) r6 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000000)={0x22}) dup3(r6, r0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0x0, 0x3, 0x20000000}) [ 3651.913990][ T8006] ? __rb_rotate_set_parents+0x9a/0xf0 [ 3651.919491][ T8006] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 3651.925217][ T8006] ? vma_gap_callbacks_rotate+0x126/0x190 [ 3651.930966][ T8006] ? vm_get_page_prot+0x90/0x90 [ 3651.936878][ T8006] dup_mm+0x74a/0xba0 [ 3651.940884][ T8006] copy_process+0x39d7/0x3b40 [ 3651.945570][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3651.950386][ T8006] _do_fork+0xfe/0x7a0 [ 3651.954467][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3651.960847][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3651.965722][ T8006] __x64_sys_clone+0x130/0x170 [ 3651.970506][ T8006] do_syscall_64+0xcc/0x3a0 [ 3651.975023][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3651.980916][ T8006] RIP: 0033:0x45ac9a [ 3651.984809][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3652.004400][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3652.012811][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3652.020916][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3652.028886][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3652.036854][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3652.044821][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3652.072551][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277871 [ 3652.088324][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3652.108671][ T8006] Memory cgroup stats for /syz0: [ 3652.108943][ T8006] anon 170250240 [ 3652.108943][ T8006] file 0 [ 3652.108943][ T8006] kernel_stack 12754944 [ 3652.108943][ T8006] slab 23052288 [ 3652.108943][ T8006] sock 0 [ 3652.108943][ T8006] shmem 0 [ 3652.108943][ T8006] file_mapped 135168 [ 3652.108943][ T8006] file_dirty 0 [ 3652.108943][ T8006] file_writeback 0 [ 3652.108943][ T8006] anon_thp 65011712 [ 3652.108943][ T8006] inactive_anon 0 [ 3652.108943][ T8006] active_anon 170250240 [ 3652.108943][ T8006] inactive_file 0 [ 3652.108943][ T8006] active_file 24576 [ 3652.108943][ T8006] unevictable 0 [ 3652.108943][ T8006] slab_reclaimable 3649536 05:51:14 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3652.108943][ T8006] slab_unreclaimable 19402752 [ 3652.108943][ T8006] pgfault 405009 [ 3652.108943][ T8006] pgmajfault 0 [ 3652.108943][ T8006] workingset_refault 825 [ 3652.108943][ T8006] workingset_activate 561 [ 3652.108943][ T8006] workingset_nodereclaim 0 [ 3652.108943][ T8006] pgrefill 7901 [ 3652.108943][ T8006] pgscan 8351 [ 3652.108943][ T8006] pgsteal 1325 05:51:14 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3652.226924][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12281,uid=0 [ 3652.245594][ T8006] Memory cgroup out of memory: Killed process 12281 (syz-executor.0) total-vm:75100kB, anon-rss:2240kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:51:14 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x3a5a40, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xae}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x3f}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) r3 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000000)={0x22}) r4 = dup3(r3, r0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000000)={0x80000000022}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, 0x0) linkat(r4, &(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00', 0x400) [ 3652.300530][T12316] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3652.338664][T12340] Cannot find add_set index 0 as target [ 3652.347021][T12316] CPU: 1 PID: 12316 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3652.355713][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3652.365833][T12316] Call Trace: [ 3652.369133][T12316] dump_stack+0x11d/0x181 [ 3652.373478][T12316] dump_header+0xaa/0x39c [ 3652.377863][T12316] oom_kill_process.cold+0x10/0x15 [ 3652.382976][T12316] out_of_memory+0x231/0xa60 [ 3652.387581][T12316] mem_cgroup_out_of_memory+0x128/0x150 [ 3652.393175][T12316] try_charge+0xb6c/0xbf0 [ 3652.397510][T12316] ? __read_once_size+0x10/0xe0 [ 3652.402986][T12316] ? __rcu_read_unlock+0x77/0x3a0 [ 3652.408025][T12316] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3652.413503][T12316] __memcg_kmem_charge+0xcf/0x1b0 [ 3652.418533][T12316] copy_process+0x12bc/0x3b40 [ 3652.423240][T12316] _do_fork+0xfe/0x7a0 [ 3652.427363][T12316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3652.433608][T12316] ? ktime_get_ts64+0x286/0x2c0 [ 3652.438464][T12316] __x64_sys_clone+0x130/0x170 [ 3652.443241][T12316] do_syscall_64+0xcc/0x3a0 [ 3652.447775][T12316] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3652.453661][T12316] RIP: 0033:0x45c6c9 [ 3652.457553][T12316] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3652.477160][T12316] RSP: 002b:00007f9ecc736c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3652.485573][T12316] RAX: ffffffffffffffda RBX: 00007f9ecc7376d4 RCX: 000000000045c6c9 [ 3652.493549][T12316] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000002000100 05:51:14 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:14 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3652.501510][T12316] RBP: 000000000076bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 3652.509478][T12316] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 3652.517445][T12316] R13: 0000000000000070 R14: 00000000004c2f5a R15: 000000000076bf2c [ 3652.543938][T12316] memory: usage 307192kB, limit 307200kB, failcnt 246781 [ 3652.551002][T12316] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3652.580213][T12316] Memory cgroup stats for /syz1: [ 3652.580657][T12316] anon 131059712 [ 3652.580657][T12316] file 98304 [ 3652.580657][T12316] kernel_stack 17399808 [ 3652.580657][T12316] slab 28909568 [ 3652.580657][T12316] sock 4096 [ 3652.580657][T12316] shmem 0 [ 3652.580657][T12316] file_mapped 0 [ 3652.580657][T12316] file_dirty 0 [ 3652.580657][T12316] file_writeback 0 [ 3652.580657][T12316] anon_thp 0 [ 3652.580657][T12316] inactive_anon 135168 [ 3652.580657][T12316] active_anon 131162112 [ 3652.580657][T12316] inactive_file 0 [ 3652.580657][T12316] active_file 77824 [ 3652.580657][T12316] unevictable 0 [ 3652.580657][T12316] slab_reclaimable 3379200 [ 3652.580657][T12316] slab_unreclaimable 25530368 [ 3652.580657][T12316] pgfault 476586 [ 3652.580657][T12316] pgmajfault 0 [ 3652.580657][T12316] workingset_refault 1650 [ 3652.580657][T12316] workingset_activate 1188 [ 3652.580657][T12316] workingset_nodereclaim 0 [ 3652.580657][T12316] pgrefill 17651 [ 3652.580657][T12316] pgscan 18133 [ 3652.580657][T12316] pgsteal 2406 [ 3652.678379][T12316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=12292,uid=0 05:51:14 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3652.694525][T12316] Memory cgroup out of memory: Killed process 12292 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:51:14 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3652.802329][T12306] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3652.843422][T12306] CPU: 0 PID: 12306 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3652.852195][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3652.862291][T12306] Call Trace: [ 3652.865597][T12306] dump_stack+0x11d/0x181 [ 3652.869947][T12306] dump_header+0xaa/0x39c [ 3652.874294][T12306] oom_kill_process.cold+0x10/0x15 [ 3652.879413][T12306] out_of_memory+0x231/0xa60 [ 3652.884019][T12306] mem_cgroup_out_of_memory+0x128/0x150 05:51:14 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3652.889618][T12306] try_charge+0x800/0xbf0 [ 3652.893998][T12306] mem_cgroup_try_charge+0xd2/0x260 [ 3652.899213][T12306] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3652.904855][T12306] __handle_mm_fault+0x197f/0x2e00 [ 3652.909999][T12306] handle_mm_fault+0x21b/0x530 [ 3652.914881][T12306] do_page_fault+0x496/0xa3d [ 3652.919480][T12306] page_fault+0x34/0x40 [ 3652.923635][T12306] RIP: 0033:0x413ebf [ 3652.927535][T12306] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 3652.947311][T12306] RSP: 002b:00007fff58163f20 EFLAGS: 00010206 [ 3652.953383][T12306] RAX: 00007f9ecc6f6000 RBX: 0000000000020000 RCX: 000000000045c71a [ 3652.961359][T12306] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 3652.969336][T12306] RBP: 00007fff58164000 R08: ffffffffffffffff R09: 0000000000000000 [ 3652.977306][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff581640f0 [ 3652.985279][T12306] R13: 00007f9ecc716700 R14: 0000000000000001 R15: 000000000076bfd4 [ 3652.996755][T12306] memory: usage 306900kB, limit 307200kB, failcnt 246781 [ 3653.004456][T12306] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3653.012022][T12306] Memory cgroup stats for /syz1: [ 3653.012166][T12306] anon 131059712 [ 3653.012166][T12306] file 98304 [ 3653.012166][T12306] kernel_stack 17399808 [ 3653.012166][T12306] slab 28909568 [ 3653.012166][T12306] sock 4096 [ 3653.012166][T12306] shmem 0 [ 3653.012166][T12306] file_mapped 0 [ 3653.012166][T12306] file_dirty 0 [ 3653.012166][T12306] file_writeback 0 05:51:15 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) setsockopt$packet_int(r6, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000180)) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000040)={0x6002, 0x652d}) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) [ 3653.012166][T12306] anon_thp 0 [ 3653.012166][T12306] inactive_anon 135168 [ 3653.012166][T12306] active_anon 131162112 [ 3653.012166][T12306] inactive_file 0 [ 3653.012166][T12306] active_file 77824 [ 3653.012166][T12306] unevictable 0 [ 3653.012166][T12306] slab_reclaimable 3379200 [ 3653.012166][T12306] slab_unreclaimable 25530368 [ 3653.012166][T12306] pgfault 476586 [ 3653.012166][T12306] pgmajfault 0 [ 3653.012166][T12306] workingset_refault 1650 [ 3653.012166][T12306] workingset_activate 1188 [ 3653.012166][T12306] workingset_nodereclaim 0 [ 3653.012166][T12306] pgrefill 17651 [ 3653.012166][T12306] pgscan 18133 [ 3653.012166][T12306] pgsteal 2406 [ 3653.113894][T12306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=6402,uid=0 [ 3653.143497][T12306] Memory cgroup out of memory: Killed process 6402 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3653.231800][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3653.247300][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3653.255895][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3653.266152][ T8006] Call Trace: [ 3653.269452][ T8006] dump_stack+0x11d/0x181 [ 3653.273790][ T8006] dump_header+0xaa/0x39c [ 3653.278114][ T8006] oom_kill_process.cold+0x10/0x15 [ 3653.283210][ T8006] out_of_memory+0x231/0xa60 [ 3653.287791][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3653.293338][ T8006] try_charge+0xb6c/0xbf0 [ 3653.297667][ T8006] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3653.303178][ T8006] __memcg_kmem_charge+0xcf/0x1b0 [ 3653.308254][ T8006] __alloc_pages_nodemask+0x26c/0x310 [ 3653.313688][ T8006] alloc_pages_current+0xd1/0x170 [ 3653.318709][ T8006] pte_alloc_one+0x18/0x50 [ 3653.323123][ T8006] __pte_alloc+0x2d/0x220 [ 3653.327440][ T8006] copy_page_range+0x13a2/0x1a00 [ 3653.332363][ T8006] ? __rcu_read_unlock+0x77/0x3a0 [ 3653.337406][ T8006] ? __rb_rotate_set_parents+0x9a/0xf0 [ 3653.342925][ T8006] dup_mm+0x74a/0xba0 [ 3653.346994][ T8006] copy_process+0x39d7/0x3b40 [ 3653.351693][ T8006] ? wp_page_reuse+0x10d/0x130 [ 3653.356460][ T8006] _do_fork+0xfe/0x7a0 [ 3653.360514][ T8006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3653.366738][ T8006] ? ktime_get_ts64+0x286/0x2c0 [ 3653.371649][ T8006] __x64_sys_clone+0x130/0x170 [ 3653.376403][ T8006] do_syscall_64+0xcc/0x3a0 [ 3653.380919][ T8006] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3653.386798][ T8006] RIP: 0033:0x45ac9a [ 3653.390687][ T8006] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 3653.410274][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3653.418673][ T8006] RAX: ffffffffffffffda RBX: 00007ffec8967580 RCX: 000000000045ac9a 05:51:15 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:15 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3653.426654][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3653.434613][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3653.442565][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3653.450517][ T8006] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 05:51:15 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) 05:51:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0xfeff, 0x20, 0x4, 0x2}, {0x3, 0x9, 0x9, 0x451}, {0x3, 0x4, 0x3, 0x73d0}, {0x9, 0x8, 0x9, 0x3150}, {0x62b2, 0xd4, 0x7}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, 0x0) fchdir(r4) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r6, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x100, 0x2, 0x8, 0x9, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000200)={0xb, {0x6, 0x8, 0x79, 0x3}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x2b0) [ 3653.476893][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277879 [ 3653.487868][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3653.494806][ T8006] Memory cgroup stats for /syz0: [ 3653.494954][ T8006] anon 170225664 [ 3653.494954][ T8006] file 0 [ 3653.494954][ T8006] kernel_stack 12718080 [ 3653.494954][ T8006] slab 23052288 [ 3653.494954][ T8006] sock 0 [ 3653.494954][ T8006] shmem 0 [ 3653.494954][ T8006] file_mapped 135168 [ 3653.494954][ T8006] file_dirty 0 [ 3653.494954][ T8006] file_writeback 0 [ 3653.494954][ T8006] anon_thp 65011712 [ 3653.494954][ T8006] inactive_anon 0 [ 3653.494954][ T8006] active_anon 170225664 [ 3653.494954][ T8006] inactive_file 0 [ 3653.494954][ T8006] active_file 24576 [ 3653.494954][ T8006] unevictable 0 [ 3653.494954][ T8006] slab_reclaimable 3649536 [ 3653.494954][ T8006] slab_unreclaimable 19402752 [ 3653.494954][ T8006] pgfault 405075 [ 3653.494954][ T8006] pgmajfault 0 [ 3653.494954][ T8006] workingset_refault 825 [ 3653.494954][ T8006] workingset_activate 561 [ 3653.494954][ T8006] workingset_nodereclaim 0 [ 3653.494954][ T8006] pgrefill 7901 [ 3653.494954][ T8006] pgscan 8384 [ 3653.494954][ T8006] pgsteal 1325 05:51:15 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3653.669384][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12223,uid=0 [ 3653.688173][ T8006] Memory cgroup out of memory: Killed process 12223 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:51:15 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20000, 0x0) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) fremovexattr(r5, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getpeername$netlink(r4, &(0x7f0000000040), &(0x7f0000000080)=0xc) r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r7 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000000)={0x22, 0x0, 0xffff}) r8 = dup3(r7, r6, 0x0) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000000)={0xef8, 0x6}) [ 3653.808007][T12425] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 05:51:15 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3653.892791][T12425] CPU: 1 PID: 12425 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3653.896746][T12461] Cannot find add_set index 0 as target [ 3653.901489][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3653.901495][T12425] Call Trace: [ 3653.901531][T12425] dump_stack+0x11d/0x181 [ 3653.924920][T12425] dump_header+0xaa/0x39c [ 3653.929261][T12425] oom_kill_process.cold+0x10/0x15 [ 3653.934467][T12425] out_of_memory+0x231/0xa60 [ 3653.939178][T12425] mem_cgroup_out_of_memory+0x128/0x150 [ 3653.944796][T12425] try_charge+0xb6c/0xbf0 [ 3653.949154][T12425] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3653.954632][T12425] __memcg_kmem_charge+0xcf/0x1b0 [ 3653.959703][T12425] __alloc_pages_nodemask+0x26c/0x310 [ 3653.965101][T12425] alloc_pages_current+0xd1/0x170 [ 3653.970206][T12425] pte_alloc_one+0x18/0x50 [ 3653.974626][T12425] __pte_alloc+0x2d/0x220 [ 3653.979021][T12425] copy_page_range+0x13a2/0x1a00 [ 3653.984056][T12425] dup_mm+0x74a/0xba0 [ 3653.988077][T12425] copy_process+0x39d7/0x3b40 [ 3653.992786][T12425] _do_fork+0xfe/0x7a0 [ 3653.996878][T12425] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3654.003125][T12425] ? ktime_get_ts64+0x286/0x2c0 [ 3654.007992][T12425] __x64_sys_clone+0x130/0x170 [ 3654.012779][T12425] do_syscall_64+0xcc/0x3a0 [ 3654.017385][T12425] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3654.023436][T12425] RIP: 0033:0x45c6c9 [ 3654.027404][T12425] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3654.047046][T12425] RSP: 002b:00007f9ecc736c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 3654.056096][T12425] RAX: ffffffffffffffda RBX: 00007f9ecc7376d4 RCX: 000000000045c6c9 [ 3654.064069][T12425] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 3654.072121][T12425] RBP: 000000000076bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 3654.080100][T12425] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 05:51:15 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 05:51:15 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3654.088093][T12425] R13: 0000000000000070 R14: 00000000004c2f5a R15: 000000000076bf2c [ 3654.106072][T12425] memory: usage 307200kB, limit 307200kB, failcnt 246840 [ 3654.113256][T12425] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3654.120629][T12425] Memory cgroup stats for /syz1: [ 3654.120801][T12425] anon 131055616 [ 3654.120801][T12425] file 98304 [ 3654.120801][T12425] kernel_stack 17436672 [ 3654.120801][T12425] slab 28909568 [ 3654.120801][T12425] sock 4096 [ 3654.120801][T12425] shmem 0 [ 3654.120801][T12425] file_mapped 0 [ 3654.120801][T12425] file_dirty 0 [ 3654.120801][T12425] file_writeback 0 [ 3654.120801][T12425] anon_thp 0 [ 3654.120801][T12425] inactive_anon 135168 [ 3654.120801][T12425] active_anon 131162112 [ 3654.120801][T12425] inactive_file 0 [ 3654.120801][T12425] active_file 77824 [ 3654.120801][T12425] unevictable 0 [ 3654.120801][T12425] slab_reclaimable 3379200 [ 3654.120801][T12425] slab_unreclaimable 25530368 [ 3654.120801][T12425] pgfault 476718 [ 3654.120801][T12425] pgmajfault 0 [ 3654.120801][T12425] workingset_refault 1650 [ 3654.120801][T12425] workingset_activate 1188 [ 3654.120801][T12425] workingset_nodereclaim 0 [ 3654.120801][T12425] pgrefill 17651 [ 3654.120801][T12425] pgscan 18133 [ 3654.120801][T12425] pgsteal 2406 [ 3654.238831][T12425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3611,uid=0 [ 3654.269810][T12425] Memory cgroup out of memory: Killed process 3611 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 05:51:16 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/231, 0xe7}, {&(0x7f0000000080)=""/174, 0xae}, {&(0x7f0000001280)=""/167, 0xa7}, {&(0x7f0000001340)=""/208, 0xd0}, {&(0x7f0000001440)=""/31, 0x1f}, {&(0x7f0000001480)=""/62, 0x3e}], 0x7) 05:51:16 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3654.334150][T12482] Cannot find add_set index 0 as target 05:51:16 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:16 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3654.428058][T12497] Cannot find add_set index 0 as target 05:51:16 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3654.515694][T12424] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 05:51:16 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3654.703393][T12424] CPU: 1 PID: 12424 Comm: syz-executor.1 Not tainted 5.6.0-rc1-syzkaller #0 [ 3654.712098][T12424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3654.722192][T12424] Call Trace: [ 3654.725571][T12424] dump_stack+0x11d/0x181 [ 3654.729937][T12424] dump_header+0xaa/0x39c [ 3654.734349][T12424] oom_kill_process.cold+0x10/0x15 [ 3654.739472][T12424] out_of_memory+0x231/0xa60 [ 3654.744241][T12424] mem_cgroup_out_of_memory+0x128/0x150 [ 3654.749801][T12424] try_charge+0xb6c/0xbf0 [ 3654.754166][T12424] mem_cgroup_try_charge+0xd2/0x260 [ 3654.759385][T12424] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3654.765142][T12424] wp_page_copy+0x322/0xf20 [ 3654.770539][T12424] ? __read_once_size+0x41/0xe0 [ 3654.770716][T12529] Cannot find add_set index 0 as target [ 3654.775403][T12424] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3654.775494][T12424] do_wp_page+0x192/0xd20 [ 3654.791419][T12424] __handle_mm_fault+0x1d16/0x2e00 [ 3654.796641][T12424] handle_mm_fault+0x21b/0x530 [ 3654.801420][T12424] do_page_fault+0x496/0xa3d [ 3654.806044][T12424] page_fault+0x34/0x40 [ 3654.810219][T12424] RIP: 0033:0x40f850 [ 3654.814154][T12424] Code: 50 80 60 20 01 48 89 48 10 48 8b 4c 24 60 48 89 48 18 8b 4c 24 68 89 48 24 8b 4c 24 28 89 48 28 31 c0 48 8b 8c 04 20 01 00 00 <48> 89 8c 02 50 bf 76 00 48 83 c0 08 48 83 f8 48 75 e6 49 63 c6 0f [ 3654.833773][T12424] RSP: 002b:00007fff58164010 EFLAGS: 00010287 [ 3654.839840][T12424] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0004000000000000 [ 3654.847815][T12424] RDX: 00000000000000a8 RSI: 0000000000000008 RDI: 000000000076bfd0 [ 3654.855880][T12424] RBP: 000000000076bfd4 R08: 00007fff581640d0 R09: 0000000000771278 [ 3654.863945][T12424] R10: 000000000043c720 R11: 000000000000000e R12: 000000000076bfc8 [ 3654.871916][T12424] R13: 0000000000000005 R14: 0000000000000001 R15: 000000000076bfd4 [ 3654.883459][T12424] memory: usage 307064kB, limit 307200kB, failcnt 246894 [ 3654.891307][T12424] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3654.899368][T12424] Memory cgroup stats for /syz1: [ 3654.899575][T12424] anon 131055616 [ 3654.899575][T12424] file 98304 [ 3654.899575][T12424] kernel_stack 17436672 [ 3654.899575][T12424] slab 28909568 [ 3654.899575][T12424] sock 4096 [ 3654.899575][T12424] shmem 0 [ 3654.899575][T12424] file_mapped 0 [ 3654.899575][T12424] file_dirty 0 [ 3654.899575][T12424] file_writeback 0 [ 3654.899575][T12424] anon_thp 0 [ 3654.899575][T12424] inactive_anon 135168 [ 3654.899575][T12424] active_anon 131162112 [ 3654.899575][T12424] inactive_file 0 [ 3654.899575][T12424] active_file 77824 [ 3654.899575][T12424] unevictable 0 [ 3654.899575][T12424] slab_reclaimable 3379200 [ 3654.899575][T12424] slab_unreclaimable 25530368 [ 3654.899575][T12424] pgfault 476718 [ 3654.899575][T12424] pgmajfault 0 [ 3654.899575][T12424] workingset_refault 1650 [ 3654.899575][T12424] workingset_activate 1188 [ 3654.899575][T12424] workingset_nodereclaim 0 [ 3654.899575][T12424] pgrefill 17651 [ 3654.899575][T12424] pgscan 18133 [ 3654.899575][T12424] pgsteal 2406 05:51:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2400, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x10) r4 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) dup(r3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x100, 0x100, 0x0, 0x100, 0x100, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xfc}, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x80, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x2, 0xfffffffd, 0x5, 0x7, "1bb61bc662bea9655b19c5c84d1a8dd7731e74"}) 05:51:16 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x2c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @ipv4={[], [], @empty}}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}]}, 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', r8}) r9 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:51:16 executing program 0: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3654.994183][T12424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=3584,uid=0 [ 3655.009605][T12424] Memory cgroup out of memory: Killed process 3584 (syz-executor.1) total-vm:74836kB, anon-rss:176kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 3655.030203][ T1077] oom_reaper: reaped process 3584 (syz-executor.1), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 05:51:17 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3655.115078][ T8006] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3655.174253][ T8006] CPU: 0 PID: 8006 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3655.182964][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3655.193254][ T8006] Call Trace: [ 3655.196639][ T8006] dump_stack+0x11d/0x181 [ 3655.200997][ T8006] dump_header+0xaa/0x39c [ 3655.205337][ T8006] oom_kill_process.cold+0x10/0x15 [ 3655.210564][ T8006] out_of_memory+0x231/0xa60 [ 3655.215215][ T8006] mem_cgroup_out_of_memory+0x128/0x150 [ 3655.220828][ T8006] try_charge+0xb6c/0xbf0 [ 3655.225259][ T8006] mem_cgroup_try_charge+0xd2/0x260 [ 3655.230575][ T8006] mem_cgroup_try_charge_delay+0x3a/0x80 [ 3655.236220][ T8006] wp_page_copy+0x322/0xf20 [ 3655.240743][ T8006] ? __read_once_size+0x41/0xe0 [ 3655.245606][ T8006] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3655.251526][ T8006] do_wp_page+0x192/0xd20 [ 3655.255875][ T8006] __handle_mm_fault+0x1d16/0x2e00 [ 3655.261156][ T8006] handle_mm_fault+0x21b/0x530 [ 3655.265936][ T8006] do_page_fault+0x496/0xa3d [ 3655.270559][ T8006] page_fault+0x34/0x40 [ 3655.274714][ T8006] RIP: 0033:0x45adfa [ 3655.278688][ T8006] Code: 48 85 db 74 b6 41 bc ca 00 00 00 eb 0c 0f 1f 00 48 8b 5b 08 48 85 db 74 a2 48 8b 3b 48 8b 47 10 48 85 c0 74 05 ff d0 48 8b 3b ff 4f 28 0f 94 c0 84 c0 74 db 8b 47 2c 85 c0 74 d4 45 31 d2 ba [ 3655.298295][ T8006] RSP: 002b:00007ffec8967580 EFLAGS: 00010246 [ 3655.304515][ T8006] RAX: 0000000000000000 RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3655.312496][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000c871a8 [ 3655.320477][ T8006] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3655.328496][ T8006] R10: 0000000002307c10 R11: 0000000000000246 R12: 00000000000000ca [ 3655.336584][ T8006] R13: 00000000000055c6 R14: 0000000000000000 R15: 00007ffec8967610 [ 3655.376435][ T8006] memory: usage 307200kB, limit 307200kB, failcnt 277922 [ 3655.405858][ T8006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3655.432730][ T8006] Memory cgroup stats for /syz0: [ 3655.432924][ T8006] anon 170221568 [ 3655.432924][ T8006] file 0 [ 3655.432924][ T8006] kernel_stack 12718080 [ 3655.432924][ T8006] slab 23052288 [ 3655.432924][ T8006] sock 0 [ 3655.432924][ T8006] shmem 0 [ 3655.432924][ T8006] file_mapped 135168 [ 3655.432924][ T8006] file_dirty 0 [ 3655.432924][ T8006] file_writeback 0 [ 3655.432924][ T8006] anon_thp 65011712 [ 3655.432924][ T8006] inactive_anon 0 [ 3655.432924][ T8006] active_anon 170119168 05:51:17 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) 05:51:17 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3655.432924][ T8006] inactive_file 0 [ 3655.432924][ T8006] active_file 24576 [ 3655.432924][ T8006] unevictable 0 [ 3655.432924][ T8006] slab_reclaimable 3649536 [ 3655.432924][ T8006] slab_unreclaimable 19402752 [ 3655.432924][ T8006] pgfault 405306 [ 3655.432924][ T8006] pgmajfault 0 [ 3655.432924][ T8006] workingset_refault 825 [ 3655.432924][ T8006] workingset_activate 561 [ 3655.432924][ T8006] workingset_nodereclaim 0 [ 3655.432924][ T8006] pgrefill 7901 [ 3655.432924][ T8006] pgscan 8417 [ 3655.432924][ T8006] pgsteal 1325 05:51:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x54980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x0, 0x100, 0x100, 0x100, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}, 0x8}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) [ 3655.546142][ T8006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12538,uid=0 [ 3655.563514][ T8006] Memory cgroup out of memory: Killed process 12538 (syz-executor.0) total-vm:74836kB, anon-rss:2224kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 05:51:17 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x2003, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000300)=0x400) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22, 0x0, 0x2}) r4 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000000)={0x80000000022}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x145041, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) write$UHID_INPUT(r4, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) chown(0x0, r6, 0x0) mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x200002, &(0x7f0000000240)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r6}}, {@subj_user={'subj_user', 0x3d, '/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}}]}}) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f0000000140)={r7}) renameat(r2, &(0x7f0000001380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00') [ 3655.611173][T12552] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 3655.628329][T12552] CPU: 0 PID: 12552 Comm: syz-executor.0 Not tainted 5.6.0-rc1-syzkaller #0 [ 3655.637103][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3655.647159][T12552] Call Trace: [ 3655.650545][T12552] dump_stack+0x11d/0x181 [ 3655.654901][T12552] dump_header+0xaa/0x39c [ 3655.659310][T12552] oom_kill_process.cold+0x10/0x15 [ 3655.664462][T12552] out_of_memory+0x231/0xa60 [ 3655.669088][T12552] mem_cgroup_out_of_memory+0x128/0x150 [ 3655.674795][T12552] try_charge+0x800/0xbf0 [ 3655.679152][T12552] __memcg_kmem_charge_memcg+0x4a/0xe0 [ 3655.684696][T12552] __memcg_kmem_charge+0xcf/0x1b0 [ 3655.689734][T12552] __alloc_pages_nodemask+0x26c/0x310 [ 3655.695181][T12552] alloc_pages_current+0xd1/0x170 [ 3655.700222][T12552] pte_alloc_one+0x18/0x50 [ 3655.704655][T12552] __handle_mm_fault+0x2be6/0x2e00 05:51:17 executing program 5: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2b8, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@routing={0x4, 0x10, 0x0, 0x1, 0x0, [@ipv4={[], [], @multicast1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2ea) [ 3655.709795][T12552] handle_mm_fault+0x21b/0x530 [ 3655.714570][T12552] do_page_fault+0x496/0xa3d [ 3655.719175][T12552] page_fault+0x34/0x40 [ 3655.723332][T12552] RIP: 0033:0x45ac9a [ 3655.727310][T12552] Code: Bad RIP value. [ 3655.731391][T12552] RSP: 002b:00007ffec8967580 EFLAGS: 00010246 [ 3655.737489][T12552] RAX: 0000000000000000 RBX: 00007ffec8967580 RCX: 000000000045ac9a [ 3655.737500][T12552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 3655.737511][T12552] RBP: 00007ffec89675c0 R08: 0000000000000001 R09: 0000000002307940 [ 3655.737521][T12552] R10: 0000000002307c10 R11: 0000000000000246 R12: 0000000000000001 [ 3655.737532][T12552] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffec8967610 [ 3655.782259][T12599] xt_socket: unknown flags 0x8 [ 3655.890040][T12552] memory: usage 304888kB, limit 307200kB, failcnt 277922 05:51:17 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x9c400, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x11, 0x88, &(0x7f00000001c0)="c03a512f1ebf7777f0b2c7c74b3eb442bfec2434de0e4aa4cb254d50b405498ad2307789f14cfde20fd855cfe23057cde9b81e2553ef1b9640a320f9fcf6ea74761c49cfb1c0b2b633f32f67c901c71a4b1843b95ae5c40a5d45a3ba070724ab9ad5dddd82037c30217004ce5989e3a9b2882f9982d5907ea9f4741d7aad26f46c295588ad0a70fb"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, 0x0) r5 = dup(r4) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) splice(r6, &(0x7f0000000080)=0x1f, r2, &(0x7f00000000c0)=0x20, 0x9, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$bt_rfcomm(0x1f, 0x6f9394458129d44e, 0x3) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000007000200000003000000500200000000000000000000000100000001000000010000b8010000b8010000b8010000b8010000b8010000030000000000000000000000000000bbac14140000000000000000000000000000000000000000000000000069705f767469300000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000009800000100000000000000000000000000000000000000002800736f636b6574000000000000000000000000000000000000000000000003080000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e73008cda1c0b642c8afb002f691b70000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800b80000000000000000000000000000000000000000002800727066696c74656200000000000000000000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000030390000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x2b0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0106434, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x5, 0x144c00) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) r11 = dup(r10) setsockopt$packet_int(r11, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) dup(r11) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) bind$packet(r9, &(0x7f0000000640)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r9, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x28a5) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r14, 0xc0106434, 0x0) ioctl$VFIO_SET_IOMMU(r14, 0x3b66, 0x7) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000680)={r9, r5, 0x9, 0x99, &(0x7f00000005c0)="0e94cb04e6d7d7f63488b81324db0a4002681e087c8b5b5a40fb4690fd8fedeb8f7e6c10f1c2a54f687fb121779a6f53db6c7c68f156368cf84d8f7c574beabe64ccef5b4f3100aea5a0b69dd8bf22bf16e1c21bc054033be139f1fe12727bd1a7c13380b4ecef71f33e7d35c62925889b89e0afee77da485a11d7e284b4509eaea237a2c9dd03205e1b1b25b4e9b5fec2eda0e943bec00ddb", 0x7, 0x47, 0x2, 0x5187, 0x20, 0x1, 0x80000001, 'syz0\x00'}) 05:51:17 executing program 4: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3733}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000005c0)={@void, @val={0x3}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x2c0, 0x3a, 0x0, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x4, 0x6, "05d4e4", 0x5, 0x84, 0x2, @ipv4={[], [], @broadcast}, @ipv4={[], [], @rand_addr=0xe1c}, [@hopopts={0x6, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xe, 0x0, 0x1, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @empty, @local, @mcast1, @loopback, @mcast2, @loopback]}, @dstopts={0x33, 0x21, [], [@generic={0x0, 0xc9, "70cbe18c931d1dde9dc94b5f6094da162e42e5e340a64b1a3d895bdf74b5d3d4ef59bd355b4e76c33d2587b565cc600b409660c71f1b7c524df241d6b9133b53b6df418b509b9f0ffc3ec8a2366ef443b953d5515a90052bc7f6929d9804a89c997a5223cbe9d636498decb022d3080730fcf674858d5515ba23e6620741b955bfe181d48e95cecfee54338ef0a7bf7713b30f179dd61d9064ccf9f3398bb8e6d02769b79850a413399803f1aaacf15a6cf7a07461aaf0e6f382c6eb1503d38627720aa30615210298"}, @generic={0x2, 0x29, "8fca13112fecf291c14af157e0372eb4c16baf6a7480083cd263fcecc399aee4e39e0ec2209a700a2a"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}]}, @routing={0x2f, 0x14, 0x0, 0x1e, 0x0, [@mcast2, @remote, @ipv4={[], [], @remote}, @rand_addr="de55d610219881ceb796d74fdd7883a4", @ipv4={[], [], @rand_addr=0x6}, @dev={0xfe, 0x80, [], 0xa}, @empty, @loopback, @dev={0xfe, 0x80, [], 0x3f}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}], "a1325656adfdceb0a409afc66c6e564312137de46421f41004843480b7f69f8c7dfc3e02cc80394f020feeacbb90db3f60c950fcf01ac5de69d1d11b296c9aaa"}}}}}}, 0x2f2) [ 3655.939884][T12552] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3655.963284][T12552] Memory cgroup stats for /syz0: [ 3655.963438][T12552] anon 168054784 [ 3655.963438][T12552] file 0 [ 3655.963438][T12552] kernel_stack 12718080 [ 3655.963438][T12552] slab 23052288 [ 3655.963438][T12552] sock 0 [ 3655.963438][T12552] shmem 0 [ 3655.963438][T12552] file_mapped 135168 [ 3655.963438][T12552] file_dirty 0 [ 3655.963438][T12552] file_writeback 0 [ 3655.963438][T12552] anon_thp 62914560 [ 3655.963438][T12552] inactive_anon 0 [ 3655.963438][T12552] active_anon 168054784 [ 3655.963438][T12552] inactive_file 0 [ 3655.963438][T12552] active_file 24576 [ 3655.963438][T12552] unevictable 0 [ 3655.963438][T12552] slab_reclaimable 3649536 [ 3655.963438][T12552] slab_unreclaimable 19402752 [ 3655.963438][T12552] pgfault 405306 [ 3655.963438][T12552] pgmajfault 0 [ 3655.963438][T12552] workingset_refault 825 05:51:17 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) r1 = syz_open_dev$cec(0x0, 0x3, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000000)={0x22}) r2 = dup3(r1, r0, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) renameat(r3, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x80000000022}) 05:51:17 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0xe8, 0xe8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'hsr0\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) [ 3655.963438][T12552] workingset_activate 561 [ 3655.963438][T12552] workingset_nodereclaim 0 [ 3655.963438][T12552] pgrefill 7901 [ 3655.963438][T12552] pgscan 8417 [ 3655.963438][T12552] pgsteal 1325 [ 3656.098821][T12552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12345,uid=0 [ 3656.117107][T26413] ================================================================== [ 3656.125207][T26413] BUG: KCSAN: data-race in writeback_sb_inodes / xas_set_mark [ 3656.132651][T26413] [ 3656.134986][T26413] write to 0xffff88821afb4654 of 4 bytes by task 7868 on cpu 0: [ 3656.142613][T26413] xas_set_mark+0x14d/0x160 [ 3656.147106][T26413] __xa_set_mark+0xd3/0x100 [ 3656.151598][T26413] __set_page_dirty+0x152/0x270 [ 3656.156481][T26413] mark_buffer_dirty+0x27f/0x2c0 [ 3656.161410][T26413] __ext4_handle_dirty_metadata+0x2b2/0x410 [ 3656.167292][T26413] ext4_mark_iloc_dirty+0xdb3/0x1580 [ 3656.172564][T26413] ext4_mark_inode_dirty+0xe9/0x420 [ 3656.177751][T26413] ext4_dirty_inode+0xb1/0xe0 [ 3656.182416][T26413] __mark_inode_dirty+0x5d4/0x940 [ 3656.187470][T26413] generic_write_end+0x1b7/0x1f0 [ 3656.192394][T26413] ext4_da_write_end+0x158/0x620 [ 3656.197401][T26413] generic_perform_write+0x1d3/0x320 [ 3656.202685][T26413] ext4_buffered_write_iter+0x143/0x290 [ 3656.208224][T26413] ext4_file_write_iter+0xfa/0xd70 [ 3656.213323][T26413] new_sync_write+0x388/0x4a0 [ 3656.218010][T26413] __vfs_write+0xb1/0xc0 [ 3656.222242][T26413] vfs_write+0x18a/0x390 [ 3656.226517][T26413] ksys_write+0xd5/0x1b0 [ 3656.230809][T26413] __x64_sys_write+0x4c/0x60 [ 3656.235397][T26413] do_syscall_64+0xcc/0x3a0 [ 3656.239892][T26413] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 3656.245765][T26413] [ 3656.248154][T26413] read to 0xffff88821afb4654 of 4 bytes by task 26413 on cpu 1: [ 3656.255832][T26413] writeback_sb_inodes+0x6e3/0xa50 [ 3656.260940][T26413] __writeback_inodes_wb+0xe8/0x1b0 [ 3656.266121][T26413] wb_writeback+0x557/0x6a0 [ 3656.270611][T26413] wb_workfn+0x23e/0x9b0 [ 3656.274849][T26413] process_one_work+0x413/0x8f0 [ 3656.279696][T26413] worker_thread+0xa0/0x800 [ 3656.284191][T26413] kthread+0x1d4/0x200 [ 3656.288242][T26413] ret_from_fork+0x1f/0x30 [ 3656.292686][T26413] [ 3656.295003][T26413] Reported by Kernel Concurrency Sanitizer on: [ 3656.301142][T26413] CPU: 1 PID: 26413 Comm: kworker/u4:9 Not tainted 5.6.0-rc1-syzkaller #0 [ 3656.309619][T26413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3656.319715][T26413] Workqueue: writeback wb_workfn (flush-8:0) [ 3656.325677][T26413] ================================================================== [ 3656.333724][T26413] Kernel panic - not syncing: panic_on_warn set ... [ 3656.340298][T26413] CPU: 1 PID: 26413 Comm: kworker/u4:9 Not tainted 5.6.0-rc1-syzkaller #0 [ 3656.348776][T26413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3656.358975][T26413] Workqueue: writeback wb_workfn (flush-8:0) [ 3656.364937][T26413] Call Trace: [ 3656.368223][T26413] dump_stack+0x11d/0x181 [ 3656.372541][T26413] panic+0x210/0x640 [ 3656.376483][T26413] ? vprintk_func+0x8d/0x140 [ 3656.381097][T26413] kcsan_report.cold+0xc/0x1a [ 3656.385772][T26413] kcsan_setup_watchpoint+0x3a3/0x3e0 [ 3656.391129][T26413] __tsan_read4+0xc6/0x100 [ 3656.396403][T26413] writeback_sb_inodes+0x6e3/0xa50 [ 3656.401518][T26413] __writeback_inodes_wb+0xe8/0x1b0 [ 3656.406712][T26413] wb_writeback+0x557/0x6a0 [ 3656.411299][T26413] ? __this_cpu_preempt_check+0x45/0x140 [ 3656.416932][T26413] wb_workfn+0x23e/0x9b0 [ 3656.421170][T26413] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3656.427049][T26413] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 3656.432940][T26413] process_one_work+0x413/0x8f0 [ 3656.437792][T26413] worker_thread+0xa0/0x800 [ 3656.442291][T26413] kthread+0x1d4/0x200 [ 3656.446448][T26413] ? rescuer_thread+0x6a0/0x6a0 [ 3656.451289][T26413] ? kthread_unpark+0xe0/0xe0 [ 3656.455959][T26413] ret_from_fork+0x1f/0x30 [ 3656.461839][T26413] Kernel Offset: disabled [ 3656.466165][T26413] Rebooting in 86400 seconds..