2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1769.129257][T28402] Call Trace:
[ 1769.132576][T28402]  <TASK>
18:13:38 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

[ 1769.135551][T28402]  dump_stack_lvl+0x1e7/0x2e0
[ 1769.140277][T28402]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1769.145517][T28402]  ? __pfx__printk+0x10/0x10
[ 1769.150155][T28402]  ? ___ratelimit+0x4c4/0x670
[ 1769.154887][T28402]  ? __pfx____ratelimit+0x10/0x10
[ 1769.159969][T28402]  dump_header+0xda/0x6a0
[ 1769.164351][T28402]  oom_kill_process+0x3a7/0x930
[ 1769.169255][T28402]  out_of_memory+0xf67/0x1320
[ 1769.173991][T28402]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1769.179664][T28402]  ? __pfx___mutex_lock+0x10/0x10
[ 1769.184731][T28402]  ? __pfx_out_of_memory+0x10/0x10
[ 1769.189939][T28402]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1769.195507][T28402]  ? __pfx_lock_release+0x10/0x10
[ 1769.200653][T28402]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1769.206793][T28402]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1769.212031][T28402]  ? mem_cgroup_iter+0x3e9/0x560
[ 1769.217002][T28402]  try_charge_memcg+0xda2/0x18a0
[ 1769.221986][T28402]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1769.227381][T28402]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1769.233119][T28402]  ? __pfx_lock_release+0x10/0x10
[ 1769.238166][T28402]  ? memcg_account_kmem+0x1e7/0x210
[ 1769.243393][T28402]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1769.249217][T28402]  __memcg_kmem_charge_page+0xe1/0x250
[ 1769.254692][T28402]  memcg_charge_kernel_stack+0x210/0x550
[ 1769.260345][T28402]  dup_task_struct+0x15d/0x7d0
[ 1769.265216][T28402]  copy_process+0x5d5/0x3fc0
[ 1769.269838][T28402]  ? __might_fault+0xa9/0x120
[ 1769.274537][T28402]  ? __pfx_lock_release+0x10/0x10
[ 1769.279587][T28402]  ? __pfx_copy_process+0x10/0x10
[ 1769.284626][T28402]  ? __might_fault+0xc5/0x120
[ 1769.289328][T28402]  ? __asan_memset+0x23/0x50
[ 1769.293944][T28402]  kernel_clone+0x21d/0x8d0
[ 1769.298489][T28402]  ? __pfx_kernel_clone+0x10/0x10
[ 1769.303563][T28402]  __se_sys_clone3+0x2cb/0x350
[ 1769.308363][T28402]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1769.313676][T28402]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1769.319686][T28402]  ? exc_page_fault+0x587/0x870
[ 1769.324562][T28402]  ? do_syscall_64+0xb4/0x240
[ 1769.329257][T28402]  do_syscall_64+0xf9/0x240
[ 1769.333779][T28402]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1769.339690][T28402] RIP: 0033:0x7f84034a9b99
[ 1769.344118][T28402] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1769.363736][T28402] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1769.372207][T28402] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1769.380190][T28402] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1769.388172][T28402] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1769.396150][T28402] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1769.404133][T28402] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1769.412132][T28402]  </TASK>
18:13:39 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x310}}}}}}}, 0x3e)

18:13:39 executing program 1:
bpf$BPF_GET_MAP_INFO(0x36ffeda2025f, 0x0, 0x0)

18:13:39 executing program 4:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

18:13:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x14}, 0x0)

[ 1769.486752][T28402] memory: usage 307180kB, limit 307200kB, failcnt 62836
[ 1769.517670][T28402] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0
[ 1769.525734][T28402] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
18:13:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0)

18:13:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

[ 1769.560629][T28402] Memory cgroup stats for /syz2:
[ 1769.560789][T28402] cache 4096
[ 1769.597318][T28402] rss 12288
[ 1769.636308][T28402] rss_huge 0
[ 1769.654923][T28402] shmem 0
[ 1769.658784][T28402] mapped_file 0
[ 1769.662560][T28402] dirty 4096
[ 1769.670495][T28402] writeback 0
[ 1769.677798][T28402] workingset_refault_anon 24124
18:13:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x15}, 0x0)

18:13:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x30, 0x2a, [@chsw_timing={0x68, 0x4}, @tim={0x5, 0x3}, @prep={0x83, 0x1f, {{}, 0x0, 0x0, @device_b}}]}, @NL80211_ATTR_IE={0x4}]}, 0x48}}, 0x0)

18:13:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

18:13:39 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x318}}}}}}}, 0x3e)

[ 1769.683369][T28402] workingset_refault_file 5
[ 1769.693334][T28402] swap 278528
[ 1769.701795][T28402] swapcached 12288
[ 1769.709077][T28402] pgpgin 187726
[ 1769.749800][T28402] pgpgout 187722
[ 1769.753416][T28402] pgfault 382745
[ 1769.756990][T28402] pgmajfault 22130
[ 1769.778338][T28402] inactive_anon 0
[ 1769.782044][T28402] active_anon 12288
[ 1769.802906][T28402] inactive_file 0
[ 1769.806619][T28402] active_file 4096
[ 1769.814854][T28402] unevictable 0
[ 1769.831348][T28402] hierarchical_memory_limit 314572800
18:13:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

18:13:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x19}, 0x0)

[ 1769.857638][T28402] hierarchical_memsw_limit 9223372036854771712
[ 1769.864572][T28402] total_cache 4096
[ 1769.870047][T28402] total_rss 12288
[ 1769.875283][T28402] total_rss_huge 0
18:13:39 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000700)='ns/ipc\x00')

[ 1769.927657][T28402] total_shmem 0
[ 1769.940874][T28402] total_mapped_file 0
[ 1769.945976][T28402] total_dirty 4096
[ 1769.951433][T28402] total_writeback 0
[ 1769.955440][T28402] total_workingset_refault_anon 24124
[ 1769.962067][T28402] total_workingset_refault_file 5
18:13:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1a}, 0x0)

18:13:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0)

18:13:39 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x31a}}}}}}}, 0x3e)

[ 1769.978436][T28402] total_swap 278528
[ 1769.997016][T28402] total_swapcached 12288
[ 1770.030171][T28402] total_pgpgin 187726
[ 1770.034239][T28402] total_pgpgout 187722
[ 1770.050922][T28402] total_pgfault 382745
[ 1770.055050][T28402] total_pgmajfault 22130
[ 1770.072629][T28402] total_inactive_anon 0
18:13:39 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @dev, @empty}})

18:13:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0)

[ 1770.083354][T28402] total_active_anon 12288
[ 1770.094100][T28402] total_inactive_file 0
[ 1770.103376][T28402] total_active_file 4096
[ 1770.112994][T28402] total_unevictable 0
[ 1770.129824][T28402] anon_cost 0
18:13:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x60}, 0x0)

[ 1770.133918][T28402] file_cost 0
[ 1770.138497][T28402] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28402,uid=0
[ 1770.169966][T28402] Memory cgroup out of memory: Killed process 28402 (syz-executor.2) total-vm:54508kB, anon-rss:424kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0)

18:13:40 executing program 1:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x1f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20)

18:13:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x300}, 0x0)

18:13:40 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x326}}}}}}}, 0x3e)

18:13:40 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, 0x0, 0x0, 0x0, &(0x7f000000a240)={0x77359400})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', <r2=>0x0, 0x1, 0x8000, 0x10000, 0x9, {{0x1e, 0x4, 0x0, 0x10, 0x78, 0x68, 0x0, 0x3, 0x15, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x7, 0x11, "d280320516a844ce9cedf0559618ee"}, @timestamp_prespec={0x44, 0x4c, 0x83, 0x3, 0x1, [{@remote, 0xe}, {@multicast1, 0x3}, {@loopback}, {@remote, 0x3}, {@broadcast, 0x1f}, {@remote, 0x80000000}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@empty, 0xfffffffe}]}, @rr={0x7, 0x7, 0xea, [@private=0xa010102]}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@gettfilter={0x64, 0x2e, 0x0, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xfff1, 0xd}, {0xfff2, 0xfff3}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x4e}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0xfffffffb}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5], 0x48}}, 0x4) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5], 0x3c}}, 0x0)

18:13:40 executing program 1:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000)

18:13:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}}, 0x0)

18:13:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x500}, 0x0)

18:13:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}}, 0x0)

18:13:40 executing program 1:
r0 = epoll_create1(0x0)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)

18:13:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x600}, 0x0)

18:13:40 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x32a}}}}}}}, 0x3e)

18:13:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}}, 0x0)

18:13:40 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x1ffffff, 0x10003, '\x00', [{}, {0xffffffff}]})

18:13:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x700}, 0x0)

[ 1770.676892][T28465] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1770.741201][T28465] CPU: 0 PID: 28465 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1770.751729][T28465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1770.762087][T28465] Call Trace:
[ 1770.765392][T28465]  <TASK>
[ 1770.768355][T28465]  dump_stack_lvl+0x1e7/0x2e0
[ 1770.773085][T28465]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1770.778324][T28465]  ? __pfx__printk+0x10/0x10
[ 1770.782968][T28465]  ? ___ratelimit+0x4c4/0x670
[ 1770.787710][T28465]  ? __pfx____ratelimit+0x10/0x10
[ 1770.792792][T28465]  dump_header+0xda/0x6a0
[ 1770.797189][T28465]  oom_kill_process+0x3a7/0x930
[ 1770.802101][T28465]  out_of_memory+0xf67/0x1320
[ 1770.806831][T28465]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1770.812513][T28465]  ? __pfx___mutex_lock+0x10/0x10
[ 1770.817586][T28465]  ? __pfx_out_of_memory+0x10/0x10
[ 1770.822752][T28465]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1770.828351][T28465]  ? __pfx_lock_release+0x10/0x10
[ 1770.833430][T28465]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
18:13:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x900}, 0x0)

18:13:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x0, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

[ 1770.839560][T28465]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1770.844805][T28465]  ? mem_cgroup_iter+0x3e9/0x560
[ 1770.849801][T28465]  try_charge_memcg+0xda2/0x18a0
[ 1770.854817][T28465]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1770.860230][T28465]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1770.865980][T28465]  ? __pfx_lock_release+0x10/0x10
[ 1770.871051][T28465]  ? memcg_account_kmem+0x1e7/0x210
[ 1770.876312][T28465]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1770.882165][T28465]  __memcg_kmem_charge_page+0xe1/0x250
18:13:40 executing program 1:
r0 = epoll_create1(0x0)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000003c0)={0xb0000000})

[ 1770.887666][T28465]  memcg_charge_kernel_stack+0x37e/0x550
[ 1770.893345][T28465]  dup_task_struct+0x15d/0x7d0
[ 1770.898151][T28465]  copy_process+0x5d5/0x3fc0
[ 1770.903141][T28465]  ? __might_fault+0xa9/0x120
[ 1770.907859][T28465]  ? __pfx_lock_release+0x10/0x10
[ 1770.912936][T28465]  ? __pfx_copy_process+0x10/0x10
[ 1770.918010][T28465]  ? __might_fault+0xc5/0x120
[ 1770.922744][T28465]  ? __asan_memset+0x23/0x50
[ 1770.927414][T28465]  kernel_clone+0x21d/0x8d0
[ 1770.931968][T28465]  ? __pfx_kernel_clone+0x10/0x10
[ 1770.937054][T28465]  __se_sys_clone3+0x2cb/0x350
[ 1770.941891][T28465]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1770.947234][T28465]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1770.953287][T28465]  ? exc_page_fault+0x587/0x870
[ 1770.958193][T28465]  ? do_syscall_64+0xb4/0x240
[ 1770.962911][T28465]  do_syscall_64+0xf9/0x240
[ 1770.967460][T28465]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1770.973394][T28465] RIP: 0033:0x7f84034a9b99
18:13:40 executing program 1:
r0 = epoll_create(0x7b5e)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

[ 1770.977851][T28465] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1770.997510][T28465] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1771.005970][T28465] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1771.013982][T28465] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1771.021989][T28465] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1771.029996][T28465] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1771.038003][T28465] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1771.046033][T28465]  </TASK>
[ 1771.069050][T28465] memory: usage 307180kB, limit 307200kB, failcnt 63096
[ 1771.076145][T28465] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0
18:13:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xa00}, 0x0)

18:13:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x0, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

[ 1771.095717][T28465] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[ 1771.103620][T28465] Memory cgroup stats for /syz2:
[ 1771.103778][T28465] cache 4096
18:13:40 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

18:13:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xb00}, 0x0)

18:13:40 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x332}}}}}}}, 0x3e)

[ 1771.154650][T28465] rss 0
[ 1771.165928][T28465] rss_huge 0
[ 1771.177434][T28465] shmem 0
[ 1771.197307][T28465] mapped_file 0
[ 1771.201555][T28465] dirty 4096
18:13:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x0, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

[ 1771.204790][T28465] writeback 0
[ 1771.223519][T28465] workingset_refault_anon 24201
[ 1771.248500][T28465] workingset_refault_file 5
[ 1771.253081][T28465] swap 331776
[ 1771.256392][T28465] swapcached 0
[ 1771.279925][T28465] pgpgin 187818
[ 1771.283461][T28465] pgpgout 187817
[ 1771.287051][T28465] pgfault 382885
18:13:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1100}, 0x0)

18:13:41 executing program 1:
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xff9, 0x0)

[ 1771.312961][T28465] pgmajfault 22200
[ 1771.316780][T28465] inactive_anon 0
[ 1771.339427][T28465] active_anon 0
[ 1771.342956][T28465] inactive_file 4096
[ 1771.346879][T28465] active_file 0
18:13:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

[ 1771.370206][T28465] unevictable 0
[ 1771.378874][T28465] hierarchical_memory_limit 314572800
[ 1771.384558][T28465] hierarchical_memsw_limit 9223372036854771712
[ 1771.409423][T28465] total_cache 4096
18:13:41 executing program 1:
epoll_wait(0xffffffffffffffff, &(0x7f0000005b40)=[{}], 0x1, 0xff)

18:13:41 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x33a}}}}}}}, 0x3e)

[ 1771.417926][T28465] total_rss 0
[ 1771.424713][T28465] total_rss_huge 0
[ 1771.445227][T28465] total_shmem 0
[ 1771.452909][T28465] total_mapped_file 0
[ 1771.465373][T28465] total_dirty 4096
18:13:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

18:13:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1200}, 0x0)

[ 1771.473237][T28465] total_writeback 0
[ 1771.481187][T28465] total_workingset_refault_anon 24201
[ 1771.496918][T28465] total_workingset_refault_file 5
[ 1771.517331][T28465] total_swap 331776
[ 1771.521207][T28465] total_swapcached 0
[ 1771.525134][T28465] total_pgpgin 187818
[ 1771.557403][T28465] total_pgpgout 187817
[ 1771.570200][T28465] total_pgfault 382885
[ 1771.574334][T28465] total_pgmajfault 22200
[ 1771.583168][T28465] total_inactive_anon 0
[ 1771.592740][T28465] total_active_anon 0
[ 1771.600350][T28465] total_inactive_file 4096
18:13:41 executing program 1:
clock_gettime(0x0, &(0x7f00000025c0)={0x0, <r0=>0x0})
ppoll(0x0, 0x0, &(0x7f0000002600)={0x0, r0+60000000}, 0x0, 0x0)

18:13:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

18:13:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1400}, 0x0)

[ 1771.628214][T28465] total_active_file 0
[ 1771.632467][T28465] total_unevictable 0
[ 1771.641355][T28465] anon_cost 0
[ 1771.659172][T28465] file_cost 0
[ 1771.667082][T28465] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28465,uid=0
18:13:41 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x33c}}}}}}}, 0x3e)

[ 1771.712524][T28465] Memory cgroup out of memory: Killed process 28465 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg$unix(r1, 0x0, 0x0, 0x0, &(0x7f000000a240)={0x77359400}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', <r2=>0x0, 0x1, 0x8000, 0x10000, 0x9, {{0x1e, 0x4, 0x0, 0x10, 0x78, 0x68, 0x0, 0x3, 0x15, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x7, 0x11, "d280320516a844ce9cedf0559618ee"}, @timestamp_prespec={0x44, 0x4c, 0x83, 0x3, 0x1, [{@remote, 0xe}, {@multicast1, 0x3}, {@loopback}, {@remote, 0x3}, {@broadcast, 0x1f}, {@remote, 0x80000000}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@empty, 0xfffffffe}]}, @rr={0x7, 0x7, 0xea, [@private=0xa010102]}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@gettfilter={0x64, 0x2e, 0x0, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xfff1, 0xd}, {0xfff2, 0xfff3}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x4e}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0xfffffffb}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5], 0x48}}, 0x4) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5], 0x3c}}, 0x0)

18:13:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

18:13:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1500}, 0x0)

18:13:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1900}, 0x0)

18:13:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

18:13:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1a00}, 0x0)

18:13:41 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x340}}}}}}}, 0x3e)

18:13:41 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

18:13:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x2000}, 0x0)

18:13:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x31f5}, 0x0)

18:13:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

18:13:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x3f00}, 0x0)

[ 1772.234623][T28536] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1772.271752][T28536] CPU: 1 PID: 28536 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1772.282252][T28536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1772.292350][T28536] Call Trace:
[ 1772.295665][T28536]  <TASK>
[ 1772.298619][T28536]  dump_stack_lvl+0x1e7/0x2e0
[ 1772.303316][T28536]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1772.308538][T28536]  ? __pfx__printk+0x10/0x10
[ 1772.313171][T28536]  ? ___ratelimit+0x4c4/0x670
[ 1772.317884][T28536]  ? __pfx____ratelimit+0x10/0x10
[ 1772.322959][T28536]  dump_header+0xda/0x6a0
[ 1772.327328][T28536]  oom_kill_process+0x3a7/0x930
[ 1772.332246][T28536]  out_of_memory+0xf67/0x1320
[ 1772.336960][T28536]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1772.342668][T28536]  ? __pfx___mutex_lock+0x10/0x10
[ 1772.347757][T28536]  ? __pfx_out_of_memory+0x10/0x10
[ 1772.352915][T28536]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1772.358507][T28536]  ? __pfx_lock_release+0x10/0x10
[ 1772.363547][T28536]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1772.369644][T28536]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1772.374893][T28536]  ? mem_cgroup_iter+0x3e9/0x560
[ 1772.379851][T28536]  try_charge_memcg+0xda2/0x18a0
[ 1772.384820][T28536]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1772.390204][T28536]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1772.395932][T28536]  ? __pfx_lock_release+0x10/0x10
[ 1772.400973][T28536]  ? memcg_account_kmem+0x1e7/0x210
[ 1772.406193][T28536]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1772.412019][T28536]  __memcg_kmem_charge_page+0xe1/0x250
[ 1772.417488][T28536]  memcg_charge_kernel_stack+0x37e/0x550
[ 1772.423137][T28536]  dup_task_struct+0x15d/0x7d0
[ 1772.427927][T28536]  copy_process+0x5d5/0x3fc0
[ 1772.432551][T28536]  ? __might_fault+0xa9/0x120
[ 1772.437253][T28536]  ? __pfx_lock_release+0x10/0x10
[ 1772.442307][T28536]  ? __pfx_copy_process+0x10/0x10
[ 1772.447351][T28536]  ? __might_fault+0xc5/0x120
[ 1772.452058][T28536]  ? __asan_memset+0x23/0x50
[ 1772.456689][T28536]  kernel_clone+0x21d/0x8d0
[ 1772.461218][T28536]  ? __pfx_kernel_clone+0x10/0x10
[ 1772.466273][T28536]  __se_sys_clone3+0x2cb/0x350
[ 1772.471060][T28536]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1772.476379][T28536]  ? do_syscall_64+0x108/0x240
[ 1772.481166][T28536]  ? do_syscall_64+0xb4/0x240
[ 1772.485865][T28536]  do_syscall_64+0xf9/0x240
[ 1772.490394][T28536]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1772.496343][T28536] RIP: 0033:0x7f84034a9b99
[ 1772.500763][T28536] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1772.520388][T28536] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
18:13:42 executing program 1:
ppoll(0x0, 0x0, &(0x7f0000002600), &(0x7f0000002640)={[0x5]}, 0x8)

18:13:42 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x342}}}}}}}, 0x3e)

[ 1772.528821][T28536] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1772.536814][T28536] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1772.544790][T28536] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1772.552771][T28536] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1772.560748][T28536] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1772.568756][T28536]  </TASK>
18:13:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

[ 1772.634764][T28536] memory: usage 307180kB, limit 307200kB, failcnt 63320
[ 1772.672164][T28536] memory+swap: usage 307464kB, limit 9007199254740988kB, failcnt 0
18:13:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x4000}, 0x0)

18:13:42 executing program 1:
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xff)

[ 1772.685163][T28536] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[ 1772.711285][T28536] Memory cgroup stats for /syz2:
[ 1772.711450][T28536] cache 4096
18:13:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0x154}}, 0x0)

[ 1772.752380][T28536] rss 0
[ 1772.757862][T28536] rss_huge 0
[ 1772.769592][T28536] shmem 0
[ 1772.778091][T28536] mapped_file 0
[ 1772.785238][T28536] dirty 4096
18:13:42 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x344}}}}}}}, 0x3e)

18:13:42 executing program 1:
pselect6(0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)={0x0})

[ 1772.801252][T28536] writeback 0
[ 1772.814860][T28536] workingset_refault_anon 24279
[ 1772.832200][T28536] workingset_refault_file 5
[ 1772.841217][T28536] swap 290816
[ 1772.852695][T28536] swapcached 0
[ 1772.860850][T28536] pgpgin 187910
[ 1772.881069][T28536] pgpgout 187909
[ 1772.889864][T28536] pgfault 383018
18:13:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x6000}, 0x0)

[ 1772.902303][T28536] pgmajfault 22266
18:13:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x148}}, 0x0)

[ 1772.933988][T28536] inactive_anon 0
[ 1772.947614][T28536] active_anon 0
[ 1772.951148][T28536] inactive_file 0
[ 1772.954801][T28536] active_file 4096
[ 1772.984065][T28536] unevictable 0
[ 1772.993635][T28536] hierarchical_memory_limit 314572800
[ 1773.007309][T28536] hierarchical_memsw_limit 9223372036854771712
[ 1773.013517][T28536] total_cache 4096
18:13:42 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)

18:13:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xf531}, 0x0)

[ 1773.032082][T28536] total_rss 0
[ 1773.035455][T28536] total_rss_huge 0
[ 1773.040741][T28536] total_shmem 0
[ 1773.044523][T28536] total_mapped_file 0
[ 1773.064877][T28536] total_dirty 4096
[ 1773.077582][T28536] total_writeback 0
18:13:42 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x348}}}}}}}, 0x3e)

18:13:42 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x148}}, 0x0)

[ 1773.083767][T28536] total_workingset_refault_anon 24279
[ 1773.096270][T28536] total_workingset_refault_file 5
[ 1773.118816][T28536] total_swap 290816
[ 1773.127314][T28536] total_swapcached 0
18:13:42 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'})

18:13:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x34000}, 0x0)

[ 1773.137459][T28536] total_pgpgin 187910
[ 1773.149927][T28536] total_pgpgout 187909
[ 1773.170567][T28536] total_pgfault 383018
[ 1773.187204][T28536] total_pgmajfault 22266
[ 1773.193840][T28536] total_inactive_anon 0
[ 1773.207821][T28536] total_active_anon 0
[ 1773.214209][T28536] total_inactive_file 0
[ 1773.231124][T28536] total_active_file 4096
18:13:43 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)

18:13:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x148}}, 0x0)

18:13:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x400300}, 0x0)

[ 1773.247864][T28536] total_unevictable 0
[ 1773.255517][T28536] anon_cost 0
[ 1773.264728][T28536] file_cost 0
[ 1773.274005][T28536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28536,uid=0
[ 1773.327585][T28536] Memory cgroup out of memory: Killed process 28536 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:43 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140), &(0x7f00000002c0)=0x4)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r2)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f040e00b4e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c64064a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x248000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r6, @ANYBLOB="030326bd7000fddbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r8, @ANYBLOB="0802028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72740000008070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="180202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000004000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400460000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB], 0x4d4}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5], 0x3c}}, 0x0)

18:13:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x154}}, 0x0)

18:13:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1000000}, 0x0)

18:13:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x2000000}, 0x0)

18:13:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x352}}}}}}}, 0x3e)

18:13:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc}]}, 0x154}}, 0x0)

18:13:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x3000000}, 0x0)

18:13:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc}]}, 0x154}}, 0x0)

18:13:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x35c}}}}}}}, 0x3e)

18:13:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc}]}, 0x154}}, 0x0)

[ 1773.765224][ T5113] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1773.800518][ T5113] CPU: 0 PID: 5113 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1773.810932][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1773.821027][ T5113] Call Trace:
[ 1773.824346][ T5113]  <TASK>
[ 1773.827313][ T5113]  dump_stack_lvl+0x1e7/0x2e0
[ 1773.832041][ T5113]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1773.837287][ T5113]  ? __pfx__printk+0x10/0x10
[ 1773.841919][ T5113]  ? ___ratelimit+0x4c4/0x670
[ 1773.846642][ T5113]  ? __pfx____ratelimit+0x10/0x10
[ 1773.851727][ T5113]  dump_header+0xda/0x6a0
[ 1773.856119][ T5113]  oom_kill_process+0x3a7/0x930
[ 1773.861128][ T5113]  out_of_memory+0xf67/0x1320
[ 1773.865866][ T5113]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1773.871547][ T5113]  ? __pfx___mutex_lock+0x10/0x10
[ 1773.876619][ T5113]  ? __pfx_out_of_memory+0x10/0x10
[ 1773.881791][ T5113]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1773.887385][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1773.892461][ T5113]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1773.898590][ T5113]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1773.904178][ T5113]  ? mem_cgroup_iter+0x3e9/0x560
[ 1773.909171][ T5113]  try_charge_memcg+0xda2/0x18a0
[ 1773.914154][ T5113]  ? mark_lock+0x9a/0x350
[ 1773.918553][ T5113]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1773.924102][ T5113]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1773.930334][ T5113]  charge_memcg+0xa2/0x160
[ 1773.934900][ T5113]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1773.941030][ T5113]  __read_swap_cache_async+0x480/0x8b0
[ 1773.946535][ T5113]  ? mark_lock+0x9a/0x350
[ 1773.950942][ T5113]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1773.957097][ T5113]  swap_cluster_readahead+0x67c/0x810
18:13:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x4000000}, 0x0)

18:13:43 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x14c}}, 0x0)

[ 1773.962527][ T5113]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1773.968460][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1773.973532][ T5113]  ? xas_descend+0x37e/0x470
[ 1773.978186][ T5113]  swapin_readahead+0x1ea/0x1070
[ 1773.983199][ T5113]  ? filemap_get_entry+0x127/0x4e0
[ 1773.988395][ T5113]  ? __pfx_swapin_readahead+0x10/0x10
[ 1773.993833][ T5113]  ? __filemap_get_folio+0x935/0xbc0
[ 1773.999181][ T5113]  ? swap_cache_get_folio+0x9f/0x570
[ 1774.004512][ T5113]  do_swap_page+0x791/0x3f40
[ 1774.009150][ T5113]  ? rcu_is_watching+0x15/0xb0
[ 1774.013978][ T5113]  ? do_swap_page+0x154/0x3f40
[ 1774.018788][ T5113]  ? __pfx_do_swap_page+0x10/0x10
[ 1774.023856][ T5113]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1774.029362][ T5113]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1774.035225][ T5113]  __handle_mm_fault+0x15e8/0x72d0
[ 1774.040414][ T5113]  ? reacquire_held_locks+0x3eb/0x690
[ 1774.045837][ T5113]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1774.051366][ T5113]  ? __pfx_reacquire_held_locks+0x10/0x10
[ 1774.057155][ T5113]  ? mtree_range_walk+0x6fd/0x8e0
18:13:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x5000000}, 0x0)

[ 1774.062234][ T5113]  ? lock_vma_under_rcu+0x18a/0x730
[ 1774.067484][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1774.072552][ T5113]  ? lock_vma_under_rcu+0x2f9/0x730
[ 1774.077833][ T5113]  ? lock_vma_under_rcu+0x18a/0x730
[ 1774.083113][ T5113]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 1774.088716][ T5113]  handle_mm_fault+0x3c1/0x8a0
[ 1774.093535][ T5113]  exc_page_fault+0x456/0x870
[ 1774.098268][ T5113]  asm_exc_page_fault+0x26/0x30
[ 1774.103157][ T5113] RIP: 0033:0x7f840347a7a4
18:13:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x6000000}, 0x0)

[ 1774.107618][ T5113] Code: 84 00 00 00 00 00 80 3d 71 57 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 48 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 <89> 54 24 14 48 89 74 24 08 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02
[ 1774.127273][ T5113] RSP: 002b:00007ffc11fb81a0 EFLAGS: 00010206
[ 1774.133395][ T5113] RAX: 00000000000000fc RBX: 0000000000003e91 RCX: 0000000000000000
[ 1774.141416][ T5113] RDX: 0000000040000001 RSI: 00007ffc11fb822c RDI: 00000000ffffffff
[ 1774.149476][ T5113] RBP: 00007ffc11fb822c R08: 0000000000000010 R09: 00007ffc11fc80b0
[ 1774.157495][ T5113] R10: 0000000000000000 R11: 00000000000540e2 R12: 0000000000000032
[ 1774.165504][ T5113] R13: 00000000001b0f84 R14: 00000000001b0f84 R15: 0000000000000000
[ 1774.173537][ T5113]  </TASK>
18:13:44 executing program 1:
r0 = socket(0x2, 0x2, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x7, 0x0, &(0x7f00000007c0))

18:13:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc}]}, 0x14c}}, 0x0)

[ 1774.276117][ T5113] memory: usage 307180kB, limit 307200kB, failcnt 63542
18:13:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x7000000}, 0x0)

18:13:44 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x360}}}}}}}, 0x3e)

18:13:44 executing program 1:
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'})

[ 1774.357658][ T5113] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0
[ 1774.365624][ T5113] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
18:13:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc}]}, 0x14c}}, 0x0)

[ 1774.403574][ T5113] Memory cgroup stats for /syz2:
[ 1774.403737][ T5113] cache 4096
[ 1774.419783][ T5113] rss 0
[ 1774.428635][ T5113] rss_huge 0
[ 1774.437640][ T5113] shmem 0
[ 1774.446278][ T5113] mapped_file 0
18:13:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x8000000}, 0x0)

[ 1774.455746][ T5113] dirty 4096
18:13:44 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='reno\x00', 0x5)

18:13:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc}]}, 0x14c}}, 0x0)

[ 1774.481286][ T5113] writeback 0
[ 1774.484639][ T5113] workingset_refault_anon 24358
[ 1774.504691][ T5113] workingset_refault_file 5
[ 1774.510164][ T5113] swap 331776
[ 1774.513491][ T5113] swapcached 0
[ 1774.516891][ T5113] pgpgin 188003
[ 1774.547699][ T5113] pgpgout 188002
[ 1774.551321][ T5113] pgfault 383162
[ 1774.554887][ T5113] pgmajfault 22342
[ 1774.572520][ T5113] inactive_anon 0
[ 1774.578568][ T5113] active_anon 0
18:13:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x104}}, 0x0)

18:13:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x9000000}, 0x0)

[ 1774.594916][ T5113] inactive_file 0
[ 1774.611783][ T5113] active_file 4096
[ 1774.615560][ T5113] unevictable 0
18:13:44 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x8981, 0x0)

[ 1774.638255][ T5113] hierarchical_memory_limit 314572800
[ 1774.643934][ T5113] hierarchical_memsw_limit 9223372036854771712
[ 1774.678125][ T5113] total_cache 4096
[ 1774.681912][ T5113] total_rss 0
18:13:44 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x362}}}}}}}, 0x3e)

[ 1774.685665][ T5113] total_rss_huge 0
[ 1774.697497][ T5113] total_shmem 0
[ 1774.701100][ T5113] total_mapped_file 0
[ 1774.710215][ T5113] total_dirty 4096
[ 1774.718557][ T5113] total_writeback 0
[ 1774.727074][ T5113] total_workingset_refault_anon 24358
18:13:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x104}}, 0x0)

18:13:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xa000000}, 0x0)

[ 1774.739872][ T5113] total_workingset_refault_file 5
[ 1774.745094][ T5113] total_swap 331776
[ 1774.757497][ T5113] total_swapcached 0
[ 1774.768828][ T5113] total_pgpgin 188003
18:13:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x104}}, 0x0)

18:13:44 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x8924, &(0x7f00000000c0))

[ 1774.807378][ T5113] total_pgpgout 188002
[ 1774.812384][ T5113] total_pgfault 383162
[ 1774.816501][ T5113] total_pgmajfault 22342
[ 1774.838332][ T5113] total_inactive_anon 0
[ 1774.842566][ T5113] total_active_anon 0
[ 1774.846576][ T5113] total_inactive_file 0
18:13:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xb000000}, 0x0)

[ 1774.877493][ T5113] total_active_file 4096
[ 1774.885446][ T5113] total_unevictable 0
[ 1774.897015][ T5113] anon_cost 0
[ 1774.904388][ T5113] file_cost 0
[ 1774.911503][ T5113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28600,uid=0
[ 1774.952333][ T5113] Memory cgroup out of memory: Killed process 28600 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async)
getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140), &(0x7f00000002c0)=0x4)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r2) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) (async)
sendto$packet(r7, &(0x7f00000000c0)="3f040e00b4e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c64064a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x248000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r6, @ANYBLOB="030326bd7000fddbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r8, @ANYBLOB="0802028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72740000008070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="180202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000004000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400460000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB], 0x4d4}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5], 0x3c}}, 0x0)

18:13:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x144}}, 0x0)

18:13:44 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x400454ca, &(0x7f00000000c0))

18:13:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x10000000}, 0x0)

18:13:44 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x36c}}}}}}}, 0x3e)

18:13:44 executing program 1:
syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), 0xffffffffffffffff)

18:13:44 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x144}}, 0x0)

18:13:44 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x11000000}, 0x0)

18:13:45 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e80)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)

18:13:45 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x12000000}, 0x0)

18:13:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x144}}, 0x0)

18:13:45 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x372}}}}}}}, 0x3e)

18:13:45 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x24}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newrule={0x1c}, 0x1c}}, 0x0)

[ 1775.394202][T28668] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
18:13:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x14c}}, 0x0)

[ 1775.477548][T28668] CPU: 0 PID: 28668 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1775.488052][T28668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1775.498148][T28668] Call Trace:
[ 1775.501471][T28668]  <TASK>
[ 1775.504443][T28668]  dump_stack_lvl+0x1e7/0x2e0
[ 1775.509201][T28668]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1775.514448][T28668]  ? __pfx__printk+0x10/0x10
[ 1775.519090][T28668]  ? ___ratelimit+0x4c4/0x670
[ 1775.523848][T28668]  ? __pfx____ratelimit+0x10/0x10
[ 1775.528985][T28668]  dump_header+0xda/0x6a0
[ 1775.533378][T28668]  oom_kill_process+0x3a7/0x930
[ 1775.538292][T28668]  out_of_memory+0xf67/0x1320
[ 1775.543381][T28668]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1775.549075][T28668]  ? __pfx___mutex_lock+0x10/0x10
[ 1775.554161][T28668]  ? __pfx_out_of_memory+0x10/0x10
[ 1775.559354][T28668]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1775.564962][T28668]  ? __pfx_lock_release+0x10/0x10
[ 1775.570042][T28668]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1775.576360][T28668]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1775.581610][T28668]  ? mem_cgroup_iter+0x3e9/0x560
[ 1775.586606][T28668]  try_charge_memcg+0xda2/0x18a0
[ 1775.591626][T28668]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1775.597060][T28668]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1775.602837][T28668]  ? __pfx_lock_release+0x10/0x10
[ 1775.607923][T28668]  ? memcg_account_kmem+0x1e7/0x210
[ 1775.613197][T28668]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1775.619068][T28668]  __memcg_kmem_charge_page+0xe1/0x250
[ 1775.624572][T28668]  memcg_charge_kernel_stack+0x37e/0x550
[ 1775.630257][T28668]  dup_task_struct+0x15d/0x7d0
[ 1775.635069][T28668]  copy_process+0x5d5/0x3fc0
[ 1775.639708][T28668]  ? __might_fault+0xa9/0x120
[ 1775.644410][T28668]  ? __pfx_lock_release+0x10/0x10
[ 1775.649458][T28668]  ? __pfx_copy_process+0x10/0x10
[ 1775.654492][T28668]  ? __might_fault+0xc5/0x120
[ 1775.659190][T28668]  ? __asan_memset+0x23/0x50
[ 1775.663800][T28668]  kernel_clone+0x21d/0x8d0
[ 1775.668323][T28668]  ? __pfx_kernel_clone+0x10/0x10
[ 1775.673376][T28668]  __se_sys_clone3+0x2cb/0x350
[ 1775.678156][T28668]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1775.683464][T28668]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1775.689486][T28668]  ? exc_page_fault+0x587/0x870
[ 1775.694359][T28668]  ? do_syscall_64+0xb4/0x240
[ 1775.699085][T28668]  do_syscall_64+0xf9/0x240
[ 1775.703602][T28668]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1775.709506][T28668] RIP: 0033:0x7f84034a9b99
[ 1775.713955][T28668] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1775.733568][T28668] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1775.741998][T28668] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1775.749981][T28668] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1775.757958][T28668] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1775.765938][T28668] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
18:13:45 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x14000000}, 0x0)

18:13:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x14c}}, 0x0)

18:13:45 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000002240))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x80003a)

18:13:45 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x15000000}, 0x0)

18:13:45 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000780)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@XFRMA_IF_ID={0x8}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x0, 0x2}}]}, 0x14c}}, 0x0)

[ 1775.773914][T28668] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1775.781927][T28668]  </TASK>
[ 1775.786875][T28668] memory: usage 307192kB, limit 307200kB, failcnt 63748
[ 1775.795203][T28668] memory+swap: usage 307544kB, limit 9007199254740988kB, failcnt 0
[ 1775.805266][T28668] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[ 1775.860276][T28668] Memory cgroup stats for /syz2:
[ 1775.860439][T28668] cache 4096
[ 1775.889084][T28668] rss 0
[ 1775.895176][T28668] rss_huge 0
[ 1775.905490][T28668] shmem 0
18:13:45 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x19000000}, 0x0)

18:13:45 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x374}}}}}}}, 0x3e)

[ 1775.918407][T28668] mapped_file 0
[ 1775.934038][T28668] dirty 0
[ 1775.941880][T28668] writeback 0
[ 1775.946028][T28668] workingset_refault_anon 24441
[ 1775.956087][T28668] workingset_refault_file 5
18:13:45 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x54e3, 0x0)

[ 1775.966246][T28668] swap 372736
[ 1775.982877][T28668] swapcached 0
[ 1775.989811][T28668] pgpgin 188097
18:13:45 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x400454dc, 0x0)

18:13:45 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1a000000}, 0x0)

[ 1776.011134][T28668] pgpgout 188096
[ 1776.030302][T28668] pgfault 383306
[ 1776.047371][T28668] pgmajfault 22419
[ 1776.051933][T28668] inactive_anon 0
18:13:45 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e)

[ 1776.061608][T28668] active_anon 0
[ 1776.070590][T28668] inactive_file 0
[ 1776.079059][T28668] active_file 4096
[ 1776.087516][T28668] unevictable 0
[ 1776.095681][T28668] hierarchical_memory_limit 314572800
18:13:45 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x8902, &(0x7f0000000000))

18:13:45 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x20000000}, 0x0)

[ 1776.139571][T28668] hierarchical_memsw_limit 9223372036854771712
[ 1776.153006][T28668] total_cache 4096
[ 1776.163476][T28668] total_rss 0
[ 1776.171475][T28668] total_rss_huge 0
18:13:45 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0x201}, 0x14}}, 0x0)

[ 1776.192838][T28668] total_shmem 0
[ 1776.203680][T28668] total_mapped_file 0
[ 1776.215688][T28668] total_dirty 0
[ 1776.227382][T28668] total_writeback 0
[ 1776.235893][T28668] total_workingset_refault_anon 24441
18:13:46 executing program 1:
socket$packet(0x11, 0x621c0b7b40fbc53d, 0x300)

[ 1776.261361][T28668] total_workingset_refault_file 5
[ 1776.281395][T28668] total_swap 372736
[ 1776.291791][T28668] total_swapcached 0
[ 1776.301631][T28668] total_pgpgin 188097
18:13:46 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x3f000000}, 0x0)

18:13:46 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x380}}}}}}}, 0x3e)

[ 1776.311531][T28668] total_pgpgout 188096
[ 1776.322681][T28668] total_pgfault 383306
[ 1776.332886][T28668] total_pgmajfault 22419
[ 1776.353897][T28668] total_inactive_anon 0
18:13:46 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000180), 0x4)

[ 1776.368475][T28668] total_active_anon 0
[ 1776.387928][T28668] total_inactive_file 0
[ 1776.409007][T28668] total_active_file 4096
[ 1776.421177][T28668] total_unevictable 0
[ 1776.436912][T28668] anon_cost 0
[ 1776.441937][T28668] file_cost 0
[ 1776.445435][T28668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28668,uid=0
[ 1776.470447][T28668] Memory cgroup out of memory: Killed process 28668 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x18, 0x1, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0)

18:13:46 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x40000000}, 0x0)

18:13:46 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140), &(0x7f00000002c0)=0x4)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r2)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) (async)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f040e00b4e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c64064a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x248000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r6, @ANYBLOB="030326bd7000fddbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r8, @ANYBLOB="0802028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72740000008070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="180202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000004000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400460000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB], 0x4d4}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x248000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r6, @ANYBLOB="030326bd7000fddbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r8, @ANYBLOB="0802028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72740000008070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r5, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="180202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000a00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000004000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400460000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB], 0x4d4}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r5], 0x3c}}, 0x0)

18:13:46 executing program 1:
select(0x40, &(0x7f0000001bc0)={0x7}, 0x0, 0x0, &(0x7f0000001c80)={0x77359400})

18:13:46 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000023c0)={'sit0\x00', &(0x7f0000002300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}})

18:13:46 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x60000000}, 0x0)

18:13:46 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x382}}}}}}}, 0x3e)

18:13:46 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xf0ffffff}, 0x0)

18:13:46 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

18:13:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x24}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newrule={0x1c}, 0x1c}}, 0x0)

18:13:46 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xf5310000}, 0x0)

[ 1776.879184][ T5113] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1776.938582][ T5113] CPU: 1 PID: 5113 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1776.948990][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1776.959085][ T5113] Call Trace:
[ 1776.962391][ T5113]  <TASK>
[ 1776.965344][ T5113]  dump_stack_lvl+0x1e7/0x2e0
[ 1776.970081][ T5113]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1776.975325][ T5113]  ? __pfx__printk+0x10/0x10
[ 1776.979980][ T5113]  ? ___ratelimit+0x4c4/0x670
[ 1776.984708][ T5113]  ? __pfx____ratelimit+0x10/0x10
[ 1776.989788][ T5113]  dump_header+0xda/0x6a0
[ 1776.994173][ T5113]  oom_kill_process+0x3a7/0x930
[ 1776.999078][ T5113]  out_of_memory+0xf67/0x1320
[ 1777.003808][ T5113]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1777.009493][ T5113]  ? __pfx___mutex_lock+0x10/0x10
[ 1777.014566][ T5113]  ? __pfx_out_of_memory+0x10/0x10
[ 1777.019735][ T5113]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1777.025323][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1777.030393][ T5113]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1777.036519][ T5113]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1777.041771][ T5113]  ? mem_cgroup_iter+0x3e9/0x560
[ 1777.046773][ T5113]  try_charge_memcg+0xda2/0x18a0
[ 1777.051779][ T5113]  ? mark_lock+0x9a/0x350
[ 1777.056176][ T5113]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1777.061628][ T5113]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1777.067836][ T5113]  charge_memcg+0xa2/0x160
[ 1777.072300][ T5113]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1777.078416][ T5113]  __read_swap_cache_async+0x480/0x8b0
[ 1777.083916][ T5113]  ? mark_lock+0x9a/0x350
[ 1777.088302][ T5113]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1777.094335][ T5113]  swap_cluster_readahead+0x67c/0x810
[ 1777.099759][ T5113]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1777.105698][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1777.110772][ T5113]  ? xas_descend+0x37e/0x470
[ 1777.115418][ T5113]  swapin_readahead+0x1ea/0x1070
[ 1777.120397][ T5113]  ? filemap_get_entry+0x127/0x4e0
[ 1777.125580][ T5113]  ? __pfx_swapin_readahead+0x10/0x10
[ 1777.131002][ T5113]  ? __filemap_get_folio+0x935/0xbc0
[ 1777.136343][ T5113]  ? swap_cache_get_folio+0x9f/0x570
[ 1777.141669][ T5113]  do_swap_page+0x791/0x3f40
[ 1777.146309][ T5113]  ? rcu_is_watching+0x15/0xb0
[ 1777.151145][ T5113]  ? do_swap_page+0x154/0x3f40
[ 1777.155946][ T5113]  ? __pfx_do_swap_page+0x10/0x10
[ 1777.161012][ T5113]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1777.166523][ T5113]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1777.172377][ T5113]  ? __pfx_validate_chain+0x10/0x10
[ 1777.177622][ T5113]  __handle_mm_fault+0x15e8/0x72d0
[ 1777.182801][ T5113]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1777.188307][ T5113]  ? mt_find+0x226/0x850
[ 1777.192585][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1777.197675][ T5113]  ? mt_find+0x62d/0x850
[ 1777.201958][ T5113]  ? mt_find+0x226/0x850
[ 1777.206271][ T5113]  ? find_vma+0x142/0x1c0
[ 1777.210649][ T5113]  ? __pfx_find_vma+0x10/0x10
[ 1777.215366][ T5113]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1777.221401][ T5113]  handle_mm_fault+0x3c1/0x8a0
[ 1777.226231][ T5113]  exc_page_fault+0x2ad/0x870
[ 1777.230967][ T5113]  asm_exc_page_fault+0x26/0x30
18:13:46 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xffffff7f}, 0x0)

18:13:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x28}}, 0x0)

18:13:46 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x388}}}}}}}, 0x3e)

[ 1777.235850][ T5113] RIP: 0010:__get_user_8+0x11/0x20
[ 1777.241003][ T5113] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90
[ 1777.260654][ T5113] RSP: 0018:ffffc90003dd7d98 EFLAGS: 00050202
[ 1777.266769][ T5113] RAX: 0000555556b62da8 RBX: ffff888028c750b8 RCX: ffffc90003dd7c03
[ 1777.274782][ T5113] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fa0
[ 1777.282805][ T5113] RBP: ffffc90003dd7ec8 R08: ffffffff8f85cd2f R09: 1ffffffff1f0b9a5
[ 1777.290815][ T5113] R10: dffffc0000000000 R11: fffffbfff1f0b9a6 R12: ffffc90003dd7da0
[ 1777.298824][ T5113] R13: ffffc90003dd7fd8 R14: dffffc0000000000 R15: ffff888028c73b80
[ 1777.306856][ T5113]  __rseq_handle_notify_resume+0x158/0x1490
[ 1777.312813][ T5113]  ? __pfx___rseq_handle_notify_resume+0x10/0x10
[ 1777.319191][ T5113]  ? syscall_exit_to_user_mode+0xa2/0x360
[ 1777.324969][ T5113]  syscall_exit_to_user_mode+0x113/0x360
[ 1777.330655][ T5113]  do_syscall_64+0x108/0x240
[ 1777.335287][ T5113]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1777.341226][ T5113] RIP: 0033:0x7f84034a91b5
[ 1777.345672][ T5113] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[ 1777.365315][ T5113] RSP: 002b:00007ffc11fb8160 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[ 1777.373773][ T5113] RAX: 0000000000000000 RBX: 0000000000003e94 RCX: 00007f84034a91b5
[ 1777.381778][ T5113] RDX: 00007ffc11fb81a0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1777.389784][ T5113] RBP: 00007ffc11fb822c R08: 0000000000000000 R09: 00007ffc11fc80b0
[ 1777.397793][ T5113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[ 1777.405802][ T5113] R13: 00000000001b1bc6 R14: 00000000001b1bc6 R15: 0000000000000000
[ 1777.413834][ T5113]  </TASK>
[ 1777.464200][ T5113] memory: usage 307180kB, limit 307200kB, failcnt 63972
[ 1777.494457][ T5113] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0
[ 1777.507181][ T5113] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
18:13:47 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xfffffff0}, 0x0)

18:13:47 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0_to_bond\x00', 0x400})

[ 1777.514550][ T5113] Memory cgroup stats for /syz2:
[ 1777.514702][ T5113] cache 4096
[ 1777.524327][ T5113] rss 0
[ 1777.527439][ T5113] rss_huge 0
[ 1777.530675][ T5113] shmem 0
[ 1777.533645][ T5113] mapped_file 0
[ 1777.537445][ T5113] dirty 0
[ 1777.540419][ T5113] writeback 0
[ 1777.543720][ T5113] workingset_refault_anon 24505
[ 1777.549490][ T5113] workingset_refault_file 5
[ 1777.554028][ T5113] swap 249856
[ 1777.557606][ T5113] swapcached 0
[ 1777.561013][ T5113] pgpgin 188172
18:13:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x17c, 0x3, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_ID={0x8}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x81, 0x0, 0x1]}, @CTA_TUPLE_REPLY={0xc8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xfffffffffffffe90, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv4={{}, {0x0, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x74, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V4_MAXIP={0x8}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x17c}}, 0x0)

[ 1777.564492][ T5113] pgpgout 188171
[ 1777.568281][ T5113] pgfault 383424
[ 1777.571860][ T5113] pgmajfault 22479
[ 1777.575607][ T5113] inactive_anon 0
[ 1777.597359][ T5113] active_anon 0
[ 1777.600879][ T5113] inactive_file 4096
[ 1777.604803][ T5113] active_file 0
18:13:47 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x38c}}}}}}}, 0x3e)

[ 1777.617731][ T5113] unevictable 0
[ 1777.624500][ T5113] hierarchical_memory_limit 314572800
[ 1777.637091][ T5113] hierarchical_memsw_limit 9223372036854771712
[ 1777.652886][T28767] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
18:13:47 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x7f412e87dda9}, 0x0)

18:13:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0)

[ 1777.673218][T28767] __nla_validate_parse: 4 callbacks suppressed
[ 1777.673239][T28767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1777.706426][ T5113] total_cache 4096
18:13:47 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1000000000000}, 0x0)

[ 1777.728453][ T5113] total_rss 0
[ 1777.731808][ T5113] total_rss_huge 0
[ 1777.735558][ T5113] total_shmem 0
[ 1777.747422][ T5113] total_mapped_file 0
[ 1777.751508][ T5113] total_dirty 0
[ 1777.754996][ T5113] total_writeback 0
18:13:47 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x40030000000000}, 0x0)

18:13:47 executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), 0xffffffffffffffff)

[ 1777.949648][ T5113] total_workingset_refault_anon 24505
[ 1777.955357][ T5113] total_workingset_refault_file 5
[ 1777.968525][ T5113] total_swap 249856
[ 1777.974921][ T5113] total_swapcached 0
[ 1777.983830][ T5113] total_pgpgin 188172
[ 1777.992827][ T5113] total_pgpgout 188171
18:13:47 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x100000000000000}, 0x0)

[ 1778.006334][ T5113] total_pgfault 383424
[ 1778.016956][ T5113] total_pgmajfault 22479
[ 1778.051217][ T5113] total_inactive_anon 0
[ 1778.058959][ T5113] total_active_anon 0
[ 1778.063143][ T5113] total_inactive_file 4096
[ 1778.069441][ T5113] total_active_file 0
[ 1778.073592][ T5113] total_unevictable 0
[ 1778.078199][ T5113] anon_cost 0
[ 1778.081639][ T5113] file_cost 0
[ 1778.085125][ T5113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28737,uid=0
18:13:47 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}, 0x1, 0x0, 0x2}, 0x0)

18:13:47 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x200000000000000}, 0x0)

[ 1778.104583][ T5113] Memory cgroup out of memory: Killed process 28737 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:47 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x400454d0, 0x0)

18:13:47 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x100, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80c}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f72}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xac75}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xbb}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xb75}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xade}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080)

18:13:47 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x392}}}}}}}, 0x3e)

18:13:48 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x400c061)

18:13:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x300000000000000}, 0x0)

18:13:48 executing program 1:
select(0x40, &(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40), &(0x7f0000001c80)={0x77359400})

18:13:48 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x88, 0x64, &(0x7f0000000180), 0x4)

18:13:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x400000000000000}, 0x0)

18:13:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x500000000000000}, 0x0)

18:13:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x1}, 0x1c}}, 0x0)

18:13:48 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x394}}}}}}}, 0x3e)

18:13:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x600000000000000}, 0x0)

[ 1778.605947][T28792] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[ 1778.644593][T28792] CPU: 1 PID: 28792 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1778.655125][T28792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1778.665216][T28792] Call Trace:
[ 1778.668548][T28792]  <TASK>
[ 1778.671511][T28792]  dump_stack_lvl+0x1e7/0x2e0
[ 1778.676229][T28792]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1778.681473][T28792]  ? __pfx__printk+0x10/0x10
[ 1778.686109][T28792]  ? ___ratelimit+0x4c4/0x670
[ 1778.690837][T28792]  ? __pfx____ratelimit+0x10/0x10
[ 1778.695910][T28792]  dump_header+0xda/0x6a0
[ 1778.700294][T28792]  oom_kill_process+0x3a7/0x930
[ 1778.705197][T28792]  out_of_memory+0xf67/0x1320
[ 1778.709940][T28792]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1778.715612][T28792]  ? __pfx___mutex_lock+0x10/0x10
[ 1778.720679][T28792]  ? __pfx_out_of_memory+0x10/0x10
[ 1778.725852][T28792]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1778.731444][T28792]  ? __pfx_lock_release+0x10/0x10
[ 1778.736496][T28792]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1778.742586][T28792]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1778.747805][T28792]  ? mem_cgroup_iter+0x3e9/0x560
[ 1778.752790][T28792]  try_charge_memcg+0xda2/0x18a0
[ 1778.757772][T28792]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1778.763162][T28792]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1778.768913][T28792]  ? __pfx_lock_release+0x10/0x10
[ 1778.773979][T28792]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1778.779988][T28792]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1778.785727][T28792]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1778.791561][T28792]  obj_cgroup_charge+0x389/0x630
[ 1778.796527][T28792]  ? obj_cgroup_charge+0x121/0x630
[ 1778.801664][T28792]  ? __pfx_obj_cgroup_charge+0x10/0x10
[ 1778.807150][T28792]  ? kmalloc_trace+0x4e/0x360
[ 1778.811863][T28792]  ? __pfx___might_resched+0x10/0x10
[ 1778.817179][T28792]  __memcg_slab_pre_alloc_hook+0x28d/0x2b0
[ 1778.823007][T28792]  ? copy_semundo+0xb5/0x240
[ 1778.827614][T28792]  kmalloc_trace+0x216/0x360
[ 1778.832224][T28792]  ? __asan_memcpy+0x40/0x70
[ 1778.836845][T28792]  copy_semundo+0xb5/0x240
[ 1778.841277][T28792]  copy_process+0x1bc3/0x3fc0
[ 1778.845982][T28792]  ? copy_process+0x9c3/0x3fc0
[ 1778.850785][T28792]  ? __pfx_copy_process+0x10/0x10
[ 1778.855832][T28792]  ? __might_fault+0xc5/0x120
[ 1778.860542][T28792]  ? __asan_memset+0x23/0x50
[ 1778.865174][T28792]  kernel_clone+0x21d/0x8d0
[ 1778.869704][T28792]  ? __pfx_kernel_clone+0x10/0x10
[ 1778.874761][T28792]  __se_sys_clone3+0x2cb/0x350
[ 1778.879541][T28792]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1778.884852][T28792]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1778.890861][T28792]  ? exc_page_fault+0x587/0x870
[ 1778.895730][T28792]  ? do_syscall_64+0xb4/0x240
[ 1778.900418][T28792]  do_syscall_64+0xf9/0x240
[ 1778.904936][T28792]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1778.910838][T28792] RIP: 0033:0x7f84034a9b99
[ 1778.915309][T28792] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1778.934943][T28792] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1778.943378][T28792] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
18:13:48 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNGETSNDBUF(r0, 0xc0189436, &(0x7f00000000c0))

[ 1778.951382][T28792] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1778.959361][T28792] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1778.967340][T28792] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1778.975330][T28792] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1778.983332][T28792]  </TASK>
[ 1778.996014][T28792] memory: usage 307200kB, limit 307200kB, failcnt 64163
18:13:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x700000000000000}, 0x0)

[ 1779.006729][T28792] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0
[ 1779.015100][T28792] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1779.024276][T28792] Memory cgroup stats for /syz2:
[ 1779.024434][T28792] cache 4096
[ 1779.032950][T28792] rss 12288
[ 1779.036264][T28792] rss_huge 0
[ 1779.041010][T28792] shmem 0
[ 1779.046371][T28792] mapped_file 0
18:13:48 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x398}}}}}}}, 0x3e)

18:13:48 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x1, 0x4)

[ 1779.072129][T28792] dirty 0
[ 1779.075271][T28792] writeback 0
[ 1779.093496][T28792] workingset_refault_anon 24578
18:13:48 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x800000000000000}, 0x0)

[ 1779.126134][T28792] workingset_refault_file 5
[ 1779.158380][T28792] swap 278528
[ 1779.164020][T28792] swapcached 12288
[ 1779.173827][T28792] pgpgin 188256
[ 1779.194017][T28792] pgpgout 188252
18:13:48 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xffffffffffffffc5)

18:13:49 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, 0x3, 0x1, 0x95ccb9e3c62159c9, 0x0, 0x0, {}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0)

[ 1779.209355][T28792] pgfault 383558
[ 1779.221410][T28792] pgmajfault 22546
[ 1779.235735][T28792] inactive_anon 0
[ 1779.245910][T28792] active_anon 12288
18:13:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x900000000000000}, 0x0)

18:13:49 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x39a}}}}}}}, 0x3e)

[ 1779.267752][T28792] inactive_file 0
[ 1779.271448][T28792] active_file 4096
[ 1779.275193][T28792] unevictable 0
[ 1779.307257][T28792] hierarchical_memory_limit 314572800
[ 1779.314669][T28792] hierarchical_memsw_limit 9223372036854771712
[ 1779.337692][T28792] total_cache 4096
[ 1779.341488][T28792] total_rss 12288
[ 1779.345153][T28792] total_rss_huge 0
18:13:49 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x14}, 0x14}}, 0x0)

18:13:49 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_buf(r0, 0x107, 0xf, 0x0, 0x0)

[ 1779.367706][T28792] total_shmem 0
[ 1779.372820][T28792] total_mapped_file 0
[ 1779.376929][T28792] total_dirty 0
[ 1779.397481][T28792] total_writeback 0
[ 1779.401347][T28792] total_workingset_refault_anon 24578
[ 1779.406745][T28792] total_workingset_refault_file 5
18:13:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xa00000000000000}, 0x0)

[ 1779.446457][T28792] total_swap 278528
[ 1779.463038][T28792] total_swapcached 12288
18:13:49 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}, 0x1, 0x0, 0x5000}, 0x0)

18:13:49 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4)

[ 1779.487355][T28792] total_pgpgin 188256
[ 1779.491701][T28792] total_pgpgout 188252
[ 1779.496046][T28792] total_pgfault 383558
[ 1779.502564][T28792] total_pgmajfault 22546
[ 1779.509367][T28792] total_inactive_anon 0
[ 1779.516082][T28792] total_active_anon 12288
[ 1779.553831][T28792] total_inactive_file 0
[ 1779.569673][T28792] total_active_file 4096
[ 1779.580249][T28792] total_unevictable 0
[ 1779.597718][T28792] anon_cost 0
18:13:49 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3b2}}}}}}}, 0x3e)

18:13:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xb00000000000000}, 0x0)

[ 1779.605689][T28792] file_cost 0
[ 1779.616732][T28792] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28792,uid=0
18:13:49 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4)

[ 1779.660223][T28792] Memory cgroup out of memory: Killed process 28792 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:49 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})
ioctl$TUNGETSNDBUF(r0, 0x400454d1, &(0x7f00000000c0))

18:13:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1000000000000000}, 0x0)

18:13:49 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffdef}}, 0x0)

18:13:49 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x100, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80c}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f72}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xac75}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xbb}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xb75}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xade}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x100, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80c}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f72}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xac75}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xbb}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xb75}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xade}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) (async)

18:13:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1100000000000000}, 0x0)

18:13:49 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000180))

18:13:49 executing program 4:
socketpair(0xb, 0x0, 0x0, &(0x7f00000000c0))

18:13:49 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3ba}}}}}}}, 0x3e)

18:13:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1200000000000000}, 0x0)

18:13:49 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3, 0x1, 0x95ccb9e3c62159c9}, 0x14}}, 0x0)

18:13:49 executing program 4:
socket$packet(0x11, 0x2, 0x300)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000002240))

[ 1780.086605][ T5113] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
18:13:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1400000000000000}, 0x0)

[ 1780.158464][ T5113] CPU: 0 PID: 5113 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1780.168874][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1780.178963][ T5113] Call Trace:
[ 1780.182274][ T5113]  <TASK>
[ 1780.185235][ T5113]  dump_stack_lvl+0x1e7/0x2e0
[ 1780.189963][ T5113]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1780.195201][ T5113]  ? __pfx__printk+0x10/0x10
[ 1780.199837][ T5113]  ? ___ratelimit+0x4c4/0x670
[ 1780.204565][ T5113]  ? __pfx____ratelimit+0x10/0x10
[ 1780.209651][ T5113]  dump_header+0xda/0x6a0
[ 1780.214020][ T5113]  oom_kill_process+0x3a7/0x930
[ 1780.218894][ T5113]  out_of_memory+0xf67/0x1320
[ 1780.223591][ T5113]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1780.229248][ T5113]  ? __pfx___mutex_lock+0x10/0x10
[ 1780.234287][ T5113]  ? __pfx_out_of_memory+0x10/0x10
[ 1780.239425][ T5113]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1780.245011][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1780.250057][ T5113]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1780.256145][ T5113]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1780.261363][ T5113]  ? mem_cgroup_iter+0x3e9/0x560
[ 1780.266323][ T5113]  try_charge_memcg+0xda2/0x18a0
[ 1780.271277][ T5113]  ? mark_lock+0x9a/0x350
[ 1780.275639][ T5113]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1780.281053][ T5113]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1780.287221][ T5113]  charge_memcg+0xa2/0x160
[ 1780.291653][ T5113]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1780.297742][ T5113]  __read_swap_cache_async+0x480/0x8b0
[ 1780.303214][ T5113]  ? mark_lock+0x9a/0x350
[ 1780.307574][ T5113]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1780.313589][ T5113]  swap_cluster_readahead+0x67c/0x810
[ 1780.318985][ T5113]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1780.324895][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1780.329941][ T5113]  ? xas_descend+0x37e/0x470
[ 1780.334558][ T5113]  swapin_readahead+0x1ea/0x1070
[ 1780.339508][ T5113]  ? filemap_get_entry+0x127/0x4e0
[ 1780.344648][ T5113]  ? __pfx_swapin_readahead+0x10/0x10
[ 1780.350040][ T5113]  ? __filemap_get_folio+0x935/0xbc0
[ 1780.355351][ T5113]  ? swap_cache_get_folio+0x9f/0x570
[ 1780.360650][ T5113]  do_swap_page+0x791/0x3f40
[ 1780.365262][ T5113]  ? rcu_is_watching+0x15/0xb0
[ 1780.370056][ T5113]  ? do_swap_page+0x154/0x3f40
[ 1780.374830][ T5113]  ? __pfx_do_swap_page+0x10/0x10
[ 1780.379869][ T5113]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1780.385344][ T5113]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1780.391165][ T5113]  ? __pfx_validate_chain+0x10/0x10
[ 1780.396379][ T5113]  __handle_mm_fault+0x15e8/0x72d0
[ 1780.401538][ T5113]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1780.407029][ T5113]  ? mt_find+0x226/0x850
[ 1780.411290][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1780.416353][ T5113]  ? mt_find+0x62d/0x850
[ 1780.420613][ T5113]  ? mt_find+0x226/0x850
[ 1780.424884][ T5113]  ? find_vma+0x142/0x1c0
[ 1780.429230][ T5113]  ? __pfx_find_vma+0x10/0x10
[ 1780.433921][ T5113]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1780.439931][ T5113]  handle_mm_fault+0x3c1/0x8a0
[ 1780.444725][ T5113]  exc_page_fault+0x2ad/0x870
[ 1780.449432][ T5113]  asm_exc_page_fault+0x26/0x30
[ 1780.454297][ T5113] RIP: 0010:__get_user_8+0x11/0x20
[ 1780.459431][ T5113] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90
[ 1780.479053][ T5113] RSP: 0018:ffffc90003dd7d98 EFLAGS: 00050202
[ 1780.485135][ T5113] RAX: 0000555556b62da8 RBX: ffff888028c750b8 RCX: ffffc90003dd7c03
[ 1780.493115][ T5113] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fa0
[ 1780.501100][ T5113] RBP: ffffc90003dd7ec8 R08: ffffffff8f85cd2f R09: 1ffffffff1f0b9a5
[ 1780.509086][ T5113] R10: dffffc0000000000 R11: fffffbfff1f0b9a6 R12: ffffc90003dd7da0
[ 1780.517067][ T5113] R13: ffffc90003dd7fd8 R14: dffffc0000000000 R15: ffff888028c73b80
[ 1780.525071][ T5113]  __rseq_handle_notify_resume+0x158/0x1490
[ 1780.530994][ T5113]  ? __pfx___rseq_handle_notify_resume+0x10/0x10
[ 1780.537338][ T5113]  ? syscall_exit_to_user_mode+0xa2/0x360
[ 1780.543084][ T5113]  syscall_exit_to_user_mode+0x113/0x360
[ 1780.548741][ T5113]  do_syscall_64+0x108/0x240
[ 1780.553353][ T5113]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1780.559262][ T5113] RIP: 0033:0x7f84034a91b5
[ 1780.563692][ T5113] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 b9 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f ba ff ff 48 8b 04 24 48 83 c4 28 f7 d8
[ 1780.583311][ T5113] RSP: 002b:00007ffc11fb8160 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6
[ 1780.591744][ T5113] RAX: 0000000000000000 RBX: 0000000000003e97 RCX: 00007f84034a91b5
[ 1780.599736][ T5113] RDX: 00007ffc11fb81a0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1780.607736][ T5113] RBP: 00007ffc11fb822c R08: 0000000000000000 R09: 00007ffc11fc80b0
[ 1780.615731][ T5113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[ 1780.623713][ T5113] R13: 00000000001b28aa R14: 00000000001b28aa R15: 0000000000000000
[ 1780.631711][ T5113]  </TASK>
18:13:50 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1500000000000000}, 0x0)

18:13:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)

[ 1780.668254][ T5113] memory: usage 307188kB, limit 307200kB, failcnt 64386
[ 1780.675269][ T5113] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0
[ 1780.704145][ T5113] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1780.743105][ T5113] Memory cgroup stats for /syz2:
[ 1780.743420][ T5113] cache 4096
[ 1780.752311][ T5113] rss 0
[ 1780.755106][ T5113] rss_huge 0
[ 1780.758902][ T5113] shmem 0
[ 1780.761869][ T5113] mapped_file 0
[ 1780.765347][ T5113] dirty 0
[ 1780.768441][ T5113] writeback 0
[ 1780.771782][ T5113] workingset_refault_anon 24656
[ 1780.776763][ T5113] workingset_refault_file 5
[ 1780.782260][ T5113] swap 323584
[ 1780.785620][ T5113] swapcached 0
[ 1780.789212][ T5113] pgpgin 188347
18:13:50 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1900000000000000}, 0x0)

[ 1780.792744][ T5113] pgpgout 188346
[ 1780.796316][ T5113] pgfault 383686
[ 1780.800284][ T5113] pgmajfault 22610
[ 1780.804305][ T5113] inactive_anon 0
[ 1780.817377][ T5113] active_anon 0
[ 1780.827361][ T5113] inactive_file 0
[ 1780.831189][ T5113] active_file 4096
[ 1780.836686][ T5113] unevictable 0
18:13:50 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3c2}}}}}}}, 0x3e)

[ 1780.847781][ T5113] hierarchical_memory_limit 314572800
[ 1780.860774][ T5113] hierarchical_memsw_limit 9223372036854771712
[ 1780.884554][ T5113] total_cache 4096
[ 1780.893057][ T5113] total_rss 0
18:13:50 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080))

18:13:50 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x1a00000000000000}, 0x0)

18:13:50 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x0, 0x0, 0x7}, 0x1c)

[ 1780.901050][ T5113] total_rss_huge 0
[ 1780.909561][ T5113] total_shmem 0
[ 1780.940142][ T5113] total_mapped_file 0
[ 1780.945630][ T5113] total_dirty 0
[ 1780.950764][ T5113] total_writeback 0
[ 1780.955872][ T5113] total_workingset_refault_anon 24656
[ 1780.967277][ T5113] total_workingset_refault_file 5
[ 1780.975998][ T5113] total_swap 323584
[ 1780.983499][ T5113] total_swapcached 0
[ 1780.992361][ T5113] total_pgpgin 188347
[ 1781.000661][ T5113] total_pgpgout 188346
18:13:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

18:13:50 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x2000000000000000}, 0x0)

[ 1781.023201][ T5113] total_pgfault 383686
[ 1781.034324][ T5113] total_pgmajfault 22610
[ 1781.053154][ T5113] total_inactive_anon 0
[ 1781.065651][ T5113] total_active_anon 0
18:13:50 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x5, 0x4)

[ 1781.080235][ T5113] total_inactive_file 0
[ 1781.092497][ T5113] total_active_file 4096
[ 1781.108951][ T5113] total_unevictable 0
[ 1781.118005][ T5113] anon_cost 0
18:13:50 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x3f00000000000000}, 0x0)

18:13:50 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3c8}}}}}}}, 0x3e)

18:13:50 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

[ 1781.128229][ T5113] file_cost 0
[ 1781.140023][ T5113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28850,uid=0
[ 1781.197757][ T5113] Memory cgroup out of memory: Killed process 28850 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:51 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000040), 0x6e, 0x0}, 0x0)

18:13:51 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})

18:13:51 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x4000000000000000}, 0x0)

18:13:51 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x100, 0x4, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80c}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f72}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xac75}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xbb}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xb75}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xade}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x3}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080)

18:13:51 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x6000000000000000}, 0x0)

18:13:51 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400))
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0)

18:13:51 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3ca}}}}}}}, 0x3e)

18:13:51 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xa9dd872e417f0000}, 0x0)

18:13:51 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000500)=0x80000001, 0x4)

[ 1781.657004][T28903] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1781.675020][T28903] CPU: 1 PID: 28903 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1781.685519][T28903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1781.695617][T28903] Call Trace:
[ 1781.698932][T28903]  <TASK>
[ 1781.701897][T28903]  dump_stack_lvl+0x1e7/0x2e0
[ 1781.706624][T28903]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1781.711870][T28903]  ? __pfx__printk+0x10/0x10
[ 1781.716516][T28903]  ? ___ratelimit+0x4c4/0x670
[ 1781.721251][T28903]  ? __pfx____ratelimit+0x10/0x10
[ 1781.726379][T28903]  dump_header+0xda/0x6a0
[ 1781.730780][T28903]  oom_kill_process+0x3a7/0x930
[ 1781.735728][T28903]  out_of_memory+0xf67/0x1320
[ 1781.740492][T28903]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1781.746177][T28903]  ? __pfx___mutex_lock+0x10/0x10
[ 1781.751254][T28903]  ? __pfx_out_of_memory+0x10/0x10
[ 1781.756440][T28903]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1781.762057][T28903]  ? __pfx_lock_release+0x10/0x10
[ 1781.767126][T28903]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1781.773256][T28903]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1781.778523][T28903]  ? mem_cgroup_iter+0x3e9/0x560
[ 1781.783515][T28903]  try_charge_memcg+0xda2/0x18a0
[ 1781.788527][T28903]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1781.793945][T28903]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1781.799711][T28903]  ? __pfx_lock_release+0x10/0x10
[ 1781.804830][T28903]  ? memcg_account_kmem+0x1e7/0x210
[ 1781.810095][T28903]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1781.816009][T28903]  __memcg_kmem_charge_page+0xe1/0x250
[ 1781.821513][T28903]  memcg_charge_kernel_stack+0x210/0x550
[ 1781.827197][T28903]  dup_task_struct+0x15d/0x7d0
[ 1781.832017][T28903]  copy_process+0x5d5/0x3fc0
[ 1781.836693][T28903]  ? __might_fault+0xa9/0x120
[ 1781.841430][T28903]  ? __pfx_lock_release+0x10/0x10
[ 1781.846514][T28903]  ? __pfx_copy_process+0x10/0x10
[ 1781.851588][T28903]  ? __might_fault+0xc5/0x120
18:13:51 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1060, 0x0, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "2258b32bb9f2049a5b00d06c46130c37621aa9ae473547114ce009f14c2559e6", "bef417b6d2ac4f3cf4ee311f67cdf0faf59a5b3ea624b69b091d1a0842d5f68a", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "068e2f1314a8e1d63c7c91a041fa4f99e1cf6bf1c3380b780ab35fac82ae40ce", "67b49b7c82b829a53f09f00f04f35c213af39d5b0364ce2ff5d0b7e4d5ff2641", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x2}}]}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "8fc4df638545c3ca6b35709fb9787086487385f7e2071f7d16a4d5fa044e7b00", "5dc3f098633b04c63963c2c0ccf0121136d72bafd37c01d1498f5dcd32566352"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "cae970d8f2cfe018d4b19d4dd7ec1a7b5b1f0b9ca21f45c2c5b91de6a0d3f993", "7a03e85c9220e562417415adc80c6373ce664b6bd5c80b378d4a8e44a2109400"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "c99e7d5272a6563aa7335857a9eb6c44790d52b121ef84607575ad3765163f0e", "3bd874dc4c3823fef4fa5f3aad084f939ee0e8ef88b9d283aa4e9c0079430d83"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "4e4073fb8d234269f7fe47fde3107f36aac8b8a894688bafb55203f76fa0c964", "1140805aad3065e2f851643c2dd4f78873d209023f794dff66aacb6e2db51de4"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "ef2eab57ea8c06c8cffbe39ee9cfe1e324997524103c363082f6d27125c807d1", "b59d1666b6543787d6a56aeab3c8501c2dd2fa1bea98fd879c09f9dca3449ab2"}}}]}, 0x1060}}, 0x0)

[ 1781.856324][T28903]  ? __asan_memset+0x23/0x50
[ 1781.860976][T28903]  kernel_clone+0x21d/0x8d0
[ 1781.865532][T28903]  ? __pfx_kernel_clone+0x10/0x10
[ 1781.870640][T28903]  __se_sys_clone3+0x2cb/0x350
[ 1781.875453][T28903]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1781.880796][T28903]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1781.886847][T28903]  ? exc_page_fault+0x587/0x870
[ 1781.891760][T28903]  ? do_syscall_64+0xb4/0x240
[ 1781.896484][T28903]  do_syscall_64+0xf9/0x240
[ 1781.901030][T28903]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1781.906963][T28903] RIP: 0033:0x7f84034a9b99
[ 1781.911422][T28903] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1781.931080][T28903] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1781.939546][T28903] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1781.947595][T28903] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
18:13:51 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xf0ffffff00000000}, 0x0)

[ 1781.955613][T28903] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1781.963635][T28903] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1781.971653][T28903] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1781.979696][T28903]  </TASK>
18:13:51 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0x3f, 0x4)

[ 1782.013374][T28903] memory: usage 307180kB, limit 307200kB, failcnt 64581
[ 1782.022533][T28903] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0
[ 1782.038105][T28903] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[ 1782.045469][T28903] Memory cgroup stats for /syz2:
[ 1782.045626][T28903] cache 4096
18:13:51 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3cc}}}}}}}, 0x3e)

18:13:51 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})

[ 1782.082877][T28903] rss 12288
18:13:51 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xf531000000000000}, 0x0)

[ 1782.109459][T28903] rss_huge 0
[ 1782.112931][T28903] shmem 0
[ 1782.116496][T28903] mapped_file 0
[ 1782.137314][T28903] dirty 0
[ 1782.141316][T28903] writeback 0
[ 1782.144659][T28903] workingset_refault_anon 24727
[ 1782.157269][T28903] workingset_refault_file 5
[ 1782.167861][T28903] swap 249856
[ 1782.171217][T28903] swapcached 0
[ 1782.174629][T28903] pgpgin 188431
18:13:52 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e80))

18:13:52 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xffffff7f00000000}, 0x0)

[ 1782.207776][T28903] pgpgout 188427
[ 1782.211402][T28903] pgfault 383814
[ 1782.214970][T28903] pgmajfault 22679
[ 1782.232456][T28903] inactive_anon 0
[ 1782.236506][T28903] active_anon 12288
18:13:52 executing program 4:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @local}}, 0x5c)

[ 1782.257296][T28903] inactive_file 0
[ 1782.261007][T28903] active_file 4096
[ 1782.264763][T28903] unevictable 0
[ 1782.281035][T28903] hierarchical_memory_limit 314572800
[ 1782.294484][T28903] hierarchical_memsw_limit 9223372036854771712
[ 1782.313121][T28903] total_cache 4096
[ 1782.324414][T28903] total_rss 12288
[ 1782.334218][T28903] total_rss_huge 0
[ 1782.342797][T28903] total_shmem 0
[ 1782.346432][T28903] total_mapped_file 0
[ 1782.351032][T28903] total_dirty 0
[ 1782.357997][T28903] total_writeback 0
18:13:52 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0xffffffff00000000}, 0x0)

[ 1782.364864][T28903] total_workingset_refault_anon 24727
[ 1782.378630][T28903] total_workingset_refault_file 5
[ 1782.395738][T28903] total_swap 249856
[ 1782.405581][T28903] total_swapcached 0
18:13:52 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x2})
ioctl$SIOCGIFHWADDR(r0, 0x400454cd, &(0x7f0000000300)={'caif0\x00'})

18:13:52 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3d0}}}}}}}, 0x3e)

18:13:52 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, 0x0, 0x0)

[ 1782.419406][T28903] total_pgpgin 188431
[ 1782.426121][T28903] total_pgpgout 188427
[ 1782.459201][T28903] total_pgfault 383814
[ 1782.463639][T28903] total_pgmajfault 22679
18:13:52 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1782.487481][T28903] total_inactive_anon 0
[ 1782.491743][T28903] total_active_anon 12288
[ 1782.496115][T28903] total_inactive_file 0
[ 1782.521773][T28903] total_active_file 4096
[ 1782.526084][T28903] total_unevictable 0
18:13:52 executing program 1:
socketpair(0x10, 0x0, 0x0, &(0x7f00000005c0))

[ 1782.552447][T28903] anon_cost 0
[ 1782.560084][T28903] file_cost 0
[ 1782.579977][T28903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28903,uid=0
18:13:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}]}]}, 0x40}}, 0x0)

18:13:52 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
accept$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x8, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40040)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xe22867b308f6a109)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x2}, {0xffe0, 0x8}, {0xffe0, 0x1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xea}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32=r4], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[ 1782.614928][T28903] Memory cgroup out of memory: Killed process 28903 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:52 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x2}, 0x0)

18:13:52 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3d8}}}}}}}, 0x3e)

18:13:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x33fe0}}, 0x0)

18:13:52 executing program 1:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz1\x00', 0x200002, 0x0)

18:13:52 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x3}, 0x0)

18:13:52 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000040), 0x4)

18:13:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

18:13:52 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x4}, 0x0)

18:13:52 executing program 4:
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz1\x00', 0x200002, 0x0)

[ 1783.028888][T28947] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1783.048837][T28962] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[ 1783.053303][T28947] CPU: 1 PID: 28947 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1783.067407][T28947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1783.077502][T28947] Call Trace:
[ 1783.080806][T28947]  <TASK>
[ 1783.083767][T28947]  dump_stack_lvl+0x1e7/0x2e0
[ 1783.088492][T28947]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1783.091802][T28962] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[ 1783.093707][T28947]  ? __pfx__printk+0x10/0x10
[ 1783.106403][T28947]  ? ___ratelimit+0x4c4/0x670
[ 1783.111124][T28947]  ? __pfx____ratelimit+0x10/0x10
[ 1783.116203][T28947]  dump_header+0xda/0x6a0
[ 1783.120561][T28947]  oom_kill_process+0x3a7/0x930
[ 1783.125436][T28947]  out_of_memory+0xf67/0x1320
[ 1783.130135][T28947]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1783.135784][T28947]  ? __pfx___mutex_lock+0x10/0x10
[ 1783.140829][T28947]  ? __pfx_out_of_memory+0x10/0x10
[ 1783.145964][T28947]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1783.151530][T28947]  ? __pfx_lock_release+0x10/0x10
[ 1783.156596][T28947]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1783.162684][T28947]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1783.167919][T28947]  ? mem_cgroup_iter+0x3e9/0x560
[ 1783.172877][T28947]  try_charge_memcg+0xda2/0x18a0
[ 1783.177851][T28947]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1783.183242][T28947]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1783.188979][T28947]  ? __pfx_lock_release+0x10/0x10
[ 1783.194050][T28947]  ? memcg_account_kmem+0x1e7/0x210
[ 1783.199274][T28947]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1783.205099][T28947]  __memcg_kmem_charge_page+0xe1/0x250
[ 1783.210575][T28947]  memcg_charge_kernel_stack+0x210/0x550
[ 1783.216228][T28947]  dup_task_struct+0x15d/0x7d0
[ 1783.221028][T28947]  copy_process+0x5d5/0x3fc0
[ 1783.225642][T28947]  ? __might_fault+0xa9/0x120
[ 1783.230339][T28947]  ? __pfx_lock_release+0x10/0x10
[ 1783.235411][T28947]  ? __pfx_copy_process+0x10/0x10
[ 1783.240459][T28947]  ? __might_fault+0xc5/0x120
[ 1783.245154][T28947]  ? __asan_memset+0x23/0x50
[ 1783.249780][T28947]  kernel_clone+0x21d/0x8d0
[ 1783.254304][T28947]  ? __pfx_kernel_clone+0x10/0x10
[ 1783.259355][T28947]  __se_sys_clone3+0x2cb/0x350
[ 1783.264141][T28947]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1783.269451][T28947]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1783.275460][T28947]  ? exc_page_fault+0x587/0x870
[ 1783.280334][T28947]  ? do_syscall_64+0xb4/0x240
[ 1783.285033][T28947]  do_syscall_64+0xf9/0x240
[ 1783.289556][T28947]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1783.295460][T28947] RIP: 0033:0x7f84034a9b99
[ 1783.299891][T28947] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1783.319524][T28947] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1783.327951][T28947] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1783.335937][T28947] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1783.343918][T28947] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1783.351898][T28947] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1783.359879][T28947] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1783.367873][T28947]  </TASK>
18:13:53 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3e0}}}}}}}, 0x3e)

18:13:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x5}, 0x0)

[ 1783.374104][T28947] memory: usage 307200kB, limit 307200kB, failcnt 64781
[ 1783.381258][T28947] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0
[ 1783.414877][T28947] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
18:13:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettfilter={0x24}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newrule={0x1c}, 0x1c}}, 0x0)

18:13:53 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)

[ 1783.448481][T28947] Memory cgroup stats for /syz2:
[ 1783.448649][T28947] cache 4096
[ 1783.457078][T28947] rss 12288
[ 1783.461578][T28947] rss_huge 0
[ 1783.470826][T28947] shmem 0
[ 1783.478881][T28947] mapped_file 0
18:13:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x6}, 0x0)

[ 1783.506908][T28947] dirty 4096
[ 1783.527474][T28947] writeback 0
[ 1783.535243][T28947] workingset_refault_anon 24803
[ 1783.555248][T28947] workingset_refault_file 5
[ 1783.569749][T28947] swap 290816
18:13:53 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x5452, &(0x7f00000002c0)={'veth0_to_bond\x00'})

[ 1783.579483][T28947] swapcached 0
[ 1783.598951][T28947] pgpgin 188520
[ 1783.611126][T28947] pgpgout 188516
[ 1783.620502][T28947] pgfault 383947
18:13:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x7}, 0x0)

[ 1783.630018][T28947] pgmajfault 22745
[ 1783.636276][T28947] inactive_anon 0
[ 1783.642564][T28947] active_anon 12288
[ 1783.655484][T28947] inactive_file 0
[ 1783.671043][T28947] active_file 4096
18:13:53 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x50, 0x2, 0x9, 0x301, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0)

18:13:53 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3e2}}}}}}}, 0x3e)

[ 1783.688190][T28947] unevictable 0
[ 1783.692315][T28947] hierarchical_memory_limit 314572800
[ 1783.701245][T28947] hierarchical_memsw_limit 9223372036854771712
18:13:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x8}, 0x0)

[ 1783.737416][T28947] total_cache 4096
[ 1783.744785][T28947] total_rss 12288
[ 1783.755849][T28947] total_rss_huge 0
[ 1783.764982][T28947] total_shmem 0
[ 1783.774089][T28947] total_mapped_file 0
18:13:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, &(0x7f000000af80)={&(0x7f000000af40)=@ipv6_newroute={0x1c, 0x18, 0x405, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)

[ 1783.784674][T28947] total_dirty 4096
[ 1783.795772][T28947] total_writeback 0
[ 1783.802419][T28982] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[ 1783.818525][T28982] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[ 1783.826771][T28947] total_workingset_refault_anon 24803
18:13:53 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, &(0x7f000000af80)={&(0x7f0000000040)=@ipv6_newroute={0x20, 0x18, 0x405, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0)

18:13:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x9}, 0x0)

[ 1783.852525][T28947] total_workingset_refault_file 5
[ 1783.871759][T28947] total_swap 290816
[ 1783.875637][T28947] total_swapcached 0
18:13:53 executing program 4:
socketpair(0x5, 0x0, 0x0, &(0x7f0000002880))

[ 1783.907324][T28947] total_pgpgin 188520
[ 1783.911480][T28947] total_pgpgout 188516
[ 1783.938609][T28947] total_pgfault 383947
[ 1783.952078][T28947] total_pgmajfault 22745
18:13:53 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3ea}}}}}}}, 0x3e)

18:13:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xa}, 0x0)

18:13:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x4b47, 0x0)

[ 1783.965706][T28947] total_inactive_anon 0
[ 1783.982346][T28947] total_active_anon 12288
[ 1783.999550][T28947] total_inactive_file 0
[ 1784.003807][T28947] total_active_file 4096
18:13:53 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xb}, 0x0)

[ 1784.036476][T28947] total_unevictable 0
[ 1784.049578][T28947] anon_cost 0
[ 1784.052930][T28947] file_cost 0
[ 1784.056277][T28947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=28947,uid=0
18:13:53 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000000)=0xfffffffffffffe75)

[ 1784.127678][T28947] Memory cgroup out of memory: Killed process 28947 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:53 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000004800010000000000000000000a", @ANYRES32], 0x38}}, 0x0)

18:13:54 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000040)=@raw=[@generic], &(0x7f0000000080)='syzkaller\x00'}, 0x90)

18:13:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x10}, 0x0)

18:13:54 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
accept$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x8, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40040)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xe22867b308f6a109)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x2}, {0xffe0, 0x8}, {0xffe0, 0x1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xea}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32=r4], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

18:13:54 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x7f, 0x1000, 0x408}, 0x48)

18:13:54 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3f0}}}}}}}, 0x3e)

[ 1784.290595][T29009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
18:13:54 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90)

18:13:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x11}, 0x0)

18:13:54 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000002340)={&(0x7f0000000140), 0xc, &(0x7f0000002300)={&(0x7f0000000340)=@delchain={0x34, 0x65, 0x19, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0x4}}]}, 0x34}}, 0x0)

18:13:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x12}, 0x0)

18:13:54 executing program 4:
bpf$BPF_MAP_CONST_STR_FREEZE(0x14, &(0x7f00000009c0), 0x4)

18:13:54 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x12, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

18:13:54 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3f2}}}}}}}, 0x3e)

18:13:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)

18:13:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x14}, 0x0)

18:13:54 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x4020940d, 0x0)

[ 1784.722675][T29013] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[ 1784.775759][T29013] CPU: 1 PID: 29013 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1784.786427][T29013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1784.796501][T29013] Call Trace:
[ 1784.799790][T29013]  <TASK>
[ 1784.802752][T29013]  dump_stack_lvl+0x1e7/0x2e0
[ 1784.807482][T29013]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1784.812701][T29013]  ? __pfx__printk+0x10/0x10
[ 1784.817327][T29013]  ? ___ratelimit+0x4c4/0x670
[ 1784.822040][T29013]  ? __pfx____ratelimit+0x10/0x10
[ 1784.827102][T29013]  dump_header+0xda/0x6a0
[ 1784.831485][T29013]  oom_kill_process+0x3a7/0x930
[ 1784.836382][T29013]  out_of_memory+0xf67/0x1320
[ 1784.841088][T29013]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1784.846744][T29013]  ? __pfx___mutex_lock+0x10/0x10
[ 1784.851793][T29013]  ? __pfx_out_of_memory+0x10/0x10
[ 1784.856937][T29013]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1784.862512][T29013]  ? __pfx_lock_release+0x10/0x10
[ 1784.867563][T29013]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1784.873653][T29013]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1784.878872][T29013]  ? mem_cgroup_iter+0x3e9/0x560
[ 1784.883828][T29013]  try_charge_memcg+0xda2/0x18a0
[ 1784.888804][T29013]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1784.894189][T29013]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1784.899920][T29013]  ? __pfx_lock_release+0x10/0x10
[ 1784.904963][T29013]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1784.910964][T29013]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1784.916783][T29013]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1784.922612][T29013]  obj_cgroup_charge+0x389/0x630
[ 1784.927578][T29013]  ? obj_cgroup_charge+0x121/0x630
[ 1784.932717][T29013]  ? __pfx_obj_cgroup_charge+0x10/0x10
[ 1784.938196][T29013]  ? kmalloc_trace+0x4e/0x360
[ 1784.942895][T29013]  ? __pfx___might_resched+0x10/0x10
[ 1784.948200][T29013]  __memcg_slab_pre_alloc_hook+0x28d/0x2b0
[ 1784.954021][T29013]  ? copy_semundo+0xb5/0x240
[ 1784.958623][T29013]  kmalloc_trace+0x216/0x360
[ 1784.963228][T29013]  ? __asan_memcpy+0x40/0x70
[ 1784.967840][T29013]  copy_semundo+0xb5/0x240
[ 1784.972280][T29013]  copy_process+0x1bc3/0x3fc0
[ 1784.976980][T29013]  ? copy_process+0x9c3/0x3fc0
[ 1784.981762][T29013]  ? __pfx_copy_process+0x10/0x10
[ 1784.986793][T29013]  ? __might_fault+0xc5/0x120
[ 1784.991485][T29013]  ? __asan_memset+0x23/0x50
[ 1784.996095][T29013]  kernel_clone+0x21d/0x8d0
[ 1785.000617][T29013]  ? __pfx_kernel_clone+0x10/0x10
[ 1785.005657][T29013]  ? __pfx_lock_release+0x10/0x10
[ 1785.010703][T29013]  __se_sys_clone3+0x2cb/0x350
[ 1785.015475][T29013]  ? __might_fault+0xa9/0x120
[ 1785.020182][T29013]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1785.025479][T29013]  ? rcu_is_watching+0x15/0xb0
[ 1785.030270][T29013]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1785.036274][T29013]  ? exc_page_fault+0x587/0x870
[ 1785.041150][T29013]  ? do_syscall_64+0xb4/0x240
[ 1785.045847][T29013]  do_syscall_64+0xf9/0x240
[ 1785.050367][T29013]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1785.056269][T29013] RIP: 0033:0x7f84034a9b99
[ 1785.060726][T29013] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1785.080360][T29013] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1785.088803][T29013] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1785.096787][T29013] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1785.104772][T29013] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1785.112757][T29013] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1785.120741][T29013] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1785.128741][T29013]  </TASK>
[ 1785.156144][T29013] memory: usage 307200kB, limit 307200kB, failcnt 64990
18:13:54 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = epoll_create(0x200)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180))

[ 1785.202059][T29013] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0
[ 1785.229071][T29013] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1785.236704][T29013] Memory cgroup stats for /syz2:
[ 1785.236931][T29013] cache 4096
[ 1785.247716][T29013] rss 12288
18:13:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x15}, 0x0)

[ 1785.251158][T29013] rss_huge 0
[ 1785.254612][T29013] shmem 0
[ 1785.260412][T29013] mapped_file 0
[ 1785.264106][T29013] dirty 4096
[ 1785.268056][T29013] writeback 0
[ 1785.271551][T29013] workingset_refault_anon 24877
[ 1785.276591][T29013] workingset_refault_file 5
[ 1785.282128][T29013] swap 278528
18:13:55 executing program 4:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))

18:13:55 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3f4}}}}}}}, 0x3e)

[ 1785.310658][T29013] swapcached 8192
[ 1785.326534][T29013] pgpgin 188607
[ 1785.347593][T29013] pgpgout 188603
18:13:55 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0)

18:13:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x19}, 0x0)

[ 1785.368578][T29013] pgfault 384083
[ 1785.381733][T29013] pgmajfault 22813
[ 1785.392155][T29013] inactive_anon 8192
18:13:55 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)

[ 1785.419659][T29013] active_anon 0
[ 1785.425571][T29013] inactive_file 4096
[ 1785.440273][T29013] active_file 0
[ 1785.460727][T29013] unevictable 0
[ 1785.472664][T29013] hierarchical_memory_limit 314572800
[ 1785.491934][T29013] hierarchical_memsw_limit 9223372036854771712
18:13:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1a}, 0x0)

[ 1785.524981][T29013] total_cache 4096
[ 1785.538176][T29013] total_rss 12288
[ 1785.551757][T29013] total_rss_huge 0
[ 1785.564770][T29013] total_shmem 0
18:13:55 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x90)

18:13:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, &(0x7f000000af80)={&(0x7f000000af40)=@ipv6_newroute={0x1c, 0x18, 0x405, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0)

[ 1785.575582][T29013] total_mapped_file 0
[ 1785.585326][T29013] total_dirty 4096
18:13:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x60}, 0x0)

[ 1785.617344][T29013] total_writeback 0
[ 1785.621354][T29013] total_workingset_refault_anon 24877
[ 1785.655827][T29013] total_workingset_refault_file 5
18:13:55 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3f6}}}}}}}, 0x3e)

18:13:55 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5c5446dc7a395bbad2b242ec9e276059", 0x10)

[ 1785.684187][T29013] total_swap 278528
[ 1785.703973][T29013] total_swapcached 8192
[ 1785.731209][T29013] total_pgpgin 188607
18:13:55 executing program 4:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000180)='GPL\x00'}, 0x90)

[ 1785.757228][T29013] total_pgpgout 188603
[ 1785.775104][T29013] total_pgfault 384083
18:13:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x300}, 0x0)

[ 1785.807452][T29013] total_pgmajfault 22813
[ 1785.811769][T29013] total_inactive_anon 8192
[ 1785.816216][T29013] total_active_anon 0
[ 1785.846243][T29013] total_inactive_file 4096
18:13:55 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)

[ 1785.877446][T29013] total_active_file 0
[ 1785.881498][T29013] total_unevictable 0
[ 1785.885512][T29013] anon_cost 0
18:13:55 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001040))

[ 1785.932932][T29013] file_cost 0
[ 1785.948421][T29013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29013,uid=0
18:13:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x500}, 0x0)

18:13:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={0x0}}, 0x0)

[ 1786.000823][T29013] Memory cgroup out of memory: Killed process 29013 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:55 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
accept$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async)
sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x8, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40040) (async)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xe22867b308f6a109) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@gettfilter={0x44, 0x2e, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x2}, {0xffe0, 0x8}, {0xffe0, 0x1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xea}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES32=r4], 0x3c}}, 0x0) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)

18:13:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x600}, 0x0)

18:13:55 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3fa}}}}}}}, 0x3e)

18:13:55 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtclass={0x24, 0x28, 0x1}, 0x24}}, 0x0)

18:13:56 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)

18:13:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create(0x9)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000480)={0x30000000})

18:13:56 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x700}, 0x0)

18:13:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000002b80)={&(0x7f0000002ac0), 0xc, 0x0}, 0x0)

18:13:56 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0xfffffffc}, 0x48)

[ 1786.425997][T29085] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[ 1786.475160][T29085] CPU: 1 PID: 29085 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1786.485675][T29085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1786.495770][T29085] Call Trace:
[ 1786.499084][T29085]  <TASK>
[ 1786.502045][T29085]  dump_stack_lvl+0x1e7/0x2e0
[ 1786.506765][T29085]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1786.511995][T29085]  ? __pfx__printk+0x10/0x10
[ 1786.516619][T29085]  ? ___ratelimit+0x4c4/0x670
[ 1786.521351][T29085]  ? __pfx____ratelimit+0x10/0x10
[ 1786.526431][T29085]  dump_header+0xda/0x6a0
[ 1786.530817][T29085]  oom_kill_process+0x3a7/0x930
[ 1786.535728][T29085]  out_of_memory+0xf67/0x1320
[ 1786.540490][T29085]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1786.546175][T29085]  ? __pfx___mutex_lock+0x10/0x10
[ 1786.551245][T29085]  ? __pfx_out_of_memory+0x10/0x10
[ 1786.556414][T29085]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1786.562014][T29085]  ? __pfx_lock_release+0x10/0x10
[ 1786.567081][T29085]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
18:13:56 executing program 4:
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700), 0x4)

[ 1786.573198][T29085]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1786.578451][T29085]  ? mem_cgroup_iter+0x3e9/0x560
[ 1786.583456][T29085]  try_charge_memcg+0xda2/0x18a0
[ 1786.588488][T29085]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1786.593938][T29085]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1786.599698][T29085]  ? __pfx_lock_release+0x10/0x10
[ 1786.604776][T29085]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1786.610851][T29085]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1786.616614][T29085]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1786.622471][T29085]  obj_cgroup_charge+0x389/0x630
[ 1786.627455][T29085]  ? obj_cgroup_charge+0x121/0x630
[ 1786.632611][T29085]  ? __pfx_obj_cgroup_charge+0x10/0x10
[ 1786.638114][T29085]  ? kmalloc_trace+0x4e/0x360
[ 1786.642832][T29085]  ? __pfx___might_resched+0x10/0x10
[ 1786.648183][T29085]  __memcg_slab_pre_alloc_hook+0x28d/0x2b0
[ 1786.654035][T29085]  ? copy_semundo+0xb5/0x240
[ 1786.658663][T29085]  kmalloc_trace+0x216/0x360
[ 1786.663295][T29085]  ? __asan_memcpy+0x40/0x70
[ 1786.667936][T29085]  copy_semundo+0xb5/0x240
[ 1786.672393][T29085]  copy_process+0x1bc3/0x3fc0
[ 1786.677180][T29085]  ? copy_process+0x9c3/0x3fc0
[ 1786.682001][T29085]  ? __pfx_copy_process+0x10/0x10
[ 1786.687067][T29085]  ? __might_fault+0xc5/0x120
[ 1786.691794][T29085]  ? __asan_memset+0x23/0x50
[ 1786.696439][T29085]  kernel_clone+0x21d/0x8d0
[ 1786.700988][T29085]  ? __pfx_kernel_clone+0x10/0x10
[ 1786.706075][T29085]  __se_sys_clone3+0x2cb/0x350
[ 1786.710891][T29085]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1786.716254][T29085]  ? do_syscall_64+0x108/0x240
[ 1786.721063][T29085]  ? do_syscall_64+0xb4/0x240
[ 1786.725784][T29085]  do_syscall_64+0xf9/0x240
[ 1786.730340][T29085]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1786.736272][T29085] RIP: 0033:0x7f84034a9b99
[ 1786.740721][T29085] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1786.760369][T29085] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1786.768834][T29085] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1786.776847][T29085] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1786.784854][T29085] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1786.792864][T29085] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1786.800872][T29085] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1786.808900][T29085]  </TASK>
18:13:56 executing program 4:
bpf$MAP_CREATE(0x12, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

18:13:56 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x900}, 0x0)

18:13:56 executing program 1:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880), 0x48)

18:13:56 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3fc}}}}}}}, 0x3e)

[ 1786.834210][T29085] memory: usage 307200kB, limit 307200kB, failcnt 65130
[ 1786.843246][T29085] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0
18:13:56 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000440)={0x11, 0x7, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

[ 1786.887519][T29085] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1786.894878][T29085] Memory cgroup stats for /syz2:
[ 1786.895034][T29085] cache 4096
[ 1786.918156][T29085] rss 12288
[ 1786.921338][T29085] rss_huge 0
18:13:56 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xa00}, 0x0)

[ 1786.945153][T29085] shmem 0
[ 1786.953567][T29085] mapped_file 0
[ 1786.975692][T29085] dirty 4096
[ 1786.986680][T29085] writeback 0
18:13:56 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x80087601, 0x0)

18:13:56 executing program 1:
socketpair(0x28, 0x0, 0x8000, &(0x7f0000000040))

[ 1787.001000][T29085] workingset_refault_anon 24914
[ 1787.025891][T29085] workingset_refault_file 5
[ 1787.053120][T29085] swap 319488
[ 1787.070239][T29085] swapcached 0
[ 1787.088351][T29085] pgpgin 188655
18:13:56 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xb00}, 0x0)

18:13:56 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x0, 0x6, 0xfff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48)

[ 1787.111643][T29085] pgpgout 188651
[ 1787.135187][T29085] pgfault 384167
18:13:56 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x402}}}}}}}, 0x3e)

18:13:56 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x650, 0xffffffff, 0x0, 0xd8, 0x330, 0xffffffff, 0xffffffff, 0x580, 0x580, 0x580, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x210, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @private1, @local, @remote, @private2, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @dev, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}, @common=@srh={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_to_bond\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wlan1\x00', 'team0\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@mcast1, @mcast1, @mcast1, @empty, @ipv4={'\x00', '\xff\xff', @dev}, @mcast1, @mcast2, @mcast1, @local, @empty, @rand_addr=' \x01\x00', @mcast1, @mcast2, @private1, @loopback, @private0]}}, @common=@dst={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0)

[ 1787.157203][T29085] pgmajfault 22844
[ 1787.161116][T29085] inactive_anon 0
[ 1787.172433][T29085] active_anon 12288
[ 1787.176303][T29085] inactive_file 0
[ 1787.193376][T29085] active_file 4096
[ 1787.208400][T29085] unevictable 0
[ 1787.215835][T29085] hierarchical_memory_limit 314572800
[ 1787.226515][T29085] hierarchical_memsw_limit 9223372036854771712
[ 1787.239429][T29085] total_cache 4096
[ 1787.248616][T29085] total_rss 12288
[ 1787.254724][T29085] total_rss_huge 0
18:13:57 executing program 1:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000040)=@raw=[@generic, @generic], &(0x7f0000000080)='syzkaller\x00'}, 0x90)

18:13:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1100}, 0x0)

18:13:57 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x80086601, 0x0)

[ 1787.265693][T29119] x_tables: duplicate underflow at hook 2
[ 1787.273045][T29085] total_shmem 0
[ 1787.280651][T29085] total_mapped_file 0
[ 1787.285326][T29085] total_dirty 4096
[ 1787.295094][T29085] total_writeback 0
[ 1787.305004][T29085] total_workingset_refault_anon 24914
[ 1787.324073][T29085] total_workingset_refault_file 5
18:13:57 executing program 1:
select(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)={0x77359400})

[ 1787.347412][T29085] total_swap 319488
[ 1787.362700][T29085] total_swapcached 0
[ 1787.380370][T29085] total_pgpgin 188655
[ 1787.384958][T29085] total_pgpgout 188651
[ 1787.392725][T29085] total_pgfault 384167
18:13:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1200}, 0x0)

18:13:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000002900)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b40)={0x14}, 0x14}}, 0x0)

[ 1787.411383][T29085] total_pgmajfault 22844
[ 1787.426281][T29085] total_inactive_anon 0
[ 1787.447635][T29085] total_active_anon 12288
[ 1787.452692][T29085] total_inactive_file 0
18:13:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1400}, 0x0)

[ 1787.477938][T29085] total_active_file 4096
[ 1787.482275][T29085] total_unevictable 0
[ 1787.486284][T29085] anon_cost 0
18:13:57 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x543}}}}}}}, 0x3e)

[ 1787.518229][T29085] file_cost 0
[ 1787.521589][T29085] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29085,uid=0
18:13:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1500}, 0x0)

18:13:57 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

[ 1787.566937][T29085] Memory cgroup out of memory: Killed process 29085 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:57 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_delrule={0x68, 0x21, 0x800, 0x70bd2a, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x6, 0x7f, 0x0, 0x0, 0x1, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'sit0\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0xca1}, @FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xd25e}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff9}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={<r5=>0x0, @initdev, @multicast1}, &(0x7f0000000140)=0xc)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x5c, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x5c}}, 0x8001)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={r5, @multicast1, @loopback}, 0xc)
connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0)

18:13:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1900}, 0x0)

18:13:57 executing program 4:
socket$inet6(0xa, 0xf, 0x0)

18:13:57 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x608}}}}}}}, 0x3e)

18:13:57 executing program 4:
bpf$BPF_BTF_GET_NEXT_ID(0x22, 0x0, 0x0)

18:13:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1a00}, 0x0)

18:13:57 executing program 4:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

18:13:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x0)

[ 1788.011205][T29142] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1788.039587][T29142] CPU: 1 PID: 29142 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1788.050075][T29142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1788.060170][T29142] Call Trace:
[ 1788.063479][T29142]  <TASK>
[ 1788.066438][T29142]  dump_stack_lvl+0x1e7/0x2e0
[ 1788.071162][T29142]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1788.076403][T29142]  ? __pfx__printk+0x10/0x10
[ 1788.081040][T29142]  ? ___ratelimit+0x4c4/0x670
[ 1788.085772][T29142]  ? __pfx____ratelimit+0x10/0x10
[ 1788.090846][T29142]  dump_header+0xda/0x6a0
[ 1788.095234][T29142]  oom_kill_process+0x3a7/0x930
[ 1788.100135][T29142]  out_of_memory+0xf67/0x1320
[ 1788.104869][T29142]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1788.110554][T29142]  ? __pfx___mutex_lock+0x10/0x10
[ 1788.115626][T29142]  ? __pfx_out_of_memory+0x10/0x10
[ 1788.120795][T29142]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1788.126387][T29142]  ? __pfx_lock_release+0x10/0x10
[ 1788.131458][T29142]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1788.137577][T29142]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1788.142814][T29142]  ? mem_cgroup_iter+0x3e9/0x560
[ 1788.147803][T29142]  try_charge_memcg+0xda2/0x18a0
[ 1788.152799][T29142]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1788.158192][T29142]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1788.163930][T29142]  ? __pfx_lock_release+0x10/0x10
[ 1788.168985][T29142]  ? memcg_account_kmem+0x1e7/0x210
[ 1788.174210][T29142]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1788.180031][T29142]  __memcg_kmem_charge_page+0xe1/0x250
[ 1788.185500][T29142]  memcg_charge_kernel_stack+0x210/0x550
[ 1788.191155][T29142]  dup_task_struct+0x15d/0x7d0
[ 1788.195939][T29142]  copy_process+0x5d5/0x3fc0
[ 1788.200555][T29142]  ? __might_fault+0xa9/0x120
[ 1788.205249][T29142]  ? __pfx_lock_release+0x10/0x10
[ 1788.210299][T29142]  ? __lock_acquire+0x1345/0x1fd0
[ 1788.215344][T29142]  ? __pfx_copy_process+0x10/0x10
[ 1788.220404][T29142]  ? __might_fault+0xc5/0x120
[ 1788.225101][T29142]  ? __asan_memset+0x23/0x50
[ 1788.229713][T29142]  kernel_clone+0x21d/0x8d0
[ 1788.234234][T29142]  ? __pfx_kernel_clone+0x10/0x10
[ 1788.239278][T29142]  ? __pfx_lock_release+0x10/0x10
[ 1788.244334][T29142]  __se_sys_clone3+0x2cb/0x350
[ 1788.249112][T29142]  ? __might_fault+0xa9/0x120
[ 1788.253808][T29142]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1788.259114][T29142]  ? rcu_is_watching+0x15/0xb0
[ 1788.263910][T29142]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1788.269930][T29142]  ? exc_page_fault+0x587/0x870
[ 1788.274805][T29142]  ? do_syscall_64+0xb4/0x240
[ 1788.279494][T29142]  do_syscall_64+0xf9/0x240
[ 1788.284010][T29142]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1788.289917][T29142] RIP: 0033:0x7f84034a9b99
[ 1788.294345][T29142] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1788.313969][T29142] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1788.322405][T29142] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1788.330399][T29142] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1788.338399][T29142] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1788.346380][T29142] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1788.354362][T29142] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
18:13:57 executing program 4:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex, 0xffffffffffffffff, 0x0, 0x18, 0x0, @prog_id}, 0x20)

18:13:57 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x31f5}, 0x0)

[ 1788.362359][T29142]  </TASK>
18:13:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={0x0}}, 0x4045)

18:13:58 executing program 1:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, &(0x7f000000af80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018e904040040d30000000080"], 0x1c}}, 0x0)

18:13:58 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x3f00}, 0x0)

[ 1788.416415][T29142] memory: usage 307180kB, limit 307200kB, failcnt 65333
[ 1788.437477][T29142] memory+swap: usage 307532kB, limit 9007199254740988kB, failcnt 0
[ 1788.445453][T29142] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
18:13:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, &(0x7f000000af80)={&(0x7f000000af40)=@ipv6_newroute={0x1c, 0x18, 0x405, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x1c}}, 0x0)

18:13:58 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)='4', 0x1, 0x0, &(0x7f0000001040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)

[ 1788.499233][T29142] Memory cgroup stats for /syz2:
[ 1788.499394][T29142] cache 4096
18:13:58 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x689}}}}}}}, 0x3e)

18:13:58 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x4000}, 0x0)

[ 1788.541130][T29142] rss 12288
[ 1788.551413][T29142] rss_huge 0
[ 1788.561755][T29142] shmem 0
[ 1788.570417][T29142] mapped_file 0
18:13:58 executing program 4:
select(0x40, &(0x7f0000000280)={0x3}, &(0x7f00000002c0)={0x1}, &(0x7f0000000300), &(0x7f0000000340)={0x77359400})

[ 1788.592991][T29142] dirty 4096
[ 1788.596250][T29142] writeback 0
18:13:58 executing program 1:
socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 1788.637588][T29142] workingset_refault_anon 25000
[ 1788.643116][T29142] workingset_refault_file 5
[ 1788.665166][T29142] swap 360448
[ 1788.669710][T29142] swapcached 8192
[ 1788.673401][T29142] pgpgin 188753
[ 1788.676920][T29142] pgpgout 188749
18:13:58 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x6000}, 0x0)

18:13:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0)

[ 1788.709619][T29142] pgfault 384313
[ 1788.713274][T29142] pgmajfault 22917
[ 1788.730720][T29142] inactive_anon 0
18:13:58 executing program 1:
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002800), 0x10)

[ 1788.757418][T29142] active_anon 12288
[ 1788.761296][T29142] inactive_file 0
[ 1788.764955][T29142] active_file 4096
[ 1788.790373][T29142] unevictable 0
[ 1788.793945][T29142] hierarchical_memory_limit 314572800
18:13:58 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x700}}}}}}}, 0x3e)

18:13:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x811}, 0x24}}, 0x0)

18:13:58 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xf531}, 0x0)

[ 1788.820813][T29142] hierarchical_memsw_limit 9223372036854771712
[ 1788.827045][T29142] total_cache 4096
[ 1788.864364][T29142] total_rss 12288
[ 1788.876428][T29142] total_rss_huge 0
[ 1788.887671][T29142] total_shmem 0
[ 1788.891194][T29142] total_mapped_file 0
[ 1788.907589][T29142] total_dirty 4096
18:13:58 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000001600))

18:13:58 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, &(0x7f000000af80)={&(0x7f000000af40)=@ipv6_newroute={0x1c}, 0x7ffffffff000}}, 0x0)

[ 1788.916462][T29142] total_writeback 0
[ 1788.930683][T29142] total_workingset_refault_anon 25000
[ 1788.936145][T29142] total_workingset_refault_file 5
[ 1788.969614][T29142] total_swap 360448
[ 1788.973491][T29142] total_swapcached 8192
[ 1789.008014][T29142] total_pgpgin 188753
[ 1789.012077][T29142] total_pgpgout 188749
18:13:58 executing program 1:
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000580)={0xffff8000}, 0x8)

18:13:58 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x34000}, 0x0)

[ 1789.016172][T29142] total_pgfault 384313
18:13:58 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)

[ 1789.049741][T29142] total_pgmajfault 22917
[ 1789.069575][T29142] total_inactive_anon 0
[ 1789.073796][T29142] total_active_anon 12288
18:13:58 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f00000000c0)="74d0027ccdbf0b16cf1cf206ba971b6b", 0x10)

[ 1789.107341][T29142] total_inactive_file 0
[ 1789.111605][T29142] total_active_file 4096
[ 1789.118461][T29142] total_unevictable 0
[ 1789.122493][T29142] anon_cost 0
[ 1789.125808][T29142] file_cost 0
18:13:58 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x806}}}}}}}, 0x3e)

[ 1789.155482][T29142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29142,uid=0
[ 1789.207505][T29142] Memory cgroup out of memory: Killed process 29142 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:13:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_delrule={0x68, 0x21, 0x800, 0x70bd2a, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x6, 0x7f, 0x0, 0x0, 0x1, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'sit0\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0xca1}, @FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xd25e}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff9}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40001) (async)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={<r5=>0x0, @initdev, @multicast1}, &(0x7f0000000140)=0xc) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x5c, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x5c}}, 0x8001) (async)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={r5, @multicast1, @loopback}, 0xc)
connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0) (rerun: 64)

18:13:59 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x400300}, 0x0)

18:13:59 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x11, 0x4)

18:13:59 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="d383e364bca2"}, 0x14)

18:13:59 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)="ca55b8b0", 0x4)

18:13:59 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1000000}, 0x0)

18:13:59 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, &(0x7f000000af80)={0x0}, 0x300}, 0x0)

18:13:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x900}}}}}}}, 0x3e)

18:13:59 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x2000000}, 0x0)

18:13:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001100)={@mcast1})

18:13:59 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000980)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, 0x18)

18:13:59 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x3000000}, 0x0)

18:13:59 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

18:13:59 executing program 4:
select(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x1}, 0x0)

18:13:59 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x4000000}, 0x0)

18:13:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x4b49, 0x0)

18:13:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0xa01}}}}}}}, 0x3e)

18:13:59 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_rssi={{0x1405, 0x2}}}, 0x6)

18:13:59 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x5000000}, 0x0)

[ 1789.995927][T29212] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1790.028202][T29212] CPU: 0 PID: 29212 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1790.038695][T29212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1790.048795][T29212] Call Trace:
[ 1790.052093][T29212]  <TASK>
[ 1790.055037][T29212]  dump_stack_lvl+0x1e7/0x2e0
[ 1790.059732][T29212]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1790.064954][T29212]  ? __pfx__printk+0x10/0x10
[ 1790.069574][T29212]  ? ___ratelimit+0x4c4/0x670
[ 1790.074271][T29212]  ? __pfx____ratelimit+0x10/0x10
[ 1790.079320][T29212]  dump_header+0xda/0x6a0
[ 1790.083686][T29212]  oom_kill_process+0x3a7/0x930
[ 1790.088572][T29212]  out_of_memory+0xf67/0x1320
[ 1790.093309][T29212]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1790.099011][T29212]  ? __pfx___mutex_lock+0x10/0x10
[ 1790.104081][T29212]  ? __pfx_out_of_memory+0x10/0x10
[ 1790.109251][T29212]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1790.114850][T29212]  ? __pfx_lock_release+0x10/0x10
[ 1790.119918][T29212]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1790.126024][T29212]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1790.131241][T29212]  ? mem_cgroup_iter+0x3e9/0x560
[ 1790.136202][T29212]  try_charge_memcg+0xda2/0x18a0
[ 1790.141168][T29212]  ? mark_lock+0x9a/0x350
[ 1790.145560][T29212]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1790.150999][T29212]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1790.157185][T29212]  charge_memcg+0xa2/0x160
[ 1790.161617][T29212]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1790.167725][T29212]  __read_swap_cache_async+0x480/0x8b0
[ 1790.173221][T29212]  ? mark_lock+0x9a/0x350
[ 1790.177592][T29212]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1790.183594][T29212]  swap_cluster_readahead+0x67c/0x810
[ 1790.188988][T29212]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1790.194900][T29212]  ? __pfx_lock_release+0x10/0x10
[ 1790.199944][T29212]  ? xas_descend+0x37e/0x470
[ 1790.204565][T29212]  swapin_readahead+0x1ea/0x1070
[ 1790.209510][T29212]  ? filemap_get_entry+0x127/0x4e0
[ 1790.214652][T29212]  ? __pfx_swapin_readahead+0x10/0x10
[ 1790.220043][T29212]  ? __filemap_get_folio+0x935/0xbc0
[ 1790.225351][T29212]  ? swap_cache_get_folio+0x9f/0x570
[ 1790.230647][T29212]  do_swap_page+0x791/0x3f40
[ 1790.235279][T29212]  ? rcu_is_watching+0x15/0xb0
[ 1790.240081][T29212]  ? do_swap_page+0x154/0x3f40
[ 1790.244881][T29212]  ? __pfx_do_swap_page+0x10/0x10
[ 1790.249919][T29212]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1790.255397][T29212]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1790.261230][T29212]  __handle_mm_fault+0x15e8/0x72d0
[ 1790.266392][T29212]  ? reacquire_held_locks+0x3eb/0x690
[ 1790.271775][T29212]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1790.277259][T29212]  ? __pfx_reacquire_held_locks+0x10/0x10
[ 1790.283026][T29212]  ? mtree_range_walk+0x6fd/0x8e0
[ 1790.288082][T29212]  ? lock_vma_under_rcu+0x18a/0x730
[ 1790.293312][T29212]  ? __pfx_lock_release+0x10/0x10
[ 1790.298445][T29212]  ? lock_vma_under_rcu+0x2f9/0x730
[ 1790.303680][T29212]  ? lock_vma_under_rcu+0x18a/0x730
[ 1790.308916][T29212]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 1790.314484][T29212]  handle_mm_fault+0x3c1/0x8a0
[ 1790.319282][T29212]  exc_page_fault+0x456/0x870
[ 1790.323985][T29212]  asm_exc_page_fault+0x26/0x30
[ 1790.328847][T29212] RIP: 0033:0x7f84034379c0
[ 1790.333303][T29212] Code: 00 00 e9 1c fb ff ff 4c 8b a4 24 a8 00 00 00 48 8d 1d d4 5f 17 00 eb 12 66 90 49 81 c4 d0 00 00 00 49 39 dc 0f 84 64 fc ff ff <41> 80 7c 24 20 00 74 e8 41 8b 44 24 0c 85 c0 74 df 4c 89 e7 e8 d7
[ 1790.352923][T29212] RSP: 002b:00007ffc11fb7fa0 EFLAGS: 00010287
[ 1790.359003][T29212] RAX: 00000000001b4f48 RBX: 00007f84035ad980 RCX: 00000000001b4c48
[ 1790.366986][T29212] RDX: 0000000000000050 RSI: 00007ffc11fb80f0 RDI: 7fffffffffffffff
[ 1790.374965][T29212] RBP: 0000000000000032 R08: 0000000000000010 R09: 00007ffc11fc80b0
[ 1790.382943][T29212] R10: 00007ffc11fc8080 R11: 0000000000054ca0 R12: 00007f84035abf80
[ 1790.390924][T29212] R13: 00000000001b4f2a R14: 00007ffc11fb80f0 R15: 00007ffc11fb80d0
[ 1790.398920][T29212]  </TASK>
18:14:00 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000440)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r4=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14)

18:14:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x6000000}, 0x0)

18:14:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0xa02}}}}}}}, 0x3e)

[ 1790.448710][T29212] memory: usage 307200kB, limit 307200kB, failcnt 65687
18:14:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x7000000}, 0x0)

[ 1790.494631][T29212] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0
18:14:00 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc000000", @ANYRES32], 0xbc}}, 0x0)

18:14:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x8000000}, 0x0)

18:14:00 executing program 4:
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48)

[ 1790.541407][T29212] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1790.559293][T29212] Memory cgroup stats for /syz2:
[ 1790.559437][T29212] cache 4096
18:14:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x9000000}, 0x0)

[ 1790.637238][T29212] rss 12288
[ 1790.640431][T29212] rss_huge 0
[ 1790.643654][T29212] shmem 0
[ 1790.646617][T29212] mapped_file 0
[ 1790.674429][T29212] dirty 4096
18:14:00 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000140))

18:14:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0xc00}}}}}}}, 0x3e)

[ 1790.696687][T29212] writeback 0
[ 1790.703277][T29212] workingset_refault_anon 25122
[ 1790.719545][T29212] workingset_refault_file 5
[ 1790.730616][T29212] swap 278528
[ 1790.741184][T29212] swapcached 12288
18:14:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000001340)={0x14, r1, 0xc01}, 0x14}}, 0x0)

[ 1790.750876][T29212] pgpgin 188889
[ 1790.760440][T29212] pgpgout 188885
[ 1790.784653][T29212] pgfault 384510
18:14:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xa000000}, 0x0)

18:14:00 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x89a0, 0x0)

[ 1790.801870][T29212] pgmajfault 23024
[ 1790.805703][T29212] inactive_anon 12288
[ 1790.830513][T29212] active_anon 0
[ 1790.846903][T29212] inactive_file 4096
[ 1790.857750][T29212] active_file 0
[ 1790.863648][T29212] unevictable 0
[ 1790.877762][T29212] hierarchical_memory_limit 314572800
[ 1790.899674][T29212] hierarchical_memsw_limit 9223372036854771712
[ 1790.909028][T29212] total_cache 4096
[ 1790.915219][T29212] total_rss 12288
[ 1790.925412][T29212] total_rss_huge 0
[ 1790.933433][T29212] total_shmem 0
[ 1790.937086][T29212] total_mapped_file 0
[ 1790.949115][T29212] total_dirty 4096
[ 1790.958755][T29212] total_writeback 0
[ 1790.963366][T29212] total_workingset_refault_anon 25122
[ 1790.980849][T29212] total_workingset_refault_file 5
[ 1790.992173][T29212] total_swap 278528
[ 1790.996120][T29212] total_swapcached 12288
[ 1791.002637][T29212] total_pgpgin 188889
[ 1791.006769][T29212] total_pgpgout 188885
[ 1791.011836][T29212] total_pgfault 384510
[ 1791.027533][T29212] total_pgmajfault 23024
[ 1791.031835][T29212] total_inactive_anon 12288
[ 1791.036352][T29212] total_active_anon 0
[ 1791.042165][T29212] total_inactive_file 4096
[ 1791.046611][T29212] total_active_file 0
18:14:00 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_delrule={0x68, 0x21, 0x800, 0x70bd2a, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x6, 0x7f, 0x0, 0x0, 0x1, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'sit0\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0xca1}, @FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xd25e}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff9}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={<r5=>0x0, @initdev, @multicast1}, &(0x7f0000000140)=0xc)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x5c, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x5c}}, 0x8001)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={r5, @multicast1, @loopback}, 0xc)
connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_delrule={0x68, 0x21, 0x800, 0x70bd2a, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x6, 0x7f, 0x0, 0x0, 0x1, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'sit0\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0xca1}, @FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xd25e}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffff9}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dummy0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40001) (async)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @multicast1}, &(0x7f0000000140)=0xc) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x5c, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x5c}}, 0x8001) (async)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000002c0)={r5, @multicast1, @loopback}, 0xc) (async)
connect$netlink(r0, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0) (async)

18:14:00 executing program 4:
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

18:14:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xb000000}, 0x0)

18:14:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0xc01}}}}}}}, 0x3e)

18:14:00 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001180)=@req={0x0, 0x1ff}, 0x10)

[ 1791.051297][T29212] total_unevictable 0
[ 1791.055289][T29212] anon_cost 0
[ 1791.060394][T29212] file_cost 0
[ 1791.063731][T29212] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29212,uid=0
[ 1791.080474][T29212] Memory cgroup out of memory: Killed process 29212 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x10000000}, 0x0)

18:14:00 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000cc0)=@mpls_getnetconf={0x14, 0x52, 0x1}, 0x14}}, 0x0)

18:14:01 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

18:14:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0xc02}}}}}}}, 0x3e)

18:14:01 executing program 4:
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x2)

18:14:01 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x11000000}, 0x0)

18:14:01 executing program 1:
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0xffffff54)

18:14:01 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0x0, 0x0, &(0x7f0000000040))

18:14:01 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x12000000}, 0x0)

18:14:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000000040))

18:14:01 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000024c0)={&(0x7f00000023c0), 0xc, &(0x7f0000002480)={0x0}}, 0x20004805)

18:14:01 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x14000000}, 0x0)

18:14:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000000040))

18:14:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0xe80}}}}}}}, 0x3e)

18:14:01 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x15000000}, 0x0)

18:14:01 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f000000afc0)={0x0, 0x0, &(0x7f000000af80)={0x0}, 0x1, 0x0, 0xd8180000}, 0x0)

18:14:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000000040))

18:14:01 executing program 4:
bpf$MAP_CREATE(0xa, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

18:14:01 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x19000000}, 0x0)

18:14:01 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000000040))

18:14:01 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1003}}}}}}}, 0x3e)

18:14:01 executing program 4:
r0 = epoll_create(0x200)
epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x6000)

18:14:01 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x1a000000}, 0x0)

18:14:01 executing program 1:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540), 0x20)

[ 1792.138008][ T1239] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.144399][ T1239] ieee802154 phy1 wpan1: encryption failed: -22
18:14:02 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x20000000}, 0x0)

18:14:02 executing program 1:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0xeca9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48)

18:14:02 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x3f000000}, 0x0)

18:14:05 executing program 1:
syz_genetlink_get_family_id$tipc(&(0x7f0000002500), 0xffffffffffffffff)

18:14:05 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1200}}}}}}}, 0x3e)

18:14:05 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x40000000}, 0x0)

18:14:05 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000300))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001780)={0x13, 0x0, 0x1a00, 0x600002})
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_GETNSID={0x24, 0x5a, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x24}}, 0x20000000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=@delqdisc={0x1f0, 0x25, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6, 0x10}, {0x7, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0xf5, 0x3, 0x1, 0x1, 0x10000, 0x1}}, {0x6, 0x2, [0x66]}}, {{0x1c, 0x1, {0x0, 0xe0, 0xfc00, 0x401, 0x1, 0x7, 0xb6a, 0x3}}, {0xa, 0x2, [0x94, 0x2, 0x7]}}]}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3f, 0x100, 0x100, 0x1, 0x1, 0x9, 0x2}}, {0x8, 0x2, [0x564, 0xff]}}, {{0x1c, 0x1, {0x1f, 0x20, 0x3ff, 0x8, 0x1, 0x3, 0x2, 0x7}}, {0x12, 0x2, [0x3, 0x1, 0x0, 0x7, 0x0, 0x100, 0xf000]}}, {{0x1c, 0x1, {0x7f, 0x2, 0x4c19, 0x2, 0x2, 0x0, 0x7fffffff, 0xa}}, {0x18, 0x2, [0x5, 0x4, 0x1000, 0x1f, 0x4, 0xb0a, 0x1, 0x7ff, 0x401, 0x2]}}, {{0x1c, 0x1, {0x9, 0x9, 0x82e, 0x1f, 0x0, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x6, 0x13, 0x5, 0x1]}}, {{0x1c, 0x1, {0x1f, 0x7a, 0x6, 0x1, 0x2, 0x6, 0x2, 0x6}}, {0x10, 0x2, [0x9, 0x5, 0x0, 0xd4, 0x6, 0x4]}}, {{0x1c, 0x1, {0x7, 0x40, 0x100, 0x200, 0x0, 0x5, 0x7, 0x6}}, {0x10, 0x2, [0x5, 0x8, 0xf233, 0x9d2c, 0xffff, 0x7b4]}}, {{0x1c, 0x1, {0x8, 0x3, 0x6, 0x4, 0x2, 0x7ff, 0x6, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x6, 0x2, 0x7, 0xac]}}, {{0x1c, 0x1, {0x7, 0x9, 0x7ff, 0x7, 0x2, 0x5, 0x7fffffff, 0x8}}, {0x14, 0x2, [0x3f, 0x8, 0x0, 0x6, 0x22, 0x9, 0x3b, 0x3]}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6], 0x3c}}, 0x0)

18:14:05 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

18:14:05 executing program 4:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9}, 0x48)

18:14:05 executing program 1:
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2710})

18:14:05 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0x60000000}, 0x0)

18:14:05 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000240), &(0x7f0000000280)={0x8}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x7]}, 0x8})

18:14:05 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0)

18:14:05 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xf0ffffff}, 0x0)

18:14:05 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1201}}}}}}}, 0x3e)

18:14:05 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xf5310000}, 0x0)

18:14:05 executing program 4:
bpf$MAP_CREATE(0x7, 0x0, 0x300)

18:14:06 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0)

18:14:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xffffff7f}, 0x0)

18:14:06 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2e752c76f5d96bb24347ca79554cef4a70", 0x11)

18:14:06 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x401c5820, &(0x7f0000000b80)={'wpan0\x00'})

18:14:06 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1202}}}}}}}, 0x3e)

18:14:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000, 0x0, 0xfffffff0}, 0x0)

18:14:06 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x891d, &(0x7f0000000b80)={'wpan0\x00'})

18:14:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x2)

18:14:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x3)

18:14:06 executing program 1:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @prog_id}, 0x20)

18:14:06 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x14}, 0x48)

18:14:06 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1803}}}}}}}, 0x3e)

18:14:06 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xb}, 0x48)

18:14:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x4)

18:14:06 executing program 4:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0xa, 0x0, 0x0, @prog_id}, 0x20)

18:14:06 executing program 1:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x10, 0x34, 0x0, @prog_id}, 0x20)

18:14:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x5)

18:14:06 executing program 4:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, 0xffffffffffffffff, 0x2b, 0x2000, 0x0, @prog_id=0xffffffffffffffff}, 0x20)

18:14:06 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0))

18:14:06 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1a00}}}}}}}, 0x3e)

18:14:06 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x6)

18:14:08 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

18:14:08 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x14, 0xb, 0x6, 0x101}, 0x14}}, 0x0)

18:14:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x7)

18:14:08 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1a01}}}}}}}, 0x3e)

18:14:08 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000300)) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001780)={0x13, 0x0, 0x1a00, 0x600002}) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_GETNSID={0x24, 0x5a, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x24}}, 0x20000000) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=@delqdisc={0x1f0, 0x25, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6, 0x10}, {0x7, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0xf5, 0x3, 0x1, 0x1, 0x10000, 0x1}}, {0x6, 0x2, [0x66]}}, {{0x1c, 0x1, {0x0, 0xe0, 0xfc00, 0x401, 0x1, 0x7, 0xb6a, 0x3}}, {0xa, 0x2, [0x94, 0x2, 0x7]}}]}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3f, 0x100, 0x100, 0x1, 0x1, 0x9, 0x2}}, {0x8, 0x2, [0x564, 0xff]}}, {{0x1c, 0x1, {0x1f, 0x20, 0x3ff, 0x8, 0x1, 0x3, 0x2, 0x7}}, {0x12, 0x2, [0x3, 0x1, 0x0, 0x7, 0x0, 0x100, 0xf000]}}, {{0x1c, 0x1, {0x7f, 0x2, 0x4c19, 0x2, 0x2, 0x0, 0x7fffffff, 0xa}}, {0x18, 0x2, [0x5, 0x4, 0x1000, 0x1f, 0x4, 0xb0a, 0x1, 0x7ff, 0x401, 0x2]}}, {{0x1c, 0x1, {0x9, 0x9, 0x82e, 0x1f, 0x0, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x6, 0x13, 0x5, 0x1]}}, {{0x1c, 0x1, {0x1f, 0x7a, 0x6, 0x1, 0x2, 0x6, 0x2, 0x6}}, {0x10, 0x2, [0x9, 0x5, 0x0, 0xd4, 0x6, 0x4]}}, {{0x1c, 0x1, {0x7, 0x40, 0x100, 0x200, 0x0, 0x5, 0x7, 0x6}}, {0x10, 0x2, [0x5, 0x8, 0xf233, 0x9d2c, 0xffff, 0x7b4]}}, {{0x1c, 0x1, {0x8, 0x3, 0x6, 0x4, 0x2, 0x7ff, 0x6, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x6, 0x2, 0x7, 0xac]}}, {{0x1c, 0x1, {0x7, 0x9, 0x7ff, 0x7, 0x2, 0x5, 0x7fffffff, 0x8}}, {0x14, 0x2, [0x3f, 0x8, 0x0, 0x6, 0x22, 0x9, 0x3b, 0x3]}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6], 0x3c}}, 0x0)

18:14:08 executing program 4:
socket(0x1, 0x0, 0xe87)

18:14:08 executing program 1:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x8, 0x34, 0x0, @prog_id}, 0x20)

18:14:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x8)

18:14:08 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x8}, 0x90)

18:14:08 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8993, &(0x7f0000000b80)={'wpan0\x00'})

18:14:08 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x9)

18:14:08 executing program 4:
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x28, 0x0, 0x0, @prog_id}, 0x20)

18:14:09 executing program 1:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x4}, 0x20)

18:14:09 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1a02}}}}}}}, 0x3e)

18:14:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xa)

18:14:09 executing program 4:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)={@ifindex, 0xffffffffffffffff, 0x24, 0x0, 0xffffffffffffffff, @prog_id}, 0x20)

18:14:09 executing program 1:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x13, 0x0, 0x0, @prog_id}, 0x20)

18:14:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xb)

18:14:09 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x89a3, &(0x7f0000000b80)={'wpan0\x00'})

18:14:09 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x0, 0x0, 0x14000}, 0x48)

18:14:09 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x14}, 0x14}}, 0x0)

18:14:09 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1a03}}}}}}}, 0x3e)

[ 1799.558374][T29420] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1799.586315][T29420] CPU: 0 PID: 29420 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1799.596802][T29420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1799.606899][T29420] Call Trace:
[ 1799.610213][T29420]  <TASK>
[ 1799.613174][T29420]  dump_stack_lvl+0x1e7/0x2e0
[ 1799.617903][T29420]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1799.623148][T29420]  ? __pfx__printk+0x10/0x10
[ 1799.627791][T29420]  ? ___ratelimit+0x4c4/0x670
[ 1799.632532][T29420]  ? __pfx____ratelimit+0x10/0x10
[ 1799.637612][T29420]  dump_header+0xda/0x6a0
[ 1799.641982][T29420]  oom_kill_process+0x3a7/0x930
[ 1799.646859][T29420]  out_of_memory+0xf67/0x1320
[ 1799.651560][T29420]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1799.657209][T29420]  ? __pfx___mutex_lock+0x10/0x10
[ 1799.662246][T29420]  ? __pfx_out_of_memory+0x10/0x10
[ 1799.667383][T29420]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1799.672944][T29420]  ? __pfx_lock_release+0x10/0x10
[ 1799.677988][T29420]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1799.684071][T29420]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1799.689293][T29420]  ? mem_cgroup_iter+0x3e9/0x560
[ 1799.694255][T29420]  try_charge_memcg+0xda2/0x18a0
[ 1799.699229][T29420]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1799.704613][T29420]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1799.710344][T29420]  ? __pfx_lock_release+0x10/0x10
[ 1799.715388][T29420]  ? memcg_account_kmem+0x1e7/0x210
[ 1799.720612][T29420]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1799.726433][T29420]  __memcg_kmem_charge_page+0xe1/0x250
[ 1799.731902][T29420]  memcg_charge_kernel_stack+0x196/0x550
[ 1799.737561][T29420]  dup_task_struct+0x40d/0x7d0
[ 1799.742350][T29420]  copy_process+0x5d5/0x3fc0
[ 1799.746964][T29420]  ? __might_fault+0xa9/0x120
[ 1799.751691][T29420]  ? __pfx_lock_release+0x10/0x10
[ 1799.756743][T29420]  ? __pfx_copy_process+0x10/0x10
[ 1799.761775][T29420]  ? __might_fault+0xc5/0x120
[ 1799.766469][T29420]  ? __asan_memset+0x23/0x50
[ 1799.771084][T29420]  kernel_clone+0x21d/0x8d0
[ 1799.775615][T29420]  ? __pfx_kernel_clone+0x10/0x10
[ 1799.780683][T29420]  __se_sys_clone3+0x2cb/0x350
[ 1799.785473][T29420]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1799.790816][T29420]  ? do_syscall_64+0x108/0x240
[ 1799.795604][T29420]  ? do_syscall_64+0xb4/0x240
[ 1799.800302][T29420]  do_syscall_64+0xf9/0x240
[ 1799.804822][T29420]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1799.810729][T29420] RIP: 0033:0x7f84034a9b99
[ 1799.815152][T29420] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1799.834765][T29420] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1799.843197][T29420] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1799.851182][T29420] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1799.859182][T29420] RBP: 00007f84042a16c0 R08: 00007f84042a16c0 R09: 00007ffc11fb7eb7
[ 1799.867163][T29420] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1799.875141][T29420] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1799.883138][T29420]  </TASK>
18:14:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x10)

[ 1799.927349][T29420] memory: usage 307200kB, limit 307200kB, failcnt 75917
[ 1799.934929][T29420] memory+swap: usage 307448kB, limit 9007199254740988kB, failcnt 0
[ 1799.952581][T29420] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1799.963776][T29420] Memory cgroup stats for /syz2:
[ 1799.963937][T29420] cache 4096
18:14:09 executing program 1:
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)

18:14:09 executing program 4:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x12}, 0x20)

18:14:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x11)

[ 1799.986645][T29420] rss 12288
[ 1800.007040][T29420] rss_huge 0
[ 1800.029033][T29420] shmem 0
18:14:09 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xd, &(0x7f00000000c0)=@raw=[@snprintf], &(0x7f0000000180)='syzkaller\x00'}, 0x90)

18:14:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d80)={'batadv0\x00', <r1=>0x0})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)

[ 1800.055146][T29420] mapped_file 0
18:14:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x12)

[ 1800.114187][T29420] dirty 4096
[ 1800.126221][T29420] writeback 0
[ 1800.143167][T29420] workingset_refault_anon 30469
18:14:09 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x14)

[ 1800.166247][T29420] workingset_refault_file 5
[ 1800.175877][T29420] swap 253952
[ 1800.193069][T29420] swapcached 8192
[ 1800.204831][T29420] pgpgin 194295
18:14:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1c02}}}}}}}, 0x3e)

18:14:10 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r0)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x201}, 0x14}}, 0x0)

18:14:10 executing program 1:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f0000000100))

[ 1800.214434][T29420] pgpgout 194291
[ 1800.223419][T29420] pgfault 392055
[ 1800.237578][T29420] pgmajfault 28133
[ 1800.258483][T29420] inactive_anon 0
[ 1800.262748][T29420] active_anon 8192
[ 1800.288599][T29420] inactive_file 0
[ 1800.292451][T29420] active_file 4096
[ 1800.296297][T29420] unevictable 0
18:14:10 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x15)

[ 1800.309363][T29420] hierarchical_memory_limit 314572800
[ 1800.329508][T29420] hierarchical_memsw_limit 9223372036854771712
[ 1800.349469][T29420] total_cache 4096
[ 1800.355588][T29420] total_rss 12288
18:14:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f0000001900)=@proc, 0xc)
sendmsg$netlink(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000180)={0x53c, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x1f5, 0x0, 0x0, 0x1, [@generic="7f05067723342f2b45f0fe4126513381e421158b84a667f0bd10bef491f4f37f0e0593dd1f8acb20f5bcceb73793aa4156e8b3fdb76dca9be040fd6f660f716bd8cc93cc975c8c40d79769b371da54a219", @typed={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4}, @generic="bf27a9181354fe0601601f18a10cabea5f747ba52ac0ac0405edd962fe27d2867f953bb6d0ddf4131497142e29cafaa764ed9e121c2fb899fc5d767419a4910015056b35a7a123bf9954e656502d9dbab3d37688d8f5879c5fb36e", @generic="810c6c4311e0443aa8c7944637b48bda9b912f198fe1", @generic="5f4819e6a7d7948f5f9aa7e1243768954b97ae5408c438ab61627a0392eaadfe967a32a7ac77123f94984d6bf55389b61c8f5e4b9c63952cb6d27cc1ea247eafa3b70fdb805fe28acd3c881de7b8f1b8509501a78629fd5e98f8f9a36b9317ec68e6478bf9ab3cda0b1bb57a291cb152b2782d21301cac6be9b13e26b2f44798163ade89a1072cf9e93f52ee232c1dcfdc7981d16d6086ca2efd33b6833c0f12ef17d309fc98dc01057abca21168ed44d6f7b714c04949bbfe79e1889a2630288cb1", @generic="d12c254b2669f41536515fe3deec5bb89a6bd812e5361bf6b94e08137daa12dbe844201cc9b86653a863c1a8921c81267b11c1c36354f70f97b20544a8d443a61a9a4b066afbad5c7801fb0237e0839918b2e93178"]}, @nested={0xc9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="1c3be3a70727ae6e22033e74bc988dc81da89856d656ae5439966415f77693b53439a4cde101ddf17666cd6f2a3f597d6dfc2c5f88f809836e7af5a138e7522e00a9fbd0dfa2f87a73d6ca21e07159f39b88f0c19c327a1084b328e60119ad8d5a519d7a72f65476c43e031735023d0d8586d345069c2ad90241c6983a8f4f2e4bb7540a739cc2b4e7942f7f91445e90145467c6956b7e804d4e9740599e0bc7ec8bc519dcbc026d701441aff4", @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @generic="049132d1e09b8b32b95b093da0e90fb87df70419b135213b0b28a31b099c21199878210c14b3f65afcfab8b1284c8faaa731a2b96f44690a717038ec4507fc6eb722fbc68013035f", @generic="daaed425806297d6c2288de151d4c428b422f212ea654c3792b960b834e4dc5cdcbd823cd3013309f74827116f264dc260307e3381cd13ee9adb52e645ed12e2186a9ca4b64de1e6d65a9a75a4ed3b69eebe6296bdf09cda2427cca2d5f3", @generic="fb975ba2be2743692425692b55634cc7d8098b60cd6fc3cbf0128c3d5da76cdd7d995b90e999a93c3456c67e582b5f7daa2bc8c9094c1121e13839f714177656a715d49996606819e81e441aeb1579e5bb66ee0816bc983652", @typed={0x6d, 0x0, 0x0, 0x0, @binary="215aeb373443eef361ed25bfc665207a415a5910c0cdd44050d1775fb0b7bb649fe21db9702cf855ff319834c2644193d9a91dc186d7d256856906a1616ed3edb58c0d79be45c108a502036b50d0101938372c9f28f04260a997104a61eff8dc58d109e4a49a53a37b"}, @generic="dc13c2292aea023610643fc09966", @nested={0x5d, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="4ad259a6c224aa5de7a20c4c9bca8d6c98ce75f298dc418135ee059c36ce949086da9ffe7631f29f4da9c2f89d6da9b1a871536e4e33769b2ad18eea83a1c13fe0", @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4}, @generic="c2378e133bbf937cf0736af8e59cf685dfa9b55fdea1851b4cce9064c42813cd180e84f66ca0b5a7a6c332a021f87e335d7e0038b6c9966c7df383936a067e81177d49d069d628a1799cafd04f12a2a2a692aebcb96775cabe7a496b121ed61dc76cf90e62873b9b663848eefc7d8d8f5e45f6c1c6e89a83e5dbef6783f259fa146ab2a9"]}, 0x53c}, {&(0x7f0000002080)={0x988, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x975, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="151cc304dd4618440983fe046500491b46f0ab79ad5a1341e0d4b60bccdf8bd80885f48e78a019cc1475f6714587f26ce9850407c0983ae017ba90c022f92e3bf9f41f9af636a0927ae73a12be83c9bea8bbdbacc08b3b2325e7f61046a0c2b538a1846c091d00cadc7c319ecfc27110b1d3a24f66b82c662e7c09709de8720c331b45dbd917ca8dc86268396d00599ecb690339f21294bf0bbea0ebf4e4610b36a269519c838f627762a92f95a44c3c7c24516427df27521b1e57e9d254967ff4610ab366111bea9c8eb845654bf9104ef3e53769c2f7a32159cfc878f42ff68bda19aefc725976f823f0fc87d63679764395a2a8d95a4b637cf24ac4b460d8d933d9f6829d24b7a25085ac0c221ef3dbae824df9f65fa9b3bc106d278f9563260cc96a21a21cb1c044f76e290a249c97a69891bc9ba6ad1ccc51f74dc0493b46207313c92fc68d63db5d24267bae1a7fca5098a04ca4483e98064e49f7b150cd7eb3e7de1b95b53eba0ee85fb5ba8a48305c35e8fb0d4ef4acecc5296452fb7d5cf17c620366c2d18473ad3b8c198e2242b0ae0ba8c5c0b54ee28e5bc0cc98e01d99a6db6cfb485f5487e9834a9e5864dbe27d05543e2a5adb3a57892ffe79c9f6f1722f24f4bb3e46a1544765a2f55fe1320ac25ba42b786bfef8d35f87e7587a9b8faacee27e10ca5ebfc795051399785522fd048fab5f5ae454f8f2dafb1a23af102918d7c0322157f0e112108d1f28585737c21cf2e90fe37b20b36a7078a444578e100b3fba3673fcf71b17032b04f9228b606da079cd8a6cfa0b6f1dd04a56959336f53ffbcc3d63db0697e741a2933424bea9ec280cb06fdedb96c33743cf2edeb890aecb3c9d6c4e9213f84078f86042f15d7689f4c5dbc8eb8dc3103cbfd4d601c721c3eb1d314c1bd13b808263b1149de37d7d614496a76ac7128342dda6e5ac3a3fa8f061a111257f7554bbca59311790212f5664cd8a4600d7f9e847ec9b051e1ba78c7a0a1afa40af4d6c46572a5c8b223747b73f3cba72d510a4bd0b228ce96d8ee0a46cf82dfe52505cb38da23f8eed3db0b652a428a13cb503c9f1a68d66060e088a79f8442f56206b87d6f0516bf2de890b2a44779105ee29dcbe6853adb981a15449c619c3b9635ddbae1986b32d9889feebf02712a3de45b3f694e5d665c369c912423185e66066ecfe6eee8159bcee1701183bde711b1b9816d249754b3caeb9bd91fdce7272b990c8253e62446bdca9c4fbe3f5390509e219025ea31ebb8163eee5ec87256aa8cd7b707cafe4ee15e26bf19657175bf4962ce1da2a4759da866b11558547ddd3db7df38af478d8af3eaa98c3754cf307a2a875c7cccedb3e3ec48345d04807551e30e7a85313c79351a46f6cf6bd0c3ee8a85a901e5ca6abf5f3cb55499518c153c8b3e84d9ebc716e002dc5c5de6fe9028ffa9e87ed41c59a399d438005189880ce46e5b7c1e2496013a9f7bef94d11deb7fbe50ca93980dd5290e66df0e620349e1a0c7e2524809a28a84e001b34feec867cfb05c3f7f748c581f63aab1b3368b0fa239035c0a7bdc2051d2d9f090f77161746aeb37a13def91329c8fe9a7373d0d8ee3b5e5b2029d970fb6d4616b7101fd8307d1c7aded8a1df13e7213efe2c6e7970fe1ceb45ee5efa550a586fc13e61b165bcabb12c78be71897d99baef28baeb8ac652540a4a6446a819bc8aac02b9368438c0b4751b8c3dacbbb6c5eb68e499d23d56c3a11906af1009e185c62af432afca16fee5c59ebf40a8774070f0fd453e0e9cbeeb419d5d9268ccd7f5683975ee28f58e1d127f26ac3a1999394234a68abfb743a693247f9d1a79ee60841cd464005e4d5d547a0ee9a70b6593690813860743f1f0bf190c02bc7d95a32c572b03790d05c9ed9255a7a05178e78c8fc50be84374ad49eded2233f0afe4250e3d612a9f3e4a20b60734734d0b90e6676783388d3d853d2371a52eb7287632db2385a7bc00b06af0f233b5d1a4f26529a58c5e15a578cac9c9f1b6c566f1f4c0534fd6c186b558308f803b6bbf5bc0ad4f33bf7899c82e90fa50fa99b45205fa0361d503000dc7db61151b8b751a7527f798c8a49c5e39177032e5c0c0a8046a433df1f9d72690fff33736738a52419a71e193b82ce150b7341658046bd69dd1d770856776445653f2e3da45a0b2735bc3696700a4ccc8aa439bf82d213ce2b8fb73599af5826b166a50e621ce0c906bc42778c8f29e01c3e704a7b3494e3cc39932e2aeefe7e38b6f5698d43fe96ce03f79a2367e74ca1a581b85103b7a77862d4df82a080ee7e7306e274b8830b36bf4f5220de89e5dcaadc52dc05fe947e14d732d720d1ad8ce0ade9614d75d154ce8a1abcc3c9ad8133ef34fe9d09178e225ab4f550cee3d4bc0049dd1f9cea1efe4e484966843775d4ebc1f447b3671d7f3fee7398b78c242b9c34e940c2822dee93fc031242ae637d7cf5b3142863a4d5774b4428275ff182a575324bfec167edb4159dd3ec5848b55fd90a534c8b4f2ff2d8d45e5a4a0c240b2b012f49391885c9ec2da72c0a99cfc0c9f64f1a26caadffc291b75c0590557fe52be1989217c8b38c91c3c0f881b2773326be8f900c21b8e3e76adb83dc0048f7be7233a4b8202a8cea09a3084411ed72270caa722e1ce676f305390f4f0c692341e4a7eae1d11ec043cd19b3367844ae716ab0d4c87d0f5546f6a3c196bb354d09354c8f15a6754b71e63cd34e5d1c65c2cb804b4415062afb1952a2d2ebadf45c7d15c203ded0deec30356db2b6ef3f44cb61fdddf500e83c2e089fa7e91c10a2ad4619ed95b2c8b24bfc99c33e7e77a760b3e03456491fcc0e18e1ad96b8ca00023a8b0e0d9b58a5abb4c3ec90ae11db915b3ac6acdb102df9297f6140b90685001f5750326bea5270e13359a123b4b6565f98e94e932a2c3e7399c0bb21798157f66c96443a8a0c67aafd7c9383cbf12661ef464b97c31a043cc0f7c535de7bcbe299372a4af476a58fe6f71d75d94e6bec10b23f2880f44e5f0837624f81cc2233e02e64b356813fd1c3b378cbfc0565b2c36aa916a87fabe3cb19db76b6cb6223c7810af48bd460e6b0000705a081ae1908c8b8c4a03a6054758a33b699b9b1625e4f3baf2982d255f4486493fef804248e34e8be638f7d2ea3d0b99953f7d7d6a8ad1d4721b6c613e53a843bf826a141c42eb4c889e983f9798a6117efc52d3208bece70f5d395bbaa158cdba7670919b8ad58b290b9748f998fecda7b31688b7a2904e52476b2309f444d02bd5e38773cc69010df831a0d055ee5e60cf578d87d878d4a963c6edce7173da0d49db9cb9b421d9f8eb223b7ac802208b617eff7d9ccfa512597065c8576479e3021b85721c939f32f42c0f"]}]}, 0x988}], 0x2}, 0x0)

18:14:10 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1f0, 0x940d, 0x3002, 0x1f0, 0x2c0, 0x2e8, 0x3d8, 0x3d8, 0x2e8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'veth1_virt_wifi\x00', 'team0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@recent0={{0xf8, 'recent\x00', 0x9}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "df04"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)

[ 1800.370005][T29420] total_rss_huge 0
[ 1800.397728][T29420] total_shmem 0
[ 1800.401357][T29420] total_mapped_file 0
[ 1800.407367][T29420] total_dirty 4096
[ 1800.427728][T29420] total_writeback 0
[ 1800.439821][T29420] total_workingset_refault_anon 30469
[ 1800.467618][T29420] total_workingset_refault_file 5
[ 1800.473099][T29420] total_swap 253952
[ 1800.480625][T29420] total_swapcached 8192
[ 1800.489740][T29420] total_pgpgin 194295
[ 1800.498693][T29420] total_pgpgout 194291
[ 1800.511735][T29420] total_pgfault 392055
[ 1800.532019][T29420] total_pgmajfault 28133
[ 1800.536438][T29420] total_inactive_anon 0
[ 1800.545761][T29420] total_active_anon 8192
[ 1800.563692][T29420] total_inactive_file 0
[ 1800.570394][T29420] total_active_file 4096
[ 1800.574687][T29420] total_unevictable 0
[ 1800.579392][T29420] anon_cost 0
[ 1800.582709][T29420] file_cost 0
[ 1800.586013][T29420] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29420,uid=0
[ 1800.605134][T29420] Memory cgroup out of memory: Killed process 29420 (syz-executor.2) total-vm:50800kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0)

18:14:10 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x19)

18:14:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2000}}}}}}}, 0x3e)

18:14:10 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r0)
connect$netlink(r0, &(0x7f0000001900)=@proc={0x10, 0x0, 0x0, 0x4}, 0xc)

18:14:10 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000300))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001780)={0x13, 0x0, 0x1a00, 0x600002}) (async)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001780)={0x13, 0x0, 0x1a00, 0x600002})
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_GETNSID={0x24, 0x5a, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x24}}, 0x20000000) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@RTM_GETNSID={0x24, 0x5a, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x24}}, 0x20000000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=@delqdisc={0x1f0, 0x25, 0x8, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x6, 0x10}, {0x7, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0xf5, 0x3, 0x1, 0x1, 0x10000, 0x1}}, {0x6, 0x2, [0x66]}}, {{0x1c, 0x1, {0x0, 0xe0, 0xfc00, 0x401, 0x1, 0x7, 0xb6a, 0x3}}, {0xa, 0x2, [0x94, 0x2, 0x7]}}]}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3f, 0x100, 0x100, 0x1, 0x1, 0x9, 0x2}}, {0x8, 0x2, [0x564, 0xff]}}, {{0x1c, 0x1, {0x1f, 0x20, 0x3ff, 0x8, 0x1, 0x3, 0x2, 0x7}}, {0x12, 0x2, [0x3, 0x1, 0x0, 0x7, 0x0, 0x100, 0xf000]}}, {{0x1c, 0x1, {0x7f, 0x2, 0x4c19, 0x2, 0x2, 0x0, 0x7fffffff, 0xa}}, {0x18, 0x2, [0x5, 0x4, 0x1000, 0x1f, 0x4, 0xb0a, 0x1, 0x7ff, 0x401, 0x2]}}, {{0x1c, 0x1, {0x9, 0x9, 0x82e, 0x1f, 0x0, 0x6, 0x2, 0x5}}, {0xe, 0x2, [0x9, 0x6, 0x13, 0x5, 0x1]}}, {{0x1c, 0x1, {0x1f, 0x7a, 0x6, 0x1, 0x2, 0x6, 0x2, 0x6}}, {0x10, 0x2, [0x9, 0x5, 0x0, 0xd4, 0x6, 0x4]}}, {{0x1c, 0x1, {0x7, 0x40, 0x100, 0x200, 0x0, 0x5, 0x7, 0x6}}, {0x10, 0x2, [0x5, 0x8, 0xf233, 0x9d2c, 0xffff, 0x7b4]}}, {{0x1c, 0x1, {0x8, 0x3, 0x6, 0x4, 0x2, 0x7ff, 0x6, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x6, 0x2, 0x7, 0xac]}}, {{0x1c, 0x1, {0x7, 0x9, 0x7ff, 0x7, 0x2, 0x5, 0x7fffffff, 0x8}}, {0x14, 0x2, [0x3f, 0x8, 0x0, 0x6, 0x22, 0x9, 0x3b, 0x3]}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r6], 0x3c}}, 0x0)

18:14:10 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}}, 0x0)

18:14:10 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2e752c76f5d96bb24347ca79554cef4a", 0x10)

18:14:10 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1a)

18:14:10 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x60)

18:14:10 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00'})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan3\x00'})
syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)

18:14:10 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040), 0x10)

18:14:10 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x300)

18:14:10 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2001}}}}}}}, 0x3e)

18:14:10 executing program 1:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@cgroup, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @link_id}, 0x20)

18:14:10 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x500)

18:14:10 executing program 1:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001440)={@ifindex, 0xffffffffffffffff, 0x1c, 0x20, 0xffffffffffffffff, @prog_fd}, 0x20)

18:14:11 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x600)

18:14:11 executing program 1:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@ifindex, 0xffffffffffffffff, 0x2a, 0x0, 0x0, @prog_fd}, 0x20)

18:14:11 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2201}}}}}}}, 0x3e)

18:14:11 executing program 4:
bpf$MAP_CREATE(0x3, 0x0, 0x1)

18:14:11 executing program 1:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x0, 0x2c, 0x0, @prog_fd}, 0x20)

18:14:11 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x700)

18:14:11 executing program 4:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x9, 0x0, 0xffffffffffffffff, @prog_id}, 0x20)

18:14:11 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x900)

18:14:11 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0)

18:14:11 executing program 4:
clock_gettime(0x0, &(0x7f0000000300)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000240), 0x0, &(0x7f00000002c0)={0x7}, &(0x7f00000003c0)={0x0, r0+10000000}, 0x0)

18:14:11 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xa00)

18:14:11 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0xa03, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0)

18:14:11 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2202}}}}}}}, 0x3e)

[ 1801.856707][T29490] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1801.894417][T29490] CPU: 0 PID: 29490 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
18:14:11 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0xa03, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0)

[ 1801.904902][T29490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1801.915000][T29490] Call Trace:
[ 1801.918312][T29490]  <TASK>
[ 1801.921275][T29490]  dump_stack_lvl+0x1e7/0x2e0
[ 1801.925999][T29490]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1801.931247][T29490]  ? __pfx__printk+0x10/0x10
[ 1801.935881][T29490]  ? ___ratelimit+0x4c4/0x670
[ 1801.940619][T29490]  ? __pfx____ratelimit+0x10/0x10
[ 1801.945700][T29490]  dump_header+0xda/0x6a0
[ 1801.950088][T29490]  oom_kill_process+0x3a7/0x930
18:14:11 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xb00)

[ 1801.955002][T29490]  out_of_memory+0xf67/0x1320
[ 1801.959743][T29490]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1801.965444][T29490]  ? __pfx___mutex_lock+0x10/0x10
[ 1801.970522][T29490]  ? __pfx_out_of_memory+0x10/0x10
[ 1801.975694][T29490]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1801.981278][T29490]  ? __pfx_lock_release+0x10/0x10
[ 1801.986343][T29490]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1801.992467][T29490]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1801.997716][T29490]  ? mem_cgroup_iter+0x3e9/0x560
[ 1802.002702][T29490]  try_charge_memcg+0xda2/0x18a0
[ 1802.007660][T29490]  ? mark_lock+0x9a/0x350
[ 1802.012022][T29490]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1802.017575][T29490]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1802.023764][T29490]  charge_memcg+0xa2/0x160
[ 1802.028207][T29490]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1802.034299][T29490]  __read_swap_cache_async+0x480/0x8b0
[ 1802.039774][T29490]  ? mark_lock+0x9a/0x350
[ 1802.044133][T29490]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1802.050142][T29490]  swap_cluster_readahead+0x67c/0x810
[ 1802.055539][T29490]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1802.061448][T29490]  ? __pfx_lock_release+0x10/0x10
[ 1802.066494][T29490]  ? xas_descend+0x37e/0x470
[ 1802.071113][T29490]  swapin_readahead+0x1ea/0x1070
[ 1802.076056][T29490]  ? filemap_get_entry+0x127/0x4e0
[ 1802.081198][T29490]  ? __pfx_swapin_readahead+0x10/0x10
[ 1802.086589][T29490]  ? __filemap_get_folio+0x935/0xbc0
[ 1802.091897][T29490]  ? swap_cache_get_folio+0x9f/0x570
[ 1802.097213][T29490]  do_swap_page+0x791/0x3f40
[ 1802.101832][T29490]  ? __lock_acquire+0x1345/0x1fd0
[ 1802.106883][T29490]  ? rcu_is_watching+0x15/0xb0
[ 1802.111678][T29490]  ? do_swap_page+0x154/0x3f40
[ 1802.116454][T29490]  ? __pfx_do_swap_page+0x10/0x10
[ 1802.121495][T29490]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1802.126995][T29490]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1802.132848][T29490]  ? __pfx_validate_chain+0x10/0x10
[ 1802.138081][T29490]  __handle_mm_fault+0x15e8/0x72d0
[ 1802.143272][T29490]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1802.148764][T29490]  ? mt_find+0x226/0x850
[ 1802.153020][T29490]  ? __pfx_lock_release+0x10/0x10
[ 1802.158078][T29490]  ? mt_find+0x62d/0x850
[ 1802.162352][T29490]  ? mt_find+0x226/0x850
[ 1802.166621][T29490]  ? find_vma+0x142/0x1c0
[ 1802.170968][T29490]  ? __pfx_find_vma+0x10/0x10
[ 1802.175658][T29490]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1802.181656][T29490]  handle_mm_fault+0x3c1/0x8a0
[ 1802.186447][T29490]  exc_page_fault+0x2ad/0x870
[ 1802.191147][T29490]  asm_exc_page_fault+0x26/0x30
[ 1802.196008][T29490] RIP: 0010:__get_user_8+0x11/0x20
[ 1802.201134][T29490] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90
[ 1802.220751][T29490] RSP: 0018:ffffc9001211fd78 EFLAGS: 00050202
[ 1802.226837][T29490] RAX: 0000555556b62da8 RBX: ffff88802adbee78 RCX: ffffc9001211fc03
[ 1802.234848][T29490] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fa0
[ 1802.242830][T29490] RBP: ffffc9001211fec0 R08: ffffffff8f85cd2f R09: 1ffffffff1f0b9a5
[ 1802.250826][T29490] R10: dffffc0000000000 R11: fffffbfff1f0b9a6 R12: ffffc9001211fd80
[ 1802.258828][T29490] R13: ffffc9001211ffd8 R14: dffffc0000000000 R15: ffff88802adbd940
[ 1802.266829][T29490]  __rseq_handle_notify_resume+0x158/0x1490
[ 1802.272751][T29490]  ? __pfx___rseq_handle_notify_resume+0x10/0x10
[ 1802.279123][T29490]  ? irqentry_exit_to_user_mode+0x52/0x270
[ 1802.284945][T29490]  irqentry_exit_to_user_mode+0xbb/0x270
[ 1802.290590][T29490]  exc_page_fault+0x587/0x870
[ 1802.295287][T29490]  asm_exc_page_fault+0x26/0x30
[ 1802.300153][T29490] RIP: 0033:0x7f8403436a16
[ 1802.304581][T29490] Code: 00 00 00 ff 8d 14 95 01 00 00 00 0f 84 53 02 00 00 41 80 bd 94 00 00 00 01 19 c0 83 e0 f8 83 c0 0a 09 d0 89 c3 bf 0d f0 ad 0b <e8> 25 18 ff ff 41 8b 7d 24 e8 1c 18 ff ff 41 8b 7d 28 e8 13 18 ff
[ 1802.324200][T29490] RSP: 002b:00007ffc11fb7f30 EFLAGS: 00010206
[ 1802.330278][T29490] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 00007f8403000000
[ 1802.338256][T29490] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000badf00d
[ 1802.346239][T29490] RBP: 0000000000000000 R08: 00007f8403400000 R09: 00007f84035abf8c
[ 1802.354234][T29490] R10: 0000000000000003 R11: 0000000000055554 R12: 00007f84035a80c0
[ 1802.362218][T29490] R13: 00007f84035abf80 R14: 0000000000000000 R15: 00007f84035abf80
[ 1802.370217][T29490]  </TASK>
18:14:12 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0xa03, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0)

18:14:12 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x38}}, 0x0)

18:14:12 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1100)

[ 1802.432226][T29490] memory: usage 307200kB, limit 307200kB, failcnt 76625
[ 1802.440733][T29490] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0
[ 1802.450443][T29490] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1802.459482][T29490] Memory cgroup stats for /syz2:
[ 1802.459643][T29490] cache 4096
[ 1802.543144][T29490] rss 12288
[ 1802.549270][T29490] rss_huge 0
[ 1802.556116][T29490] shmem 0
[ 1802.562348][T29490] mapped_file 0
[ 1802.569303][T29490] dirty 4096
[ 1802.572769][T29490] writeback 0
[ 1802.576292][T29490] workingset_refault_anon 30710
[ 1802.581494][T29490] workingset_refault_file 5
18:14:12 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1200)

[ 1802.598264][T29490] swap 307200
[ 1802.605928][T29490] swapcached 8192
[ 1802.628533][T29490] pgpgin 194551
[ 1802.640202][T29490] pgpgout 194547
18:14:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0xfffffffffffffffd}], 0x2}, 0x0)

[ 1802.651482][T29490] pgfault 392422
[ 1802.664486][T29490] pgmajfault 28357
[ 1802.709861][T29490] inactive_anon 0
[ 1802.739917][T29490] active_anon 12288
[ 1802.748510][T29490] inactive_file 0
[ 1802.777201][T29490] active_file 4096
[ 1802.781085][T29490] unevictable 0
[ 1802.793437][T29490] hierarchical_memory_limit 314572800
[ 1802.808406][T29490] hierarchical_memsw_limit 9223372036854771712
[ 1802.819156][T29490] total_cache 4096
[ 1802.827512][T29490] total_rss 12288
[ 1802.837809][T29490] total_rss_huge 0
[ 1802.848998][T29490] total_shmem 0
[ 1802.852589][T29490] total_mapped_file 0
[ 1802.866415][T29490] total_dirty 4096
[ 1802.886482][T29490] total_writeback 0
[ 1802.890648][T29490] total_workingset_refault_anon 30710
[ 1802.896048][T29490] total_workingset_refault_file 5
[ 1802.916938][T29490] total_swap 307200
[ 1802.921309][T29490] total_swapcached 8192
[ 1802.925497][T29490] total_pgpgin 194551
[ 1802.937359][T29490] total_pgpgout 194547
[ 1802.941475][T29490] total_pgfault 392422
[ 1802.945652][T29490] total_pgmajfault 28357
[ 1802.967180][T29490] total_inactive_anon 0
[ 1802.971587][T29490] total_active_anon 12288
[ 1802.975958][T29490] total_inactive_file 0
[ 1802.984438][T29490] total_active_file 4096
[ 1802.997484][T29490] total_unevictable 0
[ 1803.001514][T29490] anon_cost 0
[ 1803.004820][T29490] file_cost 0
[ 1803.017332][T29490] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29490,uid=0
18:14:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYRESOCT=r3], 0x74}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000011)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0)

18:14:12 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8921, &(0x7f0000000b80)={'wpan0\x00'})

18:14:12 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1400)

18:14:12 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2400}}}}}}}, 0x3e)

18:14:12 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4edce0275ae54856, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48)

[ 1803.052359][T29490] Memory cgroup out of memory: Killed process 29490 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:12 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8948, &(0x7f0000000b80)={'wpan0\x00'})

18:14:12 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000300)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x9, &(0x7f0000000400)=""/9, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480), 0x10}, 0x90)

18:14:13 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1500)

18:14:13 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}}, 0x0)

18:14:13 executing program 1:
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map, 0xffffffffffffffff, 0x1b, 0x2010, 0xffffffffffffffff, @prog_fd}, 0x20)

18:14:13 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1900)

18:14:13 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2402}}}}}}}, 0x3e)

[ 1803.420811][T29576] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
18:14:13 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000280)={r2, 0x3, 0x6, @multicast}, 0x10)

[ 1803.471153][T29576] CPU: 0 PID: 29576 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1803.481656][T29576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1803.491760][T29576] Call Trace:
[ 1803.495085][T29576]  <TASK>
[ 1803.498079][T29576]  dump_stack_lvl+0x1e7/0x2e0
[ 1803.502816][T29576]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1803.508067][T29576]  ? __pfx__printk+0x10/0x10
[ 1803.512715][T29576]  ? ___ratelimit+0x4c4/0x670
18:14:13 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1a00)

[ 1803.517459][T29576]  ? __pfx____ratelimit+0x10/0x10
[ 1803.522554][T29576]  dump_header+0xda/0x6a0
[ 1803.526955][T29576]  oom_kill_process+0x3a7/0x930
[ 1803.531873][T29576]  out_of_memory+0xf67/0x1320
[ 1803.536611][T29576]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1803.542342][T29576]  ? __pfx___mutex_lock+0x10/0x10
[ 1803.547431][T29576]  ? __pfx_out_of_memory+0x10/0x10
[ 1803.552621][T29576]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1803.558230][T29576]  ? __pfx_lock_release+0x10/0x10
[ 1803.563326][T29576]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1803.569461][T29576]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1803.574722][T29576]  ? mem_cgroup_iter+0x3e9/0x560
[ 1803.579732][T29576]  try_charge_memcg+0xda2/0x18a0
[ 1803.584733][T29576]  ? mark_lock+0x9a/0x350
[ 1803.589151][T29576]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1803.594617][T29576]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1803.600831][T29576]  charge_memcg+0xa2/0x160
[ 1803.605314][T29576]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1803.611537][T29576]  __read_swap_cache_async+0x480/0x8b0
[ 1803.617052][T29576]  ? mark_lock+0x9a/0x350
18:14:13 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x2000)

[ 1803.621445][T29576]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1803.627488][T29576]  swap_cluster_readahead+0x67c/0x810
[ 1803.632920][T29576]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1803.638872][T29576]  ? __pfx_lock_release+0x10/0x10
[ 1803.643959][T29576]  ? xas_descend+0x37e/0x470
[ 1803.648614][T29576]  swapin_readahead+0x1ea/0x1070
[ 1803.653595][T29576]  ? filemap_get_entry+0x127/0x4e0
[ 1803.658790][T29576]  ? __pfx_swapin_readahead+0x10/0x10
[ 1803.664221][T29576]  ? __filemap_get_folio+0x935/0xbc0
18:14:13 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8903, &(0x7f0000000b80)={'wpan0\x00'})

[ 1803.669582][T29576]  ? swap_cache_get_folio+0x9f/0x570
[ 1803.674919][T29576]  do_swap_page+0x791/0x3f40
[ 1803.679613][T29576]  ? rcu_is_watching+0x15/0xb0
[ 1803.684436][T29576]  ? do_swap_page+0x154/0x3f40
[ 1803.689237][T29576]  ? __pfx_do_swap_page+0x10/0x10
[ 1803.694307][T29576]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1803.699818][T29576]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1803.705689][T29576]  ? __pfx_validate_chain+0x10/0x10
[ 1803.710941][T29576]  __handle_mm_fault+0x15e8/0x72d0
[ 1803.716144][T29576]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1803.721670][T29576]  ? mt_find+0x226/0x850
[ 1803.725957][T29576]  ? __pfx_lock_release+0x10/0x10
[ 1803.731063][T29576]  ? mt_find+0x62d/0x850
[ 1803.735417][T29576]  ? mt_find+0x226/0x850
[ 1803.739730][T29576]  ? find_vma+0x142/0x1c0
[ 1803.744118][T29576]  ? __pfx_find_vma+0x10/0x10
[ 1803.748846][T29576]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1803.754888][T29576]  handle_mm_fault+0x3c1/0x8a0
[ 1803.759727][T29576]  exc_page_fault+0x2ad/0x870
[ 1803.764469][T29576]  asm_exc_page_fault+0x26/0x30
[ 1803.769362][T29576] RIP: 0010:__put_user_4+0x11/0x20
[ 1803.774527][T29576] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[ 1803.794220][T29576] RSP: 0018:ffffc900031c7bd8 EFLAGS: 00050206
[ 1803.800334][T29576] RAX: 0000000000003eae RBX: 0000000000000000 RCX: 00007f84042c2990
[ 1803.808349][T29576] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fa0
[ 1803.816366][T29576] RBP: ffffc900031c7d10 R08: ffffffff8f85cd2f R09: 1ffffffff1f0b9a5
[ 1803.824382][T29576] R10: dffffc0000000000 R11: fffffbfff1f0b9a6 R12: ffffc900031c7d78
[ 1803.832402][T29576] R13: 00000000003d0f00 R14: ffffc900031c7c40 R15: dffffc0000000000
[ 1803.840433][T29576]  kernel_clone+0x363/0x8d0
[ 1803.845016][T29576]  ? __pfx_kernel_clone+0x10/0x10
[ 1803.850108][T29576]  ? __pfx_lock_release+0x10/0x10
[ 1803.855196][T29576]  __se_sys_clone3+0x2cb/0x350
[ 1803.860009][T29576]  ? __might_fault+0xa9/0x120
[ 1803.864737][T29576]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1803.870068][T29576]  ? rcu_is_watching+0x15/0xb0
[ 1803.874895][T29576]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1803.880938][T29576]  ? exc_page_fault+0x587/0x870
[ 1803.885858][T29576]  ? do_syscall_64+0xb4/0x240
[ 1803.890579][T29576]  do_syscall_64+0xf9/0x240
[ 1803.895124][T29576]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1803.901054][T29576] RIP: 0033:0x7f84034a9b99
[ 1803.905500][T29576] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1803.925145][T29576] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1803.933608][T29576] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1803.941729][T29576] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1803.949742][T29576] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1803.957753][T29576] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
18:14:13 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e002176820c06092f310fcc56cc77f434c3306fbe"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/210, 0xd2}], 0x4}}], 0x2, 0x0, 0x0)

18:14:13 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x31f5)

[ 1803.965758][T29576] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1803.973792][T29576]  </TASK>
[ 1803.980865][T29576] memory: usage 307200kB, limit 307200kB, failcnt 76756
[ 1803.988940][T29576] memory+swap: usage 307500kB, limit 9007199254740988kB, failcnt 0
[ 1804.003196][T29576] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1804.018569][T29576] Memory cgroup stats for /syz2:
18:14:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x2c, r1, 0x20d, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x2c}}, 0x0)

[ 1804.018734][T29576] cache 4096
[ 1804.047613][T29576] rss 12288
18:14:13 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x3f00)

[ 1804.069473][T29576] rss_huge 0
[ 1804.081600][T29576] shmem 0
[ 1804.087950][T29576] mapped_file 0
[ 1804.095153][T29576] dirty 4096
[ 1804.099038][T29610] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[ 1804.111287][T29576] writeback 0
18:14:13 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e002176820c06092f310fcc56cc77f434c3306fbe"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/210, 0xd2}], 0x4}}], 0x2, 0x0, 0x0)

18:14:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x28, 0x0, 0x20d, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

[ 1804.117498][T29576] workingset_refault_anon 30747
[ 1804.126152][T29576] workingset_refault_file 5
[ 1804.133695][T29576] swap 307200
[ 1804.140045][T29576] swapcached 12288
18:14:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2602}}}}}}}, 0x3e)

18:14:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x4000)

[ 1804.169276][T29576] pgpgin 194600
[ 1804.177603][T29576] pgpgout 194596
[ 1804.184791][T29576] pgfault 392503
[ 1804.196019][T29576] pgmajfault 28389
[ 1804.207506][T29576] inactive_anon 12288
[ 1804.214548][T29576] active_anon 0
18:14:14 executing program 4:
socketpair(0x1d, 0x0, 0x0, &(0x7f0000002200))

[ 1804.248467][T29576] inactive_file 4096
[ 1804.259906][T29576] active_file 0
[ 1804.267380][T29576] unevictable 0
[ 1804.288013][T29576] hierarchical_memory_limit 314572800
18:14:14 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e002176820c06092f310fcc56cc77f434c3306fbe"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/210, 0xd2}], 0x4}}], 0x2, 0x0, 0x0)

18:14:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x6000)

[ 1804.327391][T29576] hierarchical_memsw_limit 9223372036854771712
[ 1804.357206][T29576] total_cache 4096
[ 1804.361001][T29576] total_rss 12288
[ 1804.364661][T29576] total_rss_huge 0
18:14:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xf531)

[ 1804.406114][T29576] total_shmem 0
[ 1804.424569][T29576] total_mapped_file 0
[ 1804.431328][T29622] can: request_module (can-proto-0) failed.
[ 1804.438062][T29576] total_dirty 4096
[ 1804.452180][T29576] total_writeback 0
18:14:14 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

18:14:14 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e002176820c06092f310fcc56cc77f434c3306fbe"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/210, 0xd2}], 0x4}}], 0x2, 0x0, 0x0)

[ 1804.457732][T29576] total_workingset_refault_anon 30747
[ 1804.463155][T29576] total_workingset_refault_file 5
[ 1804.484480][T29576] total_swap 307200
[ 1804.493793][T29576] total_swapcached 12288
18:14:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2603}}}}}}}, 0x3e)

[ 1804.514653][T29576] total_pgpgin 194600
[ 1804.528238][T29576] total_pgpgout 194596
[ 1804.532365][T29576] total_pgfault 392503
18:14:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x34000)

[ 1804.557310][T29576] total_pgmajfault 28389
[ 1804.567506][T29576] total_inactive_anon 12288
[ 1804.572070][T29576] total_active_anon 0
[ 1804.576076][T29576] total_inactive_file 4096
[ 1804.614684][T29576] total_active_file 0
[ 1804.632645][T29576] total_unevictable 0
[ 1804.643799][T29576] anon_cost 0
[ 1804.653931][T29576] file_cost 0
[ 1804.668300][T29576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29576,uid=0
[ 1804.688652][T29576] Memory cgroup out of memory: Killed process 29576 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:14 executing program 2:
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYRESOCT=r3], 0x74}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000011) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYRESOCT=r3], 0x74}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000011)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0)

18:14:14 executing program 4:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

18:14:14 executing program 1:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000440))

18:14:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x400300)

18:14:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2802}}}}}}}, 0x3e)

18:14:14 executing program 1:
pselect6(0x40, &(0x7f00000022c0)={0x100}, 0x0, &(0x7f0000002340), &(0x7f0000002380), &(0x7f0000002400)={&(0x7f00000023c0)={[0x3ff]}, 0x8})

18:14:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1000000)

18:14:14 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x48)

18:14:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x2000000)

18:14:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)

18:14:14 executing program 1:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f00000001c0)={0x1a, 0x201, 0x0, 0x0, 0x0, 0x0, @local}, 0x10)

18:14:14 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x3000000)

18:14:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000001340)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x4d4, 0x5, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x618, 0x5, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x210, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x39c, 0x5, 0x0, 0x1, [{0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}]}]}, 0xec4}}, 0x8040)

18:14:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2a00}}}}}}}, 0x3e)

18:14:14 executing program 1:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair(0x6, 0x0, 0x0, &(0x7f0000000ac0))

18:14:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000001340)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0)

18:14:15 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x4000000)

18:14:15 executing program 1:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000001000)={0x1a, 0x0, 0x6, 0x5, 0x40, 0x56, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10)

18:14:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

18:14:15 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x5000000)

18:14:15 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000f80)={'wpan4\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), 0xffffffffffffffff)

18:14:15 executing program 4:
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000bc0)='cpu.pressure\x00', 0x2, 0x0)

18:14:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2a01}}}}}}}, 0x3e)

18:14:15 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x6000000)

18:14:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0)

18:14:15 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x7000000)

18:14:15 executing program 4:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000002380), &(0x7f0000002400)={&(0x7f00000023c0)={[0x3ff]}, 0x8})

18:14:15 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0)

18:14:15 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x8000000)

18:14:15 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0)

18:14:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2a03}}}}}}}, 0x3e)

18:14:15 executing program 4:
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

[ 1806.649961][T29644] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1806.660489][T29644] CPU: 1 PID: 29644 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1806.670948][T29644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1806.681038][T29644] Call Trace:
[ 1806.684338][T29644]  <TASK>
[ 1806.687281][T29644]  dump_stack_lvl+0x1e7/0x2e0
[ 1806.692003][T29644]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1806.697239][T29644]  ? __pfx__printk+0x10/0x10
[ 1806.701877][T29644]  ? ___ratelimit+0x4c4/0x670
[ 1806.706588][T29644]  ? __pfx____ratelimit+0x10/0x10
[ 1806.711662][T29644]  dump_header+0xda/0x6a0
[ 1806.716019][T29644]  oom_kill_process+0x3a7/0x930
[ 1806.720898][T29644]  out_of_memory+0xf67/0x1320
[ 1806.725595][T29644]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1806.731244][T29644]  ? __pfx___mutex_lock+0x10/0x10
[ 1806.736283][T29644]  ? __pfx_out_of_memory+0x10/0x10
[ 1806.741419][T29644]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1806.746979][T29644]  ? __pfx_lock_release+0x10/0x10
[ 1806.752020][T29644]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1806.758126][T29644]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1806.763373][T29644]  ? mem_cgroup_iter+0x3e9/0x560
[ 1806.768346][T29644]  try_charge_memcg+0xda2/0x18a0
[ 1806.773331][T29644]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1806.778720][T29644]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1806.784454][T29644]  ? __pfx_lock_release+0x10/0x10
[ 1806.789510][T29644]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1806.795331][T29644]  __memcg_kmem_charge_page+0xe1/0x250
[ 1806.800808][T29644]  memcg_charge_kernel_stack+0xa7/0x550
[ 1806.806372][T29644]  dup_task_struct+0x15d/0x7d0
[ 1806.811153][T29644]  copy_process+0x5d5/0x3fc0
[ 1806.815766][T29644]  ? __might_fault+0xa9/0x120
[ 1806.820464][T29644]  ? __pfx_lock_release+0x10/0x10
[ 1806.825535][T29644]  ? __lock_acquire+0x1345/0x1fd0
[ 1806.830606][T29644]  ? __pfx_copy_process+0x10/0x10
[ 1806.835659][T29644]  ? __might_fault+0xc5/0x120
[ 1806.840365][T29644]  ? __asan_memset+0x23/0x50
[ 1806.844980][T29644]  kernel_clone+0x21d/0x8d0
[ 1806.849502][T29644]  ? __pfx_kernel_clone+0x10/0x10
[ 1806.854572][T29644]  ? __pfx_lock_release+0x10/0x10
[ 1806.859647][T29644]  __se_sys_clone3+0x2cb/0x350
[ 1806.864442][T29644]  ? __might_fault+0xa9/0x120
[ 1806.869142][T29644]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1806.874439][T29644]  ? rcu_is_watching+0x15/0xb0
[ 1806.879234][T29644]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1806.885245][T29644]  ? exc_page_fault+0x587/0x870
[ 1806.890122][T29644]  ? do_syscall_64+0xb4/0x240
[ 1806.894811][T29644]  do_syscall_64+0xf9/0x240
[ 1806.899335][T29644]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1806.905239][T29644] RIP: 0033:0x7f84034a9b99
[ 1806.909666][T29644] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1806.929285][T29644] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1806.937712][T29644] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1806.945720][T29644] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1806.953764][T29644] RBP: 00007f84042a16c0 R08: 00007f84042a16c0 R09: 00007ffc11fb7eb7
[ 1806.961752][T29644] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1806.969731][T29644] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1806.977738][T29644]  </TASK>
[ 1807.000767][T29644] memory: usage 307200kB, limit 307200kB, failcnt 78466
[ 1807.008862][T29644] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0
[ 1807.016809][T29644] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[ 1807.024912][T29644] Memory cgroup stats for /syz2:
[ 1807.025071][T29644] cache 4096
[ 1807.034061][T29644] rss 0
[ 1807.036853][T29644] rss_huge 0
[ 1807.041645][T29644] shmem 0
[ 1807.044621][T29644] mapped_file 0
[ 1807.048262][T29644] dirty 4096
[ 1807.051485][T29644] writeback 0
[ 1807.054793][T29644] workingset_refault_anon 31301
[ 1807.059921][T29644] workingset_refault_file 5
[ 1807.064444][T29644] swap 262144
[ 1807.068822][T29644] swapcached 0
[ 1807.072226][T29644] pgpgin 195172
[ 1807.075711][T29644] pgpgout 195171
[ 1807.079545][T29644] pgfault 393313
[ 1807.083202][T29644] pgmajfault 28914
[ 1807.087028][T29644] inactive_anon 0
[ 1807.090913][T29644] active_anon 0
[ 1807.094400][T29644] inactive_file 4096
[ 1807.099470][T29644] active_file 0
[ 1807.102960][T29644] unevictable 0
[ 1807.106427][T29644] hierarchical_memory_limit 314572800
[ 1807.112104][T29644] hierarchical_memsw_limit 9223372036854771712
[ 1807.118567][T29644] total_cache 4096
[ 1807.122314][T29644] total_rss 0
[ 1807.125614][T29644] total_rss_huge 0
[ 1807.130369][T29644] total_shmem 0
[ 1807.133856][T29644] total_mapped_file 0
[ 1807.138114][T29644] total_dirty 4096
[ 1807.141889][T29644] total_writeback 0
[ 1807.145703][T29644] total_workingset_refault_anon 31301
[ 1807.151393][T29644] total_workingset_refault_file 5
[ 1807.156441][T29644] total_swap 262144
[ 1807.161495][T29644] total_swapcached 0
[ 1807.165413][T29644] total_pgpgin 195172
[ 1807.169875][T29644] total_pgpgout 195171
[ 1807.173963][T29644] total_pgfault 393313
[ 1807.178345][T29644] total_pgmajfault 28914
[ 1807.182615][T29644] total_inactive_anon 0
[ 1807.186791][T29644] total_active_anon 0
[ 1807.191887][T29644] total_inactive_file 4096
[ 1807.196334][T29644] total_active_file 0
[ 1807.200668][T29644] total_unevictable 0
[ 1807.204671][T29644] anon_cost 0
[ 1807.208061][T29644] file_cost 0
[ 1807.211367][T29644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29644,uid=0
[ 1807.228212][T29644] Memory cgroup out of memory: Killed process 29644 (syz-executor.2) total-vm:50800kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r1)

18:14:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x9000000)

18:14:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00'})

18:14:17 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2c00}}}}}}}, 0x3e)

18:14:17 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYRESOCT=r3], 0x74}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000011) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=r4], 0x3c}}, 0x0)

18:14:17 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00')

18:14:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xa000000)

18:14:17 executing program 4:
pselect6(0x40, &(0x7f00000022c0), &(0x7f0000002300)={0x6}, 0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={[0x3ff]}, 0x8})

18:14:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xb000000)

18:14:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)

18:14:17 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})

18:14:17 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x2f89}}}}}}}, 0x3e)

18:14:17 executing program 1:
socketpair(0x1d, 0x0, 0x101, &(0x7f0000002200))

18:14:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x10000000)

18:14:17 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0)

18:14:17 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x2c}}, 0x0)

18:14:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x11000000)

18:14:17 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

18:14:17 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3002}}}}}}}, 0x3e)

18:14:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x12000000)

[ 1807.910430][T29736] nbd: must specify an index to disconnect
18:14:17 executing program 4:
clock_gettime(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x2}, 0x0, &(0x7f0000000280)={r0, r1+60000000}, 0x0)

18:14:17 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)}, 0x90)

18:14:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x14000000)

18:14:17 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none, 0x72}, 0xe)

18:14:17 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000a00)={&(0x7f0000000800), 0xc, &(0x7f00000009c0)={0x0}}, 0x0)

18:14:17 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x15000000)

18:14:18 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3201}}}}}}}, 0x3e)

18:14:18 executing program 1:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003c80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)

18:14:18 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x19000000)

[ 1808.354750][T29713] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1808.375884][T29713] CPU: 1 PID: 29713 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1808.386383][T29713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1808.396492][T29713] Call Trace:
[ 1808.399811][T29713]  <TASK>
[ 1808.402777][T29713]  dump_stack_lvl+0x1e7/0x2e0
[ 1808.407503][T29713]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1808.412749][T29713]  ? __pfx__printk+0x10/0x10
[ 1808.417387][T29713]  ? ___ratelimit+0x4c4/0x670
[ 1808.422121][T29713]  ? __pfx____ratelimit+0x10/0x10
[ 1808.427197][T29713]  dump_header+0xda/0x6a0
[ 1808.431582][T29713]  oom_kill_process+0x3a7/0x930
[ 1808.436483][T29713]  out_of_memory+0xf67/0x1320
[ 1808.441212][T29713]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1808.446885][T29713]  ? __pfx___mutex_lock+0x10/0x10
[ 1808.451947][T29713]  ? __pfx_out_of_memory+0x10/0x10
[ 1808.457124][T29713]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1808.462722][T29713]  ? __pfx_lock_release+0x10/0x10
[ 1808.467797][T29713]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1808.473923][T29713]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1808.479169][T29713]  ? mem_cgroup_iter+0x3e9/0x560
[ 1808.484135][T29713]  try_charge_memcg+0xda2/0x18a0
[ 1808.489088][T29713]  ? mark_lock+0x9a/0x350
[ 1808.493452][T29713]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1808.498868][T29713]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1808.505037][T29713]  charge_memcg+0xa2/0x160
[ 1808.509465][T29713]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1808.515547][T29713]  __read_swap_cache_async+0x480/0x8b0
[ 1808.521025][T29713]  ? mark_lock+0x9a/0x350
[ 1808.525375][T29713]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1808.531379][T29713]  swap_cluster_readahead+0x67c/0x810
[ 1808.536767][T29713]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1808.542672][T29713]  ? __pfx_lock_release+0x10/0x10
[ 1808.547718][T29713]  ? xas_descend+0x37e/0x470
[ 1808.552335][T29713]  swapin_readahead+0x1ea/0x1070
[ 1808.557279][T29713]  ? filemap_get_entry+0x127/0x4e0
[ 1808.562422][T29713]  ? __pfx_swapin_readahead+0x10/0x10
[ 1808.567813][T29713]  ? __filemap_get_folio+0x935/0xbc0
[ 1808.573121][T29713]  ? swap_cache_get_folio+0x9f/0x570
[ 1808.578416][T29713]  do_swap_page+0x791/0x3f40
[ 1808.583023][T29713]  ? rcu_is_watching+0x15/0xb0
[ 1808.587813][T29713]  ? do_swap_page+0x154/0x3f40
[ 1808.592592][T29713]  ? __pfx_do_swap_page+0x10/0x10
[ 1808.597629][T29713]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1808.603122][T29713]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1808.608953][T29713]  __handle_mm_fault+0x15e8/0x72d0
[ 1808.614108][T29713]  ? reacquire_held_locks+0x3eb/0x690
[ 1808.619494][T29713]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1808.624985][T29713]  ? __pfx_reacquire_held_locks+0x10/0x10
[ 1808.630732][T29713]  ? mtree_range_walk+0x6fd/0x8e0
[ 1808.635772][T29713]  ? lock_vma_under_rcu+0x18a/0x730
[ 1808.640990][T29713]  ? __pfx_lock_release+0x10/0x10
[ 1808.646029][T29713]  ? lock_vma_under_rcu+0x2f9/0x730
[ 1808.651263][T29713]  ? lock_vma_under_rcu+0x18a/0x730
[ 1808.656479][T29713]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 1808.662071][T29713]  handle_mm_fault+0x3c1/0x8a0
[ 1808.666858][T29713]  exc_page_fault+0x456/0x870
[ 1808.671559][T29713]  asm_exc_page_fault+0x26/0x30
[ 1808.676422][T29713] RIP: 0033:0x7f84034371b5
[ 1808.680850][T29713] Code: c0 0f 83 18 0d 00 00 49 89 ca 48 89 ce 48 89 cf 48 89 c8 49 c1 ea 08 48 c1 ee 10 4c 8d 42 18 0f b6 dd 48 c1 ef 18 48 c1 e8 20 <48> 0f af 05 cb e4 c9 00 48 03 42 10 41 81 e2 fe 00 00 00 4c 89 84
[ 1808.700471][T29713] RSP: 002b:00007ffc11fb7fa0 EFLAGS: 00010246
[ 1808.706549][T29713] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
[ 1808.714530][T29713] RDX: 00007f84030000a8 RSI: 0000000000000000 RDI: 0000000000000000
[ 1808.722509][T29713] RBP: 0000000000000000 R08: 00007f84030000c0 R09: 00007ffc11fc80b0
[ 1808.730490][T29713] R10: 0000000000000000 R11: 00000000000559b8 R12: 00007ffc11fb8150
[ 1808.738487][T29713] R13: 0000000000000fc1 R14: 00007ffc11fb8158 R15: 00007ffc11fb80a8
[ 1808.746511][T29713]  </TASK>
18:14:18 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1a000000)

18:14:18 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

18:14:18 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x20000000)

[ 1808.797505][T29713] memory: usage 307200kB, limit 307200kB, failcnt 79088
[ 1808.804617][T29713] memory+swap: usage 307440kB, limit 9007199254740988kB, failcnt 0
[ 1808.819109][T29713] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1808.828124][T29713] Memory cgroup stats for /syz2:
[ 1808.828286][T29713] cache 4096
18:14:18 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e002176820c06092f310fcc56cc77f434c3306fbe"], 0x1c}}, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/128, 0x80}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/210, 0xd2}], 0x5}}], 0x2, 0x0, 0x0)

18:14:18 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3202}}}}}}}, 0x3e)

[ 1808.847464][T29713] rss 12288
[ 1808.850788][T29713] rss_huge 0
[ 1808.856403][T29713] shmem 0
[ 1808.883076][T29713] mapped_file 0
[ 1808.920741][T29713] dirty 4096
[ 1808.935501][T29713] writeback 0
[ 1808.944396][T29713] workingset_refault_anon 31530
[ 1808.961133][T29713] workingset_refault_file 5
18:14:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

18:14:18 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x3f000000)

[ 1808.973538][T29713] swap 245760
[ 1808.976999][T29713] swapcached 8192
[ 1808.986388][T29713] pgpgin 195414
[ 1808.997248][T29713] pgpgout 195410
[ 1809.011785][T29713] pgfault 393672
[ 1809.023425][T29713] pgmajfault 29128
[ 1809.033680][T29713] inactive_anon 0
[ 1809.049738][T29713] active_anon 12288
[ 1809.069989][T29713] inactive_file 0
[ 1809.073789][T29713] active_file 4096
[ 1809.078391][T29713] unevictable 0
[ 1809.082432][T29713] hierarchical_memory_limit 314572800
[ 1809.107413][T29713] hierarchical_memsw_limit 9223372036854771712
[ 1809.113642][T29713] total_cache 4096
[ 1809.125972][T29713] total_rss 12288
[ 1809.151457][T29713] total_rss_huge 0
[ 1809.155287][T29713] total_shmem 0
[ 1809.165768][T29713] total_mapped_file 0
[ 1809.170462][T29713] total_dirty 4096
[ 1809.174231][T29713] total_writeback 0
[ 1809.179142][T29713] total_workingset_refault_anon 31530
[ 1809.184550][T29713] total_workingset_refault_file 5
[ 1809.191612][T29713] total_swap 245760
[ 1809.195458][T29713] total_swapcached 8192
[ 1809.205803][T29713] total_pgpgin 195414
[ 1809.212683][T29713] total_pgpgout 195410
[ 1809.216788][T29713] total_pgfault 393672
[ 1809.222508][T29713] total_pgmajfault 29128
[ 1809.226792][T29713] total_inactive_anon 0
[ 1809.232126][T29713] total_active_anon 12288
[ 1809.236495][T29713] total_inactive_file 0
[ 1809.241709][T29713] total_active_file 4096
[ 1809.245987][T29713] total_unevictable 0
[ 1809.251887][T29713] anon_cost 0
18:14:19 executing program 2:
socketpair(0x3, 0x0, 0xffff, &(0x7f0000000000))

18:14:19 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x40000000)

18:14:19 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3203}}}}}}}, 0x3e)

18:14:19 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @random="0e765df8875c", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)

18:14:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000001340)={0xec4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x4d4, 0x5, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x618, 0x5, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x210, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x39c, 0x5, 0x0, 0x1, [{0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}]}]}, 0xec4}}, 0x8040)

[ 1809.255209][T29713] file_cost 0
[ 1809.259698][T29713] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29713,uid=0
[ 1809.275724][T29713] Memory cgroup out of memory: Killed process 29713 (syz-executor.2) total-vm:50668kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:19 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x60000000)

18:14:19 executing program 1:
pselect6(0x40, &(0x7f00000022c0), 0x0, 0x0, &(0x7f0000002380), 0x0)

[ 1809.389159][T29787] netlink: 'syz-executor.4': attribute type 5 has an invalid length.
18:14:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}}, 0x0)

18:14:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @random="aafde504c632", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0b8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xc, 0xc2, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0xb, 0xf989, "288033aa534ce0"}, @timestamp={0x8, 0xa}, @generic={0x4, 0x2}, @mptcp=@mp_join={0x3, 0x3, 0x0, 0xe}, @md5sig={0x13, 0x12, "88fec776621905fa494466d3fa13ba3a"}, @mptcp=@synack={0x1e, 0x10}]}}}}}}}}, 0x0)

18:14:19 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xf0ffffff)

18:14:19 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0)

18:14:19 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3400}}}}}}}, 0x3e)

[ 1809.639830][T29786] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1809.687984][T29786] CPU: 1 PID: 29786 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1809.698490][T29786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1809.708589][T29786] Call Trace:
[ 1809.711908][T29786]  <TASK>
[ 1809.714881][T29786]  dump_stack_lvl+0x1e7/0x2e0
[ 1809.719613][T29786]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1809.724857][T29786]  ? __pfx__printk+0x10/0x10
[ 1809.729498][T29786]  ? ___ratelimit+0x4c4/0x670
18:14:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000001340)={0xec4, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x4d4, 0x5, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x618, 0x5, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x210, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x39c, 0x5, 0x0, 0x1, [{0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}]}]}]}, 0xec4}}, 0x8040)

18:14:19 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xf5310000)

[ 1809.734235][T29786]  ? __pfx____ratelimit+0x10/0x10
[ 1809.739322][T29786]  dump_header+0xda/0x6a0
[ 1809.743712][T29786]  oom_kill_process+0x3a7/0x930
[ 1809.748621][T29786]  out_of_memory+0xf67/0x1320
[ 1809.753355][T29786]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1809.759046][T29786]  ? __pfx___mutex_lock+0x10/0x10
[ 1809.764119][T29786]  ? __pfx_out_of_memory+0x10/0x10
[ 1809.769338][T29786]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1809.774931][T29786]  ? __pfx_lock_release+0x10/0x10
[ 1809.779999][T29786]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1809.786092][T29786]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1809.791305][T29786]  ? mem_cgroup_iter+0x3e9/0x560
[ 1809.796262][T29786]  try_charge_memcg+0xda2/0x18a0
[ 1809.801212][T29786]  ? mark_lock+0x9a/0x350
[ 1809.805570][T29786]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1809.810980][T29786]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1809.817151][T29786]  charge_memcg+0xa2/0x160
[ 1809.821620][T29786]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1809.827725][T29786]  __read_swap_cache_async+0x480/0x8b0
[ 1809.833207][T29786]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1809.839202][T29786]  ? mlock_drain_local+0x79/0x490
[ 1809.844238][T29786]  ? mlock_drain_local+0x79/0x490
[ 1809.849269][T29786]  ? mlock_drain_local+0x28c/0x490
[ 1809.854390][T29786]  swap_cluster_readahead+0x67c/0x810
[ 1809.859805][T29786]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1809.865713][T29786]  ? __pfx_lock_release+0x10/0x10
[ 1809.870758][T29786]  ? xas_descend+0x37e/0x470
[ 1809.875374][T29786]  swapin_readahead+0x1ea/0x1070
[ 1809.880322][T29786]  ? filemap_get_entry+0x127/0x4e0
[ 1809.885464][T29786]  ? __pfx_swapin_readahead+0x10/0x10
[ 1809.890874][T29786]  ? __filemap_get_folio+0x935/0xbc0
[ 1809.896204][T29786]  ? swap_cache_get_folio+0x9f/0x570
[ 1809.901510][T29786]  do_swap_page+0x791/0x3f40
[ 1809.906133][T29786]  ? rcu_is_watching+0x15/0xb0
[ 1809.910935][T29786]  ? do_swap_page+0x154/0x3f40
[ 1809.915718][T29786]  ? __pfx_do_swap_page+0x10/0x10
[ 1809.920759][T29786]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1809.926255][T29786]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1809.932078][T29786]  ? __pfx_validate_chain+0x10/0x10
[ 1809.937298][T29786]  __handle_mm_fault+0x15e8/0x72d0
[ 1809.942457][T29786]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1809.947941][T29786]  ? mt_find+0x226/0x850
[ 1809.952192][T29786]  ? __pfx_lock_release+0x10/0x10
[ 1809.957292][T29786]  ? mt_find+0x62d/0x850
[ 1809.961556][T29786]  ? mt_find+0x226/0x850
[ 1809.965845][T29786]  ? find_vma+0x142/0x1c0
[ 1809.970203][T29786]  ? __pfx_find_vma+0x10/0x10
[ 1809.974946][T29786]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1809.980949][T29786]  handle_mm_fault+0x3c1/0x8a0
[ 1809.985759][T29786]  exc_page_fault+0x2ad/0x870
[ 1809.990464][T29786]  asm_exc_page_fault+0x26/0x30
[ 1809.995324][T29786] RIP: 0010:__put_user_4+0x11/0x20
[ 1810.000455][T29786] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90
[ 1810.020076][T29786] RSP: 0018:ffffc90004957bd8 EFLAGS: 00050206
[ 1810.026157][T29786] RAX: 0000000000003eb4 RBX: 0000000000000000 RCX: 00007f84042c2990
[ 1810.034163][T29786] RDX: 0000000000000000 RSI: ffffffff8baac7e0 RDI: ffffffff8bfe7fa0
[ 1810.042148][T29786] RBP: ffffc90004957d10 R08: ffffffff8f85cd2f R09: 1ffffffff1f0b9a5
[ 1810.050132][T29786] R10: dffffc0000000000 R11: fffffbfff1f0b9a6 R12: ffffc90004957d78
[ 1810.058115][T29786] R13: 00000000003d0f00 R14: ffffc90004957c40 R15: dffffc0000000000
[ 1810.066115][T29786]  kernel_clone+0x363/0x8d0
[ 1810.070643][T29786]  ? __pfx_kernel_clone+0x10/0x10
[ 1810.075696][T29786]  __se_sys_clone3+0x2cb/0x350
[ 1810.080479][T29786]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1810.085802][T29786]  ? do_syscall_64+0x108/0x240
[ 1810.090582][T29786]  ? do_syscall_64+0xb4/0x240
[ 1810.095270][T29786]  do_syscall_64+0xf9/0x240
[ 1810.099790][T29786]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1810.105695][T29786] RIP: 0033:0x7f84034a9b99
[ 1810.110121][T29786] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1810.129736][T29786] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1810.138168][T29786] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1810.146150][T29786] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1810.154132][T29786] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1810.162115][T29786] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1810.170097][T29786] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1810.178095][T29786]  </TASK>
18:14:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xffffff7f)

18:14:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000001340)={0xff0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x4d4, 0x5, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x98, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xf0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x618, 0x5, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x3d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x210, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}, {0xe4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4c8, 0x5, 0x0, 0x1, [{0x2a8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}]}, {0x1e4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x118, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}]}, 0xff0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), r0)

[ 1810.217604][T29786] memory: usage 307200kB, limit 307200kB, failcnt 79239
[ 1810.228594][T29786] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0
[ 1810.245818][T29786] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1810.286953][T29786] Memory cgroup stats for /syz2:
[ 1810.287837][T29786] cache 4096
[ 1810.324966][T29786] rss 12288
[ 1810.328951][T29810] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
18:14:20 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)

[ 1810.332321][T29786] rss_huge 0
[ 1810.357617][T29786] shmem 0
[ 1810.367737][T29786] mapped_file 0
[ 1810.371471][T29786] dirty 0
[ 1810.380271][T29786] writeback 0
18:14:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xfffffff0)

[ 1810.388522][T29786] workingset_refault_anon 31577
18:14:20 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:20 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3580}}}}}}}, 0x3e)

[ 1810.409353][T29786] workingset_refault_file 5
[ 1810.424788][T29786] swap 278528
[ 1810.447312][T29786] swapcached 8192
[ 1810.454499][T29786] pgpgin 195473
18:14:20 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20008044, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)

18:14:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x7f412e87dda9)

[ 1810.470083][T29786] pgpgout 195469
[ 1810.475211][T29786] pgfault 393762
[ 1810.497762][T29786] pgmajfault 29166
[ 1810.509697][T29786] inactive_anon 8192
[ 1810.516070][T29786] active_anon 4096
18:14:20 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1810.536647][T29786] inactive_file 4096
[ 1810.544893][T29786] active_file 0
[ 1810.557824][T29786] unevictable 0
[ 1810.585430][T29786] hierarchical_memory_limit 314572800
18:14:20 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f00000003c0)={@val, @val={0x3, 0x0, 0x0, 0x0, 0xe67f}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0x20001000, @remote}, @timestamp={0x5, 0x4}}}}, 0xfdef)

[ 1810.605817][T29786] hierarchical_memsw_limit 9223372036854771712
[ 1810.618435][T29786] total_cache 4096
18:14:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1000000000000)

18:14:20 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3802}}}}}}}, 0x3e)

[ 1810.650110][T29786] total_rss 12288
[ 1810.677974][T29786] total_rss_huge 0
[ 1810.682172][T29786] total_shmem 0
[ 1810.696452][T29786] total_mapped_file 0
[ 1810.706646][T29786] total_dirty 0
[ 1810.715101][T29786] total_writeback 0
18:14:20 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x40030000000000)

[ 1810.730031][T29786] total_workingset_refault_anon 31577
[ 1810.741501][T29786] total_workingset_refault_file 5
[ 1810.748220][T29786] total_swap 278528
[ 1810.752272][T29786] total_swapcached 8192
[ 1810.756653][T29786] total_pgpgin 195473
[ 1810.761904][T29786] total_pgpgout 195469
[ 1810.766228][T29786] total_pgfault 393762
[ 1810.772385][T29786] total_pgmajfault 29166
[ 1810.776863][T29786] total_inactive_anon 8192
[ 1810.783139][T29786] total_active_anon 4096
[ 1810.788359][T29786] total_inactive_file 4096
[ 1810.802649][T29786] total_active_file 0
[ 1810.824122][T29786] total_unevictable 0
18:14:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x100000000000000)

18:14:20 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20008044, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)

[ 1810.833639][T29786] anon_cost 0
[ 1810.842566][T29786] file_cost 0
[ 1810.847370][T29786] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29786,uid=0
18:14:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x200000000000000)

[ 1810.909693][T29786] Memory cgroup out of memory: Killed process 29786 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:20 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3a02}}}}}}}, 0x3e)

18:14:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x24}}, 0x0)

18:14:20 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0)

18:14:20 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x300000000000000)

18:14:20 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000080), 0x4)

18:14:20 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

18:14:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x400000000000000)

18:14:21 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3a03}}}}}}}, 0x3e)

[ 1811.314890][T29848] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1811.334900][T29848] CPU: 1 PID: 29848 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1811.345398][T29848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1811.355499][T29848] Call Trace:
[ 1811.358817][T29848]  <TASK>
[ 1811.361784][T29848]  dump_stack_lvl+0x1e7/0x2e0
[ 1811.366518][T29848]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1811.371765][T29848]  ? __pfx__printk+0x10/0x10
[ 1811.376453][T29848]  ? ___ratelimit+0x4c4/0x670
[ 1811.381196][T29848]  ? __pfx____ratelimit+0x10/0x10
[ 1811.386258][T29848]  dump_header+0xda/0x6a0
[ 1811.390628][T29848]  oom_kill_process+0x3a7/0x930
[ 1811.395501][T29848]  out_of_memory+0xf67/0x1320
[ 1811.400208][T29848]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1811.405996][T29848]  ? __pfx___mutex_lock+0x10/0x10
[ 1811.411144][T29848]  ? __pfx_out_of_memory+0x10/0x10
[ 1811.416292][T29848]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1811.421859][T29848]  ? __pfx_lock_release+0x10/0x10
[ 1811.426905][T29848]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1811.432995][T29848]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1811.438215][T29848]  ? mem_cgroup_iter+0x3e9/0x560
[ 1811.443204][T29848]  try_charge_memcg+0xda2/0x18a0
[ 1811.448182][T29848]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1811.453574][T29848]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1811.459312][T29848]  ? __pfx_lock_release+0x10/0x10
[ 1811.464373][T29848]  ? memcg_account_kmem+0x1e7/0x210
[ 1811.469600][T29848]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1811.475449][T29848]  __memcg_kmem_charge_page+0xe1/0x250
[ 1811.480948][T29848]  memcg_charge_kernel_stack+0x210/0x550
[ 1811.486616][T29848]  dup_task_struct+0x15d/0x7d0
[ 1811.491399][T29848]  copy_process+0x5d5/0x3fc0
[ 1811.496018][T29848]  ? __might_fault+0xa9/0x120
[ 1811.500714][T29848]  ? __pfx_lock_release+0x10/0x10
[ 1811.505805][T29848]  ? __pfx_copy_process+0x10/0x10
[ 1811.510841][T29848]  ? __might_fault+0xc5/0x120
[ 1811.515560][T29848]  ? __asan_memset+0x23/0x50
[ 1811.520178][T29848]  kernel_clone+0x21d/0x8d0
[ 1811.524696][T29848]  ? __pfx_kernel_clone+0x10/0x10
[ 1811.529749][T29848]  __se_sys_clone3+0x2cb/0x350
[ 1811.534526][T29848]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1811.539850][T29848]  ? do_syscall_64+0x108/0x240
[ 1811.544625][T29848]  ? do_syscall_64+0xb4/0x240
[ 1811.549312][T29848]  do_syscall_64+0xf9/0x240
[ 1811.553831][T29848]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1811.559736][T29848] RIP: 0033:0x7f84034a9b99
[ 1811.564162][T29848] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1811.583780][T29848] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1811.592212][T29848] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1811.600197][T29848] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1811.608177][T29848] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
18:14:21 executing program 4:
r0 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000063c0)=@newchain={0x24}, 0x7ffff000}}, 0x0)

[ 1811.616153][T29848] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1811.624131][T29848] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1811.632127][T29848]  </TASK>
18:14:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x500000000000000)

18:14:21 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x600000000000000)

[ 1811.740953][T29848] memory: usage 307180kB, limit 307200kB, failcnt 79395
[ 1811.778587][T29848] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0
[ 1811.807786][T29848] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[ 1811.815283][T29848] Memory cgroup stats for /syz2:
[ 1811.815443][T29848] cache 4096
[ 1811.830162][T29848] rss 12288
[ 1811.845870][T29848] rss_huge 0
[ 1811.857575][T29848] shmem 0
[ 1811.864121][T29848] mapped_file 0
[ 1811.872560][T29848] dirty 0
[ 1811.883517][T29848] writeback 0
[ 1811.903495][T29848] workingset_refault_anon 31629
[ 1811.913265][T29848] workingset_refault_file 5
18:14:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x700000000000000)

18:14:21 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x3c}}}}}}, 0x0)

18:14:21 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3c02}}}}}}}, 0x3e)

[ 1811.934132][T29848] swap 319488
[ 1811.952500][T29848] swapcached 8192
[ 1811.958230][T29848] pgpgin 195539
[ 1811.970038][T29848] pgpgout 195535
[ 1811.978614][T29848] pgfault 393862
[ 1811.985801][T29848] pgmajfault 29216
[ 1811.994798][T29848] inactive_anon 12288
[ 1812.014215][T29848] active_anon 0
18:14:21 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:21 executing program 4:
socket$packet(0x11, 0x2, 0x300)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff)

18:14:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x800000000000000)

[ 1812.037229][T29848] inactive_file 0
[ 1812.041916][T29848] active_file 4096
[ 1812.063530][T29848] unevictable 0
[ 1812.067051][T29848] hierarchical_memory_limit 314572800
[ 1812.095598][T29848] hierarchical_memsw_limit 9223372036854771712
[ 1812.129980][T29848] total_cache 4096
18:14:21 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x900000000000000)

[ 1812.145998][T29848] total_rss 12288
[ 1812.152788][T29848] total_rss_huge 0
[ 1812.162428][T29848] total_shmem 0
[ 1812.180066][T29848] total_mapped_file 0
18:14:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, 0x0}, 0x0)

18:14:21 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3c03}}}}}}}, 0x3e)

[ 1812.200691][T29848] total_dirty 0
[ 1812.207774][T29848] total_writeback 0
[ 1812.231477][T29848] total_workingset_refault_anon 31629
18:14:22 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1812.249705][T29848] total_workingset_refault_file 5
18:14:22 executing program 4:
socket(0x2, 0x0, 0x7fff)

[ 1812.283716][T29848] total_swap 319488
[ 1812.296364][T29848] total_swapcached 8192
[ 1812.310331][T29848] total_pgpgin 195539
[ 1812.325379][T29848] total_pgpgout 195535
[ 1812.344544][T29848] total_pgfault 393862
[ 1812.351771][T29848] total_pgmajfault 29216
[ 1812.356284][T29848] total_inactive_anon 12288
[ 1812.380684][T29848] total_active_anon 0
[ 1812.389287][T29848] total_inactive_file 0
18:14:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xa00000000000000)

18:14:22 executing program 4:
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000003700), 0x2, 0x0)

[ 1812.393679][T29848] total_active_file 4096
[ 1812.402433][T29848] total_unevictable 0
[ 1812.406882][T29848] anon_cost 0
[ 1812.411346][T29848] file_cost 0
[ 1812.414870][T29848] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29848,uid=0
18:14:22 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x3f00}}}}}}}, 0x3e)

[ 1812.453607][T29848] Memory cgroup out of memory: Killed process 29848 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:22 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xb00000000000000)

18:14:22 executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004340), r0)

18:14:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)

18:14:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1000000000000000)

18:14:22 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000014c0)=@bridge_getlink={0x20}, 0x20}}, 0x0)

18:14:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1100000000000000)

18:14:22 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4000}}}}}}}, 0x3e)

18:14:22 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1}, 0x14}}, 0x0)

18:14:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1200000000000000)

[ 1812.939562][T29903] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
18:14:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1400000000000000)

[ 1812.982061][T29903] CPU: 1 PID: 29903 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1812.992574][T29903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1813.002675][T29903] Call Trace:
[ 1813.005996][T29903]  <TASK>
[ 1813.008975][T29903]  dump_stack_lvl+0x1e7/0x2e0
[ 1813.013748][T29903]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1813.019014][T29903]  ? __pfx__printk+0x10/0x10
[ 1813.023666][T29903]  ? ___ratelimit+0x4c4/0x670
18:14:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1500000000000000)

[ 1813.028412][T29903]  ? __pfx____ratelimit+0x10/0x10
[ 1813.033510][T29903]  dump_header+0xda/0x6a0
[ 1813.037912][T29903]  oom_kill_process+0x3a7/0x930
[ 1813.042834][T29903]  out_of_memory+0xf67/0x1320
[ 1813.047669][T29903]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1813.053365][T29903]  ? __pfx___mutex_lock+0x10/0x10
[ 1813.058482][T29903]  ? __pfx_out_of_memory+0x10/0x10
[ 1813.063672][T29903]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1813.069277][T29903]  ? __pfx_lock_release+0x10/0x10
[ 1813.074396][T29903]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1813.080526][T29903]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1813.085790][T29903]  ? mem_cgroup_iter+0x3e9/0x560
[ 1813.090795][T29903]  try_charge_memcg+0xda2/0x18a0
[ 1813.095824][T29903]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1813.101262][T29903]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1813.107040][T29903]  ? __pfx_lock_release+0x10/0x10
[ 1813.112134][T29903]  ? memcg_account_kmem+0x1e7/0x210
[ 1813.117411][T29903]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1813.123285][T29903]  __memcg_kmem_charge_page+0xe1/0x250
18:14:22 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1900000000000000)

[ 1813.128803][T29903]  memcg_charge_kernel_stack+0x37e/0x550
[ 1813.134492][T29903]  dup_task_struct+0x15d/0x7d0
[ 1813.139314][T29903]  copy_process+0x5d5/0x3fc0
[ 1813.143966][T29903]  ? __might_fault+0xa9/0x120
[ 1813.148696][T29903]  ? __pfx_lock_release+0x10/0x10
[ 1813.153793][T29903]  ? __pfx_copy_process+0x10/0x10
[ 1813.158870][T29903]  ? __might_fault+0xc5/0x120
[ 1813.163608][T29903]  ? __asan_memset+0x23/0x50
[ 1813.168266][T29903]  kernel_clone+0x21d/0x8d0
[ 1813.172827][T29903]  ? __pfx_kernel_clone+0x10/0x10
[ 1813.177920][T29903]  __se_sys_clone3+0x2cb/0x350
[ 1813.182742][T29903]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1813.188091][T29903]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1813.194140][T29903]  ? exc_page_fault+0x587/0x870
[ 1813.199050][T29903]  ? do_syscall_64+0xb4/0x240
[ 1813.203768][T29903]  do_syscall_64+0xf9/0x240
[ 1813.208314][T29903]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1813.214256][T29903] RIP: 0033:0x7f84034a9b99
18:14:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

[ 1813.218709][T29903] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1813.238374][T29903] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1813.246841][T29903] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1813.254860][T29903] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1813.262881][T29903] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1813.270899][T29903] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
18:14:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x1a00000000000000)

[ 1813.278915][T29903] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1813.286953][T29903]  </TASK>
[ 1813.313997][T29903] memory: usage 307180kB, limit 307200kB, failcnt 79637
[ 1813.326609][T29903] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0
[ 1813.343009][T29903] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[ 1813.363154][T29903] Memory cgroup stats for /syz2:
[ 1813.363314][T29903] cache 4096
[ 1813.377142][T29903] rss 12288
[ 1813.383758][T29903] rss_huge 0
[ 1813.391937][T29903] shmem 0
[ 1813.398386][T29903] mapped_file 0
[ 1813.405355][T29903] dirty 0
[ 1813.413372][T29903] writeback 0
[ 1813.420167][T29903] workingset_refault_anon 31693
18:14:23 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4001}}}}}}}, 0x3e)

18:14:23 executing program 4:
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040), 0x48)

[ 1813.431965][T29903] workingset_refault_file 5
18:14:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x2000000000000000)

[ 1813.459444][T29903] swap 286720
[ 1813.468237][T29903] swapcached 12288
[ 1813.476634][T29903] pgpgin 195616
[ 1813.485123][T29903] pgpgout 195612
18:14:23 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1813.519440][T29903] pgfault 393980
[ 1813.523086][T29903] pgmajfault 29277
[ 1813.526841][T29903] inactive_anon 12288
[ 1813.548444][T29903] active_anon 0
[ 1813.552082][T29903] inactive_file 4096
[ 1813.559753][T29903] active_file 0
[ 1813.563460][T29903] unevictable 0
18:14:23 executing program 4:
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)

[ 1813.567048][T29903] hierarchical_memory_limit 314572800
[ 1813.574580][T29903] hierarchical_memsw_limit 9223372036854771712
[ 1813.589404][T29903] total_cache 4096
[ 1813.595601][T29903] total_rss 12288
18:14:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x3f00000000000000)

[ 1813.619423][T29903] total_rss_huge 0
[ 1813.635072][T29903] total_shmem 0
[ 1813.640542][T29903] total_mapped_file 0
[ 1813.644771][T29903] total_dirty 0
[ 1813.648916][T29903] total_writeback 0
[ 1813.652974][T29903] total_workingset_refault_anon 31693
[ 1813.658627][T29903] total_workingset_refault_file 5
[ 1813.663866][T29903] total_swap 286720
18:14:23 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000240))

[ 1813.668191][T29903] total_swapcached 12288
[ 1813.685639][T29903] total_pgpgin 195616
[ 1813.703047][T29903] total_pgpgout 195612
18:14:23 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4003}}}}}}}, 0x3e)

[ 1813.717998][T29903] total_pgfault 393980
[ 1813.722787][T29903] total_pgmajfault 29277
18:14:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x4000000000000000)

[ 1813.767890][T29903] total_inactive_anon 12288
[ 1813.772463][T29903] total_active_anon 0
[ 1813.776476][T29903] total_inactive_file 4096
[ 1813.797894][T29903] total_active_file 0
[ 1813.801937][T29903] total_unevictable 0
18:14:23 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x3}, 0x14}}, 0x0)

[ 1813.817323][T29903] anon_cost 0
[ 1813.820672][T29903] file_cost 0
[ 1813.823984][T29903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29903,uid=0
18:14:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x6000000000000000)

18:14:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xa9dd872e417f0000)

[ 1813.886434][T29903] Memory cgroup out of memory: Killed process 29903 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:23 executing program 4:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002640)=@o_path={0x0}, 0x18)

18:14:23 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000008f00)={'gre0\x00', &(0x7f0000008e80)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

18:14:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xf0ffffff00000000)

18:14:23 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4201}}}}}}}, 0x3e)

18:14:23 executing program 4:
bpf$MAP_CREATE(0x1c, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

18:14:23 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:23 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xf531000000000000)

18:14:24 executing program 4:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'veth0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r2}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0)

18:14:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xffffff7f00000000)

18:14:24 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:24 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000000440))

18:14:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0xffffffff00000000)

[ 1814.456658][T29961] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1814.467448][T29961] CPU: 0 PID: 29961 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1814.477911][T29961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1814.488006][T29961] Call Trace:
[ 1814.491309][T29961]  <TASK>
[ 1814.494265][T29961]  dump_stack_lvl+0x1e7/0x2e0
[ 1814.498986][T29961]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1814.504223][T29961]  ? __pfx__printk+0x10/0x10
[ 1814.508863][T29961]  ? ___ratelimit+0x4c4/0x670
[ 1814.513599][T29961]  ? __pfx____ratelimit+0x10/0x10
[ 1814.518685][T29961]  dump_header+0xda/0x6a0
[ 1814.523066][T29961]  oom_kill_process+0x3a7/0x930
[ 1814.527975][T29961]  out_of_memory+0xf67/0x1320
[ 1814.532698][T29961]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1814.538354][T29961]  ? __pfx___mutex_lock+0x10/0x10
[ 1814.543397][T29961]  ? __pfx_out_of_memory+0x10/0x10
[ 1814.548556][T29961]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1814.554118][T29961]  ? __pfx_lock_release+0x10/0x10
[ 1814.559159][T29961]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1814.565243][T29961]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1814.570455][T29961]  ? mem_cgroup_iter+0x3e9/0x560
[ 1814.575409][T29961]  try_charge_memcg+0xda2/0x18a0
[ 1814.580386][T29961]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1814.585773][T29961]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1814.591516][T29961]  ? __pfx_lock_release+0x10/0x10
[ 1814.596563][T29961]  ? memcg_account_kmem+0x1e7/0x210
[ 1814.601788][T29961]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1814.607611][T29961]  __memcg_kmem_charge_page+0xe1/0x250
[ 1814.613086][T29961]  memcg_charge_kernel_stack+0x37e/0x550
[ 1814.618738][T29961]  dup_task_struct+0x15d/0x7d0
[ 1814.623519][T29961]  copy_process+0x5d5/0x3fc0
[ 1814.628140][T29961]  ? __might_fault+0xa9/0x120
[ 1814.632836][T29961]  ? __pfx_lock_release+0x10/0x10
[ 1814.637886][T29961]  ? __pfx_copy_process+0x10/0x10
[ 1814.642921][T29961]  ? __might_fault+0xc5/0x120
[ 1814.647615][T29961]  ? __asan_memset+0x23/0x50
[ 1814.652226][T29961]  kernel_clone+0x21d/0x8d0
[ 1814.656746][T29961]  ? __pfx_kernel_clone+0x10/0x10
[ 1814.661796][T29961]  __se_sys_clone3+0x2cb/0x350
[ 1814.666575][T29961]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1814.671883][T29961]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1814.677907][T29961]  ? exc_page_fault+0x587/0x870
[ 1814.682794][T29961]  ? do_syscall_64+0xb4/0x240
[ 1814.687483][T29961]  do_syscall_64+0xf9/0x240
[ 1814.692004][T29961]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1814.697910][T29961] RIP: 0033:0x7f84034a9b99
[ 1814.702333][T29961] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1814.721951][T29961] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1814.730380][T29961] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1814.738360][T29961] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1814.746340][T29961] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
18:14:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, 0x0, 0x227, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1ff, 0x58}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040080}, 0x4008009)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:24 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4203}}}}}}}, 0x3e)

[ 1814.754337][T29961] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1814.762346][T29961] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1814.772028][T29961]  </TASK>
[ 1814.808240][T29961] memory: usage 307180kB, limit 307200kB, failcnt 79870
[ 1814.815258][T29961] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0
[ 1814.840903][T29961] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
18:14:24 executing program 4:
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="00012a20", @ANYRES16=0x0, @ANYBLOB="e6ffff0801008b00005d33cdc96be58bd5b3274e000f", @ANYRES32=0x0, @ANYBLOB="0c0001800800030001"], 0x2c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

18:14:24 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, 0x0, 0x227, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1ff, 0x58}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040080}, 0x4008009)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1814.863403][T29961] Memory cgroup stats for /syz2:
[ 1814.863586][T29961] cache 4096
[ 1814.878304][T29961] rss 0
[ 1814.881114][T29961] rss_huge 0
[ 1814.884341][T29961] shmem 0
[ 1814.895852][T29961] mapped_file 0
[ 1814.903418][T29961] dirty 0
[ 1814.909837][T29961] writeback 0
18:14:24 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1814.916638][T29961] workingset_refault_anon 31775
[ 1814.940212][T29961] workingset_refault_file 5
[ 1814.957259][T29961] swap 339968
[ 1814.964849][T29961] swapcached 0
[ 1814.980577][T29961] pgpgin 195711
18:14:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, 0x0, 0x227, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1ff, 0x58}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040080}, 0x4008009) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1814.988061][T29991] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
[ 1814.993363][T29961] pgpgout 195710
[ 1815.005675][T29991] netlink: 64130 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1815.022377][T29961] pgfault 394119
[ 1815.033691][T29961] pgmajfault 29350
18:14:24 executing program 4:
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="00012a20", @ANYRES16=0x0, @ANYBLOB="e6ffff0801008b00005d33cdc96be58bd5b3274e000f", @ANYRES32=0x0, @ANYBLOB="0c0001800800030001"], 0x2c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

18:14:24 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4305}}}}}}}, 0x3e)

[ 1815.047290][T29961] inactive_anon 0
[ 1815.054579][T29961] active_anon 0
[ 1815.065848][T29961] inactive_file 0
[ 1815.079463][T29961] active_file 4096
[ 1815.083242][T29961] unevictable 0
[ 1815.086731][T29961] hierarchical_memory_limit 314572800
18:14:24 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r0], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:24 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1815.129887][T29961] hierarchical_memsw_limit 9223372036854771712
[ 1815.136113][T29961] total_cache 4096
[ 1815.141761][T29999] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
[ 1815.157723][T29999] netlink: 64130 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1815.167171][T29961] total_rss 0
[ 1815.170633][T29961] total_rss_huge 0
[ 1815.174387][T29961] total_shmem 0
[ 1815.195519][T29961] total_mapped_file 0
[ 1815.207344][T29961] total_dirty 0
[ 1815.227312][T30003] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1815.235646][T29961] total_writeback 0
18:14:25 executing program 4:
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="00012a20", @ANYRES16=0x0, @ANYBLOB="e6ffff0801008b00005d33cdc96be58bd5b3274e000f", @ANYRES32=0x0, @ANYBLOB="0c0001800800030001"], 0x2c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

[ 1815.249579][T29961] total_workingset_refault_anon 31775
[ 1815.255005][T29961] total_workingset_refault_file 5
[ 1815.278686][T29961] total_swap 339968
[ 1815.287627][T29961] total_swapcached 0
[ 1815.291989][T29961] total_pgpgin 195711
[ 1815.296107][T29961] total_pgpgout 195710
18:14:25 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r0], 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1815.302076][T29961] total_pgfault 394119
[ 1815.306260][T29961] total_pgmajfault 29350
[ 1815.314343][T29961] total_inactive_anon 0
[ 1815.319217][T29961] total_active_anon 0
[ 1815.323615][T29961] total_inactive_file 0
[ 1815.330376][T29961] total_active_file 4096
[ 1815.334742][T29961] total_unevictable 0
[ 1815.339600][T29961] anon_cost 0
[ 1815.343014][T29961] file_cost 0
[ 1815.346408][T29961] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=29961,uid=0
[ 1815.371614][T29961] Memory cgroup out of memory: Killed process 29961 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
[ 1815.390396][T30008] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
18:14:25 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x47, 0x10001, 0x8, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000640), &(0x7f0000000180)=""/109}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r1, 0x0, &(0x7f0000000680)=""/244}, 0x20)

18:14:25 executing program 4:
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="00012a20", @ANYRES16=0x0, @ANYBLOB="e6ffff0801008b00005d33cdc96be58bd5b3274e000f", @ANYRES32=0x0, @ANYBLOB="0c0001800800030001"], 0x2c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

[ 1815.399464][T30008] netlink: 64130 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1815.417022][T30010] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
18:14:25 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r0], 0x13c}, 0x1, 0x100000000000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r0], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)

18:14:25 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4403}}}}}}}, 0x3e)

18:14:25 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x2200c080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='dvmrp0\x00', 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000010001307000000e1ff000000fe8000000000000000000000000000aa7f00000100000000000000000003000000000000000000000200000000000000d6deb1f6391186fea77a9474cb35a5466b06d78e86d25d1d432049bb0c30e5a2d1fff9f4d180ca862102e20e29801f1333ca8820b0894a1861a9154669d350ef27d6e2f96e26910a76de133d89045ba29bca50802b5ca08ab24e912152000000000000169f7180fd2cc51c6d947ee36017fefa4dd09b9e393292f2dd6ae6b43022ca1c4a0ee25362556b01b3b5358390ea3bade7678135c62ebe9515089c41aa47e496ce527c9c6a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1815.557547][T30015] netlink: 'syz-executor.4': attribute type 16 has an invalid length.
[ 1815.569154][T30017] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1815.586742][T30019] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1815.597553][T30015] netlink: 64130 bytes leftover after parsing attributes in process `syz-executor.4'.
18:14:25 executing program 4:
socket$packet(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0)

[ 1815.666079][T30023] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
18:14:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x2200c080)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='dvmrp0\x00', 0x10)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000010001307000000e1ff000000fe8000000000000000000000000000aa7f00000100000000000000000003000000000000000000000200000000000000d6deb1f6391186fea77a9474cb35a5466b06d78e86d25d1d432049bb0c30e5a2d1fff9f4d180ca862102e20e29801f1333ca8820b0894a1861a9154669d350ef27d6e2f96e26910a76de133d89045ba29bca50802b5ca08ab24e912152000000000000169f7180fd2cc51c6d947ee36017fefa4dd09b9e393292f2dd6ae6b43022ca1c4a0ee25362556b01b3b5358390ea3bade7678135c62ebe9515089c41aa47e496ce527c9c6a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x2200c080) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='dvmrp0\x00', 0x10) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000010001307000000e1ff000000fe8000000000000000000000000000aa7f00000100000000000000000003000000000000000000000200000000000000d6deb1f6391186fea77a9474cb35a5466b06d78e86d25d1d432049bb0c30e5a2d1fff9f4d180ca862102e20e29801f1333ca8820b0894a1861a9154669d350ef27d6e2f96e26910a76de133d89045ba29bca50802b5ca08ab24e912152000000000000169f7180fd2cc51c6d947ee36017fefa4dd09b9e393292f2dd6ae6b43022ca1c4a0ee25362556b01b3b5358390ea3bade7678135c62ebe9515089c41aa47e496ce527c9c6a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)

18:14:25 executing program 4:
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x8}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x47)
bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xa0000}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x0, 0x40, 0x0, 0x1}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r3}, 0x38)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f00000001c0)=0x80, 0x4)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(0x0, 0x0, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f9104", 0xa2, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000240)="728df163261d8803e823b79520e466fcab67aec2e099e7fba7f764aa06cbdb2ea5080657f7257f67520212", &(0x7f0000000280)=""/114, &(0x7f0000000300)="571fe849a5ab0f7ae8cc59fde1b0a208049c3ac80902827334", 0x0, 0x1e6, r2, 0x4}, 0x38)

[ 1815.822860][T30013] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1815.853094][T30027] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1815.867368][T30013] CPU: 0 PID: 30013 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1815.877843][T30013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1815.887932][T30013] Call Trace:
[ 1815.891248][T30013]  <TASK>
[ 1815.894214][T30013]  dump_stack_lvl+0x1e7/0x2e0
[ 1815.899026][T30013]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1815.904269][T30013]  ? __pfx__printk+0x10/0x10
[ 1815.908929][T30013]  ? ___ratelimit+0x4c4/0x670
[ 1815.913668][T30013]  ? __pfx____ratelimit+0x10/0x10
[ 1815.918750][T30013]  dump_header+0xda/0x6a0
[ 1815.923150][T30013]  oom_kill_process+0x3a7/0x930
[ 1815.928057][T30013]  out_of_memory+0xf67/0x1320
[ 1815.932787][T30013]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1815.938471][T30013]  ? __pfx___mutex_lock+0x10/0x10
[ 1815.943540][T30013]  ? __pfx_out_of_memory+0x10/0x10
[ 1815.948713][T30013]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1815.954308][T30013]  ? __pfx_lock_release+0x10/0x10
[ 1815.959389][T30013]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1815.965523][T30013]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1815.970791][T30013]  ? mem_cgroup_iter+0x3e9/0x560
[ 1815.975821][T30013]  try_charge_memcg+0xda2/0x18a0
[ 1815.980843][T30013]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1815.986270][T30013]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1815.992033][T30013]  ? __pfx_lock_release+0x10/0x10
[ 1815.997129][T30013]  ? memcg_account_kmem+0x1e7/0x210
[ 1816.002385][T30013]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1816.008240][T30013]  __memcg_kmem_charge_page+0xe1/0x250
[ 1816.013739][T30013]  memcg_charge_kernel_stack+0x28a/0x550
[ 1816.019421][T30013]  dup_task_struct+0x40d/0x7d0
[ 1816.024234][T30013]  copy_process+0x5d5/0x3fc0
[ 1816.028880][T30013]  ? __might_fault+0xa9/0x120
[ 1816.033604][T30013]  ? __pfx_lock_release+0x10/0x10
[ 1816.038684][T30013]  ? __pfx_copy_process+0x10/0x10
[ 1816.043747][T30013]  ? __might_fault+0xc5/0x120
[ 1816.048474][T30013]  ? __asan_memset+0x23/0x50
[ 1816.053113][T30013]  kernel_clone+0x21d/0x8d0
[ 1816.057667][T30013]  ? __pfx_kernel_clone+0x10/0x10
[ 1816.062754][T30013]  __se_sys_clone3+0x2cb/0x350
[ 1816.067565][T30013]  ? __pfx___se_sys_clone3+0x10/0x10
18:14:25 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:25 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4788}}}}}}}, 0x3e)

[ 1816.072924][T30013]  ? do_syscall_64+0x108/0x240
[ 1816.077736][T30013]  ? do_syscall_64+0xb4/0x240
[ 1816.082458][T30013]  do_syscall_64+0xf9/0x240
[ 1816.087008][T30013]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1816.092943][T30013] RIP: 0033:0x7f84034a9b99
[ 1816.097401][T30013] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
18:14:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x2200c080) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='dvmrp0\x00', 0x10) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000010001307000000e1ff000000fe8000000000000000000000000000aa7f00000100000000000000000003000000000000000000000200000000000000d6deb1f6391186fea77a9474cb35a5466b06d78e86d25d1d432049bb0c30e5a2d1fff9f4d180ca862102e20e29801f1333ca8820b0894a1861a9154669d350ef27d6e2f96e26910a76de133d89045ba29bca50802b5ca08ab24e912152000000000000169f7180fd2cc51c6d947ee36017fefa4dd09b9e393292f2dd6ae6b43022ca1c4a0ee25362556b01b3b5358390ea3bade7678135c62ebe9515089c41aa47e496ce527c9c6a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000091fbd922ebed710265ae8ceb23a10705077c43a75f73e86a67a4016751dd4cb5d1e5812bec96d70cc914fc109879932044c99c338177e0a721ad5d2282712b"], 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1816.117082][T30013] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1816.125551][T30013] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1816.133565][T30013] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1816.141573][T30013] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1816.149579][T30013] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1816.157586][T30013] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1816.165615][T30013]  </TASK>
[ 1816.196751][T30013] memory: usage 307180kB, limit 307200kB, failcnt 80116
[ 1816.209687][T30013] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0
18:14:26 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x10}, 0xe80}}, 0x0)

[ 1816.246557][T30013] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[ 1816.270488][T30013] Memory cgroup stats for /syz2:
[ 1816.270660][T30013] cache 4096
[ 1816.279517][T30013] rss 0
[ 1816.293225][T30013] rss_huge 0
18:14:26 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x13c}, 0x1, 0x100000000000000}, 0x20002811)

18:14:26 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4800}}}}}}}, 0x3e)

[ 1816.300010][T30013] shmem 0
[ 1816.305400][T30013] mapped_file 0
[ 1816.311686][T30013] dirty 0
[ 1816.317049][T30013] writeback 0
[ 1816.326654][T30013] workingset_refault_anon 31859
[ 1816.335519][T30013] workingset_refault_file 5
[ 1816.341493][T30013] swap 299008
18:14:26 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1816.359575][T30013] swapcached 0
[ 1816.365436][T30013] pgpgin 195809
[ 1816.397493][T30013] pgpgout 195808
[ 1816.401117][T30013] pgfault 394274
[ 1816.404686][T30013] pgmajfault 29429
18:14:26 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0x0, <r1=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x1a, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x80)

18:14:26 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x13c}, 0x1, 0x100000000000000}, 0x20002811)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x13c}, 0x1, 0x100000000000000}, 0x20002811) (async)

[ 1816.435460][T30013] inactive_anon 0
[ 1816.444687][T30013] active_anon 0
[ 1816.458948][T30013] inactive_file 4096
[ 1816.467721][T30013] active_file 0
[ 1816.471511][T30013] unevictable 0
[ 1816.474995][T30013] hierarchical_memory_limit 314572800
[ 1816.501800][T30013] hierarchical_memsw_limit 9223372036854771712
[ 1816.515934][T30013] total_cache 4096
[ 1816.524591][T30013] total_rss 0
[ 1816.533356][T30013] total_rss_huge 0
[ 1816.544113][T30013] total_shmem 0
18:14:26 executing program 4:
select(0x40, &(0x7f0000000040)={0x5}, 0x0, &(0x7f00000000c0)={0x2}, &(0x7f0000000100)={0x0, 0x9})

[ 1816.556970][T30013] total_mapped_file 0
18:14:26 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:26 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x13c}, 0x1, 0x100000000000000}, 0x20002811)

[ 1816.583276][T30013] total_dirty 0
[ 1816.593708][T30013] total_writeback 0
[ 1816.603565][T30013] total_workingset_refault_anon 31859
18:14:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="230000001a0001190b04de47512d4b5a06"], 0x30}}, 0x0)

[ 1816.638438][T30013] total_workingset_refault_file 5
[ 1816.643544][T30013] total_swap 299008
[ 1816.658516][T30013] total_swapcached 0
[ 1816.662469][T30013] total_pgpgin 195809
[ 1816.666481][T30013] total_pgpgout 195808
[ 1816.678999][T30013] total_pgfault 394274
18:14:26 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4803}}}}}}}, 0x3e)

18:14:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, r1, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x21}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec8172b5f987ee23b2862b4da08012f113d81d39bd0da19e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ad4b8f14e5fd37e2251320c993cbe76b24af4d7c4851e11"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1f9925fa10ad543a597e04da9e7eeafbe149f65fada63045"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x4810)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1816.688151][T30013] total_pgmajfault 29429
[ 1816.700190][T30013] total_inactive_anon 0
[ 1816.712370][T30013] total_active_anon 0
[ 1816.723718][T30013] total_inactive_file 4096
18:14:26 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:26 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={0x0}}, 0x0)

[ 1816.741038][T30013] total_active_file 0
[ 1816.754290][T30013] total_unevictable 0
[ 1816.766076][T30013] anon_cost 0
[ 1816.794485][T30013] file_cost 0
[ 1816.799255][T30013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30013,uid=0
[ 1816.816412][T30013] Memory cgroup out of memory: Killed process 30013 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
18:14:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, r1, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x21}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec8172b5f987ee23b2862b4da08012f113d81d39bd0da19e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ad4b8f14e5fd37e2251320c993cbe76b24af4d7c4851e11"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1f9925fa10ad543a597e04da9e7eeafbe149f65fada63045"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x4810)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:26 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001ac0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

18:14:26 executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x305, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY]}, {0x4}, {0xc}, {0xfffffffffffffea7, 0x9}}}]}]}, 0x60}}, 0x0)

18:14:26 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:26 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4888}}}}}}}, 0x3e)

18:14:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x305, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY]}, {0x4}, {0xc}, {0xfffffffffffffea7, 0x9}}}]}]}, 0x60}}, 0x0)

18:14:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xfc, r1, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80000000, 0x21}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ec8172b5f987ee23b2862b4da08012f113d81d39bd0da19e"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ad4b8f14e5fd37e2251320c993cbe76b24af4d7c4851e11"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1f9925fa10ad543a597e04da9e7eeafbe149f65fada63045"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x4810)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:26 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:26 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x305, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY]}, {0x4}, {0xc}, {0xfffffffffffffea7, 0x9}}}]}]}, 0x60}}, 0x0)

18:14:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {0x2000}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040880}, 0x20000000)

18:14:27 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:27 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0x305, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING, @TCA_SKBEDIT_PRIORITY]}, {0x4}, {0xc}, {0xfffffffffffffea7, 0x9}}}]}]}, 0x60}}, 0x0)

18:14:27 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4a01}}}}}}}, 0x3e)

18:14:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {0x2000}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040880}, 0x20000000)

[ 1817.380114][T30073] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1817.443575][T30073] CPU: 0 PID: 30073 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1817.454069][T30073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1817.464254][T30073] Call Trace:
[ 1817.467573][T30073]  <TASK>
[ 1817.470535][T30073]  dump_stack_lvl+0x1e7/0x2e0
[ 1817.475275][T30073]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1817.480519][T30073]  ? __pfx__printk+0x10/0x10
[ 1817.485172][T30073]  ? ___ratelimit+0x4c4/0x670
[ 1817.489912][T30073]  ? __pfx____ratelimit+0x10/0x10
[ 1817.494998][T30073]  dump_header+0xda/0x6a0
[ 1817.499388][T30073]  oom_kill_process+0x3a7/0x930
[ 1817.504300][T30073]  out_of_memory+0xf67/0x1320
[ 1817.509031][T30073]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1817.514712][T30073]  ? __pfx___mutex_lock+0x10/0x10
[ 1817.519781][T30073]  ? __pfx_out_of_memory+0x10/0x10
[ 1817.524959][T30073]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1817.530557][T30073]  ? __pfx_lock_release+0x10/0x10
[ 1817.535635][T30073]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1817.541759][T30073]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1817.547010][T30073]  ? mem_cgroup_iter+0x3e9/0x560
[ 1817.552010][T30073]  try_charge_memcg+0xda2/0x18a0
[ 1817.557052][T30073]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1817.562578][T30073]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1817.568345][T30073]  ? __pfx_lock_release+0x10/0x10
[ 1817.573422][T30073]  ? memcg_account_kmem+0x1e7/0x210
[ 1817.578682][T30073]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1817.584538][T30073]  __memcg_kmem_charge_page+0xe1/0x250
18:14:27 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x80, 0x7ff, 0x8}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0x89b, r0}, 0x38)

18:14:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {0x2000}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x1, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040880}, 0x20000000)

18:14:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0xff}, @in=@local, {0x0, 0x0, 0x7fffffffffffffff}, {}, {}, 0x0, 0x3502, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x2f00, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x13, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)=@flushpolicy={0x138, 0x1d, 0x8, 0x70bd25, 0x25dfdbfb, "", [@algo_comp={0x120, 0x3, {{'deflate\x00'}, 0x6c0, "51cfc380bee48ce74fb340cbaa83c4e5e1f021a5339248c554ebee4f6a30b39dd279d0b607a7bcfb4aec9cd568505d1f1274ec6057a0a73b04af561ff80c46f8639c10ecfae51da4fd952b403233be3514124a555bc5c62224644e186b44b27c32c904c2e71571cf408933e240ca193656223b6963e7adbd4c46dd1d0a23c59c2eb554429c2b57166cf038b9e4c99655c4f2d343112215baedb2813e66cf82d872da70f11869f0b017420c806083aecdc117a11e2215e18db0f599195a7259e1fc13b8cb9a0d940488dc3469e887e5e8bdb7f3abc3667961"}}, @replay_thresh={0x8, 0xb, 0x800}]}, 0x138}}, 0x4040)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @local}, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r4=>0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r5=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x180, 0x18, 0x704, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "a01410b15875818f"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x6, 0x4a, 0x63, 0x7, 0x1, "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", 0x3, "12f65ee007679018013598a0e0d5d6116fbcb29c"}}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_LIM_HOPS={0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x4000094)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={<r6=>0x0, @empty, @broadcast}, &(0x7f0000000400)=0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=<r7=>0x0, &(0x7f00000007c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x21060}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x130, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004055}, 0x8025)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002400020029bd7004eddbdf2620000000060004000000000006000300000000000600030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x20000080)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@delpolicy={0x168, 0x14, 0x312, 0x70bd25, 0x25dfdbfb, {{@in6=@private1, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0x0, 0xfdaa1798b5cd4a42, 0x80, 0x80, 0x0, r9, r10}, 0x6e6bbc}, [@sec_ctx={0x10a, 0x8, {0x106, 0x8, 0x0, 0x7, 0xfe, "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"}}, @policy_type={0xa}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x4)

[ 1817.590047][T30073]  memcg_charge_kernel_stack+0x37e/0x550
[ 1817.595789][T30073]  dup_task_struct+0x15d/0x7d0
[ 1817.600611][T30073]  copy_process+0x5d5/0x3fc0
[ 1817.605305][T30073]  ? __might_fault+0xa9/0x120
[ 1817.610060][T30073]  ? __pfx_lock_release+0x10/0x10
[ 1817.615151][T30073]  ? __pfx_copy_process+0x10/0x10
[ 1817.620223][T30073]  ? __might_fault+0xc5/0x120
[ 1817.624952][T30073]  ? __asan_memset+0x23/0x50
[ 1817.629606][T30073]  kernel_clone+0x21d/0x8d0
[ 1817.634166][T30073]  ? __pfx_kernel_clone+0x10/0x10
[ 1817.639355][T30073]  __se_sys_clone3+0x2cb/0x350
[ 1817.644168][T30073]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1817.649514][T30073]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1817.655566][T30073]  ? exc_page_fault+0x587/0x870
[ 1817.660484][T30073]  ? do_syscall_64+0xb4/0x240
[ 1817.665208][T30073]  do_syscall_64+0xf9/0x240
[ 1817.669758][T30073]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1817.675694][T30073] RIP: 0033:0x7f84034a9b99
18:14:27 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1817.680157][T30073] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1817.699808][T30073] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1817.708277][T30073] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1817.716287][T30073] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1817.724301][T30073] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1817.732311][T30073] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1817.740322][T30073] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1817.748358][T30073]  </TASK>
18:14:27 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r2=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x80)

[ 1817.795486][T30073] memory: usage 307180kB, limit 307200kB, failcnt 80355
[ 1817.821468][T30073] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0
[ 1817.845623][T30073] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[ 1817.853268][T30073] Memory cgroup stats for /syz2:
[ 1817.853417][T30073] cache 4096
[ 1817.862238][T30073] rss 0
[ 1817.865170][T30073] rss_huge 0
[ 1817.882874][T30073] shmem 0
[ 1817.887680][T30073] mapped_file 0
18:14:27 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4c00}}}}}}}, 0x3e)

[ 1817.894336][T30073] dirty 0
[ 1817.911964][T30073] writeback 0
[ 1817.915309][T30073] workingset_refault_anon 31935
[ 1817.929590][T30073] workingset_refault_file 5
[ 1817.934158][T30073] swap 282624
18:14:27 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff8aaaaaaa88bb08004600002c00000000002c90787f"], 0x0)

[ 1817.965619][T30073] swapcached 0
[ 1817.973747][T30073] pgpgin 195898
[ 1817.982251][T30073] pgpgout 195897
18:14:27 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1818.007690][T30073] pgfault 394412
[ 1818.011594][T30073] pgmajfault 29498
[ 1818.018958][T30073] inactive_anon 0
[ 1818.028856][T30073] active_anon 0
[ 1818.037045][T30073] inactive_file 4096
[ 1818.047491][T30073] active_file 0
[ 1818.055600][T30073] unevictable 0
[ 1818.065344][T30073] hierarchical_memory_limit 314572800
[ 1818.082662][T30073] hierarchical_memsw_limit 9223372036854771712
[ 1818.097454][T30073] total_cache 4096
18:14:27 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0xff}, @in=@local, {0x0, 0x0, 0x7fffffffffffffff}, {}, {}, 0x0, 0x3502, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x2f00, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x13, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)=@flushpolicy={0x138, 0x1d, 0x8, 0x70bd25, 0x25dfdbfb, "", [@algo_comp={0x120, 0x3, {{'deflate\x00'}, 0x6c0, "51cfc380bee48ce74fb340cbaa83c4e5e1f021a5339248c554ebee4f6a30b39dd279d0b607a7bcfb4aec9cd568505d1f1274ec6057a0a73b04af561ff80c46f8639c10ecfae51da4fd952b403233be3514124a555bc5c62224644e186b44b27c32c904c2e71571cf408933e240ca193656223b6963e7adbd4c46dd1d0a23c59c2eb554429c2b57166cf038b9e4c99655c4f2d343112215baedb2813e66cf82d872da70f11869f0b017420c806083aecdc117a11e2215e18db0f599195a7259e1fc13b8cb9a0d940488dc3469e887e5e8bdb7f3abc3667961"}}, @replay_thresh={0x8, 0xb, 0x800}]}, 0x138}}, 0x4040)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @local}, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r4=>0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r5=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x180, 0x18, 0x704, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "a01410b15875818f"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x6, 0x4a, 0x63, 0x7, 0x1, "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", 0x3, "12f65ee007679018013598a0e0d5d6116fbcb29c"}}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_LIM_HOPS={0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x4000094) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={<r6=>0x0, @empty, @broadcast}, &(0x7f0000000400)=0xc) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=<r7=>0x0, &(0x7f00000007c0)=0x4) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan0\x00', <r8=>0x0}) (rerun: 64)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x21060}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x130, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004055}, 0x8025) (async, rerun: 32)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002400020029bd7004eddbdf2620000000060004000000000006000300000000000600030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x20000080) (async, rerun: 32)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@delpolicy={0x168, 0x14, 0x312, 0x70bd25, 0x25dfdbfb, {{@in6=@private1, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0x0, 0xfdaa1798b5cd4a42, 0x80, 0x80, 0x0, r9, r10}, 0x6e6bbc}, [@sec_ctx={0x10a, 0x8, {0x106, 0x8, 0x0, 0x7, 0xfe, "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"}}, @policy_type={0xa}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x4)

[ 1818.106718][T30073] total_rss 0
18:14:27 executing program 4:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x18, r0, 0xb09, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)

[ 1818.131352][T30073] total_rss_huge 0
[ 1818.136859][T30073] total_shmem 0
[ 1818.148464][T30073] total_mapped_file 0
[ 1818.158105][T30073] total_dirty 0
[ 1818.161622][T30073] total_writeback 0
[ 1818.165458][T30073] total_workingset_refault_anon 31935
[ 1818.187206][T30073] total_workingset_refault_file 5
[ 1818.192304][T30073] total_swap 282624
[ 1818.196147][T30073] total_swapcached 0
[ 1818.219362][T30073] total_pgpgin 195898
[ 1818.227668][T30073] total_pgpgout 195897
[ 1818.231801][T30073] total_pgfault 394412
[ 1818.235910][T30073] total_pgmajfault 29498
[ 1818.244275][T30073] total_inactive_anon 0
[ 1818.248930][T30073] total_active_anon 0
[ 1818.252956][T30073] total_inactive_file 4096
[ 1818.258251][T30073] total_active_file 0
[ 1818.262282][T30073] total_unevictable 0
[ 1818.266296][T30073] anon_cost 0
[ 1818.270309][T30073] file_cost 0
18:14:28 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:28 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x10}}, 0x0)

[ 1818.277908][T30073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30073,uid=0
[ 1818.299553][T30073] Memory cgroup out of memory: Killed process 30073 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:28 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x4e01}}}}}}}, 0x3e)

[ 1818.425916][T30130] syzkaller0: entered allmulticast mode
18:14:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0xff}, @in=@local, {0x0, 0x0, 0x7fffffffffffffff}, {}, {}, 0x0, 0x3502, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x2f00, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x13, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)=@flushpolicy={0x138, 0x1d, 0x8, 0x70bd25, 0x25dfdbfb, "", [@algo_comp={0x120, 0x3, {{'deflate\x00'}, 0x6c0, "51cfc380bee48ce74fb340cbaa83c4e5e1f021a5339248c554ebee4f6a30b39dd279d0b607a7bcfb4aec9cd568505d1f1274ec6057a0a73b04af561ff80c46f8639c10ecfae51da4fd952b403233be3514124a555bc5c62224644e186b44b27c32c904c2e71571cf408933e240ca193656223b6963e7adbd4c46dd1d0a23c59c2eb554429c2b57166cf038b9e4c99655c4f2d343112215baedb2813e66cf82d872da70f11869f0b017420c806083aecdc117a11e2215e18db0f599195a7259e1fc13b8cb9a0d940488dc3469e887e5e8bdb7f3abc3667961"}}, @replay_thresh={0x8, 0xb, 0x800}]}, 0x138}}, 0x4040)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @local}, 0x10)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r4=>0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r5=>0x0}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x180, 0x18, 0x704, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "a01410b15875818f"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x6, 0x4a, 0x63, 0x7, 0x1, "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", 0x3, "12f65ee007679018013598a0e0d5d6116fbcb29c"}}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_LIM_HOPS={0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x4000094)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={<r6=>0x0, @empty, @broadcast}, &(0x7f0000000400)=0xc)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=<r7=>0x0, &(0x7f00000007c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan0\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x21060}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x130, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004055}, 0x8025)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002400020029bd7004eddbdf2620000000060004000000000006000300000000000600030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x20000080)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe8)
sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@delpolicy={0x168, 0x14, 0x312, 0x70bd25, 0x25dfdbfb, {{@in6=@private1, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0x0, 0xfdaa1798b5cd4a42, 0x80, 0x80, 0x0, r9, r10}, 0x6e6bbc}, [@sec_ctx={0x10a, 0x8, {0x106, 0x8, 0x0, 0x7, 0xfe, "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"}}, @policy_type={0xa}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0xff}, @in=@local, {0x0, 0x0, 0x7fffffffffffffff}, {}, {}, 0x0, 0x3502, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x2f00, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x13, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)=@flushpolicy={0x138, 0x1d, 0x8, 0x70bd25, 0x25dfdbfb, "", [@algo_comp={0x120, 0x3, {{'deflate\x00'}, 0x6c0, "51cfc380bee48ce74fb340cbaa83c4e5e1f021a5339248c554ebee4f6a30b39dd279d0b607a7bcfb4aec9cd568505d1f1274ec6057a0a73b04af561ff80c46f8639c10ecfae51da4fd952b403233be3514124a555bc5c62224644e186b44b27c32c904c2e71571cf408933e240ca193656223b6963e7adbd4c46dd1d0a23c59c2eb554429c2b57166cf038b9e4c99655c4f2d343112215baedb2813e66cf82d872da70f11869f0b017420c806083aecdc117a11e2215e18db0f599195a7259e1fc13b8cb9a0d940488dc3469e887e5e8bdb7f3abc3667961"}}, @replay_thresh={0x8, 0xb, 0x800}]}, 0x138}}, 0x4040) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x2, 0x6, @local}, 0x10) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@can_newroute={0x180, 0x18, 0x704, 0x70bd28, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "a01410b15875818f"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x6, 0x4a, 0x63, 0x7, 0x1, "d468a16f20f881e7b56e2831816f38183061fcd17bb3c1252e75a13c1a3d1e51797a0daf218432e26fdd8f4d7471e9c4d8d01f6700b041aedc83fbed65db91155a22626029495b6d2489eb15c4a33ce0e13b62b55ab48a6d75b2cc11d8e412dfcbf0795af5af9fcf9657935711d0b95949e3c1824f5b18f600738c89a8ad3d8622070ed665c4921342afad072257d0ce66f15fb50d78e7a70ed1f9db33396ec9c91ccd178ee0f8070dc392ffa3fb03296103569c42ea6b83f311f71554715298032873825dff866afe262715327fadf6c2b423cd6a709b2b433b157b972e2dd31ffbbb2b6cf25f9d63fb6bfc14a1f26193318ee0cc4f6db8d55d96a38278ba2d", 0x3, "12f65ee007679018013598a0e0d5d6116fbcb29c"}}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_LIM_HOPS={0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x4000094) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @broadcast}, &(0x7f0000000400)=0xc) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440), &(0x7f00000007c0)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) (async)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x21060}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x130, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004055}, 0x8025) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002400020029bd7004eddbdf2620000000060004000000000006000300000000000600030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x20000080) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@dev, @in6=@private0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000000380)=0xe8) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@delpolicy={0x168, 0x14, 0x312, 0x70bd25, 0x25dfdbfb, {{@in6=@private1, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0x0, 0xfdaa1798b5cd4a42, 0x80, 0x80, 0x0, r9, r10}, 0x6e6bbc}, [@sec_ctx={0x10a, 0x8, {0x106, 0x8, 0x0, 0x7, 0xfe, "e62877f5bed8c5d131de4e2cbf3a4919cfb2ff1b9798e9b3b5e7c043d785a9c158d5c48539afbcb516713bf9ebcd296ba72a4f480fc3b482ef1a19af01d3b16a92b2caef2789bedf09962b311351f386edcfab7d1985417e04444712a4a89fcc2edd23132670d046f6ec4ad8dc20ec309174caf802584ac926b686e8c7ace0ff30532bb37b4956d7188ca018829646147407ec2e63723d56a478a84f98935dafe6237f7f4033e273d292e3e7320049956f970c412d3ea0543a755e402ed62014d9896d85eb949709fe9869fe353fc1f189df2d1a62407e2ddd35ca107d452a5a897d9fa5a717ddaf3fda93dd4be48167d93db4294af33b58a4b0ce7095fa"}}, @policy_type={0xa}]}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async)

18:14:28 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1818.546302][T30130] syzkaller0: left allmulticast mode
18:14:28 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r0, 0x8929, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x3a}, @multicast1})

[ 1818.578879][T30135] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1818.628334][T30135] CPU: 1 PID: 30135 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1818.638835][T30135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1818.648929][T30135] Call Trace:
[ 1818.652249][T30135]  <TASK>
[ 1818.655309][T30135]  dump_stack_lvl+0x1e7/0x2e0
[ 1818.660038][T30135]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1818.665282][T30135]  ? __pfx__printk+0x10/0x10
[ 1818.669929][T30135]  ? ___ratelimit+0x4c4/0x670
[ 1818.674654][T30135]  ? __pfx____ratelimit+0x10/0x10
[ 1818.679736][T30135]  dump_header+0xda/0x6a0
[ 1818.684128][T30135]  oom_kill_process+0x3a7/0x930
[ 1818.689039][T30135]  out_of_memory+0xf67/0x1320
[ 1818.693862][T30135]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1818.699544][T30135]  ? __pfx___mutex_lock+0x10/0x10
[ 1818.704607][T30135]  ? __pfx_out_of_memory+0x10/0x10
[ 1818.709773][T30135]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1818.715457][T30135]  ? __pfx_lock_release+0x10/0x10
[ 1818.720532][T30135]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1818.726662][T30135]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1818.731911][T30135]  ? mem_cgroup_iter+0x3e9/0x560
[ 1818.736900][T30135]  try_charge_memcg+0xda2/0x18a0
[ 1818.741937][T30135]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1818.747531][T30135]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1818.753302][T30135]  ? __pfx_lock_release+0x10/0x10
[ 1818.758373][T30135]  ? memcg_account_kmem+0x1e7/0x210
[ 1818.763627][T30135]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1818.769489][T30135]  __memcg_kmem_charge_page+0xe1/0x250
18:14:28 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5000}}}}}}}, 0x3e)

[ 1818.774995][T30135]  memcg_charge_kernel_stack+0x37e/0x550
[ 1818.780686][T30135]  dup_task_struct+0x15d/0x7d0
[ 1818.785504][T30135]  copy_process+0x5d5/0x3fc0
[ 1818.790163][T30135]  ? __might_fault+0xa9/0x120
[ 1818.794885][T30135]  ? __pfx_lock_release+0x10/0x10
[ 1818.799968][T30135]  ? __pfx_copy_process+0x10/0x10
[ 1818.805129][T30135]  ? __might_fault+0xc5/0x120
[ 1818.809870][T30135]  ? __asan_memset+0x23/0x50
[ 1818.814518][T30135]  kernel_clone+0x21d/0x8d0
[ 1818.819083][T30135]  ? __pfx_kernel_clone+0x10/0x10
[ 1818.824189][T30135]  __se_sys_clone3+0x2cb/0x350
[ 1818.829098][T30135]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1818.834447][T30135]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1818.841029][T30135]  ? exc_page_fault+0x587/0x870
[ 1818.845943][T30135]  ? do_syscall_64+0xb4/0x240
[ 1818.850676][T30135]  do_syscall_64+0xf9/0x240
[ 1818.855250][T30135]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1818.861202][T30135] RIP: 0033:0x7f84034a9b99
[ 1818.865758][T30135] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1818.885407][T30135] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1818.893873][T30135] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1818.901889][T30135] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1818.909995][T30135] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1818.918005][T30135] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1818.926100][T30135] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1818.934132][T30135]  </TASK>
[ 1818.976171][T30135] memory: usage 307180kB, limit 307200kB, failcnt 80552
[ 1818.983456][T30135] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0
[ 1819.008604][T30135] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[ 1819.015979][T30135] Memory cgroup stats for /syz2:
[ 1819.016130][T30135] cache 4096
18:14:28 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1819.034338][T30135] rss 12288
[ 1819.042310][T30135] rss_huge 0
[ 1819.050255][T30135] shmem 0
[ 1819.056661][T30135] mapped_file 0
[ 1819.075530][T30153] syzkaller0: entered allmulticast mode
18:14:28 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'\x00', 0x1})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180))

[ 1819.106629][T30135] dirty 4096
[ 1819.110637][T30135] writeback 0
[ 1819.113972][T30135] workingset_refault_anon 32000
[ 1819.136957][T30135] workingset_refault_file 5
[ 1819.145482][T30135] swap 266240
[ 1819.150487][T30135] swapcached 8192
[ 1819.154272][T30135] pgpgin 195977
[ 1819.158634][T30135] pgpgout 195972
[ 1819.162313][T30135] pgfault 394533
[ 1819.165970][T30135] pgmajfault 29557
[ 1819.172485][T30135] inactive_anon 4096
[ 1819.180540][T30135] active_anon 0
[ 1819.186101][T30135] inactive_file 4096
[ 1819.192410][T30135] active_file 0
[ 1819.196057][T30153] syzkaller0: left allmulticast mode
18:14:28 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616553292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket$inet(0x2, 0x3, 0x3)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x0, @initdev}})

[ 1819.209039][T30135] unevictable 0
[ 1819.215047][T30135] hierarchical_memory_limit 314572800
[ 1819.222546][T30135] hierarchical_memsw_limit 9223372036854771712
[ 1819.229839][T30135] total_cache 4096
[ 1819.233683][T30135] total_rss 12288
[ 1819.238927][T30135] total_rss_huge 0
[ 1819.242780][T30135] total_shmem 0
[ 1819.246340][T30135] total_mapped_file 0
[ 1819.251806][T30135] total_dirty 4096
[ 1819.255745][T30135] total_writeback 0
18:14:29 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5001}}}}}}}, 0x3e)

[ 1819.261002][T30135] total_workingset_refault_anon 32000
[ 1819.266537][T30135] total_workingset_refault_file 5
[ 1819.282732][T30135] total_swap 266240
[ 1819.295490][T30135] total_swapcached 8192
[ 1819.307630][T30135] total_pgpgin 195977
[ 1819.313043][T30135] total_pgpgout 195972
[ 1819.318039][T30135] total_pgfault 394533
[ 1819.322338][T30135] total_pgmajfault 29557
[ 1819.326837][T30135] total_inactive_anon 4096
18:14:29 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616553292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
r1 = socket$inet(0x2, 0x3, 0x3)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x0, @initdev}})

[ 1819.352330][T30135] total_active_anon 0
18:14:29 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20})
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)

18:14:29 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1819.378653][T30135] total_inactive_file 4096
[ 1819.383142][T30135] total_active_file 0
[ 1819.400946][T30135] total_unevictable 0
[ 1819.407794][T30135] anon_cost 0
[ 1819.411216][T30135] file_cost 0
[ 1819.414528][T30135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30135,uid=0
18:14:29 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0xfffffff8, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)

[ 1819.484861][T30135] Memory cgroup out of memory: Killed process 30135 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8880kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:29 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616553292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
r1 = socket$inet(0x2, 0x3, 0x3)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x0, @initdev}})

18:14:29 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5200}}}}}}}, 0x3e)

18:14:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x27}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c811}, 0x4000)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000020000000000000000000000000000200000000000000", @ANYRESHEX=r2, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:29 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x27}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c811}, 0x4000)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000020000000000000000000000000000200000000000000", @ANYRESHEX=r2, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:29 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/3936], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_mballoc_alloc\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800})

18:14:29 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5201}}}}}}}, 0x3e)

[ 1819.907957][T30176] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1819.929368][T30176] CPU: 0 PID: 30176 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1819.939870][T30176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1819.949944][T30176] Call Trace:
[ 1819.953236][T30176]  <TASK>
[ 1819.956177][T30176]  dump_stack_lvl+0x1e7/0x2e0
[ 1819.960874][T30176]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1819.966084][T30176]  ? __pfx__printk+0x10/0x10
[ 1819.970689][T30176]  ? ___ratelimit+0x4c4/0x670
[ 1819.975386][T30176]  ? __pfx____ratelimit+0x10/0x10
[ 1819.980435][T30176]  dump_header+0xda/0x6a0
[ 1819.984788][T30176]  oom_kill_process+0x3a7/0x930
[ 1819.989667][T30176]  out_of_memory+0xf67/0x1320
[ 1819.994372][T30176]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1820.000023][T30176]  ? __pfx___mutex_lock+0x10/0x10
[ 1820.005083][T30176]  ? __pfx_out_of_memory+0x10/0x10
[ 1820.010221][T30176]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1820.015785][T30176]  ? __pfx_lock_release+0x10/0x10
[ 1820.020828][T30176]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1820.026915][T30176]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1820.032128][T30176]  ? mem_cgroup_iter+0x3e9/0x560
[ 1820.037086][T30176]  try_charge_memcg+0xda2/0x18a0
[ 1820.042075][T30176]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1820.047551][T30176]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1820.053289][T30176]  ? __pfx_lock_release+0x10/0x10
[ 1820.058332][T30176]  ? memcg_account_kmem+0x1e7/0x210
[ 1820.063558][T30176]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1820.069380][T30176]  __memcg_kmem_charge_page+0xe1/0x250
[ 1820.074855][T30176]  memcg_charge_kernel_stack+0x210/0x550
[ 1820.080595][T30176]  dup_task_struct+0x15d/0x7d0
[ 1820.085372][T30176]  copy_process+0x5d5/0x3fc0
[ 1820.089989][T30176]  ? __might_fault+0xa9/0x120
[ 1820.094684][T30176]  ? __pfx_lock_release+0x10/0x10
[ 1820.099732][T30176]  ? __pfx_copy_process+0x10/0x10
[ 1820.104772][T30176]  ? __might_fault+0xc5/0x120
[ 1820.109554][T30176]  ? __asan_memset+0x23/0x50
[ 1820.114170][T30176]  kernel_clone+0x21d/0x8d0
[ 1820.118694][T30176]  ? __pfx_kernel_clone+0x10/0x10
[ 1820.123752][T30176]  __se_sys_clone3+0x2cb/0x350
[ 1820.128532][T30176]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1820.133843][T30176]  ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 1820.139870][T30176]  ? exc_page_fault+0x587/0x870
[ 1820.144751][T30176]  ? do_syscall_64+0xb4/0x240
[ 1820.149440][T30176]  do_syscall_64+0xf9/0x240
[ 1820.153956][T30176]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1820.159862][T30176] RIP: 0033:0x7f84034a9b99
[ 1820.164288][T30176] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1820.183903][T30176] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1820.192336][T30176] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1820.200325][T30176] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1820.208306][T30176] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1820.216284][T30176] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1820.224262][T30176] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1820.232279][T30176]  </TASK>
[ 1820.251539][T30187] __nla_validate_parse: 18 callbacks suppressed
[ 1820.251558][T30187] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.276350][T30176] memory: usage 307200kB, limit 307200kB, failcnt 80728
[ 1820.290421][T30176] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0
[ 1820.302903][T30176] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
18:14:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x27}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c811}, 0x4000) (async, rerun: 32)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000020000000000000000000000000000200000000000000", @ANYRESHEX=r2, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0) (rerun: 32)

[ 1820.339667][T30176] Memory cgroup stats for /syz2:
[ 1820.339834][T30176] cache 4096
[ 1820.363538][T30176] rss 12288
[ 1820.380420][T30176] rss_huge 0
[ 1820.384061][T30176] shmem 0
18:14:30 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5202}}}}}}}, 0x3e)

[ 1820.388139][T30176] mapped_file 0
[ 1820.395316][T30176] dirty 4096
[ 1820.403277][T30176] writeback 0
[ 1820.411593][T30176] workingset_refault_anon 32067
[ 1820.423180][T30176] workingset_refault_file 5
[ 1820.444348][T30176] swap 311296
[ 1820.452209][T30176] swapcached 12288
[ 1820.456608][T30176] pgpgin 196057
[ 1820.461007][T30176] pgpgout 196053
[ 1820.464878][T30176] pgfault 394662
[ 1820.468889][T30176] pgmajfault 29621
[ 1820.472929][T30176] inactive_anon 0
[ 1820.476870][T30176] active_anon 12288
[ 1820.497608][T30176] inactive_file 0
[ 1820.497758][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.510816][T30176] active_file 4096
[ 1820.510832][T30176] unevictable 0
[ 1820.529348][T30176] hierarchical_memory_limit 314572800
18:14:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:30 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/3936], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_mballoc_alloc\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800})

[ 1820.540207][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.567309][T30176] hierarchical_memsw_limit 9223372036854771712
[ 1820.575318][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.591727][T30176] total_cache 4096
[ 1820.600519][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.607033][T30176] total_rss 12288
[ 1820.622652][T30176] total_rss_huge 0
[ 1820.625953][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.639655][T30176] total_shmem 0
[ 1820.646796][T30176] total_mapped_file 0
[ 1820.658625][T30176] total_dirty 4096
[ 1820.667496][T30176] total_writeback 0
[ 1820.675574][T30176] total_workingset_refault_anon 32067
[ 1820.678081][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.690461][T30176] total_workingset_refault_file 5
[ 1820.690477][T30176] total_swap 311296
[ 1820.690486][T30176] total_swapcached 12288
[ 1820.690497][T30176] total_pgpgin 196057
[ 1820.712352][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.746532][T30176] total_pgpgout 196053
[ 1820.747611][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
18:14:30 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5203}}}}}}}, 0x3e)

18:14:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1820.756865][T30176] total_pgfault 394662
[ 1820.777721][T30197] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1820.781862][T30176] total_pgmajfault 29621
[ 1820.806265][T30176] total_inactive_anon 0
[ 1820.838680][T30176] total_active_anon 12288
[ 1820.851642][T30176] total_inactive_file 0
18:14:30 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000000fe800000004000000000000000000200"/49, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1820.878972][T30176] total_active_file 4096
[ 1820.883501][T30176] total_unevictable 0
[ 1820.897387][T30176] anon_cost 0
[ 1820.900906][T30176] file_cost 0
[ 1820.904398][T30176] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30176,uid=0
18:14:30 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000000fe800000004000000000000000000200"/49, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:30 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/3936], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_mballoc_alloc\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800})

[ 1820.931058][T30176] Memory cgroup out of memory: Killed process 30176 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000500)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x7, {'gcm(aes)\x00', 0x14, "daa6e2e75a5cdb7e545dd572d87914641ab5ade3"}}]}]}, 0x54}}, 0x0)

18:14:30 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000000fe800000004000000000000000000200"/49, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:30 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5a01}}}}}}}, 0x3e)

18:14:30 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:31 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r5, {}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x7}, {0x4788}}}]}]}]}}]}, 0x60}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r0, 0x8001, 0x6, 0xfffffffffffffffb})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r10, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@delpolicy={0x1f8, 0x14, 0x100, 0x70bd2d, 0x25dfdbfc, {{@in=@loopback, @in=@local, 0x4e22, 0x0, 0x4e21, 0x91, 0x2, 0x0, 0x80, 0x6, r5, r6}, 0x6e6bb5}, [@lastused={0xc, 0xf, 0x2}, @tfcpad={0x8, 0x16, 0x81}, @replay_thresh={0x8, 0xb, 0x6}, @offload={0xc, 0x1c, {r10}}, @etimer_thresh={0x8, 0xc, 0x1}, @algo_comp={0xd6, 0x3, {{'deflate\x00'}, 0x470, "05522b2037f708248a987fed91db68437cb2349843dc10d526ad8dd41752e7f838f30d9834a777f022f5d618a394a1948a4dedb89fab1e09e04c7a59d290db4ced1f816490d2bf7828bcef6fe0eafc210c71af7f5b68f32adcf05319c7d3549d32f723a324277f82bbf856a0450c2a584be22df58d03ed7805b1bfee951f31c1f2d0ca146e39a192501af4481aac"}}, @sec_ctx={0x9e, 0x8, {0x9a, 0x8, 0x0, 0x3f, 0x92, "38d23cf7ad18480ffc34338a3249e9b96e80632ddd25093ccf29be848da1be107b9b706b881c6d44a0ce3ada0c90310a6dfe103977b0eca1c8455548a8f9771f5af660fa0bdf9c4eb98c508a45f6b1f333d4f5a291bd17c71bb577794ba6346e2351d40613e538b9cac7a72f0456d6731a25280ea8a548729fc7852dc4dc3bb2fcac919c18fe9f5aaace15f6891c81c95d50"}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000004)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4)

[ 1821.300081][T30215] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1821.316478][T30215] CPU: 0 PID: 30215 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1821.326966][T30215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1821.337061][T30215] Call Trace:
[ 1821.340372][T30215]  <TASK>
[ 1821.343335][T30215]  dump_stack_lvl+0x1e7/0x2e0
18:14:31 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/3936], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_mballoc_alloc\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006, 0x17800})

[ 1821.348065][T30215]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1821.353304][T30215]  ? __pfx__printk+0x10/0x10
[ 1821.357939][T30215]  ? ___ratelimit+0x4c4/0x670
[ 1821.362671][T30215]  ? __pfx____ratelimit+0x10/0x10
[ 1821.367747][T30215]  dump_header+0xda/0x6a0
[ 1821.372133][T30215]  oom_kill_process+0x3a7/0x930
[ 1821.377032][T30215]  out_of_memory+0xf67/0x1320
[ 1821.381763][T30215]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1821.387439][T30215]  ? __pfx___mutex_lock+0x10/0x10
[ 1821.392508][T30215]  ? __pfx_out_of_memory+0x10/0x10
[ 1821.397689][T30215]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1821.403284][T30215]  ? __pfx_lock_release+0x10/0x10
[ 1821.408356][T30215]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1821.414489][T30215]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1821.419736][T30215]  ? mem_cgroup_iter+0x3e9/0x560
[ 1821.424719][T30215]  try_charge_memcg+0xda2/0x18a0
[ 1821.429726][T30215]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1821.435134][T30215]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1821.440927][T30215]  ? __pfx_lock_release+0x10/0x10
[ 1821.445983][T30215]  ? memcg_account_kmem+0x1e7/0x210
[ 1821.451208][T30215]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1821.457028][T30215]  __memcg_kmem_charge_page+0xe1/0x250
[ 1821.462502][T30215]  memcg_charge_kernel_stack+0x210/0x550
[ 1821.468166][T30215]  dup_task_struct+0x15d/0x7d0
[ 1821.472973][T30215]  copy_process+0x5d5/0x3fc0
[ 1821.477619][T30215]  ? __might_fault+0xa9/0x120
[ 1821.482337][T30215]  ? __pfx_lock_release+0x10/0x10
[ 1821.487403][T30215]  ? __pfx_copy_process+0x10/0x10
[ 1821.492449][T30215]  ? __might_fault+0xc5/0x120
[ 1821.497164][T30215]  ? __asan_memset+0x23/0x50
[ 1821.501773][T30215]  kernel_clone+0x21d/0x8d0
[ 1821.506293][T30215]  ? __pfx_kernel_clone+0x10/0x10
[ 1821.511341][T30215]  __se_sys_clone3+0x2cb/0x350
[ 1821.516117][T30215]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1821.521461][T30215]  ? do_syscall_64+0x108/0x240
[ 1821.526274][T30215]  ? do_syscall_64+0xb4/0x240
[ 1821.530992][T30215]  do_syscall_64+0xf9/0x240
[ 1821.535551][T30215]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1821.541487][T30215] RIP: 0033:0x7f84034a9b99
[ 1821.545935][T30215] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1821.565563][T30215] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1821.573995][T30215] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1821.581996][T30215] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1821.590002][T30215] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1821.598013][T30215] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1821.606023][T30215] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1821.614059][T30215]  </TASK>
[ 1821.618740][T30215] memory: usage 307180kB, limit 307200kB, failcnt 80954
[ 1821.625722][T30215] memory+swap: usage 307520kB, limit 9007199254740988kB, failcnt 0
[ 1821.649163][T30215] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[ 1821.657958][T30215] Memory cgroup stats for /syz2:
[ 1821.658119][T30215] cache 4096
[ 1821.680335][T30215] rss 12288
[ 1821.688428][T30215] rss_huge 0
[ 1821.696356][T30215] shmem 0
18:14:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1821.703092][T30215] mapped_file 0
[ 1821.721642][T30215] dirty 4096
[ 1821.729119][T30215] writeback 0
[ 1821.736157][T30215] workingset_refault_anon 32137
[ 1821.750253][T30215] workingset_refault_file 5
[ 1821.760517][T30215] swap 348160
[ 1821.768040][T30215] swapcached 8192
18:14:31 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5a02}}}}}}}, 0x3e)

[ 1821.797577][T30215] pgpgin 196138
[ 1821.801101][T30215] pgpgout 196134
[ 1821.804676][T30215] pgfault 394791
[ 1821.827237][T30215] pgmajfault 29687
[ 1821.831022][T30215] inactive_anon 8192
[ 1821.834947][T30215] active_anon 4096
[ 1821.840759][T30215] inactive_file 4096
18:14:31 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r5, {}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x7}, {0x4788}}}]}]}]}}]}, 0x60}}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r0, 0x8001, 0x6, 0xfffffffffffffffb}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r0, 0x8001, 0x6, 0xfffffffffffffffb})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r10, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@delpolicy={0x1f8, 0x14, 0x100, 0x70bd2d, 0x25dfdbfc, {{@in=@loopback, @in=@local, 0x4e22, 0x0, 0x4e21, 0x91, 0x2, 0x0, 0x80, 0x6, r5, r6}, 0x6e6bb5}, [@lastused={0xc, 0xf, 0x2}, @tfcpad={0x8, 0x16, 0x81}, @replay_thresh={0x8, 0xb, 0x6}, @offload={0xc, 0x1c, {r10}}, @etimer_thresh={0x8, 0xc, 0x1}, @algo_comp={0xd6, 0x3, {{'deflate\x00'}, 0x470, "05522b2037f708248a987fed91db68437cb2349843dc10d526ad8dd41752e7f838f30d9834a777f022f5d618a394a1948a4dedb89fab1e09e04c7a59d290db4ced1f816490d2bf7828bcef6fe0eafc210c71af7f5b68f32adcf05319c7d3549d32f723a324277f82bbf856a0450c2a584be22df58d03ed7805b1bfee951f31c1f2d0ca146e39a192501af4481aac"}}, @sec_ctx={0x9e, 0x8, {0x9a, 0x8, 0x0, 0x3f, 0x92, "38d23cf7ad18480ffc34338a3249e9b96e80632ddd25093ccf29be848da1be107b9b706b881c6d44a0ce3ada0c90310a6dfe103977b0eca1c8455548a8f9771f5af660fa0bdf9c4eb98c508a45f6b1f333d4f5a291bd17c71bb577794ba6346e2351d40613e538b9cac7a72f0456d6731a25280ea8a548729fc7852dc4dc3bb2fcac919c18fe9f5aaace15f6891c81c95d50"}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000004)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4)

18:14:31 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001f000000080001"], 0x24}}, 0x0)

[ 1821.844795][T30215] active_file 0
[ 1821.848683][T30215] unevictable 0
[ 1821.852796][T30215] hierarchical_memory_limit 314572800
[ 1821.895342][T30215] hierarchical_memsw_limit 9223372036854771712
[ 1821.919172][T30215] total_cache 4096
[ 1821.932219][T30215] total_rss 12288
18:14:31 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1821.949747][T30215] total_rss_huge 0
[ 1821.963889][T30215] total_shmem 0
[ 1821.972987][T30215] total_mapped_file 0
[ 1821.984282][T30215] total_dirty 4096
[ 1821.993814][T30215] total_writeback 0
18:14:31 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket(0x10, 0x803, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x1100, r5, {}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x7}, {0x4788}}}]}]}]}}]}, 0x60}}, 0x0) (async, rerun: 32)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000001c0)={r0, 0x8001, 0x6, 0xfffffffffffffffb}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r10, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=@delpolicy={0x1f8, 0x14, 0x100, 0x70bd2d, 0x25dfdbfc, {{@in=@loopback, @in=@local, 0x4e22, 0x0, 0x4e21, 0x91, 0x2, 0x0, 0x80, 0x6, r5, r6}, 0x6e6bb5}, [@lastused={0xc, 0xf, 0x2}, @tfcpad={0x8, 0x16, 0x81}, @replay_thresh={0x8, 0xb, 0x6}, @offload={0xc, 0x1c, {r10}}, @etimer_thresh={0x8, 0xc, 0x1}, @algo_comp={0xd6, 0x3, {{'deflate\x00'}, 0x470, "05522b2037f708248a987fed91db68437cb2349843dc10d526ad8dd41752e7f838f30d9834a777f022f5d618a394a1948a4dedb89fab1e09e04c7a59d290db4ced1f816490d2bf7828bcef6fe0eafc210c71af7f5b68f32adcf05319c7d3549d32f723a324277f82bbf856a0450c2a584be22df58d03ed7805b1bfee951f31c1f2d0ca146e39a192501af4481aac"}}, @sec_ctx={0x9e, 0x8, {0x9a, 0x8, 0x0, 0x3f, 0x92, "38d23cf7ad18480ffc34338a3249e9b96e80632ddd25093ccf29be848da1be107b9b706b881c6d44a0ce3ada0c90310a6dfe103977b0eca1c8455548a8f9771f5af660fa0bdf9c4eb98c508a45f6b1f333d4f5a291bd17c71bb577794ba6346e2351d40613e538b9cac7a72f0456d6731a25280ea8a548729fc7852dc4dc3bb2fcac919c18fe9f5aaace15f6891c81c95d50"}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000004) (async)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4)

[ 1822.014120][T30215] total_workingset_refault_anon 32137
[ 1822.048380][T30215] total_workingset_refault_file 5
18:14:31 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c40)={'wpan1\x00'})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000c80)='ns/user\x00')

[ 1822.065631][T30215] total_swap 348160
[ 1822.079426][T30215] total_swapcached 8192
18:14:31 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x5c03}}}}}}}, 0x3e)

[ 1822.118179][T30215] total_pgpgin 196138
[ 1822.128605][T30215] total_pgpgout 196134
[ 1822.139276][T30215] total_pgfault 394791
[ 1822.150607][T30215] total_pgmajfault 29687
[ 1822.163399][T30215] total_inactive_anon 8192
18:14:32 executing program 4:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000040000e9ffffff00"}}}]}, 0x48}}, 0x0)

[ 1822.182102][T30215] total_active_anon 4096
[ 1822.193367][T30215] total_inactive_file 4096
[ 1822.214937][T30215] total_active_file 0
[ 1822.236290][T30215] total_unevictable 0
[ 1822.241651][T30215] anon_cost 0
[ 1822.244977][T30215] file_cost 0
[ 1822.253895][T30215] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30215,uid=0
18:14:32 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:32 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1822.288237][T30215] Memory cgroup out of memory: Killed process 30215 (syz-executor.2) total-vm:54508kB, anon-rss:384kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:32 executing program 2:
socketpair(0x1d, 0x0, 0x0, &(0x7f0000001000))

18:14:32 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:32 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6003}}}}}}}, 0x3e)

18:14:32 executing program 4:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

18:14:32 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:32 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:32 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@empty, <r1=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:32 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@empty, <r1=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@empty}, &(0x7f00000001c0)=0x14) (async)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)

[ 1822.805369][T30265] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1822.827948][T30265] CPU: 0 PID: 30265 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1822.838423][T30265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1822.848517][T30265] Call Trace:
[ 1822.851822][T30265]  <TASK>
[ 1822.854776][T30265]  dump_stack_lvl+0x1e7/0x2e0
[ 1822.859495][T30265]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1822.864731][T30265]  ? __pfx__printk+0x10/0x10
[ 1822.869360][T30265]  ? ___ratelimit+0x4c4/0x670
[ 1822.874087][T30265]  ? __pfx____ratelimit+0x10/0x10
[ 1822.879160][T30265]  dump_header+0xda/0x6a0
[ 1822.883534][T30265]  oom_kill_process+0x3a7/0x930
[ 1822.888438][T30265]  out_of_memory+0xf67/0x1320
[ 1822.893167][T30265]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1822.898837][T30265]  ? __pfx___mutex_lock+0x10/0x10
[ 1822.903882][T30265]  ? __pfx_out_of_memory+0x10/0x10
[ 1822.909022][T30265]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1822.914580][T30265]  ? __pfx_lock_release+0x10/0x10
[ 1822.919620][T30265]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1822.925706][T30265]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1822.930916][T30265]  ? mem_cgroup_iter+0x3e9/0x560
[ 1822.935876][T30265]  try_charge_memcg+0xda2/0x18a0
[ 1822.940856][T30265]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1822.946266][T30265]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1822.952026][T30265]  ? __pfx_lock_release+0x10/0x10
[ 1822.957084][T30265]  ? memcg_account_kmem+0x1e7/0x210
[ 1822.962322][T30265]  ? get_mem_cgroup_from_objcg+0x13b/0x150
[ 1822.968149][T30265]  __memcg_kmem_charge_page+0xe1/0x250
[ 1822.973621][T30265]  memcg_charge_kernel_stack+0x210/0x550
[ 1822.979274][T30265]  dup_task_struct+0x15d/0x7d0
[ 1822.984053][T30265]  copy_process+0x5d5/0x3fc0
[ 1822.988672][T30265]  ? __might_fault+0xa9/0x120
[ 1822.993366][T30265]  ? __pfx_lock_release+0x10/0x10
[ 1822.998418][T30265]  ? __pfx_copy_process+0x10/0x10
[ 1823.003453][T30265]  ? __might_fault+0xc5/0x120
[ 1823.008333][T30265]  ? __asan_memset+0x23/0x50
[ 1823.012950][T30265]  kernel_clone+0x21d/0x8d0
[ 1823.017479][T30265]  ? __pfx_kernel_clone+0x10/0x10
[ 1823.022540][T30265]  __se_sys_clone3+0x2cb/0x350
[ 1823.027325][T30265]  ? __pfx___se_sys_clone3+0x10/0x10
[ 1823.032648][T30265]  ? do_syscall_64+0x108/0x240
[ 1823.037435][T30265]  ? do_syscall_64+0xb4/0x240
[ 1823.042139][T30265]  do_syscall_64+0xf9/0x240
[ 1823.046744][T30265]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1823.052646][T30265] RIP: 0033:0x7f84034a9b99
[ 1823.057066][T30265] Code: ff ff eb d2 e8 f8 62 fd ff 0f 1f 84 00 00 00 00 00 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7
[ 1823.076687][T30265] RSP: 002b:00007ffc11fb7d88 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3
[ 1823.085113][T30265] RAX: ffffffffffffffda RBX: 00007f8403452270 RCX: 00007f84034a9b99
[ 1823.093095][T30265] RDX: 00007f8403452270 RSI: 0000000000000058 RDI: 00007ffc11fb7dd0
[ 1823.101100][T30265] RBP: 00007f84042c26c0 R08: 00007f84042c26c0 R09: 00007ffc11fb7eb7
[ 1823.109076][T30265] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffb0
[ 1823.117057][T30265] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1823.125056][T30265]  </TASK>
18:14:32 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@empty, <r1=>0x0}, &(0x7f00000001c0)=0x14)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@empty}, &(0x7f00000001c0)=0x14) (async)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)

18:14:33 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:33 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/cgroup\x00')
sendmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0)

[ 1823.190649][T30265] memory: usage 307180kB, limit 307200kB, failcnt 81181
[ 1823.229834][T30265] memory+swap: usage 307524kB, limit 9007199254740988kB, failcnt 0
18:14:33 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@getae={0x2d0, 0x1f, 0x300, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast1, 0x4d6, 0x2, 0x2b}, @in=@local, 0x7fffffff, 0x3500}, [@migrate={0x1cc, 0x11, [{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0xf, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x2b, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in6=@mcast2, @in6=@remote, @in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff, 0x1, 0x0, 0x3507, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@private2, @in=@rand_addr=0x64010100, @in=@broadcast, 0x6c, 0x3, 0x0, 0x3505, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@empty, @in=@multicast2, @in=@empty, 0x2b, 0x0, 0x0, 0x3507, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x3, 0x0, 0x34ff, 0xa, 0x2}]}, @replay_thresh={0x8, 0xb, 0x40}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x101}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @algo_aead={0x84, 0x12, {{'aegis128l-aesni\x00'}, 0x1c0, 0x0, "606be60b810ffb8cc1053e703194631cda18873388e89c73bc779b651a5caa165ae0a338ee496281d15866cd95b94ac498827954089d976a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2c}}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x90}, 0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="e00000faffffff00000000000000f3b83ab1a96d39840000046a14aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000846deb6985cbba1eed7df672abc6066510f54a4d21afcfc6a3ad692df4859b7ce0100abf2a6bd1622f2c2cb971d8691b10a32f9df8f6bf036dbfbc4d7f3c0f206d83dc817cddbb37968dc16b912cdbfe7d54f61663ff6269505591f7587b94fab66ae3e286f7f3e8fa59c4ab58a42c37ef7dd4f43933fd2fb74fa41bcea206c99200905ba9377e2422e39488103f53510b5eba0957e4ca1c1c111ec35d0d76a17b0b3e8744b196e014921261e871cdea481544ce18bf75cd60e82e561e137421857e7c959140e30d00000000006c33cba0fbcf7dc2cec70dd13da69feb2d556728d721d1f64dd9b6f6f6d5329178f120385e9493203f0ccfc708f0182603f491cd33cdf66086f028c0635de371da7cd8d097a7e9f28e929c953c45131ceb725d67cbf354253fccdb7ca3e0154d4a7469eae13a998e1507cdc7c1ca84ca9b32067e2cd9c4f8367e6932876205d7f727761fcda4e1600cd74cd53f1289f699ca684cb3ba68a71c0db4e7e5cd81b55af1e1ce717c051c7f59ffb9735b392d9bb0bcd00daf4a1b4dda7115e78e876d6b7e812e6e6b00f8938136e54715ebd322542c99a381debdbce88e7b4c7313505fe27a414f0259eef9af59bd8534c7274fc198b8d5eb968ac1dd66f52c3cd7f001f0359ee1f01c9ff722c85c4e6926dbcaf22f2574df94bbec02c5e4dd2e2a916dab47ce9820a66518927ffa03aef55911d0a6bd49c6ed56"], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:33 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)

[ 1823.307213][T30265] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0
[ 1823.328707][T30265] Memory cgroup stats for /syz2:
[ 1823.328878][T30265] cache 4096
18:14:33 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6200}}}}}}}, 0x3e)

18:14:33 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1823.361177][T30265] rss 12288
[ 1823.364354][T30265] rss_huge 0
[ 1823.378472][T30265] shmem 0
[ 1823.381464][T30265] mapped_file 0
[ 1823.384949][T30265] dirty 4096
[ 1823.407526][T30265] writeback 0
[ 1823.410969][T30265] workingset_refault_anon 32227
[ 1823.427415][T30265] workingset_refault_file 5
[ 1823.437696][T30265] swap 352256
[ 1823.448366][T30265] swapcached 8192
[ 1823.454677][T30265] pgpgin 196242
18:14:33 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@getae={0x2d0, 0x1f, 0x300, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast1, 0x4d6, 0x2, 0x2b}, @in=@local, 0x7fffffff, 0x3500}, [@migrate={0x1cc, 0x11, [{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0xf, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x2b, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in6=@mcast2, @in6=@remote, @in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff, 0x1, 0x0, 0x3507, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@private2, @in=@rand_addr=0x64010100, @in=@broadcast, 0x6c, 0x3, 0x0, 0x3505, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@empty, @in=@multicast2, @in=@empty, 0x2b, 0x0, 0x0, 0x3507, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x3, 0x0, 0x34ff, 0xa, 0x2}]}, @replay_thresh={0x8, 0xb, 0x40}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x101}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @algo_aead={0x84, 0x12, {{'aegis128l-aesni\x00'}, 0x1c0, 0x0, "606be60b810ffb8cc1053e703194631cda18873388e89c73bc779b651a5caa165ae0a338ee496281d15866cd95b94ac498827954089d976a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2c}}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x90}, 0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@getae={0x2d0, 0x1f, 0x300, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast1, 0x4d6, 0x2, 0x2b}, @in=@local, 0x7fffffff, 0x3500}, [@migrate={0x1cc, 0x11, [{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0xf, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x2b, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in6=@mcast2, @in6=@remote, @in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff, 0x1, 0x0, 0x3507, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@private2, @in=@rand_addr=0x64010100, @in=@broadcast, 0x6c, 0x3, 0x0, 0x3505, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@empty, @in=@multicast2, @in=@empty, 0x2b, 0x0, 0x0, 0x3507, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x3, 0x0, 0x34ff, 0xa, 0x2}]}, @replay_thresh={0x8, 0xb, 0x40}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x101}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @algo_aead={0x84, 0x12, {{'aegis128l-aesni\x00'}, 0x1c0, 0x0, "606be60b810ffb8cc1053e703194631cda18873388e89c73bc779b651a5caa165ae0a338ee496281d15866cd95b94ac498827954089d976a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2c}}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x90}, 0x90) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)

[ 1823.477511][T30265] pgpgout 196238
[ 1823.481222][T30265] pgfault 394945
[ 1823.492783][T30265] pgmajfault 29767
[ 1823.497241][T30265] inactive_anon 0
[ 1823.508865][T30265] active_anon 12288
[ 1823.516329][T30265] inactive_file 0
[ 1823.525097][T30265] active_file 4096
[ 1823.552256][T30265] unevictable 0
[ 1823.568551][T30265] hierarchical_memory_limit 314572800
18:14:33 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@getae={0x2d0, 0x1f, 0x300, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast1, 0x4d6, 0x2, 0x2b}, @in=@local, 0x7fffffff, 0x3500}, [@migrate={0x1cc, 0x11, [{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0xf, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x2b, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in6=@mcast2, @in6=@remote, @in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff, 0x1, 0x0, 0x3507, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@private2, @in=@rand_addr=0x64010100, @in=@broadcast, 0x6c, 0x3, 0x0, 0x3505, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@empty, @in=@multicast2, @in=@empty, 0x2b, 0x0, 0x0, 0x3507, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x3, 0x0, 0x34ff, 0xa, 0x2}]}, @replay_thresh={0x8, 0xb, 0x40}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x101}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @algo_aead={0x84, 0x12, {{'aegis128l-aesni\x00'}, 0x1c0, 0x0, "606be60b810ffb8cc1053e703194631cda18873388e89c73bc779b651a5caa165ae0a338ee496281d15866cd95b94ac498827954089d976a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2c}}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x90}, 0x90) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=@getae={0x2d0, 0x1f, 0x300, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast1, 0x4d6, 0x2, 0x2b}, @in=@local, 0x7fffffff, 0x3500}, [@migrate={0x1cc, 0x11, [{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0xf, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x2b, 0x4, 0x0, 0x3505, 0x2, 0xa}, {@in6=@mcast2, @in6=@remote, @in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff, 0x1, 0x0, 0x3507, 0xa, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@private2, @in=@rand_addr=0x64010100, @in=@broadcast, 0x6c, 0x3, 0x0, 0x3505, 0x2, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x1c}, @in6=@empty, @in=@multicast2, @in=@empty, 0x2b, 0x0, 0x0, 0x3507, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in=@rand_addr=0x64010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x3, 0x0, 0x34ff, 0xa, 0x2}]}, @replay_thresh={0x8, 0xb, 0x40}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x101}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @algo_aead={0x84, 0x12, {{'aegis128l-aesni\x00'}, 0x1c0, 0x0, "606be60b810ffb8cc1053e703194631cda18873388e89c73bc779b651a5caa165ae0a338ee496281d15866cd95b94ac498827954089d976a"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e20, @in=@dev={0xac, 0x14, 0x14, 0x2c}}}, @offload={0xc, 0x1c, {r2, 0x2}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x90}, 0x90)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="e00000faffffff00000000000000f3b83ab1a96d39840000046a14aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000846deb6985cbba1eed7df672abc6066510f54a4d21afcfc6a3ad692df4859b7ce0100abf2a6bd1622f2c2cb971d8691b10a32f9df8f6bf036dbfbc4d7f3c0f206d83dc817cddbb37968dc16b912cdbfe7d54f61663ff6269505591f7587b94fab66ae3e286f7f3e8fa59c4ab58a42c37ef7dd4f43933fd2fb74fa41bcea206c99200905ba9377e2422e39488103f53510b5eba0957e4ca1c1c111ec35d0d76a17b0b3e8744b196e014921261e871cdea481544ce18bf75cd60e82e561e137421857e7c959140e30d00000000006c33cba0fbcf7dc2cec70dd13da69feb2d556728d721d1f64dd9b6f6f6d5329178f120385e9493203f0ccfc708f0182603f491cd33cdf66086f028c0635de371da7cd8d097a7e9f28e929c953c45131ceb725d67cbf354253fccdb7ca3e0154d4a7469eae13a998e1507cdc7c1ca84ca9b32067e2cd9c4f8367e6932876205d7f727761fcda4e1600cd74cd53f1289f699ca684cb3ba68a71c0db4e7e5cd81b55af1e1ce717c051c7f59ffb9735b392d9bb0bcd00daf4a1b4dda7115e78e876d6b7e812e6e6b00f8938136e54715ebd322542c99a381debdbce88e7b4c7313505fe27a414f0259eef9af59bd8534c7274fc198b8d5eb968ac1dd66f52c3cd7f001f0359ee1f01c9ff722c85c4e6926dbcaf22f2574df94bbec02c5e4dd2e2a916dab47ce9820a66518927ffa03aef55911d0a6bd49c6ed56"], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:33 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
write$cgroup_int(r1, &(0x7f0000000000), 0xffe000)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
write$binfmt_aout(r0, &(0x7f0000001a40)=ANY=[], 0x1820)

[ 1823.596736][T30265] hierarchical_memsw_limit 9223372036854771712
[ 1823.615325][T30265] total_cache 4096
[ 1823.623582][T30265] total_rss 12288
18:14:33 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1823.664669][T30265] total_rss_huge 0
[ 1823.677601][T30265] total_shmem 0
[ 1823.681207][T30265] total_mapped_file 0
[ 1823.685211][T30265] total_dirty 4096
[ 1823.712711][T30265] total_writeback 0
[ 1823.732783][T30265] total_workingset_refault_anon 32227
[ 1823.750448][T30265] total_workingset_refault_file 5
18:14:33 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0xe31ea72bbbf4a37c, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xa0}}, 0x94)

[ 1823.762182][T30265] total_swap 352256
[ 1823.772013][T30265] total_swapcached 8192
[ 1823.782197][T30265] total_pgpgin 196242
[ 1823.791027][T30265] total_pgpgout 196238
[ 1823.801088][T30265] total_pgfault 394945
[ 1823.830680][T30265] total_pgmajfault 29767
[ 1823.834995][T30265] total_inactive_anon 0
[ 1823.853358][T30265] total_active_anon 12288
[ 1823.867516][T30265] total_inactive_file 0
18:14:33 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6201}}}}}}}, 0x3e)

[ 1823.878452][T30265] total_active_file 4096
[ 1823.890761][T30265] total_unevictable 0
[ 1823.899751][T30265] anon_cost 0
[ 1823.918578][T30265] file_cost 0
18:14:33 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1823.922005][T30265] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30265,uid=0
18:14:33 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0xe31ea72bbbf4a37c, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xa0}}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0xe31ea72bbbf4a37c, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xa0}}, 0x94) (async)

[ 1823.971856][T30265] Memory cgroup out of memory: Killed process 30265 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}}, 0x0)

18:14:33 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:33 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0xe31ea72bbbf4a37c, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xa0}}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0xe31ea72bbbf4a37c, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xa0}}, 0x94) (async)

18:14:33 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})

18:14:33 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6202}}}}}}}, 0x3e)

18:14:34 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f00000001c0)=@llc, &(0x7f0000000000)=0x80)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r2=>0x0, @empty, @private}, &(0x7f00000002c0)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000013c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @generic="5c8a0c841144f54097520d"]}, 0x24}], 0x1}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@getsa={0x10c, 0x12, 0x200, 0x70bd27, 0x25dfdbff, {@in6=@loopback, 0x4d2, 0x2, 0x2b}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e24, 0x20, 0x4e23, 0xff, 0x2, 0x20, 0x0, 0x3a, r2, r5}, {@in=@multicast1, 0x4d4, 0x3c}, @in6=@empty, {0xffffffff, 0x2, 0x33, 0x100000000000000, 0x1000, 0x740, 0xff, 0x34}, {0x8, 0x7, 0xffffffffffff8000, 0x200}, {0xb174, 0x570f, 0x8}, 0x70bd2a, 0x3502, 0xa, 0x0, 0x7f, 0x8}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:34 executing program 4:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2c, 0x0, 0x0)

18:14:34 executing program 4:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast2, @in6=@local, 0x4e20, 0xfff9, 0x4e23, 0x9358, 0xa, 0x0, 0x80, 0x6, 0x0, 0xffffffffffffffff}, {0x8000000000000001, 0x3, 0x1, 0x2, 0x1, 0x1, 0x7, 0x6}, {0x3, 0x6, 0x8000, 0x7fff}, 0x7f, 0x6e6bb8, 0x1, 0x1, 0x2, 0x2}, {{@in6=@mcast2, 0x4d6, 0x32}, 0x2, @in6=@private1, 0x3503, 0x4, 0x1, 0x5, 0x399, 0x0, 0x6}}, 0xe8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e20, @empty}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0xffff, 0xec6})

18:14:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
accept(r0, &(0x7f00000001c0)=@llc, &(0x7f0000000000)=0x80) (async)
r1 = accept(r0, &(0x7f00000001c0)=@llc, &(0x7f0000000000)=0x80)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r2=>0x0, @empty, @private}, &(0x7f00000002c0)=0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000013c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @generic="5c8a0c841144f54097520d"]}, 0x24}], 0x1}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@getsa={0x10c, 0x12, 0x200, 0x70bd27, 0x25dfdbff, {@in6=@loopback, 0x4d2, 0x2, 0x2b}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e24, 0x20, 0x4e23, 0xff, 0x2, 0x20, 0x0, 0x3a, r2, r5}, {@in=@multicast1, 0x4d4, 0x3c}, @in6=@empty, {0xffffffff, 0x2, 0x33, 0x100000000000000, 0x1000, 0x740, 0xff, 0x34}, {0x8, 0x7, 0xffffffffffff8000, 0x200}, {0xb174, 0x570f, 0x8}, 0x70bd2a, 0x3502, 0xa, 0x0, 0x7f, 0x8}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:34 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000002680)={0x30, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x30}}, 0x0)

18:14:34 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6203}}}}}}}, 0x3e)

18:14:34 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r0, &(0x7f0000000200), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000980)=[{}], 0x8)

18:14:34 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept(r0, &(0x7f00000001c0)=@llc, &(0x7f0000000000)=0x80) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r2=>0x0, @empty, @private}, &(0x7f00000002c0)=0xc) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, <r5=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000013c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @generic="5c8a0c841144f54097520d"]}, 0x24}], 0x1}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@getsa={0x10c, 0x12, 0x200, 0x70bd27, 0x25dfdbff, {@in6=@loopback, 0x4d2, 0x2, 0x2b}, [@sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e24, 0x20, 0x4e23, 0xff, 0x2, 0x20, 0x0, 0x3a, r2, r5}, {@in=@multicast1, 0x4d4, 0x3c}, @in6=@empty, {0xffffffff, 0x2, 0x33, 0x100000000000000, 0x1000, 0x740, 0xff, 0x34}, {0x8, 0x7, 0xffffffffffff8000, 0x200}, {0xb174, 0x570f, 0x8}, 0x70bd2a, 0x3502, 0xa, 0x0, 0x7f, 0x8}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:34 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x0, 0x0, 0x0, 0x2048}, 0x48)

18:14:34 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x3f)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0)

18:14:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f0d00000000000000008000000000000000000000000000020000000000000090a7e99f01b3679b235126b2ccacdfba008baaecb2ee012d038de465af18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060072720000080008"], 0x54}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb6}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4008005)

18:14:34 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6488}}}}}}}, 0x3e)

18:14:34 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000210001"], 0x30}}, 0x0)

18:14:34 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f0d00000000000000008000000000000000000000000000020000000000000090a7e99f01b3679b235126b2ccacdfba008baaecb2ee012d038de465af18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c0012007266034c3130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099ff5ec20fa5b74a6a9143625a2b453f29557ec53dd1feea3f4aee1014fe3a2f51c8722e228e14895e6aa02ad312af4dbe281521a146c1c3e59326dea4448018fa36e2fe2e52102f4a2ffcb8d64cec069b70fc8fb2794222bbbd5de9dd21d87bd320a49e045d24f94c0a82a6e7d8"], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060072720000080008"], 0x54}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb6}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4008005)

18:14:34 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f0d00000000000000008000000000000000000000000000020000000000000090a7e99f01b3679b235126b2ccacdfba008baaecb2ee012d038de465af18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060072720000080008"], 0x54}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb6}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4008005)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f0d00000000000000008000000000000000000000000000020000000000000090a7e99f01b3679b235126b2ccacdfba008baaecb2ee012d038de465af18", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060072720000080008"], 0x54}}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb6}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4008005) (async)

18:14:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000140003"], 0x3c}}, 0x0)

18:14:35 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6a00}}}}}}}, 0x3e)

[ 1825.327257][T30375] __nla_validate_parse: 38 callbacks suppressed
[ 1825.327278][T30375] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1825.351872][T30318] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 1825.366004][T30318] CPU: 0 PID: 30318 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1825.376493][T30318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1825.386584][T30318] Call Trace:
[ 1825.389899][T30318]  <TASK>
[ 1825.392861][T30318]  dump_stack_lvl+0x1e7/0x2e0
[ 1825.397591][T30318]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1825.402834][T30318]  ? __pfx__printk+0x10/0x10
[ 1825.407480][T30318]  ? ___ratelimit+0x4c4/0x670
[ 1825.412215][T30318]  ? __pfx____ratelimit+0x10/0x10
[ 1825.417309][T30318]  dump_header+0xda/0x6a0
[ 1825.421116][T30375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1825.421679][T30318]  oom_kill_process+0x3a7/0x930
[ 1825.436037][T30318]  out_of_memory+0xf67/0x1320
[ 1825.440770][T30318]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1825.446451][T30318]  ? __pfx___mutex_lock+0x10/0x10
[ 1825.451523][T30318]  ? __pfx_out_of_memory+0x10/0x10
[ 1825.456693][T30318]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1825.462297][T30318]  ? __pfx_lock_release+0x10/0x10
[ 1825.467377][T30318]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1825.473499][T30318]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1825.478737][T30318]  ? mem_cgroup_iter+0x3e9/0x560
[ 1825.483725][T30318]  try_charge_memcg+0xda2/0x18a0
[ 1825.488703][T30318]  ? mark_lock+0x9a/0x350
[ 1825.493095][T30318]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1825.498552][T30318]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1825.504751][T30318]  charge_memcg+0xa2/0x160
[ 1825.509216][T30318]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1825.515337][T30318]  __read_swap_cache_async+0x480/0x8b0
[ 1825.520830][T30318]  ? mark_lock+0x9a/0x350
[ 1825.525212][T30318]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1825.531244][T30318]  swap_cluster_readahead+0x67c/0x810
[ 1825.536673][T30318]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1825.542614][T30318]  ? __pfx_lock_release+0x10/0x10
[ 1825.547700][T30318]  ? xas_descend+0x37e/0x470
[ 1825.552350][T30318]  swapin_readahead+0x1ea/0x1070
[ 1825.557332][T30318]  ? filemap_get_entry+0x127/0x4e0
[ 1825.562520][T30318]  ? __pfx_swapin_readahead+0x10/0x10
[ 1825.567952][T30318]  ? __filemap_get_folio+0x935/0xbc0
[ 1825.573386][T30318]  ? swap_cache_get_folio+0x9f/0x570
[ 1825.578717][T30318]  do_swap_page+0x791/0x3f40
[ 1825.583347][T30318]  ? rcu_is_watching+0x15/0xb0
[ 1825.588167][T30318]  ? do_swap_page+0x154/0x3f40
[ 1825.592979][T30318]  ? __pfx_do_swap_page+0x10/0x10
[ 1825.598059][T30318]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1825.603626][T30318]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1825.609499][T30318]  __handle_mm_fault+0x15e8/0x72d0
[ 1825.614709][T30318]  ? reacquire_held_locks+0x3eb/0x690
[ 1825.620170][T30318]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1825.625692][T30318]  ? __pfx_reacquire_held_locks+0x10/0x10
[ 1825.631476][T30318]  ? mtree_range_walk+0x6fd/0x8e0
[ 1825.636560][T30318]  ? lock_vma_under_rcu+0x18a/0x730
[ 1825.641858][T30318]  ? __pfx_lock_release+0x10/0x10
[ 1825.646946][T30318]  ? lock_vma_under_rcu+0x2f9/0x730
[ 1825.652271][T30318]  ? lock_vma_under_rcu+0x18a/0x730
[ 1825.657537][T30318]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 1825.663144][T30318]  handle_mm_fault+0x3c1/0x8a0
[ 1825.667985][T30318]  exc_page_fault+0x456/0x870
[ 1825.672752][T30318]  asm_exc_page_fault+0x26/0x30
[ 1825.677660][T30318] RIP: 0033:0x7f8403437830
[ 1825.682121][T30318] Code: e8 03 00 00 48 8d b4 24 30 01 00 00 49 89 f7 48 8d 1c 07 4c 8d 6c 1d 00 48 89 d8 eb 4f 0f 1f 44 00 00 4c 89 f6 bf 01 00 00 00 <e8> 2b 2b 04 00 85 c0 0f 85 70 07 00 00 48 b8 db 34 b6 d7 82 de 1b
[ 1825.701831][T30318] RSP: 002b:00007ffc11fb7fa0 EFLAGS: 00010246
[ 1825.708044][T30318] RAX: 0000000000000000 RBX: 00000000001bd950 RCX: ffffffffffffffb0
[ 1825.716123][T30318] RDX: 0000000000000000 RSI: 00007ffc11fb80f0 RDI: 0000000000000001
18:14:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1825.724141][T30318] RBP: 0000000000000032 R08: 00007f84035abf8c R09: 00007f84035abf8c
[ 1825.732149][T30318] R10: 00007ffc11fb80d0 R11: 0000000000000246 R12: 00007f84035abf8c
[ 1825.740163][T30318] R13: 00000000001bd982 R14: 00007ffc11fb80f0 R15: 00007ffc11fb80d0
[ 1825.748208][T30318]  </TASK>
18:14:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890d, 0x0)

[ 1825.794822][T30318] memory: usage 307200kB, limit 307200kB, failcnt 82219
[ 1825.812826][T30377] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1825.828242][T30318] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0
[ 1825.836203][T30318] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
18:14:35 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000), 0x4) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)

[ 1825.892136][T30318] Memory cgroup stats for /syz2:
[ 1825.892303][T30318] cache 8192
[ 1825.958905][T30318] rss 8192
18:14:35 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@RTM_NEWNSID={0x14, 0x2a, 0x32ef1b137cf4ddc9}, 0x14}}, 0x0)

18:14:35 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0)

[ 1825.979100][T30318] rss_huge 0
[ 1825.982375][T30318] shmem 0
[ 1825.985384][T30318] mapped_file 0
[ 1826.048701][T30318] dirty 8192
[ 1826.052333][T30318] writeback 0
[ 1826.056966][T30318] workingset_refault_anon 32597
[ 1826.068591][T30318] workingset_refault_file 5
[ 1826.079017][T30318] swap 249856
[ 1826.086404][T30318] swapcached 8192
[ 1826.093304][T30400] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1826.102970][T30318] pgpgin 196626
[ 1826.106636][T30318] pgpgout 196622
[ 1826.120818][T30318] pgfault 395509
[ 1826.138749][T30318] pgmajfault 30125
[ 1826.150838][T30318] inactive_anon 0
[ 1826.160061][T30318] active_anon 8192
[ 1826.163901][T30318] inactive_file 0
[ 1826.167962][T30318] active_file 8192
[ 1826.171742][T30318] unevictable 0
[ 1826.175217][T30318] hierarchical_memory_limit 314572800
[ 1826.181324][T30318] hierarchical_memsw_limit 9223372036854771712
[ 1826.189956][T30318] total_cache 8192
[ 1826.193713][T30318] total_rss 8192
[ 1826.198108][T30318] total_rss_huge 0
[ 1826.201859][T30318] total_shmem 0
[ 1826.205368][T30318] total_mapped_file 0
[ 1826.209569][T30318] total_dirty 8192
[ 1826.213314][T30318] total_writeback 0
[ 1826.218371][T30318] total_workingset_refault_anon 32597
[ 1826.223776][T30318] total_workingset_refault_file 5
[ 1826.228903][T30318] total_swap 249856
[ 1826.232745][T30318] total_swapcached 8192
[ 1826.236916][T30318] total_pgpgin 196626
[ 1826.241403][T30318] total_pgpgout 196622
[ 1826.245496][T30318] total_pgfault 395509
[ 1826.250516][T30318] total_pgmajfault 30125
[ 1826.254789][T30318] total_inactive_anon 0
[ 1826.259251][T30318] total_active_anon 8192
[ 1826.263527][T30318] total_inactive_file 0
[ 1826.267948][T30318] total_active_file 8192
[ 1826.272216][T30318] total_unevictable 0
[ 1826.276303][T30318] anon_cost 0
[ 1826.280746][T30318] file_cost 0
[ 1826.284061][T30318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30318,uid=0
18:14:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, &(0x7f0000000040)={'batadv_slave_1\x00'})

18:14:36 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6a02}}}}}}}, 0x3e)

18:14:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8901, 0x0)

18:14:36 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f38f1cf4f87aa8f416ed819d7410278c281fbc85fd1aeffa05d93e2d447c5b795facf56185be454553a8271278a97107441cbb139ececaa4691c1955a780d9f656ba25d6358af1c0b8db59e5aba2d22924ae0a048b5077187270f6600000000"], 0x13c}, 0x1, 0x100000000000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)

[ 1826.300027][T30318] Memory cgroup out of memory: Killed process 30318 (syz-executor.2) total-vm:54508kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006400010027bd7000ffdbdf2500000000020000000800010001"], 0x28}}, 0x0)

[ 1826.392128][T30407] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1826.432367][T30410] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
18:14:36 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1411, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

[ 1826.548922][T30416] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'.
18:14:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000040)={'batadv_slave_1\x00'})

[ 1826.604398][T30413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:14:36 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1411, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

18:14:36 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x6c03}}}}}}}, 0x3e)

18:14:36 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:36 executing program 4:
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@random="7b7cb438ae06", @random="f658b2f861c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "da9014", 0x4, 0x3a, 0x0, @empty, @mcast2, {[], "6a8a6139"}}}}}, 0x0)

18:14:36 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1411, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1411, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)

18:14:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0)

18:14:36 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:36 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x400000}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="05ea5dc5b87a7a9f85eaf096e0be9f38c88bceaa0e68f400be47266bccfb4bcc7dfb49daf4d7da707a0fda5b4b1a06c532a3e5a23104a7665040c03afa991bab648086a40bf6b7bc5a05cbd8875db23fca3afc0e0733296cbcd0b289e1c0a704f78a7ffa9c16451ef8484f6fed8cee7225b7c95a499d670b0751ba9f03872e3f98c907ecfa1bc649d55610b249298004b6f7a5e18017ec2a2455d195c15acea95c2bbaa2f4241aab240df3dd580c252d80648cc6383e8964b995baac776fd1ac987126a7e5e1e1c419d6a35eef278b118e", &(0x7f0000000000)=""/41}, 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0xae, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:36 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x0)

18:14:36 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x400000}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="05ea5dc5b87a7a9f85eaf096e0be9f38c88bceaa0e68f400be47266bccfb4bcc7dfb49daf4d7da707a0fda5b4b1a06c532a3e5a23104a7665040c03afa991bab648086a40bf6b7bc5a05cbd8875db23fca3afc0e0733296cbcd0b289e1c0a704f78a7ffa9c16451ef8484f6fed8cee7225b7c95a499d670b0751ba9f03872e3f98c907ecfa1bc649d55610b249298004b6f7a5e18017ec2a2455d195c15acea95c2bbaa2f4241aab240df3dd580c252d80648cc6383e8964b995baac776fd1ac987126a7e5e1e1c419d6a35eef278b118e", &(0x7f0000000000)=""/41}, 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0xae, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:37 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x400000}, 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="05ea5dc5b87a7a9f85eaf096e0be9f38c88bceaa0e68f400be47266bccfb4bcc7dfb49daf4d7da707a0fda5b4b1a06c532a3e5a23104a7665040c03afa991bab648086a40bf6b7bc5a05cbd8875db23fca3afc0e0733296cbcd0b289e1c0a704f78a7ffa9c16451ef8484f6fed8cee7225b7c95a499d670b0751ba9f03872e3f98c907ecfa1bc649d55610b249298004b6f7a5e18017ec2a2455d195c15acea95c2bbaa2f4241aab240df3dd580c252d80648cc6383e8964b995baac776fd1ac987126a7e5e1e1c419d6a35eef278b118e", &(0x7f0000000000)=""/41}, 0x20) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0xae, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:37 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x7202}}}}}}}, 0x3e)

18:14:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200010027bd7000ffdbdf250000000008"], 0x28}}, 0x0)

18:14:37 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'vcan0\x00', {0x2, 0x4e21, @private=0xa010102}})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x0)

18:14:37 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1827.399037][T30455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
18:14:37 executing program 4:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @random="80fd00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "da9014", 0x8, 0x0, 0x0, @empty, @local, {[@dstopts={0x32}]}}}}}, 0x0)

18:14:37 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 64)
r1 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'vcan0\x00', {0x2, 0x4e21, @private=0xa010102}})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x0)

18:14:37 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000012000100000000000040080000000100d6"], 0x44}}, 0x0)

18:14:37 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x7203}}}}}}}, 0x3e)

18:14:37 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'vcan0\x00', {0x2, 0x4e21, @private=0xa010102}})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'vcan0\x00', {0x2, 0x4e21, @private=0xa010102}}) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) (async)

18:14:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0)

[ 1827.753851][T30469] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
18:14:37 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1828.110496][ T5113] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1828.122512][ T5113] CPU: 1 PID: 5113 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1828.132898][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1828.142966][ T5113] Call Trace:
[ 1828.146287][ T5113]  <TASK>
[ 1828.149226][ T5113]  dump_stack_lvl+0x1e7/0x2e0
[ 1828.153923][ T5113]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1828.159134][ T5113]  ? __pfx__printk+0x10/0x10
[ 1828.163757][ T5113]  ? ___ratelimit+0x4c4/0x670
[ 1828.168465][ T5113]  ? __pfx____ratelimit+0x10/0x10
[ 1828.173567][ T5113]  dump_header+0xda/0x6a0
[ 1828.177929][ T5113]  oom_kill_process+0x3a7/0x930
[ 1828.182802][ T5113]  out_of_memory+0xf67/0x1320
[ 1828.187502][ T5113]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1828.193159][ T5113]  ? __pfx___mutex_lock+0x10/0x10
[ 1828.198201][ T5113]  ? __pfx_out_of_memory+0x10/0x10
[ 1828.203424][ T5113]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1828.209082][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1828.214129][ T5113]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1828.220226][ T5113]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1828.225437][ T5113]  ? mem_cgroup_iter+0x3e9/0x560
[ 1828.230398][ T5113]  try_charge_memcg+0xda2/0x18a0
[ 1828.235348][ T5113]  ? mark_lock+0x9a/0x350
[ 1828.239710][ T5113]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1828.245123][ T5113]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1828.251292][ T5113]  charge_memcg+0xa2/0x160
[ 1828.255740][ T5113]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1828.261825][ T5113]  __read_swap_cache_async+0x480/0x8b0
[ 1828.267294][ T5113]  ? mark_lock+0x9a/0x350
[ 1828.271644][ T5113]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1828.277645][ T5113]  swap_cluster_readahead+0x67c/0x810
[ 1828.283121][ T5113]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1828.289030][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1828.294073][ T5113]  ? xas_descend+0x37e/0x470
[ 1828.298690][ T5113]  swapin_readahead+0x1ea/0x1070
[ 1828.303640][ T5113]  ? filemap_get_entry+0x127/0x4e0
[ 1828.308786][ T5113]  ? __pfx_swapin_readahead+0x10/0x10
[ 1828.314175][ T5113]  ? __filemap_get_folio+0x935/0xbc0
[ 1828.319489][ T5113]  ? swap_cache_get_folio+0x9f/0x570
[ 1828.324795][ T5113]  do_swap_page+0x791/0x3f40
[ 1828.329403][ T5113]  ? rcu_is_watching+0x15/0xb0
[ 1828.334199][ T5113]  ? do_swap_page+0x154/0x3f40
[ 1828.338979][ T5113]  ? __pfx_do_swap_page+0x10/0x10
[ 1828.344020][ T5113]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1828.349503][ T5113]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1828.355338][ T5113]  __handle_mm_fault+0x15e8/0x72d0
[ 1828.360496][ T5113]  ? reacquire_held_locks+0x3eb/0x690
[ 1828.365885][ T5113]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1828.371374][ T5113]  ? __pfx_reacquire_held_locks+0x10/0x10
[ 1828.377127][ T5113]  ? mtree_range_walk+0x6fd/0x8e0
[ 1828.382171][ T5113]  ? lock_vma_under_rcu+0x18a/0x730
[ 1828.387387][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1828.392428][ T5113]  ? lock_vma_under_rcu+0x2f9/0x730
[ 1828.397662][ T5113]  ? lock_vma_under_rcu+0x18a/0x730
[ 1828.402876][ T5113]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 1828.408445][ T5113]  handle_mm_fault+0x3c1/0x8a0
[ 1828.413239][ T5113]  exc_page_fault+0x456/0x870
[ 1828.417951][ T5113]  asm_exc_page_fault+0x26/0x30
[ 1828.422816][ T5113] RIP: 0033:0x7f840347a780
[ 1828.427241][ T5113] Code: ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 <80> 3d 71 57 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 48 3d 00
[ 1828.446881][ T5113] RSP: 002b:00007ffc11fb81c8 EFLAGS: 00010246
[ 1828.452959][ T5113] RAX: 0000000000000635 RBX: 0000000000003ec9 RCX: 0000000000000000
[ 1828.460938][ T5113] RDX: 0000000040000001 RSI: 00007ffc11fb822c RDI: 00000000ffffffff
[ 1828.468921][ T5113] RBP: 00007ffc11fb822c R08: 0000000000000010 R09: 00007ffc11fc80b0
[ 1828.476905][ T5113] R10: 00007ffc11fc8080 R11: 00000000000567d8 R12: 0000000000000032
[ 1828.484884][ T5113] R13: 00000000001bde48 R14: 00000000001bde48 R15: 0000000000000000
[ 1828.492881][ T5113]  </TASK>
[ 1828.499461][ T5113] memory: usage 307200kB, limit 307200kB, failcnt 83364
[ 1828.506454][ T5113] memory+swap: usage 307452kB, limit 9007199254740988kB, failcnt 0
[ 1828.519879][ T5113] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0
[ 1828.530987][ T5113] Memory cgroup stats for /syz2:
[ 1828.531147][ T5113] cache 8192
[ 1828.540093][ T5113] rss 0
[ 1828.542890][ T5113] rss_huge 0
[ 1828.546103][ T5113] shmem 0
[ 1828.549646][ T5113] mapped_file 0
[ 1828.553132][ T5113] dirty 8192
[ 1828.556347][ T5113] writeback 0
[ 1828.561374][ T5113] workingset_refault_anon 32974
[ 1828.566263][ T5113] workingset_refault_file 5
[ 1828.571350][ T5113] swap 258048
[ 1828.574664][ T5113] swapcached 0
[ 1828.578727][ T5113] pgpgin 197018
[ 1828.582249][ T5113] pgpgout 197016
[ 1828.585803][ T5113] pgfault 396084
[ 1828.590953][ T5113] pgmajfault 30484
[ 1828.594705][ T5113] inactive_anon 0
[ 1828.599206][ T5113] active_anon 0
[ 1828.602698][ T5113] inactive_file 0
[ 1828.606371][ T5113] active_file 8192
[ 1828.610939][ T5113] unevictable 0
[ 1828.614432][ T5113] hierarchical_memory_limit 314572800
[ 1828.621943][ T5113] hierarchical_memsw_limit 9223372036854771712
[ 1828.628494][ T5113] total_cache 8192
[ 1828.632241][ T5113] total_rss 0
[ 1828.635543][ T5113] total_rss_huge 0
[ 1828.639842][ T5113] total_shmem 0
[ 1828.643344][ T5113] total_mapped_file 0
[ 1828.648302][ T5113] total_dirty 8192
[ 1828.652046][ T5113] total_writeback 0
[ 1828.655869][ T5113] total_workingset_refault_anon 32974
[ 1828.661539][ T5113] total_workingset_refault_file 5
[ 1828.666606][ T5113] total_swap 258048
[ 1828.670541][ T5113] total_swapcached 0
[ 1828.674454][ T5113] total_pgpgin 197018
[ 1828.679610][ T5113] total_pgpgout 197016
[ 1828.683693][ T5113] total_pgfault 396084
[ 1828.696408][ T5113] total_pgmajfault 30484
[ 1828.700993][ T5113] total_inactive_anon 0
[ 1828.705228][ T5113] total_active_anon 0
[ 1828.710164][ T5113] total_inactive_file 0
[ 1828.714350][ T5113] total_active_file 8192
[ 1828.718997][ T5113] total_unevictable 0
[ 1828.723012][ T5113] anon_cost 0
[ 1828.726307][ T5113] file_cost 0
[ 1828.730160][ T5113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30409,uid=0
18:14:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x7}}, 0x20}}, 0x0)

18:14:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000300001000800000000000000000000003c0001003800e7797feaeec64fc1b5a16ca301000b0001006374696e666f00000c0002800600038000000000040006000c00070000000000000000000c0008000000000000000000f7f7cf8da1b7155808abb74c8b346ff378e0716310b1d9af14e1d87917266a501448e9adc3eb7b491e1794aa4b570558dcee4b8cea9f64f883d7887451889680"], 0x50}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:38 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x7402}}}}}}}, 0x3e)

18:14:38 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1828.746600][ T5113] Memory cgroup out of memory: Killed process 30409 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
18:14:38 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000002500010027bd7000ffdbdf25000000000200000008"], 0x28}}, 0x0)

18:14:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000300001000800000000000000000000003c0001003800e7797feaeec64fc1b5a16ca301000b0001006374696e666f00000c0002800600038000000000040006000c00070000000000000000000c0008000000000000000000f7f7cf8da1b7155808abb74c8b346ff378e0716310b1d9af14e1d87917266a501448e9adc3eb7b491e1794aa4b570558dcee4b8cea9f64f883d7887451889680"], 0x50}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:38 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0)

18:14:38 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000300001000800000000000000000000003c0001003800e7797feaeec64fc1b5a16ca301000b0001006374696e666f00000c0002800600038000000000040006000c00070000000000000000000c0008000000000000000000f7f7cf8da1b7155808abb74c8b346ff378e0716310b1d9af14e1d87917266a501448e9adc3eb7b491e1794aa4b570558dcee4b8cea9f64f883d7887451889680"], 0x50}}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:38 executing program 4:
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080), 0xfffffffffffffef2)

18:14:38 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x7403}}}}}}}, 0x3e)

18:14:38 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:38 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=0xee00, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64], 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "ab36b1e98546bf7dbe9150a304955160"})

18:14:38 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newnexthop={0x1c, 0x68, 0x638c6c367847a78d, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0)

18:14:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=0xee00, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64], 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "ab36b1e98546bf7dbe9150a304955160"})
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
close(r0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=0xee00, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "ab36b1e98546bf7dbe9150a304955160"}) (async)

[ 1829.345939][T30498] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
18:14:39 executing program 4:
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_pressure(r0, 0x0, 0x0)

18:14:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(r0) (async)
close(r0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES32=0xee00, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244, @ANYRES64=r0, @ANYRES16=r0, @ANYRES64], 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={0x0, "ab36b1e98546bf7dbe9150a304955160"})

[ 1829.432764][T30498] CPU: 0 PID: 30498 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1829.443250][T30498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1829.453352][T30498] Call Trace:
[ 1829.456640][T30498]  <TASK>
[ 1829.459582][T30498]  dump_stack_lvl+0x1e7/0x2e0
[ 1829.464276][T30498]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1829.469482][T30498]  ? __pfx__printk+0x10/0x10
[ 1829.474088][T30498]  ? ___ratelimit+0x4c4/0x670
[ 1829.478795][T30498]  ? __pfx____ratelimit+0x10/0x10
[ 1829.483843][T30498]  dump_header+0xda/0x6a0
[ 1829.488266][T30498]  oom_kill_process+0x3a7/0x930
[ 1829.493135][T30498]  out_of_memory+0xf67/0x1320
[ 1829.497833][T30498]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1829.503478][T30498]  ? __pfx___mutex_lock+0x10/0x10
[ 1829.508520][T30498]  ? __pfx_out_of_memory+0x10/0x10
[ 1829.513656][T30498]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1829.519243][T30498]  ? __pfx_lock_release+0x10/0x10
[ 1829.524285][T30498]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1829.530384][T30498]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1829.535597][T30498]  ? mem_cgroup_iter+0x3e9/0x560
[ 1829.540555][T30498]  try_charge_memcg+0xda2/0x18a0
[ 1829.545504][T30498]  ? mark_lock+0x9a/0x350
[ 1829.549866][T30498]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1829.555285][T30498]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1829.561448][T30498]  charge_memcg+0xa2/0x160
[ 1829.565880][T30498]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1829.571962][T30498]  __read_swap_cache_async+0x480/0x8b0
[ 1829.577441][T30498]  ? mark_lock+0x9a/0x350
[ 1829.581803][T30498]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1829.587807][T30498]  swap_cluster_readahead+0x67c/0x810
[ 1829.593199][T30498]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1829.599108][T30498]  ? __pfx_lock_release+0x10/0x10
[ 1829.604150][T30498]  ? xas_descend+0x37e/0x470
[ 1829.608769][T30498]  swapin_readahead+0x1ea/0x1070
[ 1829.613713][T30498]  ? filemap_get_entry+0x127/0x4e0
[ 1829.618855][T30498]  ? __pfx_swapin_readahead+0x10/0x10
[ 1829.624247][T30498]  ? __filemap_get_folio+0x935/0xbc0
[ 1829.629561][T30498]  ? swap_cache_get_folio+0x9f/0x570
[ 1829.634857][T30498]  do_swap_page+0x791/0x3f40
[ 1829.639465][T30498]  ? rcu_is_watching+0x15/0xb0
[ 1829.644261][T30498]  ? do_swap_page+0x154/0x3f40
[ 1829.649036][T30498]  ? __pfx_do_swap_page+0x10/0x10
[ 1829.654107][T30498]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1829.659593][T30498]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1829.665445][T30498]  __handle_mm_fault+0x15e8/0x72d0
[ 1829.670598][T30498]  ? reacquire_held_locks+0x3eb/0x690
[ 1829.675982][T30498]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1829.681477][T30498]  ? __pfx_reacquire_held_locks+0x10/0x10
[ 1829.687223][T30498]  ? mtree_range_walk+0x6fd/0x8e0
[ 1829.692265][T30498]  ? lock_vma_under_rcu+0x18a/0x730
[ 1829.697480][T30498]  ? __pfx_lock_release+0x10/0x10
[ 1829.702521][T30498]  ? lock_vma_under_rcu+0x2f9/0x730
[ 1829.707755][T30498]  ? lock_vma_under_rcu+0x18a/0x730
[ 1829.712972][T30498]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 1829.718543][T30498]  handle_mm_fault+0x3c1/0x8a0
[ 1829.723330][T30498]  exc_page_fault+0x456/0x870
[ 1829.728048][T30498]  asm_exc_page_fault+0x26/0x30
[ 1829.732944][T30498] RIP: 0033:0x7f8403434b86
[ 1829.737395][T30498] Code: 2f ff ff ff c6 05 5d 0b ca 00 01 e9 23 ff ff ff 0f 1f 40 00 0f b6 05 4e 0b ca 00 84 c0 74 0b 0f b6 05 32 0b ca 00 84 c0 74 0a <c3> 66 0f 1f 84 00 00 00 00 00 0f b6 05 1e 0b ca 00 0f b6 15 12 0b
[ 1829.757035][T30498] RSP: 002b:00007f84042c2178 EFLAGS: 00010202
[ 1829.763141][T30498] RAX: 0000000000000001 RBX: 00007f84042c26c0 RCX: 00007f8403452386
[ 1829.771138][T30498] RDX: 0000000000000000 RSI: 00007f84042c2fb0 RDI: 00007f84035abf80
[ 1829.779133][T30498] RBP: 00007f84035abf80 R08: 0000000000000000 R09: 00007ffc11fb7eb7
[ 1829.787129][T30498] R10: 0000000000000008 R11: 0000000000000246 R12: ffffffffffffffb0
[ 1829.795114][T30498] R13: 000000000000000b R14: 00007ffc11fb7dd0 R15: 00007ffc11fb7eb8
[ 1829.803112][T30498]  </TASK>
18:14:39 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x7a02}}}}}}}, 0x3e)

18:14:39 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89a1, &(0x7f0000000040)={'batadv_slave_1\x00'})

18:14:39 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', <r1=>0x0, 0x8000, 0x7, 0x10000, 0xff000000, {{0x28, 0x4, 0x2, 0x13, 0xa0, 0x64, 0x0, 0xa3, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x8, 0x38, 0x0, 0x5, [0x0]}, @lsrr={0x83, 0x27, 0x45, [@empty, @local, @empty, @rand_addr=0x64010101, @loopback, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x55, 0x0, 0x1, [0x0]}, @noop, @lsrr={0x83, 0xb, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}]}, @generic={0x83, 0x9, "e095f810378602"}, @noop, @rr={0x7, 0x17, 0x2f, [@dev={0xac, 0x14, 0x14, 0x39}, @empty, @broadcast, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0x24, 0x12, 0x0, 0x7, [0x3, 0x6ff3f909, 0x1e66, 0x0, 0x2, 0x0, 0x800, 0x4]}, @end]}}}}})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', <r3=>0x0, 0x27, 0x700, 0x800, 0x400, {{0x16, 0x4, 0x1, 0x12, 0x58, 0x66, 0x0, 0x22, 0x2f, 0x0, @local, @loopback, {[@lsrr={0x83, 0x7, 0x58, [@loopback]}, @timestamp_prespec={0x44, 0x2c, 0x82, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@multicast2, 0x7}, {@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@loopback, 0x9}]}, @lsrr={0x83, 0xf, 0xe7, [@loopback, @private=0xa010102, @empty]}]}}}}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005400)={0x0, <r6=>0x0}, &(0x7f0000005440)=0xc)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r6}}]}, 0x28}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0xfc, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x6da, 0x4e24, 0x2, 0x2, 0x20, 0x80, 0xff, r1, r2}, 0x6e6bc0}, [@policy={0xac, 0x7, {{@in6=@loopback, @in=@private=0xa010101, 0x4e21, 0x7, 0x4e21, 0x32ed, 0x3, 0x80, 0x80, 0x33, r3, r6}, {0x5, 0x400, 0x5, 0x5, 0x8001, 0x2, 0xffffffffffffffe0, 0x4}, {0x1000, 0x0, 0x400, 0x80000000}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x1, 0x3}}]}, 0xfc}, 0x1, 0x100000000000000}, 0x0)

[ 1829.938218][T30498] memory: usage 307200kB, limit 307200kB, failcnt 83872
[ 1829.956942][T30498] memory+swap: usage 307484kB, limit 9007199254740988kB, failcnt 0
18:14:39 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1830.048618][T30498] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1830.081308][T30498] Memory cgroup stats for /syz2:
[ 1830.081474][T30498] cache 12288
18:14:39 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@setlink={0x20, 0x11, 0x1}, 0x20}}, 0x0)

[ 1830.128393][T30498] rss 4096
[ 1830.131495][T30498] rss_huge 0
[ 1830.134729][T30498] shmem 0
[ 1830.174613][T30498] mapped_file 0
[ 1830.186804][T30498] dirty 12288
[ 1830.198425][T30498] writeback 0
[ 1830.202089][T30498] workingset_refault_anon 33123
18:14:40 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8002}}}}}}}, 0x3e)

18:14:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@RTM_NEWNSID={0x10, 0x58, 0x32ef1b137cf4ddc9}, 0x14}}, 0x0)

[ 1830.252076][T30498] workingset_refault_file 5
[ 1830.312881][T30498] swap 290816
18:14:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', <r1=>0x0, 0x8000, 0x7, 0x10000, 0xff000000, {{0x28, 0x4, 0x2, 0x13, 0xa0, 0x64, 0x0, 0xa3, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x8, 0x38, 0x0, 0x5, [0x0]}, @lsrr={0x83, 0x27, 0x45, [@empty, @local, @empty, @rand_addr=0x64010101, @loopback, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x55, 0x0, 0x1, [0x0]}, @noop, @lsrr={0x83, 0xb, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}]}, @generic={0x83, 0x9, "e095f810378602"}, @noop, @rr={0x7, 0x17, 0x2f, [@dev={0xac, 0x14, 0x14, 0x39}, @empty, @broadcast, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0x24, 0x12, 0x0, 0x7, [0x3, 0x6ff3f909, 0x1e66, 0x0, 0x2, 0x0, 0x800, 0x4]}, @end]}}}}})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@empty}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', <r3=>0x0, 0x27, 0x700, 0x800, 0x400, {{0x16, 0x4, 0x1, 0x12, 0x58, 0x66, 0x0, 0x22, 0x2f, 0x0, @local, @loopback, {[@lsrr={0x83, 0x7, 0x58, [@loopback]}, @timestamp_prespec={0x44, 0x2c, 0x82, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@multicast2, 0x7}, {@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@loopback, 0x9}]}, @lsrr={0x83, 0xf, 0xe7, [@loopback, @private=0xa010102, @empty]}]}}}}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005400), &(0x7f0000005440)=0xc) (async)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005400)={0x0, <r6=>0x0}, &(0x7f0000005440)=0xc)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r6}}]}, 0x28}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0xfc, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x6da, 0x4e24, 0x2, 0x2, 0x20, 0x80, 0xff, r1, r2}, 0x6e6bc0}, [@policy={0xac, 0x7, {{@in6=@loopback, @in=@private=0xa010101, 0x4e21, 0x7, 0x4e21, 0x32ed, 0x3, 0x80, 0x80, 0x33, r3, r6}, {0x5, 0x400, 0x5, 0x5, 0x8001, 0x2, 0xffffffffffffffe0, 0x4}, {0x1000, 0x0, 0x400, 0x80000000}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x1, 0x3}}]}, 0xfc}, 0x1, 0x100000000000000}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0xfc, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x6da, 0x4e24, 0x2, 0x2, 0x20, 0x80, 0xff, r1, r2}, 0x6e6bc0}, [@policy={0xac, 0x7, {{@in6=@loopback, @in=@private=0xa010101, 0x4e21, 0x7, 0x4e21, 0x32ed, 0x3, 0x80, 0x80, 0x33, r3, r6}, {0x5, 0x400, 0x5, 0x5, 0x8001, 0x2, 0xffffffffffffffe0, 0x4}, {0x1000, 0x0, 0x400, 0x80000000}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x1, 0x3}}]}, 0xfc}, 0x1, 0x100000000000000}, 0x0)

18:14:40 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1830.336940][T30498] swapcached 4096
18:14:40 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, 0x0)

[ 1830.398030][T30498] pgpgin 197180
[ 1830.401569][T30498] pgpgout 197176
[ 1830.405148][T30498] pgfault 396325
18:14:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@setlink={0x3c, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_virt_wifi\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0)

[ 1830.521596][T30498] pgmajfault 30625
[ 1830.537339][T30498] inactive_anon 0
[ 1830.541038][T30498] active_anon 4096
[ 1830.544788][T30498] inactive_file 0
18:14:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', <r1=>0x0, 0x8000, 0x7, 0x10000, 0xff000000, {{0x28, 0x4, 0x2, 0x13, 0xa0, 0x64, 0x0, 0xa3, 0x29, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0x8, 0x38, 0x0, 0x5, [0x0]}, @lsrr={0x83, 0x27, 0x45, [@empty, @local, @empty, @rand_addr=0x64010101, @loopback, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x55, 0x0, 0x1, [0x0]}, @noop, @lsrr={0x83, 0xb, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}]}, @generic={0x83, 0x9, "e095f810378602"}, @noop, @rr={0x7, 0x17, 0x2f, [@dev={0xac, 0x14, 0x14, 0x39}, @empty, @broadcast, @private=0xa010100, @multicast2]}, @timestamp={0x44, 0x24, 0x12, 0x0, 0x7, [0x3, 0x6ff3f909, 0x1e66, 0x0, 0x2, 0x0, 0x800, 0x4]}, @end]}}}}})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', <r3=>0x0, 0x27, 0x700, 0x800, 0x400, {{0x16, 0x4, 0x1, 0x12, 0x58, 0x66, 0x0, 0x22, 0x2f, 0x0, @local, @loopback, {[@lsrr={0x83, 0x7, 0x58, [@loopback]}, @timestamp_prespec={0x44, 0x2c, 0x82, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@multicast2, 0x7}, {@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@loopback, 0x9}]}, @lsrr={0x83, 0xf, 0xe7, [@loopback, @private=0xa010102, @empty]}]}}}}}) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005400)={0x0, <r6=>0x0}, &(0x7f0000005440)=0xc)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r6}}]}, 0x28}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0xfc, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21, 0x6da, 0x4e24, 0x2, 0x2, 0x20, 0x80, 0xff, r1, r2}, 0x6e6bc0}, [@policy={0xac, 0x7, {{@in6=@loopback, @in=@private=0xa010101, 0x4e21, 0x7, 0x4e21, 0x32ed, 0x3, 0x80, 0x80, 0x33, r3, r6}, {0x5, 0x400, 0x5, 0x5, 0x8001, 0x2, 0xffffffffffffffe0, 0x4}, {0x1000, 0x0, 0x400, 0x80000000}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x1, 0x3}}]}, 0xfc}, 0x1, 0x100000000000000}, 0x0)

18:14:40 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1830.636116][T30498] active_file 12288
[ 1830.646517][T30498] unevictable 0
[ 1830.672342][T30498] hierarchical_memory_limit 314572800
18:14:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@setlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x4c}}, 0x0)

[ 1830.700029][T30498] hierarchical_memsw_limit 9223372036854771712
[ 1830.725888][T30498] total_cache 12288
[ 1830.745934][T30498] total_rss 4096
[ 1830.762757][T30498] total_rss_huge 0
18:14:40 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8003}}}}}}}, 0x3e)

[ 1830.815151][T30498] total_shmem 0
[ 1830.842508][T30498] total_mapped_file 0
[ 1830.885616][T30498] total_dirty 12288
[ 1830.899693][T30498] total_writeback 0
[ 1830.915378][T30498] total_workingset_refault_anon 33123
[ 1830.966756][T30498] total_workingset_refault_file 5
[ 1830.972789][T30498] total_swap 290816
[ 1830.976770][T30498] total_swapcached 4096
[ 1830.982286][T30498] total_pgpgin 197180
[ 1831.008992][T30498] total_pgpgout 197176
[ 1831.020519][T30498] total_pgfault 396325
[ 1831.024762][T30498] total_pgmajfault 30625
[ 1831.030709][T30498] total_inactive_anon 0
[ 1831.035012][T30498] total_active_anon 4096
[ 1831.043583][T30498] total_inactive_file 0
[ 1831.049182][T30498] total_active_file 12288
[ 1831.053736][T30498] total_unevictable 0
[ 1831.058564][T30498] anon_cost 0
[ 1831.062029][T30498] file_cost 0
[ 1831.065467][T30498] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30489,uid=0
18:14:40 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@RTM_NEWNSID={0x14, 0x30, 0x32ef1b137cf4ddc9}, 0x14}}, 0x0)

18:14:40 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:40 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@loopback, {0x0, 0x3, 0x100000001, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}}, 0xf0}, 0x1, 0x100000000000000, 0x0, 0x4000000}, 0x4000)

18:14:40 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x800e}}}}}}}, 0x3e)

18:14:40 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8907, 0x0)

[ 1831.125704][T30498] Memory cgroup out of memory: Killed process 30489 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000
18:14:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @void}}}, 0x1c}}, 0x0)

18:14:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@loopback, {0x0, 0x3, 0x100000001, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}}, 0xf0}, 0x1, 0x100000000000000, 0x0, 0x4000000}, 0x4000)

18:14:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0001ef", @ANYBLOB="85a2da1925c915a4"], 0x1c}, 0x300}, 0x0)

18:14:41 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@loopback, {0x0, 0x3, 0x100000001, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}}, 0xf0}, 0x1, 0x100000000000000, 0x0, 0x4000000}, 0x4000)

18:14:41 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8035}}}}}}}, 0x3e)

18:14:41 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@flushpolicy={0x1288, 0x1d, 0xa00, 0x70bd28, 0x25dfdbfe, "", [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @extra_flags={0x8, 0x18, 0x6}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @policy={0xac, 0x7, {{@in6=@remote, @in=@multicast2, 0x4e24, 0x4, 0x4e20, 0x2, 0xa, 0x20, 0x20, 0x84, r1, r2}, {0x743, 0x6, 0x7, 0x7, 0x7f, 0x9, 0x3, 0x9}, {0x4, 0x0, 0x1f, 0x2}, 0x0, 0x6e6bb3, 0x1, 0x1, 0x4, 0x2}}, @tfcpad={0x8, 0x16, 0x87}, @extra_flags={0x8, 0x18, 0x50000}, @algo_aead={0xfb, 0x12, {{'aegis128l-aesni\x00'}, 0x578, 0xa0, "47c8e4e878a131df2e2c12b5546f3e85d6aed0b6337d6490853ec9ad3997d8ac216043de9dcf40dca6e92143ac06e682f4e3bef04ae8fcf3b0a83d72533cba98e13a424755806f3f67e485773a2ffef73178878e30781cec1cd2d71e8c24cfc5ad4fbca1f460ee3a56f0e2c835918eef0cfd758ee505202874f6f04dcf341f55c8119c99a448b4a25f81eeb9122e4c035118df2295a79e31a554bf60fa68c66cffd63a3adcb8e92b059227ae4db18a"}}, @algo_aead={0x104c, 0x12, {{'seqiv(essiv(aegis128,wp384))\x00'}, 0x8000, 0x200, "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"}}, @algo_auth={0x59, 0x1, {{'nhpoly1305-avx2\x00'}, 0x88, "0d5321559699bab8eb74c995ddd87b009f"}}]}, 0x1288}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x5}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004300000008000300", @ANYRES32=r8, @ANYBLOB='\f\x00X'], 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000001780)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x90)

18:14:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_newaddrlabel={0x1c, 0x48, 0xaa64dab20e3d8c29}, 0x1c}}, 0x0)

[ 1831.492651][ T5113] syz-executor.2 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 1831.564572][ T5113] CPU: 1 PID: 5113 Comm: syz-executor.2 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1831.574983][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1831.585077][ T5113] Call Trace:
[ 1831.588397][ T5113]  <TASK>
[ 1831.591381][ T5113]  dump_stack_lvl+0x1e7/0x2e0
[ 1831.596106][ T5113]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1831.601344][ T5113]  ? __pfx__printk+0x10/0x10
[ 1831.605990][ T5113]  ? ___ratelimit+0x4c4/0x670
[ 1831.610723][ T5113]  ? __pfx____ratelimit+0x10/0x10
[ 1831.615799][ T5113]  dump_header+0xda/0x6a0
[ 1831.620181][ T5113]  oom_kill_process+0x3a7/0x930
[ 1831.625083][ T5113]  out_of_memory+0xf67/0x1320
[ 1831.629811][ T5113]  ? mem_cgroup_out_of_memory+0xf7/0x3b0
[ 1831.635490][ T5113]  ? __pfx___mutex_lock+0x10/0x10
[ 1831.640559][ T5113]  ? __pfx_out_of_memory+0x10/0x10
[ 1831.645725][ T5113]  mem_cgroup_out_of_memory+0x263/0x3b0
[ 1831.651320][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1831.656408][ T5113]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[ 1831.662529][ T5113]  ? do_raw_spin_unlock+0x13b/0x8b0
[ 1831.667765][ T5113]  ? mem_cgroup_iter+0x3e9/0x560
[ 1831.672732][ T5113]  try_charge_memcg+0xda2/0x18a0
[ 1831.677683][ T5113]  ? mark_lock+0x9a/0x350
[ 1831.682062][ T5113]  ? __pfx_try_charge_memcg+0x10/0x10
[ 1831.687478][ T5113]  ? mem_cgroup_swapin_charge_folio+0x35/0x3a0
[ 1831.693646][ T5113]  charge_memcg+0xa2/0x160
[ 1831.698077][ T5113]  mem_cgroup_swapin_charge_folio+0x267/0x3a0
[ 1831.704159][ T5113]  __read_swap_cache_async+0x480/0x8b0
[ 1831.709628][ T5113]  ? mark_lock+0x9a/0x350
[ 1831.714014][ T5113]  ? __pfx___read_swap_cache_async+0x10/0x10
[ 1831.720030][ T5113]  ? blk_start_plug+0x6f/0x1b0
[ 1831.724825][ T5113]  swap_cluster_readahead+0x398/0x810
[ 1831.730228][ T5113]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 1831.736149][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1831.741199][ T5113]  ? xas_descend+0x37e/0x470
[ 1831.745823][ T5113]  swapin_readahead+0x1ea/0x1070
[ 1831.750774][ T5113]  ? filemap_get_entry+0x127/0x4e0
[ 1831.755916][ T5113]  ? __pfx_swapin_readahead+0x10/0x10
[ 1831.761307][ T5113]  ? __filemap_get_folio+0x935/0xbc0
[ 1831.766617][ T5113]  ? swap_cache_get_folio+0x9f/0x570
[ 1831.771912][ T5113]  do_swap_page+0x791/0x3f40
[ 1831.776524][ T5113]  ? rcu_is_watching+0x15/0xb0
[ 1831.781318][ T5113]  ? do_swap_page+0x154/0x3f40
[ 1831.786098][ T5113]  ? __pfx_do_swap_page+0x10/0x10
[ 1831.791134][ T5113]  ? pte_offset_map_nolock+0x137/0x1f0
[ 1831.796612][ T5113]  ? __pfx_pte_offset_map_nolock+0x10/0x10
[ 1831.802445][ T5113]  __handle_mm_fault+0x15e8/0x72d0
[ 1831.807600][ T5113]  ? reacquire_held_locks+0x3eb/0x690
[ 1831.812983][ T5113]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1831.818472][ T5113]  ? __pfx_reacquire_held_locks+0x10/0x10
[ 1831.824398][ T5113]  ? mtree_range_walk+0x6fd/0x8e0
[ 1831.829440][ T5113]  ? lock_vma_under_rcu+0x18a/0x730
[ 1831.834658][ T5113]  ? __pfx_lock_release+0x10/0x10
[ 1831.839699][ T5113]  ? lock_vma_under_rcu+0x2f9/0x730
[ 1831.844931][ T5113]  ? lock_vma_under_rcu+0x18a/0x730
[ 1831.850147][ T5113]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 1831.855709][ T5113]  handle_mm_fault+0x3c1/0x8a0
[ 1831.860499][ T5113]  exc_page_fault+0x456/0x870
[ 1831.865219][ T5113]  asm_exc_page_fault+0x26/0x30
[ 1831.870086][ T5113] RIP: 0033:0x7f84034a4c20
[ 1831.874521][ T5113] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00
[ 1831.894144][ T5113] RSP: 002b:00007ffc11fb8158 EFLAGS: 00010246
[ 1831.900230][ T5113] RAX: 0000000000000000 RBX: 0000000000003ecd RCX: 00007f84034a91b5
[ 1831.908221][ T5113] RDX: 00007ffc11fb81a0 RSI: 0000000000000000 RDI: 0000000000000000
[ 1831.916213][ T5113] RBP: 00007ffc11fb822c R08: 0000000000000000 R09: 00007ffc11fc80b0
[ 1831.924202][ T5113] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[ 1831.932186][ T5113] R13: 00000000001bf170 R14: 00000000001bf170 R15: 0000000000000000
[ 1831.940201][ T5113]  </TASK>
18:14:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@setlink={0x48, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'macvlan1\x00'}]}, 0x48}}, 0x0)

[ 1831.970267][ T5113] memory: usage 307200kB, limit 307200kB, failcnt 84427
[ 1831.985828][ T5113] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0
18:14:41 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@flushpolicy={0x1288, 0x1d, 0xa00, 0x70bd28, 0x25dfdbfe, "", [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @extra_flags={0x8, 0x18, 0x6}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @policy={0xac, 0x7, {{@in6=@remote, @in=@multicast2, 0x4e24, 0x4, 0x4e20, 0x2, 0xa, 0x20, 0x20, 0x84, r1, r2}, {0x743, 0x6, 0x7, 0x7, 0x7f, 0x9, 0x3, 0x9}, {0x4, 0x0, 0x1f, 0x2}, 0x0, 0x6e6bb3, 0x1, 0x1, 0x4, 0x2}}, @tfcpad={0x8, 0x16, 0x87}, @extra_flags={0x8, 0x18, 0x50000}, @algo_aead={0xfb, 0x12, {{'aegis128l-aesni\x00'}, 0x578, 0xa0, "47c8e4e878a131df2e2c12b5546f3e85d6aed0b6337d6490853ec9ad3997d8ac216043de9dcf40dca6e92143ac06e682f4e3bef04ae8fcf3b0a83d72533cba98e13a424755806f3f67e485773a2ffef73178878e30781cec1cd2d71e8c24cfc5ad4fbca1f460ee3a56f0e2c835918eef0cfd758ee505202874f6f04dcf341f55c8119c99a448b4a25f81eeb9122e4c035118df2295a79e31a554bf60fa68c66cffd63a3adcb8e92b059227ae4db18a"}}, @algo_aead={0x104c, 0x12, {{'seqiv(essiv(aegis128,wp384))\x00'}, 0x8000, 0x200, "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"}}, @algo_auth={0x59, 0x1, {{'nhpoly1305-avx2\x00'}, 0x88, "0d5321559699bab8eb74c995ddd87b009f"}}]}, 0x1288}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x5}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x5}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004300000008000300", @ANYRES32=r8, @ANYBLOB='\f\x00X'], 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000001780)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x90) (async)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000001780)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x90)

18:14:41 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000150001ef", @ANYBLOB="85a2da1925c915a402"], 0x1c}}, 0x0)

18:14:41 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8100}}}}}}}, 0x3e)

[ 1832.044994][ T5113] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 1832.069159][ T5113] Memory cgroup stats for /syz2:
[ 1832.069320][ T5113] cache 12288
18:14:41 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1832.121858][ T5113] rss 4096
[ 1832.124961][ T5113] rss_huge 0
[ 1832.138949][ T5113] shmem 0
[ 1832.145357][ T5113] mapped_file 0
[ 1832.158130][ T5113] dirty 12288
[ 1832.169002][ T5113] writeback 0
18:14:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=@flushpolicy={0x1288, 0x1d, 0xa00, 0x70bd28, 0x25dfdbfe, "", [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @extra_flags={0x8, 0x18, 0x6}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}, @policy={0xac, 0x7, {{@in6=@remote, @in=@multicast2, 0x4e24, 0x4, 0x4e20, 0x2, 0xa, 0x20, 0x20, 0x84, r1, r2}, {0x743, 0x6, 0x7, 0x7, 0x7f, 0x9, 0x3, 0x9}, {0x4, 0x0, 0x1f, 0x2}, 0x0, 0x6e6bb3, 0x1, 0x1, 0x4, 0x2}}, @tfcpad={0x8, 0x16, 0x87}, @extra_flags={0x8, 0x18, 0x50000}, @algo_aead={0xfb, 0x12, {{'aegis128l-aesni\x00'}, 0x578, 0xa0, "47c8e4e878a131df2e2c12b5546f3e85d6aed0b6337d6490853ec9ad3997d8ac216043de9dcf40dca6e92143ac06e682f4e3bef04ae8fcf3b0a83d72533cba98e13a424755806f3f67e485773a2ffef73178878e30781cec1cd2d71e8c24cfc5ad4fbca1f460ee3a56f0e2c835918eef0cfd758ee505202874f6f04dcf341f55c8119c99a448b4a25f81eeb9122e4c035118df2295a79e31a554bf60fa68c66cffd63a3adcb8e92b059227ae4db18a"}}, @algo_aead={0x104c, 0x12, {{'seqiv(essiv(aegis128,wp384))\x00'}, 0x8000, 0x200, "e60f22f6573f577d8aff0b158702450312258cc5490bbffa8e974e0300ea1d507f8d1a2855041fc1cf1e5227ff3bb27d06adf9e3a7f7063b10596fd34b93d55c3aceb85cd881326ca7bcb99bf9a262dff628e12fd0209cefadecb7296bfd7173001a66d2d60bf9e27ca9ec64b920e3631897996ebef1cdff147a4b77f574754c8720a876dd855edc5c76e69312f8cb6841ab60c647eb82e8411eb8a615bfa8fb592349880376352d342e8f9b1bcfdcd1a517cc2eac359a0079a06855ae2976b39938deaa83b434fc29aa258ce58ed55417a0a5c301ead69f4a72c09a575cf669bf833c3191f5e077a4a0acc6c941a79e147894ae4829c7ff6f088f7e49e764a14d3430eef86e51358e9a5813a7538c658cb33332e02434c12541f36f968ead8f240da44452ac1ce5c8df352438cccf4ac1d85f9a34e3cdabbfc1805d1b815ea3a80b08aad59133c532307da57193aa4ef979775bd3bcb1d80e286e9d8c986853755b2882542163abd6477934601999197c10587835b5ca6cbf7b3e4480b44ef856daf7c1957bd31341f4ccbebf85bbd1091c3c8c8d8a34f9375840f7587d1900acf0f229ab2f63231a204ce4b9ca13173adffaf859baaab391c4b3ce64c80973aa52392d728bd36a4056465277f2d67d991b2cc16974ff1cf91d5bcec958e2110fb082e0054840570f8ad9a41fce962667b6b4b4b91f26589490bc7e9ee8cecb6eda26e36ae91e27edaa5e7f61111cf6303c402e6487535756b60f4e04f423c185e27c45ce7ac97d76c7a1745d4fa1dcdb275fbc237441c484f9858ae499c737102dd836d56fbf8694eac71285cace102d2ddf3a77cab2c8fd5ef58a8e7be3905d1b70cf9b2a3a3cd81a3ef59fd19c7a790120718e131bf243244a791e7e6a19a69739ad7d54769a8b12a33d7f323155a64fbd9eb89bb6e36cb1c8175195e1f69fc179150dc0f7dcb6f1f43a9aba5d10288d20c349471e1010d14ab8e22a3e1431a1b2d003539c265d7e296dee482c210a43c0f71e408be7e48ccd3bc6ec3f5d9e42910a47c7505b93dfb06dc695c124bc6f76c9cb88318275c731ee64c7caf049b03fb82bef4d5a86232bd74d7aba73e33b08d21905ea98c856000da9d8c5b62e0ee7c3e298837d017b43f5ddd9483a622ba57d30a51913f03661f8d053b8615f1859f0b203ece56430bf4ecb8b37dcafa5db21609c6f2f8e236910f9ea6c1c445e1cd8a9c8ff406355719cdd1ae17044914e50f3cfec5f7ecb89d4844c61c0881e46731daaf9e3d178488346edc82bf206316d904b00365c0b70bfbfded6da60aff99330eb60e913ea5739aafce3da6f161d4cd1bf990604248e80d2030ed36c511074e4acf3f4588906aad17b44ba24891ae885cdbf5ca29bc2a9223c4183fc01045572f253cddcb04a8dc181bd487adbce1f947bc188b4d4d709ebe0956d14af9821f82fac4ba2c2aceab977df05cf43a99873d5a3df1f3af190a056ed64c51c687b5eec6f2bee0fa8770080555fd15bd05038e1b57d9a5d4a0d4dc0eb58eae40babc671fc289ecada81c66779201714cd1310d95b807620ae5e379957a6b6d688460b7ec45cdaeda3ca2216e19c59858c815ffd2056f772a3769100dc6752c1d71dcabc4c62261f40e62325283de8e7db6ae75f6e7ddc56022d1c0d25d858ca3d06dd50d19520231df68a8eee040840ea705de3b45e470974e5b58e8c41f5dfe5b8770bfb7120421a2d526f7d88d58dc29e88009e3618a20225293b95ea515d37973cfc684a6f46d942dc5392e8d2ba9fbdf129d6c07ea4c89c22a2785c0af3f0dcdf8c577779a90e71c348f1befb3572e1691740bc1ded7a8e15f78b10a68213aceb0ffc005d48a7dfd8cd78f8a8861387bbe9d454b7bc4b6e643fdef4a163651718883d485c4bcb10a20ee4a8c760add733f7f372f0cfb83f489157c3d157ccf8025d33e2a4a1f7fcd9f10c3be1bfa9a24bf5178cb2dafa4da3e7cc0faa40496f1ae37a22d13a67804fda3b3e93f83f07c2e3d03c998817113adc86875542d88d6ed345d3ad9ca5ceb854ead57e34eb9da24d8060b98a3417e0f6aa3363241893395d2417b3b9a651ff97fed1d24430d987636a793da9179e79b33006a61b00e04981e470af61254812f16687f183cbc8e33d32c456e0059820b22ef297cc4ed0a85212e9aad5de7398067ce7732740c29b78925c9c0829e174d21b5d0f0ca9578e5c0c994523984b0a59b2b09ac06a997aaa6c9e9c1ff2c91c1a5075faaddb86790eb7b00401490cf0228858cf7082fa92da11f21d3454b6f1377cf8576082a607df4396349cba72b6289627077aef40cea53c531c95319853c756d2574a3a078ebb20069b5b52facdf9479e6b7a918150cf60157f1c47b5403a3225229fa30578bf0c6e07740ade78b4fc9e9b2255e867ca54bbf35cfbdc6710faa0ab067af61c66a95b4e5c55562dc29203b8efa6789159b31b8a562f3752dcff5092a961fa95d4c691997d903bc4a2f018ee8186e740b8fec1c6b28e425638cabf512e89a919b5d253e773d68f270fb73632823dabb35cb05af31eba9301244872c759e0b8cd96eab29fb6357b50f25af1ead2ab31572c93253b4748c1879f44040ed258a795e2f5dbe57561cf1dae02222f996acdb04fcf3555cd9d6cae687e934cbf4c6286ea528b9b2ba618ffe2f6782dca42ebbe489b6083ae2bd06a42383ca91b26da50caa69a9cc4750a65ccbfff586bd1f5f16210d7c2e6c9b639abede801d091aa0a8e18bd604b2ceac424e2fa86d077d7fd6c31fd3ebfb35370cf77cef5681b57469bacf85deb59d4ce744bdb5f54a8c6ec33f35c3548a9f83efad13c44025fc05b0b7c8556f2d67f118d1b9249d1b124de66115f1ab18fca174b29465ac60ff4bb868bab5e6c804796400e48f33dcb2cf699158cdd1c8bb786d1421a5b4b167708d77463139970ba2bfff61bb6f732681c3810275cb654af2f81f9000ceab2f4b33c9d428661905bb3ed263587da9a3be4c8a74bbbeb0e82814ba19aef7d6a131fc239790a334035722a50f2bb8d81e7db1947ee93c40d1beb1b3f0584d722d047cae1e0831bfa36291df2d3fd14b4a085bc6942b98f8e9224b641b9ad34f24b04a81314d90bf2bad8c203bc5884ca24851b8035f1b5011e22401d3a5a08777eb740026699f832697b06f77f48e5a8eafd83eec98e8e84ad9c2546a325995c37820c3a8eb7884277f185993cb7d583b090bc21fba19ea717b944b23e32edd72ae4ead418d32590077e14e9c469afae76be10417e085949e85890e1ba4f6e34e892a0f563e93272b97918d4fb0a01c3a7d0bcf2feb942d1c2962a4f88c418f1c83ce2caa9a5ecf118511f99e78293d2f2acb1fd63f415a3e7947dad78641183b3f0b71b8fbf927b35913981d31d2c291d6fd01c2d98c4c7415aba9d174b9b454f7ec5cce6a4c9405e0d450c2ad82f097afddbef1d28ccdd81d56e2101a555bb4a827b984fb81b5eab4027d971531801a29bd3dd68e27777a1235755507ca4e7510fd7a71b6198cd010018b94b059cf336c753a08615c5c99dacb443a09a6ec0f8b5a31d8b8d0398e9795b259f0ef78f4e9a92e4fc75813e7c22de6e9a0d49808d3ea9798246ce896c3c9c3e390ea9c4d59616e713d8877800d7f6e3df2d8507f5116a089e6a612e175ca36b400ef834201c85fc2aac922bb0b34b5519fd69c21fb34d4149f090c1e34fb1bd985a763ccf2e4e42e55b34b709637a66f4ad91878e79385d5bcf755d3927a2c6a0b5303d7a4d0643f9ab4b490107d353dd1e33a332f4e33330c6097ef24050d5530e7d0361878fed289df9786fdf074619148a24bcb69a1d767eb928906ffca4a9db4090a01229c7543ac69de0f7e1c1c8eebd2b2164d44ce89c22adeacb744910ddfe8cc26b56c53be06eb3b81c401e3d23276d3b00a83424a110fbf2ba9e8840b54f0f46b51fe6d71a1c95bda0bb15d2d3004293f6aea7be07683c173f269bc61fd86d05a9bfdf6b3748ecabad59d7994186287c15997c810c0bf0f307ce752bc5d56f0578ff34962dee0eca3da34691da6b30b72d5614b4b2ef0a1c364c880cef801952dbd448e2e898a87b2702efef8532a020ba0367160aeb3c361e4d3fcfa45c07459ebab665b5195db5c9085c150fea18cf1a426a2d2c1d04c319dbce5ddee2da74eee7e2ed7298cc151c90d99a6c00454044523992158f11ca8f78eec8ace77dd16eb3fe128c22a0bc0d1c7408ba5ef380582eb887e6b5fc2f1979b5def518da9bf18101e5ac636307a5698b95ac234d0b87373d6a0420ccc1fe286af66d2ca16a16f0c65cf17f91d161db9f2d96709992c24d6e9ef278c8d6e4792c69ebd5a3dd66d41689357f09606f9477176b062a7ddd51da41030549edc466a5dc3635bcefcfb61f9247d5a89ca84a6f109a85ce25a9968bc19ac6d888266343558869b9ca4911528a36f16c2cfba4e795556f0e58fc55578fb07104e418663bfe984a073737a216409d82eb142c012d6d54ac5218b0a65921c7e330ba5935496b0e430b3455176d16c057ceb80e6ef4ccc7a0018ec12f30d27e347b1cc7d9283311a9d0748f863794c7cd987544f56d9c593375f609cc0ece88e95bc85ed4bd2a39f7d941879b2864d230b703036c56d412984acf7e25b1c8ee2b55a3587bbd9a12af84d59a755fda637d8fabc845427f8192e9570434664416190f01cd05857b6e2611acbb89a2a8649058bfb8a5421b2616f607b2b3bdb3abe26ad5d4b8a55416f8c995d4a28cbaafb7be662de2a4c804a371bd9803dac1a243c8623b308b245fa9cb84448f6da5de308378433b351656cafcb078f0d05af37209ab52976b076dc375b817dbc18ed89d1cb23ef0007d85c0c61cd1b324224b8e76f2e2a22df243c3b1ca18e43d870fd5ae6e5ea0c623d63efa388a6acc2005ca740505967be44de1f3dd620a12186b27b0a31eb6c8ae66b2ca8b77f69d427f0403b7c384c411f8617913b1c031c4e7e59f25d0bbeacc1451c7f383f1c95581d7f4d0dfd2ca35b6ec0d39b660132461ba4072333116299b58f0c927d307756975471e24b60dee66fe63580b0247f367b6d51d1e410e3fda62a769db7411895e61bf71386d84373401b1e889b49869160fea0f3e5f4d5178630351cc110c91da7c78bc8f98d912f5a50d88ad5e5fcc403414293edb5e2195f83b8dd2b22d601da60667f270a521ebf9a863858f7a05dafcd27840caafd70e9741520af21cc494228ae018e4cc36b241b095d3f1456bf7f32b1e3d52b2c77811e95a60a3a6d74de75ed5d1a1f64e8d8f09444addf4021272f670a9ed2cd0535c3af032ba99c38a700cc90a5ab561f96dea012d8d363ac56b182fb9f1f218bd4a7929ba0be1f9a818a0f95b1a26f81020861d0bf10789ac5090033fd49e92d5b77ace69e7339259ddd6074b5c6527d26bcc7f4f5f68cf4202eb8c1492526722dbf56d241ad0cfddc37e34f1dc6c4737b3a32e0503d8e4ba1564c2de8f4296d07ed1300e3b7c87956cb2438afcfa6001fd389ec62ceb700e6a284101d1175aa4dffd12bc14a376e54f35e22ec356cc48a6a5f717745b92f17665bf0d358bcc37e2015a16424326e844d2a631e61ec5cfd72c15f596adcc7c5288b7c3bcacd0d923ff4998aeb2e7afbf56664ec976117144952deace498408d160a11107b84c198a4082351a37e8741b1d490815f59a94c91551cbf3487260a6224bb90ad83a22c08abbb452b081c83b5efbd2e6e435dc6f15920df792f1cf5686ff9a213dfc"}}, @algo_auth={0x59, 0x1, {{'nhpoly1305-avx2\x00'}, 0x88, "0d5321559699bab8eb74c995ddd87b009f"}}]}, 0x1288}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8000) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x5}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}]}, 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004300000008000300", @ANYRES32=r8, @ANYBLOB='\f\x00X'], 0x28}}, 0x0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000001780)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x50}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x90)

[ 1832.175708][ T5113] workingset_refault_anon 33292
[ 1832.185291][ T5113] workingset_refault_file 5
[ 1832.208677][ T5113] swap 262144
[ 1832.215511][ T5113] swapcached 4096
18:14:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@RTM_NEWNSID={0x1c, 0x58, 0x32ef1b137cf4ddc9, 0x0, 0x0, {}, [@NETNSA_NSID={0x8}]}, 0x1c}}, 0x0)

[ 1832.225202][ T5113] pgpgin 197366
[ 1832.238923][ T5113] pgpgout 197362
[ 1832.248435][ T5113] pgfault 396595
[ 1832.261950][ T5113] pgmajfault 30785
[ 1832.269287][ T5113] inactive_anon 0
[ 1832.278040][ T5113] active_anon 4096
[ 1832.282297][ T5113] inactive_file 0
[ 1832.286088][ T5113] active_file 12288
[ 1832.291159][ T5113] unevictable 0
[ 1832.294823][ T5113] hierarchical_memory_limit 314572800
[ 1832.301209][ T5113] hierarchical_memsw_limit 9223372036854771712
[ 1832.308176][ T5113] total_cache 12288
[ 1832.312171][ T5113] total_rss 4096
[ 1832.315876][ T5113] total_rss_huge 0
[ 1832.322577][ T5113] total_shmem 0
18:14:42 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

[ 1832.330106][ T5113] total_mapped_file 0
[ 1832.340059][ T5113] total_dirty 12288
[ 1832.346048][T30608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1832.357632][ T5113] total_writeback 0
[ 1832.362617][ T5113] total_workingset_refault_anon 33292
[ 1832.370874][ T5113] total_workingset_refault_file 5
18:14:42 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0xf2})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc0600010200000000000000000000c77f00000100000000200000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400}}, 0x1c}}, 0x0)

[ 1832.389780][ T5113] total_swap 262144
[ 1832.400629][ T5113] total_swapcached 4096
[ 1832.428439][ T5113] total_pgpgin 197366
[ 1832.432483][ T5113] total_pgpgout 197362
18:14:42 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8200}}}}}}}, 0x3e)

[ 1832.436583][ T5113] total_pgfault 396595
[ 1832.461252][ T5113] total_pgmajfault 30785
[ 1832.465553][ T5113] total_inactive_anon 0
[ 1832.477591][ T5113] total_active_anon 4096
[ 1832.484210][ T5113] total_inactive_file 0
[ 1832.499984][ T5113] total_active_file 12288
[ 1832.504398][ T5113] total_unevictable 0
18:14:42 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4b47, 0x0)

18:14:42 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0xf2})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc0600010200000000000000000000c77f00000100000000200000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0xf2}) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc0600010200000000000000000000c77f00000100000000200000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)

[ 1832.527499][ T5113] anon_cost 0
[ 1832.530849][ T5113] file_cost 0
[ 1832.534175][ T5113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=30571,uid=0
18:14:42 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:42 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0)

[ 1832.582473][ T5113] Memory cgroup out of memory: Killed process 30571 (syz-executor.2) total-vm:54508kB, anon-rss:388kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000
18:14:42 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=0x0, @ANYBLOB="00010000001000000b0013"], 0x34}}, 0x0)

18:14:42 executing program 0:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0xf2}) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc0600010200000000000000000000c77f00000100000000200000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)

18:14:42 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8201}}}}}}}, 0x3e)

18:14:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x31, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x4, 0x1, ':,{\x00'}]}, 0x1c}}, 0x0)

18:14:42 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e0004"], 0x60}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r8}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@getsadinfo={0x230, 0x23, 0x100, 0x70bd2a, 0x25dfdbfe, 0x0, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x33, 0x0, 0x0, 0x3500, 0xa, 0x2}, {@in=@local, @in=@private=0xa010102, @in=@local, @in=@rand_addr=0x64010101, 0x32, 0x0, 0x0, 0x3500, 0x2, 0xa}, {@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6c, 0x0, 0x0, 0x3501, 0x2, 0xa}]}, @algo_comp={0x131, 0x3, {{'lzjh\x00'}, 0x748, "7069d69796c93325890b2c248f27271774e1bfa359fdecab6daacf9e28389082a9e9adac59a5aa6bb6dfd62914a90839434efdc2fd086e63d91b9fe89b6527380b02173bdd904e42f72e839bebc7b7c849ea83022e4dd5b3ae76b6ab99db1bbddbbb35772e5b4bfc985ab7740b3328c8f3048271837c6c4929e501abde59f3a7ef8af68180899bd456817db254de7510bc64ce081be61a13cdfcbbb35dc1021c624be7c3e117e0961b42850e559cd18cccd8dd1baf23636a25717ff9501759fc3c09523ef24470027e47f5940fdeb194d416c0e81d21627284c3e7425c5cdd7df378d3892b22405328"}}]}, 0x230}, 0x1, 0x0, 0x0, 0x10004010}, 0x40000)
r9 = socket$kcm(0xa, 0x6, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000bc0)={&(0x7f00000007c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x40, 0x0, 0x240, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="9f032eed3e6737a601f5916d37fbc5a838c6b1577a77108879e83e17"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40089)
setsockopt$sock_attach_bpf(r9, 0x10d, 0x2, &(0x7f0000000040)=r10, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private}]}]}, 0x30}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={<r13=>0x0, @loopback, @loopback}, &(0x7f0000000340)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', <r14=>0x0, 0x40, 0x700, 0x3, 0xdf7f, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x9, [{@broadcast}, {@multicast2, 0x5}]}, @generic={0x94, 0x10, "dcc002a91f23d0fd0a869f85e5eb"}, @rr={0x7, 0x13, 0x62, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}, @generic={0x83, 0xd, "ff3686e5011a434bcd6c7b"}, @lsrr={0x83, 0x7, 0x99, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, r12, 0x72c, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10040040}, 0x20000000)
sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r16, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x84)

[ 1832.902745][T30635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:14:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x31, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x4, 0x1, ':,{\x00'}]}, 0x1c}}, 0x0)

18:14:42 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8203}}}}}}}, 0x3e)

[ 1833.085548][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:14:42 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x31, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x4, 0x1, ':,{\x00'}]}, 0x1c}}, 0x0)

18:14:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e0004"], 0x60}}, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r8}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@getsadinfo={0x230, 0x23, 0x100, 0x70bd2a, 0x25dfdbfe, 0x0, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x33, 0x0, 0x0, 0x3500, 0xa, 0x2}, {@in=@local, @in=@private=0xa010102, @in=@local, @in=@rand_addr=0x64010101, 0x32, 0x0, 0x0, 0x3500, 0x2, 0xa}, {@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6c, 0x0, 0x0, 0x3501, 0x2, 0xa}]}, @algo_comp={0x131, 0x3, {{'lzjh\x00'}, 0x748, "7069d69796c93325890b2c248f27271774e1bfa359fdecab6daacf9e28389082a9e9adac59a5aa6bb6dfd62914a90839434efdc2fd086e63d91b9fe89b6527380b02173bdd904e42f72e839bebc7b7c849ea83022e4dd5b3ae76b6ab99db1bbddbbb35772e5b4bfc985ab7740b3328c8f3048271837c6c4929e501abde59f3a7ef8af68180899bd456817db254de7510bc64ce081be61a13cdfcbbb35dc1021c624be7c3e117e0961b42850e559cd18cccd8dd1baf23636a25717ff9501759fc3c09523ef24470027e47f5940fdeb194d416c0e81d21627284c3e7425c5cdd7df378d3892b22405328"}}]}, 0x230}, 0x1, 0x0, 0x0, 0x10004010}, 0x40000)
r9 = socket$kcm(0xa, 0x6, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000bc0)={&(0x7f00000007c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x40, 0x0, 0x240, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="9f032eed3e6737a601f5916d37fbc5a838c6b1577a77108879e83e17"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40089)
setsockopt$sock_attach_bpf(r9, 0x10d, 0x2, &(0x7f0000000040)=r10, 0x4) (async)
setsockopt$sock_attach_bpf(r9, 0x10d, 0x2, &(0x7f0000000040)=r10, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private}]}]}, 0x30}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @loopback, @loopback}, &(0x7f0000000340)=0xc) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={<r13=>0x0, @loopback, @loopback}, &(0x7f0000000340)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', <r14=>0x0, 0x40, 0x700, 0x3, 0xdf7f, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x9, [{@broadcast}, {@multicast2, 0x5}]}, @generic={0x94, 0x10, "dcc002a91f23d0fd0a869f85e5eb"}, @rr={0x7, 0x13, 0x62, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}, @generic={0x83, 0xd, "ff3686e5011a434bcd6c7b"}, @lsrr={0x83, 0x7, 0x99, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, r12, 0x72c, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10040040}, 0x20000000)
sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040) (async)
sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r16 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r16, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x84)

18:14:42 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8800}}}}}}}, 0x3e)

[ 1833.301193][T30647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:14:43 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/244], 0x13c}, 0x1, 0x100000000000000}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket(0x1, 0x803, 0x0) (async)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e0004"], 0x60}}, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r8}]}, 0x1c}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@getsadinfo={0x230, 0x23, 0x100, 0x70bd2a, 0x25dfdbfe, 0x0, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x33, 0x0, 0x0, 0x3500, 0xa, 0x2}, {@in=@local, @in=@private=0xa010102, @in=@local, @in=@rand_addr=0x64010101, 0x32, 0x0, 0x0, 0x3500, 0x2, 0xa}, {@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6c, 0x0, 0x0, 0x3501, 0x2, 0xa}]}, @algo_comp={0x131, 0x3, {{'lzjh\x00'}, 0x748, "7069d69796c93325890b2c248f27271774e1bfa359fdecab6daacf9e28389082a9e9adac59a5aa6bb6dfd62914a90839434efdc2fd086e63d91b9fe89b6527380b02173bdd904e42f72e839bebc7b7c849ea83022e4dd5b3ae76b6ab99db1bbddbbb35772e5b4bfc985ab7740b3328c8f3048271837c6c4929e501abde59f3a7ef8af68180899bd456817db254de7510bc64ce081be61a13cdfcbbb35dc1021c624be7c3e117e0961b42850e559cd18cccd8dd1baf23636a25717ff9501759fc3c09523ef24470027e47f5940fdeb194d416c0e81d21627284c3e7425c5cdd7df378d3892b22405328"}}]}, 0x230}, 0x1, 0x0, 0x0, 0x10004010}, 0x40000) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=@getsadinfo={0x230, 0x23, 0x100, 0x70bd2a, 0x25dfdbfe, 0x0, [@migrate={0xe8, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x33, 0x0, 0x0, 0x3500, 0xa, 0x2}, {@in=@local, @in=@private=0xa010102, @in=@local, @in=@rand_addr=0x64010101, 0x32, 0x0, 0x0, 0x3500, 0x2, 0xa}, {@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6c, 0x0, 0x0, 0x3501, 0x2, 0xa}]}, @algo_comp={0x131, 0x3, {{'lzjh\x00'}, 0x748, "7069d69796c93325890b2c248f27271774e1bfa359fdecab6daacf9e28389082a9e9adac59a5aa6bb6dfd62914a90839434efdc2fd086e63d91b9fe89b6527380b02173bdd904e42f72e839bebc7b7c849ea83022e4dd5b3ae76b6ab99db1bbddbbb35772e5b4bfc985ab7740b3328c8f3048271837c6c4929e501abde59f3a7ef8af68180899bd456817db254de7510bc64ce081be61a13cdfcbbb35dc1021c624be7c3e117e0961b42850e559cd18cccd8dd1baf23636a25717ff9501759fc3c09523ef24470027e47f5940fdeb194d416c0e81d21627284c3e7425c5cdd7df378d3892b22405328"}}]}, 0x230}, 0x1, 0x0, 0x0, 0x10004010}, 0x40000)
r9 = socket$kcm(0xa, 0x6, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000bc0)={&(0x7f00000007c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x40, 0x0, 0x240, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="9f032eed3e6737a601f5916d37fbc5a838c6b1577a77108879e83e17"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40089)
setsockopt$sock_attach_bpf(r9, 0x10d, 0x2, &(0x7f0000000040)=r10, 0x4) (async)
setsockopt$sock_attach_bpf(r9, 0x10d, 0x2, &(0x7f0000000040)=r10, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private}]}]}, 0x30}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={<r13=>0x0, @loopback, @loopback}, &(0x7f0000000340)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x40, 0x700, 0x3, 0xdf7f, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x9, [{@broadcast}, {@multicast2, 0x5}]}, @generic={0x94, 0x10, "dcc002a91f23d0fd0a869f85e5eb"}, @rr={0x7, 0x13, 0x62, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}, @generic={0x83, 0xd, "ff3686e5011a434bcd6c7b"}, @lsrr={0x83, 0x7, 0x99, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', <r14=>0x0, 0x40, 0x700, 0x3, 0xdf7f, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x9, [{@broadcast}, {@multicast2, 0x5}]}, @generic={0x94, 0x10, "dcc002a91f23d0fd0a869f85e5eb"}, @rr={0x7, 0x13, 0x62, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}, @generic={0x83, 0xd, "ff3686e5011a434bcd6c7b"}, @lsrr={0x83, 0x7, 0x99, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, r12, 0x72c, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10040040}, 0x20000000)
sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x1, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000040)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r16, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4880}, 0x84)

18:14:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x31, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x4, 0x1, ':,{\x00'}]}, 0x1c}}, 0x0)

18:14:43 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8802}}}}}}}, 0x3e)

[ 1833.532746][T30658] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
18:14:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)

18:14:43 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000c1)

18:14:43 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:43 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}}, 0x0)

18:14:43 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000c1)

18:14:43 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32)

18:14:43 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x2c00, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x8803}}}}}}}, 0x3e)

18:14:43 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000c1) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000c1)

18:14:43 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6})

18:14:43 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8980, 0x0)

18:14:43 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000002e0000042abd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="02000b0004000f0010000900c9267be978fea479b702000008000b000200000008000b2c3097358952e007a42f26540000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newlink={0x328, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TOS={0x5}]}}}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e0059014fa0fe22b9a5af49321374494"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "810f813930bdcae5415f1d6bb298f1c7"}]}, @IFLA_VFINFO_LIST={0x29c, 0x16, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xfe52, 0x400}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xeb, 0x2}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x80, 0x4f1, 0x4, 0x88a8}}, {0x14, 0x1, {0x20, 0xe3c, 0x8, 0x8100}}, {0x14, 0x1, {0xc97, 0xd87, 0x7, 0x88a8}}, {0x14, 0x1, {0x4, 0x9b8, 0x0, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x59, 0x400}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3f, 0x2bd2bfd}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}}]}, {0xfffffffffffffeda, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @remote}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x35500000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x5e8, 0x8001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xd00000, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x101}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x7b6, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7ff, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x200}}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x8}}, @IFLA_VF_MAC={0x28, 0x1, {0x7fff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4000, 0xdae, 0x1000, 0x88a8}}, {0x14, 0x1, {0xfff, 0xc56, 0x0, 0x8100}}, {0x14, 0x1, {0x56a7fac9, 0x90b, 0x7, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x8}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3f, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8001, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3f, 0x100}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @broadcast}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @remote}}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20}}], 0x1, 0x80)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYRES8=r8, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20040881}, 0x4)
sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4004840)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000580)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}}, 0x4000000)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYRES64=r4, @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf25240000000a0001007717bf82bfedbf70616e3100", @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=r9, @ANYBLOB="0a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="0a0001007770616e3000000008000200", @ANYRES32=0x0, @ANYBLOB="0000000094c76738230d8b1f8d2ee342aaa0fe1fe38913b767c74684baccfe4185ab4f66b1a728214064", @ANYRES32=r9, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x884)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x400}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8}, 0x8)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c030}, 0x88a5)
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r14, 0x0, 0x9}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0)

18:14:43 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), 0x14)

18:14:44 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getnexthop={0x20, 0x69, 0x1, 0x0, 0x0, {}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)

[ 1834.308800][T30694] ==================================================================
[ 1834.316946][T30694] BUG: KASAN: global-out-of-bounds in __nla_validate_parse+0x1f1a/0x2f70
[ 1834.325420][T30694] Read of size 1 at addr ffffffff8caa1200 by task syz-executor.4/30694
[ 1834.333683][T30694] 
[ 1834.336025][T30694] CPU: 1 PID: 30694 Comm: syz-executor.4 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1834.346455][T30694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1834.356514][T30694] Call Trace:
[ 1834.359800][T30694]  <TASK>
[ 1834.362752][T30694]  dump_stack_lvl+0x1e7/0x2e0
[ 1834.367452][T30694]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1834.372657][T30694]  ? __pfx__printk+0x10/0x10
[ 1834.377264][T30694]  ? _printk+0xd5/0x120
[ 1834.381437][T30694]  ? __virt_addr_valid+0x183/0x520
[ 1834.386586][T30694]  ? __virt_addr_valid+0x183/0x520
[ 1834.391715][T30694]  print_report+0x167/0x540
[ 1834.396223][T30694]  ? __virt_addr_valid+0x183/0x520
[ 1834.401365][T30694]  ? __virt_addr_valid+0x183/0x520
[ 1834.406495][T30694]  ? __virt_addr_valid+0x44e/0x520
[ 1834.411618][T30694]  ? __phys_addr+0x113/0x170
[ 1834.416223][T30694]  ? __nla_validate_parse+0x1f1a/0x2f70
[ 1834.421779][T30694]  kasan_report+0x142/0x180
[ 1834.426294][T30694]  ? __nla_validate_parse+0x1f1a/0x2f70
[ 1834.431850][T30694]  __nla_validate_parse+0x1f1a/0x2f70
[ 1834.437242][T30694]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1834.443009][T30694]  ? __pfx_lock_acquire+0x10/0x10
[ 1834.448045][T30694]  ? __mutex_lock+0x99a/0xd70
[ 1834.452731][T30694]  ? __pfx_lock_release+0x10/0x10
[ 1834.457770][T30694]  __nla_parse+0x40/0x60
[ 1834.462017][T30694]  rtm_del_nexthop+0x257/0x6d0
[ 1834.466865][T30694]  ? __pfx_rtm_del_nexthop+0x10/0x10
[ 1834.472172][T30694]  ? __pfx___mutex_lock+0x10/0x10
[ 1834.477215][T30694]  ? __pfx_rtm_del_nexthop+0x10/0x10
[ 1834.482515][T30694]  rtnetlink_rcv_msg+0x89b/0x10d0
[ 1834.487553][T30694]  ? rtnetlink_rcv_msg+0x208/0x10d0
[ 1834.492759][T30694]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1834.498226][T30694]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1834.504389][T30694]  ? __pfx_validate_chain+0x10/0x10
[ 1834.509593][T30694]  ? __pfx_validate_chain+0x10/0x10
[ 1834.514806][T30694]  ? mark_lock+0x9a/0x350
[ 1834.519145][T30694]  ? __pfx_validate_chain+0x10/0x10
[ 1834.524352][T30694]  ? __lock_acquire+0x1345/0x1fd0
[ 1834.529441][T30694]  ? mark_lock+0x9a/0x350
[ 1834.533775][T30694]  ? __lock_acquire+0x1345/0x1fd0
[ 1834.538828][T30694]  netlink_rcv_skb+0x1e3/0x430
[ 1834.543602][T30694]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1834.549079][T30694]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1834.554377][T30694]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1834.559589][T30694]  netlink_unicast+0x7ea/0x980
[ 1834.564375][T30694]  ? __pfx_netlink_unicast+0x10/0x10
[ 1834.569673][T30694]  ? __virt_addr_valid+0x44e/0x520
[ 1834.574798][T30694]  ? __phys_addr_symbol+0x2f/0x70
[ 1834.579835][T30694]  ? __check_object_size+0x4bb/0xa00
[ 1834.585129][T30694]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1834.590254][T30694]  netlink_sendmsg+0x8e0/0xcb0
[ 1834.595032][T30694]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1834.600324][T30694]  ? __import_iovec+0x536/0x820
[ 1834.605176][T30694]  ? aa_sock_msg_perm+0x91/0x160
[ 1834.610120][T30694]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1834.615420][T30694]  ? security_socket_sendmsg+0x87/0xb0
[ 1834.620910][T30694]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1834.626202][T30694]  __sock_sendmsg+0x221/0x270
[ 1834.630895][T30694]  ____sys_sendmsg+0x525/0x7d0
[ 1834.635671][T30694]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1834.640969][T30694]  __sys_sendmsg+0x2b0/0x3a0
[ 1834.645568][T30694]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1834.650700][T30694]  ? restore_fpregs_from_fpstate+0x100/0x250
[ 1834.656695][T30694]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1834.663041][T30694]  ? do_syscall_64+0x108/0x240
[ 1834.667814][T30694]  ? do_syscall_64+0xb4/0x240
[ 1834.672502][T30694]  do_syscall_64+0xf9/0x240
[ 1834.677014][T30694]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1834.682916][T30694] RIP: 0033:0x7f80efc7dda9
[ 1834.687343][T30694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 1834.706971][T30694] RSP: 002b:00007f80f0a820c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1834.715395][T30694] RAX: ffffffffffffffda RBX: 00007f80efdabf80 RCX: 00007f80efc7dda9
[ 1834.723391][T30694] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[ 1834.731406][T30694] RBP: 00007f80efcca47a R08: 0000000000000000 R09: 0000000000000000
[ 1834.739391][T30694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1834.747371][T30694] R13: 000000000000000b R14: 00007f80efdabf80 R15: 00007fff4a2c9a28
[ 1834.755377][T30694]  </TASK>
[ 1834.758415][T30694] 
[ 1834.760744][T30694] The buggy address belongs to the variable:
[ 1834.766729][T30694]  nh_valid_get_del_req.__msg.88+0x20/0x40
[ 1834.772675][T30694] 
[ 1834.775003][T30694] The buggy address belongs to the physical page:
[ 1834.781417][T30694] page:ffffea000032a840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xcaa1
[ 1834.791489][T30694] flags: 0xfff00000004000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[ 1834.799385][T30694] page_type: 0xffffffff()
[ 1834.803739][T30694] raw: 00fff00000004000 ffffea000032a848 ffffea000032a848 0000000000000000
[ 1834.812327][T30694] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1834.820927][T30694] page dumped because: kasan: bad access detected
[ 1834.827337][T30694] page_owner info is not present (never set?)
[ 1834.833396][T30694] 
[ 1834.835717][T30694] Memory state around the buggy address:
[ 1834.841349][T30694]  ffffffff8caa1100: 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 00 00 00 00
[ 1834.849412][T30694]  ffffffff8caa1180: f9 f9 f9 f9 00 00 00 01 f9 f9 f9 f9 00 00 06 f9
[ 1834.857473][T30694] >ffffffff8caa1200: f9 f9 f9 f9 00 00 03 f9 f9 f9 f9 f9 00 00 00 00
[ 1834.865526][T30694]                    ^
[ 1834.869590][T30694]  ffffffff8caa1280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1834.877652][T30694]  ffffffff8caa1300: 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9
[ 1834.885710][T30694] ==================================================================
[ 1834.900754][T30694] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1834.908014][T30694] CPU: 0 PID: 30694 Comm: syz-executor.4 Not tainted 6.8.0-rc7-syzkaller-02440-gc2b25092864a #0
[ 1834.918466][T30694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[ 1834.928571][T30694] Call Trace:
[ 1834.931884][T30694]  <TASK>
[ 1834.934843][T30694]  dump_stack_lvl+0x1e7/0x2e0
[ 1834.939571][T30694]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1834.944807][T30694]  ? __pfx__printk+0x10/0x10
[ 1834.949427][T30694]  ? vscnprintf+0x5d/0x90
[ 1834.953882][T30694]  panic+0x349/0x860
[ 1834.957808][T30694]  ? check_panic_on_warn+0x21/0xb0
[ 1834.962946][T30694]  ? __pfx_panic+0x10/0x10
[ 1834.967394][T30694]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 1834.973388][T30694]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1834.979728][T30694]  ? print_report+0x4ff/0x540
[ 1834.984412][T30694]  check_panic_on_warn+0x86/0xb0
[ 1834.989376][T30694]  ? __nla_validate_parse+0x1f1a/0x2f70
[ 1834.994934][T30694]  end_report+0x6e/0x140
[ 1834.999184][T30694]  kasan_report+0x153/0x180
[ 1835.003692][T30694]  ? __nla_validate_parse+0x1f1a/0x2f70
[ 1835.009249][T30694]  __nla_validate_parse+0x1f1a/0x2f70
[ 1835.014639][T30694]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1835.020393][T30694]  ? __pfx_lock_acquire+0x10/0x10
[ 1835.025430][T30694]  ? __mutex_lock+0x99a/0xd70
[ 1835.030118][T30694]  ? __pfx_lock_release+0x10/0x10
[ 1835.035156][T30694]  __nla_parse+0x40/0x60
[ 1835.039423][T30694]  rtm_del_nexthop+0x257/0x6d0
[ 1835.044408][T30694]  ? __pfx_rtm_del_nexthop+0x10/0x10
[ 1835.049731][T30694]  ? __pfx___mutex_lock+0x10/0x10
[ 1835.054775][T30694]  ? __pfx_rtm_del_nexthop+0x10/0x10
[ 1835.060078][T30694]  rtnetlink_rcv_msg+0x89b/0x10d0
[ 1835.065127][T30694]  ? rtnetlink_rcv_msg+0x208/0x10d0
[ 1835.070336][T30694]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1835.075807][T30694]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1835.081994][T30694]  ? __pfx_validate_chain+0x10/0x10
[ 1835.087198][T30694]  ? __pfx_validate_chain+0x10/0x10
[ 1835.092409][T30694]  ? mark_lock+0x9a/0x350
[ 1835.096741][T30694]  ? __pfx_validate_chain+0x10/0x10
[ 1835.101950][T30694]  ? __lock_acquire+0x1345/0x1fd0
[ 1835.106998][T30694]  ? mark_lock+0x9a/0x350
[ 1835.111424][T30694]  ? __lock_acquire+0x1345/0x1fd0
[ 1835.116476][T30694]  netlink_rcv_skb+0x1e3/0x430
[ 1835.121258][T30694]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1835.126732][T30694]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1835.132044][T30694]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1835.137250][T30694]  netlink_unicast+0x7ea/0x980
[ 1835.142036][T30694]  ? __pfx_netlink_unicast+0x10/0x10
[ 1835.147333][T30694]  ? __virt_addr_valid+0x44e/0x520
[ 1835.152455][T30694]  ? __phys_addr_symbol+0x2f/0x70
[ 1835.157497][T30694]  ? __check_object_size+0x4bb/0xa00
[ 1835.162805][T30694]  ? bpf_lsm_netlink_send+0x9/0x10
[ 1835.167953][T30694]  netlink_sendmsg+0x8e0/0xcb0
[ 1835.172728][T30694]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1835.178017][T30694]  ? __import_iovec+0x536/0x820
[ 1835.182870][T30694]  ? aa_sock_msg_perm+0x91/0x160
[ 1835.187830][T30694]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1835.193125][T30694]  ? security_socket_sendmsg+0x87/0xb0
[ 1835.198597][T30694]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1835.203891][T30694]  __sock_sendmsg+0x221/0x270
[ 1835.208586][T30694]  ____sys_sendmsg+0x525/0x7d0
[ 1835.213371][T30694]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1835.218671][T30694]  __sys_sendmsg+0x2b0/0x3a0
[ 1835.223270][T30694]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1835.228587][T30694]  ? restore_fpregs_from_fpstate+0x100/0x250
[ 1835.234585][T30694]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1835.240935][T30694]  ? do_syscall_64+0x108/0x240
[ 1835.245706][T30694]  ? do_syscall_64+0xb4/0x240
[ 1835.250389][T30694]  do_syscall_64+0xf9/0x240
[ 1835.254905][T30694]  entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 1835.260811][T30694] RIP: 0033:0x7f80efc7dda9
[ 1835.265235][T30694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 1835.284847][T30694] RSP: 002b:00007f80f0a820c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1835.293283][T30694] RAX: ffffffffffffffda RBX: 00007f80efdabf80 RCX: 00007f80efc7dda9
[ 1835.301349][T30694] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003
[ 1835.309326][T30694] RBP: 00007f80efcca47a R08: 0000000000000000 R09: 0000000000000000
[ 1835.317299][T30694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1835.325275][T30694] R13: 000000000000000b R14: 00007f80efdabf80 R15: 00007fff4a2c9a28
[ 1835.333260][T30694]  </TASK>
[ 1835.336555][T30694] Kernel Offset: disabled
[ 1835.340876][T30694] Rebooting in 86400 seconds..