\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:19 executing program 0: socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000400)=""/201, 0xc9, 0x40014061, &(0x7f0000000500), 0x12) [ 2664.455613][T16555] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2664.469152][T16555] CPU: 0 PID: 16555 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2664.479839][T16555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2664.489951][T16555] Call Trace: [ 2664.493240][T16555] [ 2664.496211][T16555] dump_stack_lvl+0xd6/0x122 [ 2664.500812][T16555] dump_stack+0x11/0x12 [ 2664.504982][T16555] dump_header+0x98/0x410 [ 2664.509319][T16555] oom_kill_process+0x100/0x550 [ 2664.514252][T16555] out_of_memory+0x620/0x880 [ 2664.518862][T16555] mem_cgroup_oom+0x475/0x4f0 [ 2664.523588][T16555] try_charge_memcg+0x746/0x960 [ 2664.528500][T16555] __memcg_kmem_charge_page+0x2e4/0x480 [ 2664.534060][T16555] __alloc_pages+0x1c1/0x340 [ 2664.538743][T16555] alloc_pages+0x34d/0x450 [ 2664.543216][T16555] __vmalloc_node_range+0x730/0xef0 [ 2664.548559][T16555] kvmalloc_node+0xf3/0x140 [ 2664.553164][T16555] ? xt_alloc_table_info+0x39/0x70 [ 2664.558396][T16555] xt_alloc_table_info+0x39/0x70 [ 2664.563346][T16555] do_ip6t_set_ctl+0x645/0x1790 [ 2664.568214][T16555] ? rmqueue_pcplist+0x157/0x1e0 [ 2664.573155][T16555] ? rmqueue+0x4a/0xbc0 [ 2664.577363][T16555] nf_setsockopt+0x1a6/0x1c0 [ 2664.581953][T16555] ipv6_setsockopt+0x2724/0x2a90 [ 2664.586875][T16555] ? _raw_spin_unlock+0x2d/0x50 [ 2664.591730][T16555] ? finish_task_switch+0xc5/0x260 [ 2664.596994][T16555] ? __schedule+0x50d/0x6e0 [ 2664.601493][T16555] ? schedule+0x5b/0x80 [ 2664.605682][T16555] ? futex_wait_queue+0x11c/0x160 [ 2664.610775][T16555] ? __rcu_read_unlock+0x4a/0x70 [ 2664.615694][T16555] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2664.621112][T16555] ? avc_has_perm+0x6b/0x150 [ 2664.625681][T16555] ? avc_has_perm+0xd0/0x150 [ 2664.630341][T16555] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2664.636652][T16555] ? selinux_socket_setsockopt+0x145/0x170 [ 2664.642571][T16555] udpv6_setsockopt+0x85/0x90 [ 2664.647306][T16555] sock_common_setsockopt+0x5d/0x70 [ 2664.652531][T16555] ? sock_common_recvmsg+0xe0/0xe0 [ 2664.657627][T16555] __sys_setsockopt+0x212/0x2b0 [ 2664.662576][T16555] __x64_sys_setsockopt+0x62/0x70 [ 2664.667763][T16555] do_syscall_64+0x2b/0x70 [ 2664.672260][T16555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2664.678179][T16555] RIP: 0033:0x7f53e730f209 [ 2664.682595][T16555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2664.702283][T16555] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2664.710728][T16555] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2664.718725][T16555] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2664.726684][T16555] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2664.734775][T16555] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2664.742774][T16555] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2664.750743][T16555] [ 2664.753858][T16555] memory: usage 307200kB, limit 307200kB, failcnt 32173 [ 2664.760887][T16555] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2664.767746][T16555] Memory cgroup stats for /syz2: [ 2664.768043][T16555] anon 122880 [ 2664.768043][T16555] file 53248 [ 2664.768043][T16555] kernel 314396672 [ 2664.768043][T16555] kernel_stack 32768 [ 2664.768043][T16555] pagetables 77824 [ 2664.768043][T16555] percpu 1184 [ 2664.768043][T16555] sock 0 [ 2664.768043][T16555] vmalloc 0 [ 2664.768043][T16555] shmem 49152 [ 2664.768043][T16555] file_mapped 49152 [ 2664.768043][T16555] file_dirty 4096 [ 2664.768043][T16555] file_writeback 0 [ 2664.768043][T16555] swapcached 0 [ 2664.768043][T16555] inactive_anon 139264 [ 2664.768043][T16555] active_anon 32768 [ 2664.768043][T16555] inactive_file 0 [ 2664.768043][T16555] active_file 4096 [ 2664.768043][T16555] unevictable 0 [ 2664.768043][T16555] slab_reclaimable 22376 [ 2664.768043][T16555] slab_unreclaimable 208184 [ 2664.768043][T16555] slab 230560 [ 2664.768043][T16555] workingset_refault_anon 0 [ 2664.768043][T16555] workingset_refault_file 115 [ 2664.768043][T16555] workingset_activate_anon 0 [ 2664.768043][T16555] workingset_activate_file 0 [ 2664.863196][T16555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16554,uid=0 [ 2664.878628][T16555] Memory cgroup out of memory: Killed process 16555 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2664.898912][T16567] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2664.912458][T16567] CPU: 1 PID: 16567 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2664.923208][T16567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2664.933273][T16567] Call Trace: [ 2664.936593][T16567] [ 2664.939572][T16567] dump_stack_lvl+0xd6/0x122 [ 2664.944189][T16567] dump_stack+0x11/0x12 [ 2664.948374][T16567] dump_header+0x98/0x410 [ 2664.952734][T16567] oom_kill_process+0x100/0x550 [ 2664.957583][T16567] out_of_memory+0x620/0x880 [ 2664.962252][T16567] mem_cgroup_oom+0x475/0x4f0 [ 2664.966924][T16567] try_charge_memcg+0x746/0x960 [ 2664.971783][T16567] ? debug_smp_processor_id+0x13/0x20 [ 2664.977157][T16567] ? delay_tsc+0xc1/0xe0 [ 2664.981466][T16567] __memcg_kmem_charge_page+0x2e4/0x480 [ 2664.987014][T16567] __alloc_pages+0x1c1/0x340 [ 2664.991604][T16567] alloc_pages+0x34d/0x450 [ 2664.996013][T16567] __vmalloc_node_range+0x730/0xef0 [ 2665.001214][T16567] kvmalloc_node+0xf3/0x140 [ 2665.005711][T16567] ? xt_alloc_table_info+0x39/0x70 [ 2665.010848][T16567] xt_alloc_table_info+0x39/0x70 [ 2665.015831][T16567] do_ip6t_set_ctl+0x645/0x1790 [ 2665.020758][T16567] ? rmqueue_pcplist+0x157/0x1e0 [ 2665.025691][T16567] ? rmqueue+0x4a/0xbc0 [ 2665.029843][T16567] nf_setsockopt+0x1a6/0x1c0 [ 2665.034431][T16567] ipv6_setsockopt+0x2724/0x2a90 [ 2665.039424][T16567] ? _raw_spin_unlock+0x2d/0x50 [ 2665.044270][T16567] ? finish_task_switch+0xc5/0x260 [ 2665.049436][T16567] ? __schedule+0x50d/0x6e0 [ 2665.053934][T16567] ? schedule+0x5b/0x80 [ 2665.058140][T16567] ? futex_wait_queue+0x11c/0x160 [ 2665.063164][T16567] ? __rcu_read_unlock+0x4a/0x70 [ 2665.068154][T16567] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2665.073520][T16567] ? avc_has_perm+0x6b/0x150 [ 2665.078208][T16567] ? avc_has_perm+0xd0/0x150 [ 2665.082812][T16567] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2665.089205][T16567] ? selinux_socket_setsockopt+0x145/0x170 [ 2665.095075][T16567] udpv6_setsockopt+0x85/0x90 [ 2665.099767][T16567] sock_common_setsockopt+0x5d/0x70 [ 2665.104976][T16567] ? sock_common_recvmsg+0xe0/0xe0 [ 2665.110146][T16567] __sys_setsockopt+0x212/0x2b0 [ 2665.115172][T16567] __x64_sys_setsockopt+0x62/0x70 [ 2665.120279][T16567] do_syscall_64+0x2b/0x70 [ 2665.124839][T16567] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2665.130782][T16567] RIP: 0033:0x7f1d726c3209 [ 2665.135188][T16567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2665.154803][T16567] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2665.163268][T16567] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2665.171245][T16567] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2665.179207][T16567] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2665.187210][T16567] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2665.195174][T16567] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2665.203180][T16567] [ 2665.206288][T16567] memory: usage 307184kB, limit 307200kB, failcnt 11637 [ 2665.213273][T16567] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2665.220452][T16567] Memory cgroup stats for /syz5: [ 2665.221520][T16567] anon 126976 [ 2665.221520][T16567] file 40960 [ 2665.221520][T16567] kernel 314388480 [ 2665.221520][T16567] kernel_stack 16384 [ 2665.221520][T16567] pagetables 73728 [ 2665.221520][T16567] percpu 5920 [ 2665.221520][T16567] sock 0 [ 2665.221520][T16567] vmalloc 0 [ 2665.221520][T16567] shmem 40960 [ 2665.221520][T16567] file_mapped 40960 [ 2665.221520][T16567] file_dirty 0 [ 2665.221520][T16567] file_writeback 0 [ 2665.221520][T16567] swapcached 0 [ 2665.221520][T16567] inactive_anon 131072 [ 2665.221520][T16567] active_anon 36864 [ 2665.221520][T16567] inactive_file 0 [ 2665.221520][T16567] active_file 0 [ 2665.221520][T16567] unevictable 0 [ 2665.221520][T16567] slab_reclaimable 30960 [ 2665.221520][T16567] slab_unreclaimable 410248 [ 2665.221520][T16567] slab 441208 [ 2665.221520][T16567] workingset_refault_anon 0 [ 2665.221520][T16567] workingset_refault_file 178 18:39:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x9619], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x1f, 0xff}, {0xe5, 0x5}, 0x101, 0x0, 0x1f}) socket$key(0xf, 0x3, 0x2) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x1f, 0xff}, {0xe5, 0x5}, 0x101, 0x0, 0x1f}) (async) 18:39:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0xf8020000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:20 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (rerun: 32) 18:39:20 executing program 0: socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000400)=""/201, 0xc9, 0x40014061, &(0x7f0000000500), 0x12) [ 2665.221520][T16567] workingset_activate_anon 0 [ 2665.221520][T16567] workingset_activate_file 0 [ 2665.316354][T16567] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16566,uid=0 [ 2665.331720][T16567] Memory cgroup out of memory: Killed process 16567 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x40014061, &(0x7f0000000500), 0x12) 18:39:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x100000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x26], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:21 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x1f, 0xff}, {0xe5, 0x5}, 0x101, 0x0, 0x1f}) socket$key(0xf, 0x3, 0x2) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x1f, 0xff}, {0xe5, 0x5}, 0x101, 0x0, 0x1f}) (async) 18:39:21 executing program 1: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) 18:39:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x200000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) [ 2665.989109][T16585] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2666.002701][T16585] CPU: 0 PID: 16585 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2666.013456][T16585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2666.023595][T16585] Call Trace: [ 2666.026878][T16585] [ 2666.029904][T16585] dump_stack_lvl+0xd6/0x122 [ 2666.034561][T16585] dump_stack+0x11/0x12 [ 2666.038836][T16585] dump_header+0x98/0x410 [ 2666.043263][T16585] oom_kill_process+0x100/0x550 [ 2666.048187][T16585] out_of_memory+0x620/0x880 [ 2666.052903][T16585] mem_cgroup_oom+0x475/0x4f0 [ 2666.057595][T16585] try_charge_memcg+0x746/0x960 [ 2666.062493][T16585] __memcg_kmem_charge_page+0x2e4/0x480 [ 2666.068054][T16585] __alloc_pages+0x1c1/0x340 [ 2666.072669][T16585] alloc_pages+0x34d/0x450 [ 2666.077096][T16585] __vmalloc_node_range+0x730/0xef0 [ 2666.082364][T16585] kvmalloc_node+0xf3/0x140 [ 2666.086916][T16585] ? xt_alloc_table_info+0x39/0x70 [ 2666.092035][T16585] xt_alloc_table_info+0x39/0x70 [ 2666.097011][T16585] do_ip6t_set_ctl+0x645/0x1790 [ 2666.101867][T16585] ? rmqueue_pcplist+0x157/0x1e0 [ 2666.106855][T16585] ? rmqueue+0x4a/0xbc0 [ 2666.111065][T16585] nf_setsockopt+0x1a6/0x1c0 [ 2666.115705][T16585] ipv6_setsockopt+0x2724/0x2a90 [ 2666.120657][T16585] ? _raw_spin_unlock+0x2d/0x50 [ 2666.125507][T16585] ? finish_task_switch+0xc5/0x260 [ 2666.130674][T16585] ? __schedule+0x50d/0x6e0 [ 2666.135174][T16585] ? schedule+0x5b/0x80 [ 2666.139487][T16585] ? futex_wait_queue+0x11c/0x160 [ 2666.144495][T16585] ? __rcu_read_unlock+0x4a/0x70 [ 2666.149673][T16585] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2666.155078][T16585] ? avc_has_perm+0x6b/0x150 [ 2666.159691][T16585] ? avc_has_perm+0xd0/0x150 [ 2666.164356][T16585] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2666.170670][T16585] ? selinux_socket_setsockopt+0x145/0x170 [ 2666.176516][T16585] udpv6_setsockopt+0x85/0x90 [ 2666.181183][T16585] sock_common_setsockopt+0x5d/0x70 [ 2666.186365][T16585] ? sock_common_recvmsg+0xe0/0xe0 [ 2666.191519][T16585] __sys_setsockopt+0x212/0x2b0 [ 2666.196485][T16585] __x64_sys_setsockopt+0x62/0x70 [ 2666.201595][T16585] do_syscall_64+0x2b/0x70 [ 2666.205995][T16585] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2666.211872][T16585] RIP: 0033:0x7f53e730f209 [ 2666.216270][T16585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2666.235961][T16585] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2666.244481][T16585] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2666.252439][T16585] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2666.260423][T16585] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2666.268379][T16585] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2666.276401][T16585] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2666.284421][T16585] [ 2666.287533][T16585] memory: usage 307200kB, limit 307200kB, failcnt 32224 [ 2666.294467][T16585] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2666.301410][T16585] Memory cgroup stats for /syz2: [ 2666.301745][T16585] anon 122880 [ 2666.301745][T16585] file 53248 [ 2666.301745][T16585] kernel 314380288 [ 2666.301745][T16585] kernel_stack 16384 [ 2666.301745][T16585] pagetables 77824 [ 2666.301745][T16585] percpu 1184 [ 2666.301745][T16585] sock 0 [ 2666.301745][T16585] vmalloc 0 [ 2666.301745][T16585] shmem 49152 [ 2666.301745][T16585] file_mapped 49152 [ 2666.301745][T16585] file_dirty 4096 [ 2666.301745][T16585] file_writeback 0 [ 2666.301745][T16585] swapcached 0 [ 2666.301745][T16585] inactive_anon 139264 [ 2666.301745][T16585] active_anon 32768 [ 2666.301745][T16585] inactive_file 0 [ 2666.301745][T16585] active_file 4096 [ 2666.301745][T16585] unevictable 0 [ 2666.301745][T16585] slab_reclaimable 22376 [ 2666.301745][T16585] slab_unreclaimable 208184 [ 2666.301745][T16585] slab 230560 [ 2666.301745][T16585] workingset_refault_anon 0 [ 2666.301745][T16585] workingset_refault_file 115 [ 2666.301745][T16585] workingset_activate_anon 0 [ 2666.301745][T16585] workingset_activate_file 0 [ 2666.396965][T16585] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16584,uid=0 [ 2666.412270][T16585] Memory cgroup out of memory: Killed process 16585 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2666.431203][T16600] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2666.444764][T16600] CPU: 1 PID: 16600 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2666.455449][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2666.465594][T16600] Call Trace: [ 2666.468888][T16600] [ 2666.471810][T16600] dump_stack_lvl+0xd6/0x122 [ 2666.476422][T16600] dump_stack+0x11/0x12 [ 2666.480640][T16600] dump_header+0x98/0x410 [ 2666.484972][T16600] oom_kill_process+0x100/0x550 [ 2666.489865][T16600] out_of_memory+0x620/0x880 [ 2666.494525][T16600] mem_cgroup_oom+0x475/0x4f0 [ 2666.499301][T16600] try_charge_memcg+0x746/0x960 [ 2666.504163][T16600] ? debug_smp_processor_id+0x13/0x20 [ 2666.509540][T16600] ? delay_tsc+0xc1/0xe0 [ 2666.513783][T16600] __memcg_kmem_charge_page+0x2e4/0x480 [ 2666.519325][T16600] __alloc_pages+0x1c1/0x340 [ 2666.524097][T16600] alloc_pages+0x34d/0x450 [ 2666.528509][T16600] __vmalloc_node_range+0x730/0xef0 [ 2666.533722][T16600] kvmalloc_node+0xf3/0x140 [ 2666.538270][T16600] ? xt_alloc_table_info+0x39/0x70 [ 2666.543427][T16600] xt_alloc_table_info+0x39/0x70 [ 2666.548386][T16600] do_ip6t_set_ctl+0x645/0x1790 [ 2666.553301][T16600] ? rmqueue_pcplist+0x157/0x1e0 [ 2666.558272][T16600] ? rmqueue+0x4a/0xbc0 [ 2666.562474][T16600] ? page_counter_cancel+0xa4/0x1f0 [ 2666.567673][T16600] nf_setsockopt+0x1a6/0x1c0 [ 2666.572300][T16600] ipv6_setsockopt+0x2724/0x2a90 [ 2666.577253][T16600] ? _raw_spin_unlock+0x2d/0x50 [ 2666.582100][T16600] ? finish_task_switch+0xc5/0x260 [ 2666.587212][T16600] ? __schedule+0x50d/0x6e0 [ 2666.591764][T16600] ? schedule+0x5b/0x80 [ 2666.595940][T16600] ? futex_wait_queue+0x11c/0x160 [ 2666.600971][T16600] ? __rcu_read_unlock+0x4a/0x70 [ 2666.605913][T16600] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2666.611282][T16600] ? avc_has_perm+0x6b/0x150 [ 2666.616009][T16600] ? avc_has_perm+0xd0/0x150 [ 2666.620694][T16600] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2666.627030][T16600] ? selinux_socket_setsockopt+0x145/0x170 [ 2666.632863][T16600] udpv6_setsockopt+0x85/0x90 [ 2666.637548][T16600] sock_common_setsockopt+0x5d/0x70 [ 2666.642779][T16600] ? sock_common_recvmsg+0xe0/0xe0 [ 2666.647980][T16600] __sys_setsockopt+0x212/0x2b0 [ 2666.652894][T16600] __x64_sys_setsockopt+0x62/0x70 [ 2666.658000][T16600] do_syscall_64+0x2b/0x70 [ 2666.662474][T16600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2666.668465][T16600] RIP: 0033:0x7f1d726c3209 [ 2666.672890][T16600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2666.692508][T16600] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2666.700927][T16600] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2666.708915][T16600] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2666.716880][T16600] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2666.724856][T16600] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2666.732881][T16600] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2666.740927][T16600] [ 2666.744058][T16600] memory: usage 307200kB, limit 307200kB, failcnt 11685 [ 2666.751103][T16600] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2666.758025][T16600] Memory cgroup stats for /syz5: [ 2666.763622][T16600] anon 126976 [ 2666.763622][T16600] file 40960 [ 2666.763622][T16600] kernel 314388480 [ 2666.763622][T16600] kernel_stack 16384 [ 2666.763622][T16600] pagetables 73728 [ 2666.763622][T16600] percpu 5920 [ 2666.763622][T16600] sock 0 [ 2666.763622][T16600] vmalloc 0 [ 2666.763622][T16600] shmem 40960 [ 2666.763622][T16600] file_mapped 40960 [ 2666.763622][T16600] file_dirty 0 [ 2666.763622][T16600] file_writeback 0 [ 2666.763622][T16600] swapcached 0 [ 2666.763622][T16600] inactive_anon 131072 [ 2666.763622][T16600] active_anon 36864 [ 2666.763622][T16600] inactive_file 0 [ 2666.763622][T16600] active_file 0 [ 2666.763622][T16600] unevictable 0 [ 2666.763622][T16600] slab_reclaimable 30960 [ 2666.763622][T16600] slab_unreclaimable 410248 [ 2666.763622][T16600] slab 441208 18:39:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x9719], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:22 executing program 1: socket$inet6(0xa, 0x6, 0xffffffff) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async, rerun: 64) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) 18:39:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/126, 0x7e, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x400000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) [ 2666.763622][T16600] workingset_refault_anon 0 [ 2666.763622][T16600] workingset_refault_file 178 [ 2666.763622][T16600] workingset_activate_anon 0 [ 2666.763622][T16600] workingset_activate_file 0 [ 2666.858564][T16600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16599,uid=0 [ 2666.873918][T16600] Memory cgroup out of memory: Killed process 16600 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x800000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/126, 0x7e, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/126, 0x7e, 0x0) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (async) 18:39:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfe], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:22 executing program 1: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) socket$inet6(0xa, 0x6, 0xffffffff) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) (async) 18:39:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/126, 0x7e, 0x0) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x1802000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2001000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2667.515029][T16617] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2667.528579][T16617] CPU: 1 PID: 16617 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2667.539284][T16617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2667.549354][T16617] Call Trace: [ 2667.552660][T16617] [ 2667.555588][T16617] dump_stack_lvl+0xd6/0x122 [ 2667.560194][T16617] dump_stack+0x11/0x12 [ 2667.564382][T16617] dump_header+0x98/0x410 [ 2667.568783][T16617] oom_kill_process+0x100/0x550 [ 2667.573653][T16617] out_of_memory+0x620/0x880 [ 2667.578304][T16617] mem_cgroup_oom+0x475/0x4f0 [ 2667.582988][T16617] try_charge_memcg+0x746/0x960 [ 2667.587867][T16617] ? __this_cpu_preempt_check+0xf/0x10 [ 2667.593434][T16617] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2667.599599][T16617] __memcg_kmem_charge_page+0x2e4/0x480 [ 2667.605146][T16617] __alloc_pages+0x1c1/0x340 [ 2667.609741][T16617] alloc_pages+0x34d/0x450 [ 2667.614146][T16617] __vmalloc_node_range+0x730/0xef0 [ 2667.619353][T16617] kvmalloc_node+0xf3/0x140 [ 2667.624032][T16617] ? xt_alloc_table_info+0x39/0x70 [ 2667.629192][T16617] xt_alloc_table_info+0x39/0x70 [ 2667.634171][T16617] do_ip6t_set_ctl+0x645/0x1790 [ 2667.639042][T16617] ? rmqueue_pcplist+0x157/0x1e0 [ 2667.643964][T16617] ? rmqueue+0x4a/0xbc0 [ 2667.648106][T16617] ? page_counter_cancel+0xa4/0x1f0 [ 2667.653424][T16617] nf_setsockopt+0x1a6/0x1c0 [ 2667.658005][T16617] ipv6_setsockopt+0x2724/0x2a90 [ 2667.662943][T16617] ? _raw_spin_unlock+0x2d/0x50 [ 2667.667849][T16617] ? finish_task_switch+0xc5/0x260 [ 2667.673021][T16617] ? __schedule+0x50d/0x6e0 [ 2667.677538][T16617] ? schedule+0x5b/0x80 [ 2667.681719][T16617] ? futex_wait_queue+0x11c/0x160 [ 2667.686739][T16617] ? __rcu_read_unlock+0x4a/0x70 [ 2667.691673][T16617] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2667.697102][T16617] ? avc_has_perm+0x6b/0x150 [ 2667.701712][T16617] ? avc_has_perm+0xd0/0x150 [ 2667.706285][T16617] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2667.712600][T16617] ? selinux_socket_setsockopt+0x145/0x170 [ 2667.718488][T16617] udpv6_setsockopt+0x85/0x90 [ 2667.723175][T16617] sock_common_setsockopt+0x5d/0x70 [ 2667.728360][T16617] ? sock_common_recvmsg+0xe0/0xe0 [ 2667.733499][T16617] __sys_setsockopt+0x212/0x2b0 [ 2667.738357][T16617] __x64_sys_setsockopt+0x62/0x70 [ 2667.743479][T16617] do_syscall_64+0x2b/0x70 [ 2667.747932][T16617] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2667.753826][T16617] RIP: 0033:0x7f53e730f209 [ 2667.758222][T16617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2667.777900][T16617] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2667.786338][T16617] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2667.794308][T16617] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2667.802348][T16617] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2667.810332][T16617] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2667.818285][T16617] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2667.826238][T16617] [ 2667.829325][T16617] memory: usage 307200kB, limit 307200kB, failcnt 32285 [ 2667.836254][T16617] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2667.843126][T16617] Memory cgroup stats for /syz2: [ 2667.843901][T16617] anon 122880 [ 2667.843901][T16617] file 53248 [ 2667.843901][T16617] kernel 314380288 [ 2667.843901][T16617] kernel_stack 16384 [ 2667.843901][T16617] pagetables 77824 [ 2667.843901][T16617] percpu 1184 [ 2667.843901][T16617] sock 0 [ 2667.843901][T16617] vmalloc 0 [ 2667.843901][T16617] shmem 49152 [ 2667.843901][T16617] file_mapped 49152 [ 2667.843901][T16617] file_dirty 4096 [ 2667.843901][T16617] file_writeback 0 [ 2667.843901][T16617] swapcached 0 [ 2667.843901][T16617] inactive_anon 139264 [ 2667.843901][T16617] active_anon 32768 [ 2667.843901][T16617] inactive_file 0 [ 2667.843901][T16617] active_file 4096 [ 2667.843901][T16617] unevictable 0 [ 2667.843901][T16617] slab_reclaimable 22376 [ 2667.843901][T16617] slab_unreclaimable 208184 [ 2667.843901][T16617] slab 230560 [ 2667.843901][T16617] workingset_refault_anon 0 [ 2667.843901][T16617] workingset_refault_file 115 [ 2667.843901][T16617] workingset_activate_anon 0 [ 2667.843901][T16617] workingset_activate_file 0 [ 2667.939398][T16617] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16616,uid=0 [ 2667.954682][T16617] Memory cgroup out of memory: Killed process 16617 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:23 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a000000f000000000000000040004000000000000000000000000000000000000000000000000000000000003001700000000000200000002ffffff0000000000000000010000d3890000009db35c6d09fd22357c381fc6d5e8e80b515c20ca59eba981c8e68bcc2b4a51"], 0x50}}, 0x0) 18:39:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xfdff], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x8c02, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='host1x_cdma_push_wide\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000004c0)={0xc0000004}) 18:39:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x7003000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x300], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0xd000000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:23 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a000000f000000000000000040004000000000000000000000000000000000000000000000000000000000003001700000000000200000002ffffff0000000000000000010000d3890000009db35c6d09fd22357c381fc6d5e8e80b515c20ca59eba981c8e68bcc2b4a51"], 0x50}}, 0x0) 18:39:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x8c02, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='host1x_cdma_push_wide\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000004c0)={0xc0000004}) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x8c02, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='host1x_cdma_push_wide\x00', r1}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000004c0)={0xc0000004}) (async) 18:39:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0xf802000000000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:23 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a000000f000000000000000040004000000000000000000000000000000000000000000000000000000000003001700000000000200000002ffffff0000000000000000010000d3890000009db35c6d09fd22357c381fc6d5e8e80b515c20ca59eba981c8e68bcc2b4a51"], 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a000000f000000000000000040004000000000000000000000000000000000000000000000000000000000003001700000000000200000002ffffff0000000000000000010000d3890000009db35c6d09fd22357c381fc6d5e8e80b515c20ca59eba981c8e68bcc2b4a51"], 0x50}}, 0x0) (async) 18:39:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0xffffffff00000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x8c02, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='host1x_cdma_push_wide\x00', r1}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000004c0)={0xc0000004}) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x8c02, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000), 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='host1x_cdma_push_wide\x00', r1}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000004c0)={0xc0000004}) (async) 18:39:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x4}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2668.716917][T16664] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2668.730507][T16664] CPU: 1 PID: 16664 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2668.741198][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2668.751257][T16664] Call Trace: [ 2668.754519][T16664] [ 2668.757528][T16664] dump_stack_lvl+0xd6/0x122 [ 2668.762168][T16664] dump_stack+0x11/0x12 [ 2668.766328][T16664] dump_header+0x98/0x410 [ 2668.770667][T16664] oom_kill_process+0x100/0x550 [ 2668.775557][T16664] out_of_memory+0x620/0x880 [ 2668.780199][T16664] mem_cgroup_oom+0x475/0x4f0 [ 2668.784862][T16664] try_charge_memcg+0x746/0x960 [ 2668.789698][T16664] ? debug_smp_processor_id+0x13/0x20 [ 2668.795099][T16664] __memcg_kmem_charge_page+0x2e4/0x480 [ 2668.800745][T16664] __alloc_pages+0x1c1/0x340 [ 2668.805361][T16664] alloc_pages+0x34d/0x450 [ 2668.809798][T16664] __vmalloc_node_range+0x730/0xef0 [ 2668.815013][T16664] kvmalloc_node+0xf3/0x140 [ 2668.819504][T16664] ? xt_alloc_table_info+0x39/0x70 [ 2668.824611][T16664] xt_alloc_table_info+0x39/0x70 [ 2668.829541][T16664] do_ip6t_set_ctl+0x645/0x1790 [ 2668.834498][T16664] ? rmqueue_pcplist+0x157/0x1e0 [ 2668.839429][T16664] ? rmqueue+0x4a/0xbc0 [ 2668.843613][T16664] nf_setsockopt+0x1a6/0x1c0 [ 2668.848203][T16664] ipv6_setsockopt+0x2724/0x2a90 [ 2668.853126][T16664] ? rb_insert_color+0x2b5/0x2c0 [ 2668.858053][T16664] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2668.863645][T16664] ? debug_smp_processor_id+0x13/0x20 [ 2668.869042][T16664] ? resched_curr+0x1d/0xc0 [ 2668.873535][T16664] ? check_preempt_wakeup+0x1c4/0x380 [ 2668.878967][T16664] ? __rcu_read_unlock+0x4a/0x70 [ 2668.883905][T16664] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2668.889333][T16664] ? avc_has_perm+0x6b/0x150 [ 2668.893925][T16664] ? avc_has_perm+0xd0/0x150 [ 2668.898512][T16664] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2668.904841][T16664] ? selinux_socket_setsockopt+0x145/0x170 [ 2668.910639][T16664] udpv6_setsockopt+0x85/0x90 [ 2668.915304][T16664] sock_common_setsockopt+0x5d/0x70 [ 2668.920487][T16664] ? sock_common_recvmsg+0xe0/0xe0 [ 2668.925596][T16664] __sys_setsockopt+0x212/0x2b0 [ 2668.930579][T16664] __x64_sys_setsockopt+0x62/0x70 [ 2668.935625][T16664] do_syscall_64+0x2b/0x70 [ 2668.940024][T16664] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2668.945938][T16664] RIP: 0033:0x7f1d726c3209 [ 2668.950363][T16664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2668.969965][T16664] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2668.978379][T16664] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2668.986339][T16664] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2668.994308][T16664] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2669.002278][T16664] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2669.010278][T16664] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2669.018262][T16664] [ 2669.021397][T16664] memory: usage 307184kB, limit 307200kB, failcnt 11799 [ 2669.028345][T16664] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2669.035193][T16664] Memory cgroup stats for /syz5: [ 2669.036191][T16664] anon 126976 [ 2669.036191][T16664] file 40960 [ 2669.036191][T16664] kernel 314376192 [ 2669.036191][T16664] kernel_stack 16384 [ 2669.036191][T16664] pagetables 73728 [ 2669.036191][T16664] percpu 5920 [ 2669.036191][T16664] sock 0 [ 2669.036191][T16664] vmalloc 0 [ 2669.036191][T16664] shmem 40960 [ 2669.036191][T16664] file_mapped 40960 [ 2669.036191][T16664] file_dirty 0 [ 2669.036191][T16664] file_writeback 0 [ 2669.036191][T16664] swapcached 0 [ 2669.036191][T16664] inactive_anon 131072 [ 2669.036191][T16664] active_anon 36864 [ 2669.036191][T16664] inactive_file 0 [ 2669.036191][T16664] active_file 0 [ 2669.036191][T16664] unevictable 0 [ 2669.036191][T16664] slab_reclaimable 30960 [ 2669.036191][T16664] slab_unreclaimable 404856 [ 2669.036191][T16664] slab 435816 [ 2669.036191][T16664] workingset_refault_anon 0 18:39:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xfeff], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:24 executing program 4: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000400)="735dbb6dd72f0fab58ad627ba922359762a711ff6cd7a0b3c80ee0c87ad2a37794d9c046e42373d5aeef0d06c213bad3d0cf665bb045575a3406361e9573", 0x3e) [ 2669.036191][T16664] workingset_refault_file 178 [ 2669.036191][T16664] workingset_activate_anon 0 [ 2669.036191][T16664] workingset_activate_file 0 [ 2669.130876][T16664] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16662,uid=0 [ 2669.146237][T16664] Memory cgroup out of memory: Killed process 16664 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x700], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x40014061, 0x0, 0x0) 18:39:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000400)="735dbb6dd72f0fab58ad627ba922359762a711ff6cd7a0b3c80ee0c87ad2a37794d9c046e42373d5aeef0d06c213bad3d0cf665bb045575a3406361e9573", 0x3e) 18:39:24 executing program 4: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) socket$key(0xf, 0x3, 0x2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (async) 18:39:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:24 executing program 4: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000400)="735dbb6dd72f0fab58ad627ba922359762a711ff6cd7a0b3c80ee0c87ad2a37794d9c046e42373d5aeef0d06c213bad3d0cf665bb045575a3406361e9573", 0x3e) 18:39:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) [ 2669.783543][T16703] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2669.797095][T16703] CPU: 0 PID: 16703 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2669.807864][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2669.817928][T16703] Call Trace: [ 2669.821209][T16703] [ 2669.824150][T16703] dump_stack_lvl+0xd6/0x122 [ 2669.828766][T16703] dump_stack+0x11/0x12 [ 2669.832925][T16703] dump_header+0x98/0x410 [ 2669.837335][T16703] oom_kill_process+0x100/0x550 [ 2669.842358][T16703] out_of_memory+0x620/0x880 [ 2669.846958][T16703] mem_cgroup_oom+0x475/0x4f0 [ 2669.851650][T16703] try_charge_memcg+0x746/0x960 [ 2669.856582][T16703] ? debug_smp_processor_id+0x13/0x20 [ 2669.861981][T16703] __memcg_kmem_charge_page+0x2e4/0x480 [ 2669.867542][T16703] __alloc_pages+0x1c1/0x340 [ 2669.872237][T16703] alloc_pages+0x34d/0x450 [ 2669.876703][T16703] __vmalloc_node_range+0x730/0xef0 [ 2669.881892][T16703] kvmalloc_node+0xf3/0x140 [ 2669.886440][T16703] ? xt_alloc_table_info+0x39/0x70 [ 2669.891561][T16703] xt_alloc_table_info+0x39/0x70 [ 2669.896533][T16703] do_ip6t_set_ctl+0x645/0x1790 [ 2669.901415][T16703] ? rmqueue_pcplist+0x157/0x1e0 [ 2669.906350][T16703] ? rmqueue+0x4a/0xbc0 [ 2669.910521][T16703] ? page_counter_cancel+0xa4/0x1f0 [ 2669.915820][T16703] nf_setsockopt+0x1a6/0x1c0 [ 2669.920526][T16703] ipv6_setsockopt+0x2724/0x2a90 [ 2669.925468][T16703] ? _raw_spin_unlock+0x2d/0x50 [ 2669.930321][T16703] ? finish_task_switch+0xc5/0x260 [ 2669.935527][T16703] ? __schedule+0x50d/0x6e0 [ 2669.940099][T16703] ? schedule+0x5b/0x80 [ 2669.944264][T16703] ? futex_wait_queue+0x11c/0x160 [ 2669.949273][T16703] ? __rcu_read_unlock+0x4a/0x70 [ 2669.954197][T16703] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2669.959610][T16703] ? avc_has_perm+0x6b/0x150 [ 2669.964190][T16703] ? avc_has_perm+0xd0/0x150 [ 2669.968768][T16703] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2669.975162][T16703] ? selinux_socket_setsockopt+0x145/0x170 [ 2669.980986][T16703] udpv6_setsockopt+0x85/0x90 [ 2669.985651][T16703] sock_common_setsockopt+0x5d/0x70 [ 2669.990862][T16703] ? sock_common_recvmsg+0xe0/0xe0 [ 2669.995970][T16703] __sys_setsockopt+0x212/0x2b0 [ 2670.000838][T16703] __x64_sys_setsockopt+0x62/0x70 [ 2670.005906][T16703] do_syscall_64+0x2b/0x70 [ 2670.010323][T16703] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2670.016207][T16703] RIP: 0033:0x7f53e730f209 [ 2670.020618][T16703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2670.040343][T16703] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2670.048854][T16703] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2670.056905][T16703] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2670.064879][T16703] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2670.072838][T16703] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2670.080882][T16703] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2670.088932][T16703] [ 2670.092156][T16703] memory: usage 307200kB, limit 307200kB, failcnt 32414 [ 2670.099106][T16703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2670.106013][T16703] Memory cgroup stats for /syz2: [ 2670.107205][T16703] anon 122880 [ 2670.107205][T16703] file 53248 [ 2670.107205][T16703] kernel 314372096 [ 2670.107205][T16703] kernel_stack 16384 [ 2670.107205][T16703] pagetables 77824 [ 2670.107205][T16703] percpu 1184 [ 2670.107205][T16703] sock 0 [ 2670.107205][T16703] vmalloc 0 [ 2670.107205][T16703] shmem 49152 [ 2670.107205][T16703] file_mapped 49152 [ 2670.107205][T16703] file_dirty 4096 [ 2670.107205][T16703] file_writeback 0 [ 2670.107205][T16703] swapcached 0 [ 2670.107205][T16703] inactive_anon 139264 [ 2670.107205][T16703] active_anon 32768 [ 2670.107205][T16703] inactive_file 0 [ 2670.107205][T16703] active_file 4096 [ 2670.107205][T16703] unevictable 0 [ 2670.107205][T16703] slab_reclaimable 22376 [ 2670.107205][T16703] slab_unreclaimable 202792 [ 2670.107205][T16703] slab 225168 [ 2670.107205][T16703] workingset_refault_anon 0 [ 2670.107205][T16703] workingset_refault_file 115 [ 2670.107205][T16703] workingset_activate_anon 0 [ 2670.107205][T16703] workingset_activate_file 0 [ 2670.202438][T16703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16702,uid=0 [ 2670.217780][T16703] Memory cgroup out of memory: Killed process 16703 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:25 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a00000000006fe6c0a9efa64ac247250000000000000400040000000000000000000000000000000000000000000034a9f9e81b3ad299a60d661d87cbdb030217000000000002000000ffffffff0000000000000000"], 0x50}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r2, 0x1) 18:39:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xfffd], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r1, 0xffffffffffffffff, 0x4, r2}, 0x10) 18:39:25 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xa00], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r1, 0xffffffffffffffff, 0x4, r2}, 0x10) 18:39:25 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a00000000006fe6c0a9efa64ac247250000000000000400040000000000000000000000000000000000000000000034a9f9e81b3ad299a60d661d87cbdb030217000000000002000000ffffffff0000000000000000"], 0x50}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r2, 0x1) 18:39:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r1, 0xffffffffffffffff, 0x4, r2}, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000400), 0x80) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r1, 0xffffffffffffffff, 0x4, r2}, 0x10) (async) 18:39:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x120}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:25 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a00000000006fe6c0a9efa64ac247250000000000000400040000000000000000000000000000000000000000000034a9f9e81b3ad299a60d661d87cbdb030217000000000002000000ffffffff0000000000000000"], 0x50}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r2, 0x1) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a00000000006fe6c0a9efa64ac247250000000000000400040000000000000000000000000000000000000000000034a9f9e81b3ad299a60d661d87cbdb030217000000000002000000ffffffff0000000000000000"], 0x50}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r2, 0x1) (async) [ 2670.991594][T16742] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2671.005237][T16742] CPU: 0 PID: 16742 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2671.015915][T16742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2671.025953][T16742] Call Trace: [ 2671.029214][T16742] [ 2671.032132][T16742] dump_stack_lvl+0xd6/0x122 [ 2671.036729][T16742] dump_stack+0x11/0x12 [ 2671.040868][T16742] dump_header+0x98/0x410 [ 2671.045274][T16742] oom_kill_process+0x100/0x550 [ 2671.050133][T16742] out_of_memory+0x620/0x880 [ 2671.054714][T16742] mem_cgroup_oom+0x475/0x4f0 [ 2671.059382][T16742] try_charge_memcg+0x746/0x960 [ 2671.064276][T16742] ? debug_smp_processor_id+0x13/0x20 [ 2671.069706][T16742] __memcg_kmem_charge_page+0x2e4/0x480 [ 2671.075266][T16742] __alloc_pages+0x1c1/0x340 [ 2671.080000][T16742] alloc_pages+0x34d/0x450 [ 2671.084415][T16742] __vmalloc_node_range+0x730/0xef0 [ 2671.089698][T16742] kvmalloc_node+0xf3/0x140 [ 2671.094227][T16742] ? xt_alloc_table_info+0x39/0x70 [ 2671.099337][T16742] xt_alloc_table_info+0x39/0x70 [ 2671.104344][T16742] do_ip6t_set_ctl+0x645/0x1790 [ 2671.109188][T16742] ? rmqueue_pcplist+0x157/0x1e0 [ 2671.114162][T16742] ? rmqueue+0x4a/0xbc0 [ 2671.118373][T16742] nf_setsockopt+0x1a6/0x1c0 [ 2671.122952][T16742] ipv6_setsockopt+0x2724/0x2a90 [ 2671.127966][T16742] ? rb_insert_color+0x2b5/0x2c0 [ 2671.132983][T16742] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2671.138575][T16742] ? debug_smp_processor_id+0x13/0x20 [ 2671.144056][T16742] ? resched_curr+0x1d/0xc0 [ 2671.148546][T16742] ? check_preempt_wakeup+0x1c4/0x380 [ 2671.153961][T16742] ? __rcu_read_unlock+0x4a/0x70 [ 2671.158927][T16742] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2671.164294][T16742] ? avc_has_perm+0x6b/0x150 [ 2671.168972][T16742] ? avc_has_perm+0xd0/0x150 [ 2671.173548][T16742] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2671.179860][T16742] ? selinux_socket_setsockopt+0x145/0x170 [ 2671.185652][T16742] udpv6_setsockopt+0x85/0x90 [ 2671.190326][T16742] sock_common_setsockopt+0x5d/0x70 [ 2671.195613][T16742] ? sock_common_recvmsg+0xe0/0xe0 [ 2671.200808][T16742] __sys_setsockopt+0x212/0x2b0 [ 2671.205737][T16742] __x64_sys_setsockopt+0x62/0x70 [ 2671.210762][T16742] do_syscall_64+0x2b/0x70 [ 2671.215173][T16742] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2671.221058][T16742] RIP: 0033:0x7f53e730f209 [ 2671.225470][T16742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2671.245195][T16742] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2671.253703][T16742] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2671.261711][T16742] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2671.269702][T16742] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2671.277693][T16742] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2671.285705][T16742] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2671.293730][T16742] [ 2671.296848][T16742] memory: usage 307200kB, limit 307200kB, failcnt 32452 [ 2671.303885][T16742] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2671.310943][T16742] Memory cgroup stats for /syz2: [ 2671.312739][T16742] anon 122880 [ 2671.312739][T16742] file 53248 [ 2671.312739][T16742] kernel 314380288 [ 2671.312739][T16742] kernel_stack 16384 [ 2671.312739][T16742] pagetables 77824 [ 2671.312739][T16742] percpu 1184 [ 2671.312739][T16742] sock 0 [ 2671.312739][T16742] vmalloc 0 [ 2671.312739][T16742] shmem 49152 [ 2671.312739][T16742] file_mapped 49152 [ 2671.312739][T16742] file_dirty 4096 [ 2671.312739][T16742] file_writeback 0 [ 2671.312739][T16742] swapcached 0 [ 2671.312739][T16742] inactive_anon 139264 [ 2671.312739][T16742] active_anon 32768 [ 2671.312739][T16742] inactive_file 0 [ 2671.312739][T16742] active_file 4096 [ 2671.312739][T16742] unevictable 0 [ 2671.312739][T16742] slab_reclaimable 22376 [ 2671.312739][T16742] slab_unreclaimable 208184 [ 2671.312739][T16742] slab 230560 [ 2671.312739][T16742] workingset_refault_anon 0 [ 2671.312739][T16742] workingset_refault_file 115 [ 2671.312739][T16742] workingset_activate_anon 0 [ 2671.312739][T16742] workingset_activate_file 0 [ 2671.408070][T16742] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16740,uid=0 [ 2671.423726][T16742] Memory cgroup out of memory: Killed process 16742 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xfffe], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x218}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="02170000000004000400000000000001000000000000000000000000009995eba10000000000030017000000000002000000ffffffff00000000000000000000000000000000000000001c4929fa07bf10670408e835a3abd2d40000000000002c2a1fde8b2d2ab30f2b340c663e678a128fa58757dd164e4a9b58e62d3bee3d5e86ec66b74c78206e5da54ac87267f6111696dd3508cb1bcdbb3a4d2ab965eab6a972d127a0986a1f26eaed216d58f9b04eec8d786e30b8d324eb0a4b10fa0ac82910540bf8fc3722e3a0ee146d8e445f113f8839b6bb2e0459d9"], 0x50}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xffffc65e, 0x1, 0x4, 0x1615, r1, 0x2, '\x00', 0x0, r1, 0x2, 0x0, 0x2, 0x7}, 0x48) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r4, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000040)={0x34, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x20}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x6a6d}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x1, 0x718, 0x6, 0x9, {{0x20, 0x4, 0x2, 0x9, 0x80, 0x66, 0x0, 0x5, 0x2f, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x74, [@multicast2, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x0, 0xa, "b8b1c6562a541870"}, @timestamp_addr={0x44, 0x24, 0xfd, 0x1, 0x9, [{@multicast1, 0x4a78e096}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0x6}, {@multicast1, 0x3}]}, @timestamp={0x44, 0x20, 0x48, 0x0, 0xc, [0x5, 0x7, 0x2ea962ff, 0x6e8, 0x1400000, 0x7f, 0x34]}, @cipso={0x86, 0x9, 0x3, [{0x0, 0x3, "ac"}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0xa8651b0dbd0ec2f9, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 18:39:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:27 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x1400], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2f8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="02170000000004000400000000000001000000000000000000000000009995eba10000000000030017000000000002000000ffffffff00000000000000000000000000000000000000001c4929fa07bf10670408e835a3abd2d40000000000002c2a1fde8b2d2ab30f2b340c663e678a128fa58757dd164e4a9b58e62d3bee3d5e86ec66b74c78206e5da54ac87267f6111696dd3508cb1bcdbb3a4d2ab965eab6a972d127a0986a1f26eaed216d58f9b04eec8d786e30b8d324eb0a4b10fa0ac82910540bf8fc3722e3a0ee146d8e445f113f8839b6bb2e0459d9"], 0x50}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xffffc65e, 0x1, 0x4, 0x1615, r1, 0x2, '\x00', 0x0, r1, 0x2, 0x0, 0x2, 0x7}, 0x48) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r4, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000040)={0x34, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x20}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x6a6d}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x1, 0x718, 0x6, 0x9, {{0x20, 0x4, 0x2, 0x9, 0x80, 0x66, 0x0, 0x5, 0x2f, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x74, [@multicast2, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x0, 0xa, "b8b1c6562a541870"}, @timestamp_addr={0x44, 0x24, 0xfd, 0x1, 0x9, [{@multicast1, 0x4a78e096}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0x6}, {@multicast1, 0x3}]}, @timestamp={0x44, 0x20, 0x48, 0x0, 0xc, [0x5, 0x7, 0x2ea962ff, 0x6e8, 0x1400000, 0x7f, 0x34]}, @cipso={0x86, 0x9, 0x3, [{0x0, 0x3, "ac"}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0xa8651b0dbd0ec2f9, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 18:39:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:27 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="02170000000004000400000000000001000000000000000000000000009995eba10000000000030017000000000002000000ffffffff00000000000000000000000000000000000000001c4929fa07bf10670408e835a3abd2d40000000000002c2a1fde8b2d2ab30f2b340c663e678a128fa58757dd164e4a9b58e62d3bee3d5e86ec66b74c78206e5da54ac87267f6111696dd3508cb1bcdbb3a4d2ab965eab6a972d127a0986a1f26eaed216d58f9b04eec8d786e30b8d324eb0a4b10fa0ac82910540bf8fc3722e3a0ee146d8e445f113f8839b6bb2e0459d9"], 0x50}}, 0x0) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xffffc65e, 0x1, 0x4, 0x1615, r1, 0x2, '\x00', 0x0, r1, 0x2, 0x0, 0x2, 0x7}, 0x48) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r4, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000040)={0x34, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x20}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x6a6d}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x1, 0x718, 0x6, 0x9, {{0x20, 0x4, 0x2, 0x9, 0x80, 0x66, 0x0, 0x5, 0x2f, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x13, 0x74, [@multicast2, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x0, 0xa, "b8b1c6562a541870"}, @timestamp_addr={0x44, 0x24, 0xfd, 0x1, 0x9, [{@multicast1, 0x4a78e096}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0x6}, {@multicast1, 0x3}]}, @timestamp={0x44, 0x20, 0x48, 0x0, 0xc, [0x5, 0x7, 0x2ea962ff, 0x6e8, 0x1400000, 0x7f, 0x34]}, @cipso={0x86, 0x9, 0x3, [{0x0, 0x3, "ac"}]}]}}}}}) (rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0xa8651b0dbd0ec2f9, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) 18:39:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x370}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:39:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1802}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2672.142528][T16780] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2672.156114][T16780] CPU: 0 PID: 16780 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2672.166800][T16780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2672.176937][T16780] Call Trace: [ 2672.180209][T16780] [ 2672.183159][T16780] dump_stack_lvl+0xd6/0x122 [ 2672.187797][T16780] dump_stack+0x11/0x12 [ 2672.191940][T16780] dump_header+0x98/0x410 [ 2672.196268][T16780] oom_kill_process+0x100/0x550 [ 2672.201147][T16780] out_of_memory+0x620/0x880 [ 2672.205727][T16780] mem_cgroup_oom+0x475/0x4f0 [ 2672.210488][T16780] try_charge_memcg+0x746/0x960 [ 2672.215329][T16780] ? debug_smp_processor_id+0x13/0x20 [ 2672.220726][T16780] ? delay_tsc+0xc1/0xe0 [ 2672.224996][T16780] __memcg_kmem_charge_page+0x2e4/0x480 [ 2672.230617][T16780] __alloc_pages+0x1c1/0x340 [ 2672.235247][T16780] alloc_pages+0x34d/0x450 [ 2672.239743][T16780] __vmalloc_node_range+0x730/0xef0 [ 2672.244943][T16780] kvmalloc_node+0xf3/0x140 [ 2672.249433][T16780] ? xt_alloc_table_info+0x39/0x70 [ 2672.254602][T16780] xt_alloc_table_info+0x39/0x70 [ 2672.259629][T16780] do_ip6t_set_ctl+0x645/0x1790 [ 2672.264491][T16780] ? rmqueue_pcplist+0x157/0x1e0 [ 2672.269429][T16780] ? rmqueue+0x4a/0xbc0 [ 2672.273576][T16780] nf_setsockopt+0x1a6/0x1c0 [ 2672.278196][T16780] ipv6_setsockopt+0x2724/0x2a90 [ 2672.283185][T16780] ? rb_insert_color+0x2b5/0x2c0 [ 2672.288172][T16780] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2672.293746][T16780] ? debug_smp_processor_id+0x13/0x20 [ 2672.299212][T16780] ? resched_curr+0x1d/0xc0 [ 2672.303708][T16780] ? check_preempt_wakeup+0x1c4/0x380 [ 2672.309311][T16780] ? __rcu_read_unlock+0x4a/0x70 [ 2672.314265][T16780] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2672.319627][T16780] ? avc_has_perm+0x6b/0x150 [ 2672.324289][T16780] ? avc_has_perm+0xd0/0x150 [ 2672.328906][T16780] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2672.335224][T16780] ? selinux_socket_setsockopt+0x145/0x170 [ 2672.341121][T16780] udpv6_setsockopt+0x85/0x90 [ 2672.345846][T16780] sock_common_setsockopt+0x5d/0x70 [ 2672.351135][T16780] ? sock_common_recvmsg+0xe0/0xe0 [ 2672.356244][T16780] __sys_setsockopt+0x212/0x2b0 [ 2672.361093][T16780] __x64_sys_setsockopt+0x62/0x70 [ 2672.366109][T16780] do_syscall_64+0x2b/0x70 [ 2672.370511][T16780] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2672.376480][T16780] RIP: 0033:0x7f53e730f209 [ 2672.380945][T16780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2672.400726][T16780] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2672.409146][T16780] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2672.417119][T16780] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2672.425150][T16780] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2672.433135][T16780] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2672.441136][T16780] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2672.449120][T16780] [ 2672.452264][T16780] memory: usage 307184kB, limit 307200kB, failcnt 32520 [ 2672.459216][T16780] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2672.466070][T16780] Memory cgroup stats for /syz2: [ 2672.467719][T16780] anon 122880 [ 2672.467719][T16780] file 53248 [ 2672.467719][T16780] kernel 314368000 [ 2672.467719][T16780] kernel_stack 16384 [ 2672.467719][T16780] pagetables 77824 [ 2672.467719][T16780] percpu 1184 [ 2672.467719][T16780] sock 0 [ 2672.467719][T16780] vmalloc 0 [ 2672.467719][T16780] shmem 49152 [ 2672.467719][T16780] file_mapped 49152 [ 2672.467719][T16780] file_dirty 4096 [ 2672.467719][T16780] file_writeback 0 [ 2672.467719][T16780] swapcached 0 [ 2672.467719][T16780] inactive_anon 139264 [ 2672.467719][T16780] active_anon 32768 [ 2672.467719][T16780] inactive_file 0 [ 2672.467719][T16780] active_file 4096 [ 2672.467719][T16780] unevictable 0 [ 2672.467719][T16780] slab_reclaimable 22376 [ 2672.467719][T16780] slab_unreclaimable 209456 [ 2672.467719][T16780] slab 231832 [ 2672.467719][T16780] workingset_refault_anon 0 [ 2672.467719][T16780] workingset_refault_file 115 [ 2672.467719][T16780] workingset_activate_anon 0 [ 2672.467719][T16780] workingset_activate_file 0 [ 2672.562893][T16780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16779,uid=0 [ 2672.578447][T16780] Memory cgroup out of memory: Killed process 16780 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:28 executing program 1: r0 = socket$inet6(0xa, 0x5, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x12a83], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x17, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2, 0x40000000}, @sadb_lifetime={0x4, 0x2, 0x4, 0x6, 0xfffffffffffffe00, 0x80000000025}, @sadb_x_nat_t_port={0x1}]}, 0x58}}, 0x0) 18:39:28 executing program 0: recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:28 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x2600], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x17, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2, 0x40000000}, @sadb_lifetime={0x4, 0x2, 0x4, 0x6, 0xfffffffffffffe00, 0x80000000025}, @sadb_x_nat_t_port={0x1}]}, 0x58}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x17, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2, 0x40000000}, @sadb_lifetime={0x4, 0x2, 0x4, 0x6, 0xfffffffffffffe00, 0x80000000025}, @sadb_x_nat_t_port={0x1}]}, 0x58}}, 0x0) (async) 18:39:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x7003}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:28 executing program 0: recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:28 executing program 1: r0 = socket$inet6(0xa, 0x5, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:28 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x17, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2, 0x40000000}, @sadb_lifetime={0x4, 0x2, 0x4, 0x6, 0xfffffffffffffe00, 0x80000000025}, @sadb_x_nat_t_port={0x1}]}, 0x58}}, 0x0) 18:39:28 executing program 0: recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xd000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2673.314265][T16815] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2673.327877][T16815] CPU: 1 PID: 16815 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2673.338621][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2673.348769][T16815] Call Trace: [ 2673.352119][T16815] [ 2673.355085][T16815] dump_stack_lvl+0xd6/0x122 [ 2673.359684][T16815] dump_stack+0x11/0x12 [ 2673.363825][T16815] dump_header+0x98/0x410 [ 2673.368198][T16815] oom_kill_process+0x100/0x550 [ 2673.373118][T16815] out_of_memory+0x620/0x880 [ 2673.377697][T16815] mem_cgroup_oom+0x475/0x4f0 [ 2673.382362][T16815] try_charge_memcg+0x746/0x960 [ 2673.387216][T16815] ? debug_smp_processor_id+0x13/0x20 [ 2673.392597][T16815] __memcg_kmem_charge_page+0x2e4/0x480 [ 2673.398157][T16815] __alloc_pages+0x1c1/0x340 [ 2673.402735][T16815] alloc_pages+0x34d/0x450 [ 2673.407144][T16815] __vmalloc_node_range+0x730/0xef0 [ 2673.412378][T16815] kvmalloc_node+0xf3/0x140 [ 2673.416921][T16815] ? xt_alloc_table_info+0x39/0x70 [ 2673.422126][T16815] xt_alloc_table_info+0x39/0x70 [ 2673.427134][T16815] do_ip6t_set_ctl+0x645/0x1790 [ 2673.431994][T16815] ? rmqueue_pcplist+0x157/0x1e0 [ 2673.436971][T16815] ? rmqueue+0x4a/0xbc0 [ 2673.441109][T16815] ? page_counter_cancel+0xa4/0x1f0 [ 2673.446395][T16815] nf_setsockopt+0x1a6/0x1c0 [ 2673.450969][T16815] ipv6_setsockopt+0x2724/0x2a90 [ 2673.456034][T16815] ? _raw_spin_unlock+0x2d/0x50 [ 2673.460868][T16815] ? finish_task_switch+0xc5/0x260 [ 2673.466023][T16815] ? __schedule+0x50d/0x6e0 [ 2673.470567][T16815] ? schedule+0x5b/0x80 [ 2673.474798][T16815] ? futex_wait_queue+0x11c/0x160 [ 2673.479818][T16815] ? __rcu_read_unlock+0x4a/0x70 [ 2673.484749][T16815] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2673.490169][T16815] ? avc_has_perm+0x6b/0x150 [ 2673.494758][T16815] ? avc_has_perm+0xd0/0x150 [ 2673.499492][T16815] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2673.505902][T16815] ? selinux_socket_setsockopt+0x145/0x170 [ 2673.511716][T16815] udpv6_setsockopt+0x85/0x90 [ 2673.516390][T16815] sock_common_setsockopt+0x5d/0x70 [ 2673.521618][T16815] ? sock_common_recvmsg+0xe0/0xe0 [ 2673.526728][T16815] __sys_setsockopt+0x212/0x2b0 [ 2673.531635][T16815] __x64_sys_setsockopt+0x62/0x70 [ 2673.536675][T16815] do_syscall_64+0x2b/0x70 [ 2673.541126][T16815] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2673.547080][T16815] RIP: 0033:0x7f1d726c3209 [ 2673.551509][T16815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2673.571158][T16815] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2673.579569][T16815] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2673.587591][T16815] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2673.595634][T16815] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2673.603602][T16815] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2673.611569][T16815] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2673.619548][T16815] [ 2673.622648][T16815] memory: usage 307200kB, limit 307200kB, failcnt 12018 [ 2673.629657][T16815] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2673.636532][T16815] Memory cgroup stats for /syz5: [ 2673.639238][T16815] anon 126976 [ 2673.639238][T16815] file 40960 [ 2673.639238][T16815] kernel 314388480 [ 2673.639238][T16815] kernel_stack 16384 [ 2673.639238][T16815] pagetables 73728 [ 2673.639238][T16815] percpu 5920 [ 2673.639238][T16815] sock 0 [ 2673.639238][T16815] vmalloc 0 [ 2673.639238][T16815] shmem 40960 [ 2673.639238][T16815] file_mapped 40960 [ 2673.639238][T16815] file_dirty 0 [ 2673.639238][T16815] file_writeback 0 [ 2673.639238][T16815] swapcached 0 [ 2673.639238][T16815] inactive_anon 131072 [ 2673.639238][T16815] active_anon 36864 [ 2673.639238][T16815] inactive_file 0 [ 2673.639238][T16815] active_file 0 [ 2673.639238][T16815] unevictable 0 [ 2673.639238][T16815] slab_reclaimable 30960 [ 2673.639238][T16815] slab_unreclaimable 403584 [ 2673.639238][T16815] slab 434544 [ 2673.639238][T16815] workingset_refault_anon 0 [ 2673.639238][T16815] workingset_refault_file 178 [ 2673.639238][T16815] workingset_activate_anon 0 [ 2673.639238][T16815] workingset_activate_file 0 [ 2673.734177][T16815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16814,uid=0 [ 2673.749529][T16815] Memory cgroup out of memory: Killed process 16815 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x20000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x5, 0xffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x5, 0xffffffff) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:39:29 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000ffffffff0000000000030017000000000002000000ffffffff00000000000000000100000000000000"], 0x50}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:39:29 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x3f00], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xf802}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) 18:39:29 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000ffffffff0000000000030017000000000002000000ffffffff00000000000000000100000000000000"], 0x50}}, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:39:29 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) 18:39:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) [ 2674.463992][T16846] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2674.477543][T16846] CPU: 1 PID: 16846 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2674.488294][T16846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2674.498361][T16846] Call Trace: [ 2674.501648][T16846] [ 2674.504583][T16846] dump_stack_lvl+0xd6/0x122 [ 2674.509185][T16846] dump_stack+0x11/0x12 [ 2674.513349][T16846] dump_header+0x98/0x410 [ 2674.517693][T16846] oom_kill_process+0x100/0x550 [ 2674.522706][T16846] out_of_memory+0x620/0x880 [ 2674.527356][T16846] mem_cgroup_oom+0x475/0x4f0 [ 2674.532071][T16846] try_charge_memcg+0x746/0x960 [ 2674.536916][T16846] ? debug_smp_processor_id+0x13/0x20 [ 2674.542341][T16846] __memcg_kmem_charge_page+0x2e4/0x480 [ 2674.547870][T16846] __alloc_pages+0x1c1/0x340 [ 2674.552537][T16846] alloc_pages+0x34d/0x450 [ 2674.556978][T16846] __vmalloc_node_range+0x730/0xef0 [ 2674.562215][T16846] kvmalloc_node+0xf3/0x140 [ 2674.566771][T16846] ? xt_alloc_table_info+0x39/0x70 [ 2674.571955][T16846] xt_alloc_table_info+0x39/0x70 [ 2674.576890][T16846] do_ip6t_set_ctl+0x645/0x1790 [ 2674.581780][T16846] ? rmqueue_pcplist+0x157/0x1e0 [ 2674.586764][T16846] ? rmqueue+0x4a/0xbc0 [ 2674.590994][T16846] nf_setsockopt+0x1a6/0x1c0 [ 2674.595575][T16846] ipv6_setsockopt+0x2724/0x2a90 [ 2674.600577][T16846] ? rb_insert_color+0x2b5/0x2c0 [ 2674.605609][T16846] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2674.611186][T16846] ? debug_smp_processor_id+0x13/0x20 [ 2674.616553][T16846] ? resched_curr+0x1d/0xc0 [ 2674.621304][T16846] ? check_preempt_wakeup+0x1c4/0x380 [ 2674.626667][T16846] ? __rcu_read_unlock+0x4a/0x70 [ 2674.631682][T16846] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2674.637088][T16846] ? avc_has_perm+0x6b/0x150 [ 2674.641730][T16846] ? avc_has_perm+0xd0/0x150 [ 2674.646389][T16846] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2674.652702][T16846] ? selinux_socket_setsockopt+0x145/0x170 [ 2674.658526][T16846] udpv6_setsockopt+0x85/0x90 [ 2674.663210][T16846] sock_common_setsockopt+0x5d/0x70 [ 2674.668514][T16846] ? sock_common_recvmsg+0xe0/0xe0 [ 2674.673632][T16846] __sys_setsockopt+0x212/0x2b0 [ 2674.678477][T16846] __x64_sys_setsockopt+0x62/0x70 [ 2674.683489][T16846] do_syscall_64+0x2b/0x70 [ 2674.687890][T16846] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2674.693772][T16846] RIP: 0033:0x7f53e730f209 [ 2674.698249][T16846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2674.717902][T16846] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2674.726321][T16846] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2674.734283][T16846] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2674.742266][T16846] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2674.750241][T16846] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2674.758384][T16846] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2674.766369][T16846] [ 2674.769524][T16846] memory: usage 307200kB, limit 307200kB, failcnt 32635 [ 2674.776474][T16846] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2674.783329][T16846] Memory cgroup stats for /syz2: [ 2674.783784][T16846] anon 122880 [ 2674.783784][T16846] file 53248 [ 2674.783784][T16846] kernel 314372096 [ 2674.783784][T16846] kernel_stack 16384 [ 2674.783784][T16846] pagetables 77824 [ 2674.783784][T16846] percpu 1184 [ 2674.783784][T16846] sock 0 [ 2674.783784][T16846] vmalloc 0 [ 2674.783784][T16846] shmem 49152 [ 2674.783784][T16846] file_mapped 49152 [ 2674.783784][T16846] file_dirty 4096 [ 2674.783784][T16846] file_writeback 0 [ 2674.783784][T16846] swapcached 0 [ 2674.783784][T16846] inactive_anon 139264 [ 2674.783784][T16846] active_anon 32768 [ 2674.783784][T16846] inactive_file 0 [ 2674.783784][T16846] active_file 4096 [ 2674.783784][T16846] unevictable 0 [ 2674.783784][T16846] slab_reclaimable 22376 [ 2674.783784][T16846] slab_unreclaimable 202792 [ 2674.783784][T16846] slab 225168 [ 2674.783784][T16846] workingset_refault_anon 0 [ 2674.783784][T16846] workingset_refault_file 115 [ 2674.783784][T16846] workingset_activate_anon 0 [ 2674.783784][T16846] workingset_activate_file 0 [ 2674.879115][T16846] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16845,uid=0 [ 2674.894467][T16846] Memory cgroup out of memory: Killed process 16846 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x27000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000ffffffff0000000000030017000000000002000000ffffffff00000000000000000100000000000000"], 0x50}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:39:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:30 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) r4 = socket$inet6(0xa, 0xa, 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000440)=""/222, &(0x7f0000000540)=0xde) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'bond_slave_0\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xffffffffffffff59, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x35}, [0xff, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffff00, 0xffffffff], 'batadv_slave_0\x00', 'bond0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xfffe}, {0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffc7a) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000400)=0x30) 18:39:30 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x4000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x201405}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}}, 0x20008081) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 18:39:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:30 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x201405}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}}, 0x20008081) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) socket$key(0xf, 0x3, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x201405}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}}, 0x20008081) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) (async) 18:39:30 executing program 0: socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2675.653629][T16882] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2675.667270][T16882] CPU: 1 PID: 16882 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2675.677954][T16882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2675.688011][T16882] Call Trace: [ 2675.691276][T16882] [ 2675.694197][T16882] dump_stack_lvl+0xd6/0x122 [ 2675.698809][T16882] dump_stack+0x11/0x12 [ 2675.703024][T16882] dump_header+0x98/0x410 [ 2675.707367][T16882] oom_kill_process+0x100/0x550 [ 2675.712251][T16882] out_of_memory+0x620/0x880 [ 2675.716895][T16882] mem_cgroup_oom+0x475/0x4f0 [ 2675.721562][T16882] try_charge_memcg+0x746/0x960 [ 2675.726538][T16882] ? debug_smp_processor_id+0x13/0x20 [ 2675.731947][T16882] __memcg_kmem_charge_page+0x2e4/0x480 [ 2675.737506][T16882] __alloc_pages+0x1c1/0x340 [ 2675.742140][T16882] alloc_pages+0x34d/0x450 [ 2675.746560][T16882] __vmalloc_node_range+0x730/0xef0 [ 2675.751824][T16882] kvmalloc_node+0xf3/0x140 [ 2675.756313][T16882] ? xt_alloc_table_info+0x39/0x70 [ 2675.761457][T16882] xt_alloc_table_info+0x39/0x70 [ 2675.766394][T16882] do_ip6t_set_ctl+0x645/0x1790 [ 2675.771280][T16882] ? rmqueue_pcplist+0x157/0x1e0 [ 2675.776203][T16882] ? rmqueue+0x4a/0xbc0 [ 2675.780343][T16882] ? page_counter_cancel+0xa4/0x1f0 [ 2675.785543][T16882] nf_setsockopt+0x1a6/0x1c0 [ 2675.790118][T16882] ipv6_setsockopt+0x2724/0x2a90 [ 2675.795131][T16882] ? _raw_spin_unlock+0x2d/0x50 [ 2675.799980][T16882] ? finish_task_switch+0xc5/0x260 [ 2675.805075][T16882] ? __schedule+0x50d/0x6e0 [ 2675.809589][T16882] ? schedule+0x5b/0x80 [ 2675.813727][T16882] ? futex_wait_queue+0x11c/0x160 [ 2675.818747][T16882] ? __rcu_read_unlock+0x4a/0x70 [ 2675.823736][T16882] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2675.829165][T16882] ? avc_has_perm+0x6b/0x150 [ 2675.833734][T16882] ? avc_has_perm+0xd0/0x150 [ 2675.838330][T16882] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2675.844729][T16882] ? selinux_socket_setsockopt+0x145/0x170 [ 2675.850608][T16882] udpv6_setsockopt+0x85/0x90 [ 2675.855325][T16882] sock_common_setsockopt+0x5d/0x70 [ 2675.860660][T16882] ? sock_common_recvmsg+0xe0/0xe0 [ 2675.865794][T16882] __sys_setsockopt+0x212/0x2b0 [ 2675.870856][T16882] __x64_sys_setsockopt+0x62/0x70 [ 2675.875969][T16882] do_syscall_64+0x2b/0x70 [ 2675.880427][T16882] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2675.886345][T16882] RIP: 0033:0x7f53e730f209 [ 2675.890744][T16882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2675.910348][T16882] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2675.918778][T16882] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2675.926817][T16882] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2675.934966][T16882] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2675.943144][T16882] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2675.951128][T16882] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2675.959113][T16882] [ 2675.962292][T16882] memory: usage 307184kB, limit 307200kB, failcnt 32702 [ 2675.969268][T16882] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2675.976222][T16882] Memory cgroup stats for /syz2: [ 2675.979939][T16882] anon 122880 [ 2675.979939][T16882] file 53248 [ 2675.979939][T16882] kernel 314380288 [ 2675.979939][T16882] kernel_stack 16384 [ 2675.979939][T16882] pagetables 77824 [ 2675.979939][T16882] percpu 1184 [ 2675.979939][T16882] sock 0 [ 2675.979939][T16882] vmalloc 0 [ 2675.979939][T16882] shmem 49152 [ 2675.979939][T16882] file_mapped 49152 [ 2675.979939][T16882] file_dirty 4096 [ 2675.979939][T16882] file_writeback 0 [ 2675.979939][T16882] swapcached 0 [ 2675.979939][T16882] inactive_anon 139264 [ 2675.979939][T16882] active_anon 32768 [ 2675.979939][T16882] inactive_file 0 [ 2675.979939][T16882] active_file 4096 [ 2675.979939][T16882] unevictable 0 [ 2675.979939][T16882] slab_reclaimable 22376 [ 2675.979939][T16882] slab_unreclaimable 208184 [ 2675.979939][T16882] slab 230560 [ 2675.979939][T16882] workingset_refault_anon 0 [ 2675.979939][T16882] workingset_refault_file 115 [ 2675.979939][T16882] workingset_activate_anon 0 [ 2675.979939][T16882] workingset_activate_file 0 [ 2676.075194][T16882] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16881,uid=0 [ 2676.090584][T16882] Memory cgroup out of memory: Killed process 16882 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x40000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x201405}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x88}}, 0x20008081) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 18:39:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) r4 = socket$inet6(0xa, 0xa, 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000440)=""/222, &(0x7f0000000540)=0xde) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'bond_slave_0\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xffffffffffffff59, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x35}, [0xff, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffff00, 0xffffffff], 'batadv_slave_0\x00', 'bond0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xfffe}, {0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffc7a) (async, rerun: 64) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000400)=0x30) (rerun: 64) 18:39:31 executing program 0: socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfdff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:31 executing program 0: socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x12) 18:39:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:39:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r1, 0x10000000) 18:39:31 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) (async) socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r1, 0x10000000) (rerun: 64) [ 2676.837075][T16916] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2676.850660][T16916] CPU: 1 PID: 16916 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2676.861364][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2676.871478][T16916] Call Trace: [ 2676.874741][T16916] [ 2676.877703][T16916] dump_stack_lvl+0xd6/0x122 [ 2676.882339][T16916] dump_stack+0x11/0x12 [ 2676.886583][T16916] dump_header+0x98/0x410 [ 2676.890923][T16916] oom_kill_process+0x100/0x550 [ 2676.895763][T16916] out_of_memory+0x620/0x880 [ 2676.900445][T16916] mem_cgroup_oom+0x475/0x4f0 [ 2676.905125][T16916] try_charge_memcg+0x746/0x960 [ 2676.910004][T16916] __memcg_kmem_charge_page+0x2e4/0x480 [ 2676.915553][T16916] __alloc_pages+0x1c1/0x340 [ 2676.920134][T16916] alloc_pages+0x34d/0x450 [ 2676.924554][T16916] __vmalloc_node_range+0x730/0xef0 [ 2676.929778][T16916] kvmalloc_node+0xf3/0x140 [ 2676.934284][T16916] ? xt_alloc_table_info+0x39/0x70 [ 2676.939392][T16916] xt_alloc_table_info+0x39/0x70 [ 2676.944462][T16916] do_ip6t_set_ctl+0x645/0x1790 [ 2676.949313][T16916] ? rmqueue_pcplist+0x157/0x1e0 [ 2676.954320][T16916] ? rmqueue+0x4a/0xbc0 [ 2676.958466][T16916] nf_setsockopt+0x1a6/0x1c0 [ 2676.963202][T16916] ipv6_setsockopt+0x2724/0x2a90 [ 2676.968210][T16916] ? _raw_spin_unlock+0x2d/0x50 [ 2676.973135][T16916] ? finish_task_switch+0xc5/0x260 [ 2676.978308][T16916] ? __schedule+0x50d/0x6e0 [ 2676.982798][T16916] ? schedule+0x5b/0x80 [ 2676.987006][T16916] ? futex_wait_queue+0x11c/0x160 [ 2676.992036][T16916] ? __rcu_read_unlock+0x4a/0x70 [ 2676.996996][T16916] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2677.002607][T16916] ? avc_has_perm+0x6b/0x150 [ 2677.007286][T16916] ? avc_has_perm+0xd0/0x150 [ 2677.011947][T16916] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2677.018281][T16916] ? selinux_socket_setsockopt+0x145/0x170 [ 2677.024083][T16916] udpv6_setsockopt+0x85/0x90 [ 2677.028833][T16916] sock_common_setsockopt+0x5d/0x70 [ 2677.034020][T16916] ? sock_common_recvmsg+0xe0/0xe0 [ 2677.039247][T16916] __sys_setsockopt+0x212/0x2b0 [ 2677.044088][T16916] __x64_sys_setsockopt+0x62/0x70 [ 2677.049194][T16916] do_syscall_64+0x2b/0x70 [ 2677.053652][T16916] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2677.059557][T16916] RIP: 0033:0x7f1d726c3209 [ 2677.063990][T16916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2677.085654][T16916] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2677.094113][T16916] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2677.102178][T16916] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2677.110160][T16916] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2677.118140][T16916] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2677.126229][T16916] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2677.134201][T16916] [ 2677.137381][T16916] memory: usage 307184kB, limit 307200kB, failcnt 12168 [ 2677.144315][T16916] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2677.151259][T16916] Memory cgroup stats for /syz5: [ 2677.154530][T16916] anon 126976 [ 2677.154530][T16916] file 40960 [ 2677.154530][T16916] kernel 314388480 [ 2677.154530][T16916] kernel_stack 16384 [ 2677.154530][T16916] pagetables 73728 [ 2677.154530][T16916] percpu 5920 [ 2677.154530][T16916] sock 0 [ 2677.154530][T16916] vmalloc 0 [ 2677.154530][T16916] shmem 40960 [ 2677.154530][T16916] file_mapped 40960 [ 2677.154530][T16916] file_dirty 0 [ 2677.154530][T16916] file_writeback 0 [ 2677.154530][T16916] swapcached 0 [ 2677.154530][T16916] inactive_anon 131072 [ 2677.154530][T16916] active_anon 36864 [ 2677.154530][T16916] inactive_file 0 [ 2677.154530][T16916] active_file 0 [ 2677.154530][T16916] unevictable 0 [ 2677.154530][T16916] slab_reclaimable 30960 [ 2677.154530][T16916] slab_unreclaimable 403584 [ 2677.154530][T16916] slab 434544 [ 2677.154530][T16916] workingset_refault_anon 0 18:39:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x80000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) r4 = socket$inet6(0xa, 0xa, 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000440)=""/222, &(0x7f0000000540)=0xde) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'bond_slave_0\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xffffffffffffff59, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x35}, [0xff, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffff00, 0xffffffff], 'batadv_slave_0\x00', 'bond0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xfffe}, {0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffc7a) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000400)=0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) (async) socket$inet6(0xa, 0xa, 0x1) (async) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000440)=""/222, &(0x7f0000000540)=0xde) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'bond_slave_0\x00', {}, {}, 0x2f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xffffffffffffff59, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x35}, [0xff, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffff00, 0xffffffff], 'batadv_slave_0\x00', 'bond0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xfffe}, {0x0, 0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffc7a) (async) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000400)=0x30) (async) 18:39:32 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r1, 0x10000000) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) (async) socket$key(0xf, 0x3, 0x2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) (async) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r1, 0x10000000) (async) 18:39:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r1, 0x10000000) [ 2677.154530][T16916] workingset_refault_file 178 [ 2677.154530][T16916] workingset_activate_anon 0 [ 2677.154530][T16916] workingset_activate_file 0 [ 2677.249663][T16916] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16915,uid=0 [ 2677.265013][T16916] Memory cgroup out of memory: Killed process 16916 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfeff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:32 executing program 4: r0 = epoll_create(0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x70002001}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x10, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x17, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x6, @remote, 0x484}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bba, 0x3, {0x6, 0x33, 0x6, 0x0, 0x0, 0x7, 0x0, @in=@private=0xa010102, @in=@empty}}, @sadb_x_nat_t_port={0x1}]}, 0x80}}, 0x4008095) 18:39:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r1, 0x10000000) 18:39:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x100, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x7, 0x73, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xfc, 0xd312}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0xff, 0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'ip_vti0\x00', {}, {}, 0x2b, 0x40, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'veth0_to_bridge\x00', {}, {}, 0x33, 0x7d, 0x7, 0x1}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x8, 0x81, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 18:39:32 executing program 4: r0 = epoll_create(0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x70002001}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x10, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x17, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x6, @remote, 0x484}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bba, 0x3, {0x6, 0x33, 0x6, 0x0, 0x0, 0x7, 0x0, @in=@private=0xa010102, @in=@empty}}, @sadb_x_nat_t_port={0x1}]}, 0x80}}, 0x4008095) epoll_create(0x40) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x70002001}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x10, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x17, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x6, @remote, 0x484}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bba, 0x3, {0x6, 0x33, 0x6, 0x0, 0x0, 0x7, 0x0, @in=@private=0xa010102, @in=@empty}}, @sadb_x_nat_t_port={0x1}]}, 0x80}}, 0x4008095) (async) 18:39:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2677.482291][T16974] x_tables: duplicate underflow at hook 2 [ 2677.924631][T16963] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2677.938164][T16963] CPU: 1 PID: 16963 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2677.948892][T16963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2677.958999][T16963] Call Trace: [ 2677.962292][T16963] [ 2677.965226][T16963] dump_stack_lvl+0xd6/0x122 [ 2677.969826][T16963] dump_stack+0x11/0x12 [ 2677.974055][T16963] dump_header+0x98/0x410 [ 2677.978405][T16963] oom_kill_process+0x100/0x550 [ 2677.983273][T16963] out_of_memory+0x620/0x880 [ 2677.987874][T16963] mem_cgroup_oom+0x475/0x4f0 [ 2677.992562][T16963] try_charge_memcg+0x746/0x960 [ 2677.997417][T16963] ? debug_smp_processor_id+0x13/0x20 [ 2678.002858][T16963] __memcg_kmem_charge_page+0x2e4/0x480 [ 2678.008414][T16963] __alloc_pages+0x1c1/0x340 [ 2678.013017][T16963] alloc_pages+0x34d/0x450 [ 2678.017426][T16963] __vmalloc_node_range+0x730/0xef0 [ 2678.022680][T16963] kvmalloc_node+0xf3/0x140 [ 2678.027222][T16963] ? xt_alloc_table_info+0x39/0x70 [ 2678.032478][T16963] xt_alloc_table_info+0x39/0x70 [ 2678.037405][T16963] do_ip6t_set_ctl+0x645/0x1790 [ 2678.042242][T16963] ? rmqueue_pcplist+0x157/0x1e0 [ 2678.047263][T16963] ? rmqueue+0x4a/0xbc0 [ 2678.051419][T16963] ? page_counter_cancel+0xa4/0x1f0 [ 2678.056667][T16963] nf_setsockopt+0x1a6/0x1c0 [ 2678.061348][T16963] ipv6_setsockopt+0x2724/0x2a90 [ 2678.066391][T16963] ? _raw_spin_unlock+0x2d/0x50 [ 2678.071252][T16963] ? finish_task_switch+0xc5/0x260 [ 2678.076422][T16963] ? __schedule+0x50d/0x6e0 [ 2678.080934][T16963] ? schedule+0x5b/0x80 [ 2678.085078][T16963] ? futex_wait_queue+0x11c/0x160 [ 2678.090125][T16963] ? __rcu_read_unlock+0x4a/0x70 [ 2678.095063][T16963] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2678.100487][T16963] ? avc_has_perm+0x6b/0x150 [ 2678.105116][T16963] ? avc_has_perm+0xd0/0x150 [ 2678.109788][T16963] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2678.116280][T16963] ? selinux_socket_setsockopt+0x145/0x170 [ 2678.122074][T16963] udpv6_setsockopt+0x85/0x90 [ 2678.126798][T16963] sock_common_setsockopt+0x5d/0x70 [ 2678.132090][T16963] ? sock_common_recvmsg+0xe0/0xe0 [ 2678.137208][T16963] __sys_setsockopt+0x212/0x2b0 [ 2678.142138][T16963] __x64_sys_setsockopt+0x62/0x70 [ 2678.147174][T16963] do_syscall_64+0x2b/0x70 [ 2678.151607][T16963] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2678.157686][T16963] RIP: 0033:0x7f53e730f209 [ 2678.162567][T16963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2678.182242][T16963] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2678.190699][T16963] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2678.198744][T16963] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2678.206754][T16963] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2678.214774][T16963] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2678.222776][T16963] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2678.230778][T16963] [ 2678.233911][T16963] memory: usage 307200kB, limit 307200kB, failcnt 32807 [ 2678.240870][T16963] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2678.247812][T16963] Memory cgroup stats for /syz2: [ 2678.248140][T16963] anon 122880 [ 2678.248140][T16963] file 53248 [ 2678.248140][T16963] kernel 314376192 [ 2678.248140][T16963] kernel_stack 16384 [ 2678.248140][T16963] pagetables 77824 [ 2678.248140][T16963] percpu 1184 [ 2678.248140][T16963] sock 0 [ 2678.248140][T16963] vmalloc 0 [ 2678.248140][T16963] shmem 49152 [ 2678.248140][T16963] file_mapped 49152 [ 2678.248140][T16963] file_dirty 0 [ 2678.248140][T16963] file_writeback 0 [ 2678.248140][T16963] swapcached 0 [ 2678.248140][T16963] inactive_anon 139264 [ 2678.248140][T16963] active_anon 32768 [ 2678.248140][T16963] inactive_file 0 [ 2678.248140][T16963] active_file 4096 [ 2678.248140][T16963] unevictable 0 [ 2678.248140][T16963] slab_reclaimable 22376 [ 2678.248140][T16963] slab_unreclaimable 202792 [ 2678.248140][T16963] slab 225168 [ 2678.248140][T16963] workingset_refault_anon 0 [ 2678.248140][T16963] workingset_refault_file 115 [ 2678.248140][T16963] workingset_activate_anon 0 [ 2678.248140][T16963] workingset_activate_file 0 [ 2678.343086][T16963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16962,uid=0 [ 2678.358383][T16963] Memory cgroup out of memory: Killed process 16963 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x101000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r1, 0x10000000) 18:39:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x100, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x7, 0x73, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xfc, 0xd312}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0xff, 0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'ip_vti0\x00', {}, {}, 0x2b, 0x40, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'veth0_to_bridge\x00', {}, {}, 0x33, 0x7d, 0x7, 0x1}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x8, 0x81, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x100, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x7, 0x73, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xfc, 0xd312}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0xff, 0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'ip_vti0\x00', {}, {}, 0x2b, 0x40, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'veth0_to_bridge\x00', {}, {}, 0x33, 0x7d, 0x7, 0x1}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x8, 0x81, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) 18:39:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:34 executing program 4: r0 = epoll_create(0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x70002001}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x10, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x17, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x6, @remote, 0x484}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bba, 0x3, {0x6, 0x33, 0x6, 0x0, 0x0, 0x7, 0x0, @in=@private=0xa010102, @in=@empty}}, @sadb_x_nat_t_port={0x1}]}, 0x80}}, 0x4008095) epoll_create(0x40) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0x70002001}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x10, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x5, 0x17, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x6, @remote, 0x484}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x4, 0x0, 0x6e6bba, 0x3, {0x6, 0x33, 0x6, 0x0, 0x0, 0x7, 0x0, @in=@private=0xa010102, @in=@empty}}, @sadb_x_nat_t_port={0x1}]}, 0x80}}, 0x4008095) (async) 18:39:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfffd], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) 18:39:34 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) read$eventfd(r1, &(0x7f0000000000), 0x8) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x68, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x42}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50}}, 0x8080) 18:39:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x100, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x7, 0x73, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xfc, 0xd312}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0xff, 0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'ip_vti0\x00', {}, {}, 0x2b, 0x40, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'veth0_to_bridge\x00', {}, {}, 0x33, 0x7d, 0x7, 0x1}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x8, 0x81, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3c0, 0xffffffff, 0x100, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x7, 0x73, 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xfc, 0xd312}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0xff, 0x0, 0xff, 0xff000000], 'veth0_macvtap\x00', 'ip_vti0\x00', {}, {}, 0x2b, 0x40, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'ip_vti0\x00', 'veth0_to_bridge\x00', {}, {}, 0x33, 0x7d, 0x7, 0x1}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0x8, 0x81, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) [ 2678.554998][T16992] x_tables: duplicate underflow at hook 2 [ 2678.570297][T17005] x_tables: duplicate underflow at hook 2 18:39:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}}, 0x0) [ 2678.633769][T17016] x_tables: duplicate underflow at hook 2 [ 2678.659291][T17019] x_tables: duplicate underflow at hook 2 [ 2679.109598][T17003] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2679.123264][T17003] CPU: 0 PID: 17003 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2679.134019][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2679.144084][T17003] Call Trace: [ 2679.147354][T17003] [ 2679.150345][T17003] dump_stack_lvl+0xd6/0x122 [ 2679.154999][T17003] dump_stack+0x11/0x12 [ 2679.159136][T17003] dump_header+0x98/0x410 [ 2679.163514][T17003] oom_kill_process+0x100/0x550 [ 2679.168372][T17003] out_of_memory+0x620/0x880 [ 2679.173036][T17003] mem_cgroup_oom+0x475/0x4f0 [ 2679.177732][T17003] try_charge_memcg+0x746/0x960 [ 2679.182622][T17003] ? debug_smp_processor_id+0x13/0x20 [ 2679.187999][T17003] ? delay_tsc+0xc1/0xe0 [ 2679.192446][T17003] __memcg_kmem_charge_page+0x2e4/0x480 [ 2679.197977][T17003] __alloc_pages+0x1c1/0x340 [ 2679.202558][T17003] alloc_pages+0x34d/0x450 [ 2679.206956][T17003] __vmalloc_node_range+0x730/0xef0 [ 2679.212310][T17003] kvmalloc_node+0xf3/0x140 [ 2679.216823][T17003] ? xt_alloc_table_info+0x39/0x70 [ 2679.221963][T17003] xt_alloc_table_info+0x39/0x70 [ 2679.226919][T17003] do_ip6t_set_ctl+0x645/0x1790 [ 2679.231780][T17003] ? rmqueue_pcplist+0x157/0x1e0 [ 2679.236723][T17003] ? rmqueue+0x4a/0xbc0 [ 2679.240910][T17003] nf_setsockopt+0x1a6/0x1c0 [ 2679.245492][T17003] ipv6_setsockopt+0x2724/0x2a90 [ 2679.250487][T17003] ? rb_insert_color+0x2b5/0x2c0 [ 2679.255416][T17003] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2679.260955][T17003] ? debug_smp_processor_id+0x13/0x20 [ 2679.266334][T17003] ? resched_curr+0x1d/0xc0 [ 2679.270831][T17003] ? check_preempt_wakeup+0x1c4/0x380 [ 2679.276187][T17003] ? __rcu_read_unlock+0x4a/0x70 [ 2679.281221][T17003] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2679.286697][T17003] ? avc_has_perm+0x6b/0x150 [ 2679.291268][T17003] ? avc_has_perm+0xd0/0x150 [ 2679.295895][T17003] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2679.302209][T17003] ? selinux_socket_setsockopt+0x145/0x170 [ 2679.308039][T17003] udpv6_setsockopt+0x85/0x90 [ 2679.312706][T17003] sock_common_setsockopt+0x5d/0x70 [ 2679.317943][T17003] ? sock_common_recvmsg+0xe0/0xe0 [ 2679.323077][T17003] __sys_setsockopt+0x212/0x2b0 [ 2679.327945][T17003] __x64_sys_setsockopt+0x62/0x70 [ 2679.332990][T17003] do_syscall_64+0x2b/0x70 [ 2679.337392][T17003] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2679.343316][T17003] RIP: 0033:0x7f1d726c3209 [ 2679.347711][T17003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2679.367423][T17003] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2679.375951][T17003] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2679.383912][T17003] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2679.391939][T17003] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2679.399894][T17003] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2679.407882][T17003] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2679.415875][T17003] [ 2679.419047][T17003] memory: usage 307188kB, limit 307200kB, failcnt 12265 [ 2679.425995][T17003] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2679.432936][T17003] Memory cgroup stats for /syz5: [ 2679.434833][T17003] anon 126976 [ 2679.434833][T17003] file 40960 [ 2679.434833][T17003] kernel 314392576 [ 2679.434833][T17003] kernel_stack 32768 [ 2679.434833][T17003] pagetables 73728 [ 2679.434833][T17003] percpu 5920 [ 2679.434833][T17003] sock 0 [ 2679.434833][T17003] vmalloc 0 [ 2679.434833][T17003] shmem 40960 [ 2679.434833][T17003] file_mapped 40960 [ 2679.434833][T17003] file_dirty 0 [ 2679.434833][T17003] file_writeback 0 [ 2679.434833][T17003] swapcached 0 [ 2679.434833][T17003] inactive_anon 131072 [ 2679.434833][T17003] active_anon 36864 [ 2679.434833][T17003] inactive_file 0 [ 2679.434833][T17003] active_file 0 [ 2679.434833][T17003] unevictable 0 [ 2679.434833][T17003] slab_reclaimable 30960 [ 2679.434833][T17003] slab_unreclaimable 404856 [ 2679.434833][T17003] slab 435816 [ 2679.434833][T17003] workingset_refault_anon 0 [ 2679.434833][T17003] workingset_refault_file 178 [ 2679.434833][T17003] workingset_activate_anon 0 [ 2679.434833][T17003] workingset_activate_file 0 [ 2679.529960][T17003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=16989,uid=0 18:39:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x700200], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:35 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) read$eventfd(r1, &(0x7f0000000000), 0x8) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x68, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x42}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x4) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50}}, 0x8080) 18:39:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x398, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x86, 0x2}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x81, 0x8, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0xfffffc01, 0x8, "b180fce3bf1d1c729991e8dbe5f6823e2b0f4acd86a44d8f1fb49e3facc87ee13a18385582579c0ca7d266b0c4ad2321de8fbbb7b0fc971b8f76b788dfd7ea7fd12a41b3b9943ea9096cde642ab2fde09a4c03a97cc71bac9a876c5a994ae3c70332861ada17a6ed1cd344b372ade298f63d28646fbf9d9de2b72e4f293960bdcfb41d297e9894a35cb3dbaf4433814021b9d7cb391def8c5bddcae76376f9afee6387c16983c7ceac493f0a07bd6da361170182ac6e1f3b5918d908d7e86ed0ada4260858c0ef4da8"}, 0xd1, 0x80, &(0x7f0000000100)={0x22, 0x56, 0x1, 0x2, 0x6e}, 0x6) 18:39:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) [ 2679.545427][T17003] Memory cgroup out of memory: Killed process 17003 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfffe], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:35 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) read$eventfd(r1, &(0x7f0000000000), 0x8) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x68, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x42}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x4) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50}}, 0x8080) 18:39:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:39:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x120}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x398, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x86, 0x2}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x81, 0x8, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0xfffffc01, 0x8, "b180fce3bf1d1c729991e8dbe5f6823e2b0f4acd86a44d8f1fb49e3facc87ee13a18385582579c0ca7d266b0c4ad2321de8fbbb7b0fc971b8f76b788dfd7ea7fd12a41b3b9943ea9096cde642ab2fde09a4c03a97cc71bac9a876c5a994ae3c70332861ada17a6ed1cd344b372ade298f63d28646fbf9d9de2b72e4f293960bdcfb41d297e9894a35cb3dbaf4433814021b9d7cb391def8c5bddcae76376f9afee6387c16983c7ceac493f0a07bd6da361170182ac6e1f3b5918d908d7e86ed0ada4260858c0ef4da8"}, 0xd1, 0x80, &(0x7f0000000100)={0x22, 0x56, 0x1, 0x2, 0x6e}, 0x6) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x398, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x86, 0x2}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x81, 0x8, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0xfffffc01, 0x8, "b180fce3bf1d1c729991e8dbe5f6823e2b0f4acd86a44d8f1fb49e3facc87ee13a18385582579c0ca7d266b0c4ad2321de8fbbb7b0fc971b8f76b788dfd7ea7fd12a41b3b9943ea9096cde642ab2fde09a4c03a97cc71bac9a876c5a994ae3c70332861ada17a6ed1cd344b372ade298f63d28646fbf9d9de2b72e4f293960bdcfb41d297e9894a35cb3dbaf4433814021b9d7cb391def8c5bddcae76376f9afee6387c16983c7ceac493f0a07bd6da361170182ac6e1f3b5918d908d7e86ed0ada4260858c0ef4da8"}, 0xd1, 0x80, &(0x7f0000000100)={0x22, 0x56, 0x1, 0x2, 0x6e}, 0x6) (async) 18:39:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) 18:39:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x218}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2680.173170][T17030] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2680.186824][T17030] CPU: 1 PID: 17030 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2680.197515][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2680.207608][T17030] Call Trace: [ 2680.210985][T17030] [ 2680.213938][T17030] dump_stack_lvl+0xd6/0x122 [ 2680.218566][T17030] dump_stack+0x11/0x12 [ 2680.222734][T17030] dump_header+0x98/0x410 [ 2680.227166][T17030] oom_kill_process+0x100/0x550 [ 2680.232064][T17030] out_of_memory+0x620/0x880 [ 2680.236670][T17030] mem_cgroup_oom+0x475/0x4f0 [ 2680.241423][T17030] try_charge_memcg+0x746/0x960 [ 2680.246283][T17030] ? debug_smp_processor_id+0x13/0x20 [ 2680.251734][T17030] ? delay_tsc+0xc1/0xe0 [ 2680.255995][T17030] __memcg_kmem_charge_page+0x2e4/0x480 [ 2680.261551][T17030] __alloc_pages+0x1c1/0x340 [ 2680.266182][T17030] alloc_pages+0x34d/0x450 [ 2680.270634][T17030] __vmalloc_node_range+0x730/0xef0 [ 2680.275908][T17030] kvmalloc_node+0xf3/0x140 [ 2680.280465][T17030] ? xt_alloc_table_info+0x39/0x70 [ 2680.285628][T17030] xt_alloc_table_info+0x39/0x70 [ 2680.290704][T17030] do_ip6t_set_ctl+0x645/0x1790 [ 2680.295572][T17030] ? rmqueue_pcplist+0x157/0x1e0 [ 2680.300536][T17030] ? rmqueue+0x4a/0xbc0 [ 2680.304685][T17030] nf_setsockopt+0x1a6/0x1c0 [ 2680.309311][T17030] ipv6_setsockopt+0x2724/0x2a90 [ 2680.314240][T17030] ? rb_insert_color+0x2b5/0x2c0 [ 2680.319222][T17030] ? enqueue_entity+0x35b/0x560 [ 2680.324071][T17030] ? debug_smp_processor_id+0x13/0x20 [ 2680.329439][T17030] ? resched_curr+0x1d/0xc0 [ 2680.333996][T17030] ? __rcu_read_unlock+0x4a/0x70 [ 2680.339085][T17030] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2680.344523][T17030] ? avc_has_perm+0x6b/0x150 [ 2680.349105][T17030] ? avc_has_perm+0xd0/0x150 [ 2680.353722][T17030] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2680.360071][T17030] ? selinux_socket_setsockopt+0x145/0x170 [ 2680.365929][T17030] udpv6_setsockopt+0x85/0x90 [ 2680.370691][T17030] sock_common_setsockopt+0x5d/0x70 [ 2680.376019][T17030] ? sock_common_recvmsg+0xe0/0xe0 [ 2680.381138][T17030] __sys_setsockopt+0x212/0x2b0 [ 2680.385988][T17030] __x64_sys_setsockopt+0x62/0x70 [ 2680.391088][T17030] do_syscall_64+0x2b/0x70 [ 2680.395598][T17030] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2680.401526][T17030] RIP: 0033:0x7f53e730f209 [ 2680.405921][T17030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2680.425515][T17030] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2680.433919][T17030] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2680.441956][T17030] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2680.449932][T17030] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2680.457901][T17030] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2680.465875][T17030] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2680.473849][T17030] [ 2680.476993][T17030] memory: usage 307200kB, limit 307200kB, failcnt 32935 [ 2680.483970][T17030] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2680.490833][T17030] Memory cgroup stats for /syz2: [ 2680.491305][T17030] anon 122880 [ 2680.491305][T17030] file 53248 [ 2680.491305][T17030] kernel 314372096 [ 2680.491305][T17030] kernel_stack 16384 [ 2680.491305][T17030] pagetables 77824 [ 2680.491305][T17030] percpu 1184 [ 2680.491305][T17030] sock 0 [ 2680.491305][T17030] vmalloc 0 [ 2680.491305][T17030] shmem 49152 [ 2680.491305][T17030] file_mapped 49152 [ 2680.491305][T17030] file_dirty 0 [ 2680.491305][T17030] file_writeback 0 [ 2680.491305][T17030] swapcached 0 [ 2680.491305][T17030] inactive_anon 139264 [ 2680.491305][T17030] active_anon 32768 [ 2680.491305][T17030] inactive_file 0 [ 2680.491305][T17030] active_file 4096 [ 2680.491305][T17030] unevictable 0 [ 2680.491305][T17030] slab_reclaimable 22376 [ 2680.491305][T17030] slab_unreclaimable 202792 [ 2680.491305][T17030] slab 225168 [ 2680.491305][T17030] workingset_refault_anon 0 [ 2680.491305][T17030] workingset_refault_file 115 [ 2680.491305][T17030] workingset_activate_anon 0 [ 2680.491305][T17030] workingset_activate_file 0 [ 2680.586283][T17030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17028,uid=0 [ 2680.602008][T17030] Memory cgroup out of memory: Killed process 17030 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x1000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x398, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x86, 0x2}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x81, 0x8, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0xfffffc01, 0x8, "b180fce3bf1d1c729991e8dbe5f6823e2b0f4acd86a44d8f1fb49e3facc87ee13a18385582579c0ca7d266b0c4ad2321de8fbbb7b0fc971b8f76b788dfd7ea7fd12a41b3b9943ea9096cde642ab2fde09a4c03a97cc71bac9a876c5a994ae3c70332861ada17a6ed1cd344b372ade298f63d28646fbf9d9de2b72e4f293960bdcfb41d297e9894a35cb3dbaf4433814021b9d7cb391def8c5bddcae76376f9afee6387c16983c7ceac493f0a07bd6da361170182ac6e1f3b5918d908d7e86ed0ada4260858c0ef4da8"}, 0xd1, 0x80, &(0x7f0000000100)={0x22, 0x56, 0x1, 0x2, 0x6e}, 0x6) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x398, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x86, 0x2}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff000000], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x81, 0x8, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0xfffffc01, 0x8, "b180fce3bf1d1c729991e8dbe5f6823e2b0f4acd86a44d8f1fb49e3facc87ee13a18385582579c0ca7d266b0c4ad2321de8fbbb7b0fc971b8f76b788dfd7ea7fd12a41b3b9943ea9096cde642ab2fde09a4c03a97cc71bac9a876c5a994ae3c70332861ada17a6ed1cd344b372ade298f63d28646fbf9d9de2b72e4f293960bdcfb41d297e9894a35cb3dbaf4433814021b9d7cb391def8c5bddcae76376f9afee6387c16983c7ceac493f0a07bd6da361170182ac6e1f3b5918d908d7e86ed0ada4260858c0ef4da8"}, 0xd1, 0x80, &(0x7f0000000100)={0x22, 0x56, 0x1, 0x2, 0x6e}, 0x6) (async) 18:39:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/4096, 0x114000, 0x800, 0x7, 0x1}, 0x20) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x0, 0x0, 0x7fff}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000011c0), &(0x7f0000001200)=0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) fstat(r2, &(0x7f0000000000)) 18:39:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x2f8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) 18:39:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x12ab1], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x370}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) 18:39:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/4096, 0x114000, 0x800, 0x7, 0x1}, 0x20) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x0, 0x0, 0x7fff}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000011c0), &(0x7f0000001200)=0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) fstat(r2, &(0x7f0000000000)) 18:39:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) 18:39:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x1802}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/4096, 0x114000, 0x800, 0x7, 0x1}, 0x20) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4, 0x0, 0x0, 0x7fff}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000011c0), &(0x7f0000001200)=0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) fstat(r2, &(0x7f0000000000)) [ 2681.399923][T17061] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2681.413455][T17061] CPU: 0 PID: 17061 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2681.424122][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2681.434157][T17061] Call Trace: [ 2681.437480][T17061] [ 2681.440449][T17061] dump_stack_lvl+0xd6/0x122 [ 2681.445078][T17061] dump_stack+0x11/0x12 [ 2681.449249][T17061] dump_header+0x98/0x410 [ 2681.453565][T17061] oom_kill_process+0x100/0x550 [ 2681.458531][T17061] out_of_memory+0x620/0x880 [ 2681.463201][T17061] mem_cgroup_oom+0x475/0x4f0 [ 2681.467956][T17061] try_charge_memcg+0x746/0x960 [ 2681.472793][T17061] ? debug_smp_processor_id+0x13/0x20 [ 2681.478184][T17061] ? delay_tsc+0xc1/0xe0 [ 2681.482410][T17061] __memcg_kmem_charge_page+0x2e4/0x480 [ 2681.487962][T17061] __alloc_pages+0x1c1/0x340 [ 2681.492623][T17061] alloc_pages+0x34d/0x450 [ 2681.497044][T17061] __vmalloc_node_range+0x730/0xef0 [ 2681.502800][T17061] kvmalloc_node+0xf3/0x140 [ 2681.507289][T17061] ? xt_alloc_table_info+0x39/0x70 [ 2681.512528][T17061] xt_alloc_table_info+0x39/0x70 [ 2681.517514][T17061] do_ip6t_set_ctl+0x645/0x1790 [ 2681.522453][T17061] ? rmqueue_pcplist+0x157/0x1e0 [ 2681.527386][T17061] ? rmqueue+0x4a/0xbc0 [ 2681.531534][T17061] ? page_counter_cancel+0xa4/0x1f0 [ 2681.536720][T17061] nf_setsockopt+0x1a6/0x1c0 [ 2681.541297][T17061] ipv6_setsockopt+0x2724/0x2a90 [ 2681.546299][T17061] ? _raw_spin_unlock+0x2d/0x50 [ 2681.551129][T17061] ? finish_task_switch+0xc5/0x260 [ 2681.556237][T17061] ? __schedule+0x50d/0x6e0 [ 2681.560729][T17061] ? schedule+0x5b/0x80 [ 2681.564869][T17061] ? futex_wait_queue+0x11c/0x160 [ 2681.569879][T17061] ? __rcu_read_unlock+0x4a/0x70 [ 2681.574854][T17061] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2681.580251][T17061] ? avc_has_perm+0x6b/0x150 [ 2681.584822][T17061] ? avc_has_perm+0xd0/0x150 [ 2681.589392][T17061] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2681.595706][T17061] ? selinux_socket_setsockopt+0x145/0x170 [ 2681.601554][T17061] udpv6_setsockopt+0x85/0x90 [ 2681.606300][T17061] sock_common_setsockopt+0x5d/0x70 [ 2681.611486][T17061] ? sock_common_recvmsg+0xe0/0xe0 [ 2681.616600][T17061] __sys_setsockopt+0x212/0x2b0 [ 2681.621464][T17061] __x64_sys_setsockopt+0x62/0x70 [ 2681.626581][T17061] do_syscall_64+0x2b/0x70 [ 2681.631150][T17061] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2681.637039][T17061] RIP: 0033:0x7f53e730f209 [ 2681.641530][T17061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2681.661312][T17061] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2681.669744][T17061] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2681.677803][T17061] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2681.685786][T17061] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2681.693757][T17061] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2681.701724][T17061] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2681.709696][T17061] [ 2681.712895][T17061] memory: usage 307184kB, limit 307200kB, failcnt 33002 [ 2681.719859][T17061] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2681.726782][T17061] Memory cgroup stats for /syz2: [ 2681.729654][T17061] anon 122880 [ 2681.729654][T17061] file 53248 [ 2681.729654][T17061] kernel 314380288 [ 2681.729654][T17061] kernel_stack 16384 [ 2681.729654][T17061] pagetables 77824 [ 2681.729654][T17061] percpu 1184 [ 2681.729654][T17061] sock 0 [ 2681.729654][T17061] vmalloc 0 [ 2681.729654][T17061] shmem 49152 [ 2681.729654][T17061] file_mapped 49152 [ 2681.729654][T17061] file_dirty 0 [ 2681.729654][T17061] file_writeback 0 [ 2681.729654][T17061] swapcached 0 [ 2681.729654][T17061] inactive_anon 139264 [ 2681.729654][T17061] active_anon 32768 [ 2681.729654][T17061] inactive_file 0 [ 2681.729654][T17061] active_file 4096 [ 2681.729654][T17061] unevictable 0 [ 2681.729654][T17061] slab_reclaimable 22376 [ 2681.729654][T17061] slab_unreclaimable 208184 [ 2681.729654][T17061] slab 230560 [ 2681.729654][T17061] workingset_refault_anon 0 [ 2681.729654][T17061] workingset_refault_file 115 [ 2681.729654][T17061] workingset_activate_anon 0 [ 2681.729654][T17061] workingset_activate_file 0 [ 2681.824818][T17061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17052,uid=0 [ 2681.840218][T17061] Memory cgroup out of memory: Killed process 17061 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x2000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x2001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) socket$key(0xf, 0x3, 0x2) 18:39:37 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2ac, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20002000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x87e9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3e6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff0c9}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x608b9544}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004090) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r12, &(0x7f0000000000)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000500)={0xffffffffffffff48, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}}, 0x4) r13 = socket$inet6(0xa, 0x2, 0x0) io_uring_setup(0x2741, &(0x7f0000000400)={0x0, 0x169c, 0x1, 0x1, 0x125}) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x20000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:37 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x7003}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:37 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000000000fb000000000000000000000000000000000003001700ded9a672970a214b8f5fe90000000002000000fffbffff0000000000"], 0x50}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xd000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) [ 2682.570542][T17091] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2682.584292][T17091] CPU: 1 PID: 17091 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2682.595047][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2682.605689][T17091] Call Trace: [ 2682.608955][T17091] [ 2682.611950][T17091] dump_stack_lvl+0xd6/0x122 [ 2682.616708][T17091] dump_stack+0x11/0x12 [ 2682.620860][T17091] dump_header+0x98/0x410 [ 2682.625282][T17091] oom_kill_process+0x100/0x550 [ 2682.630211][T17091] out_of_memory+0x620/0x880 [ 2682.634793][T17091] mem_cgroup_oom+0x475/0x4f0 [ 2682.639531][T17091] try_charge_memcg+0x746/0x960 [ 2682.644380][T17091] ? debug_smp_processor_id+0x13/0x20 [ 2682.649898][T17091] ? delay_tsc+0xc1/0xe0 [ 2682.654131][T17091] __memcg_kmem_charge_page+0x2e4/0x480 [ 2682.659802][T17091] __alloc_pages+0x1c1/0x340 [ 2682.664418][T17091] alloc_pages+0x34d/0x450 [ 2682.668882][T17091] __vmalloc_node_range+0x730/0xef0 [ 2682.674094][T17091] kvmalloc_node+0xf3/0x140 [ 2682.678638][T17091] ? xt_alloc_table_info+0x39/0x70 [ 2682.683816][T17091] xt_alloc_table_info+0x39/0x70 [ 2682.688787][T17091] do_ip6t_set_ctl+0x645/0x1790 [ 2682.693694][T17091] ? rmqueue_pcplist+0x157/0x1e0 [ 2682.698615][T17091] ? rmqueue+0x4a/0xbc0 [ 2682.702810][T17091] nf_setsockopt+0x1a6/0x1c0 [ 2682.707396][T17091] ipv6_setsockopt+0x2724/0x2a90 [ 2682.712320][T17091] ? rb_insert_color+0x2b5/0x2c0 [ 2682.717384][T17091] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2682.722962][T17091] ? debug_smp_processor_id+0x13/0x20 [ 2682.728415][T17091] ? resched_curr+0x1d/0xc0 [ 2682.732928][T17091] ? check_preempt_wakeup+0x1c4/0x380 [ 2682.738289][T17091] ? __rcu_read_unlock+0x4a/0x70 [ 2682.743313][T17091] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2682.748673][T17091] ? avc_has_perm+0x6b/0x150 [ 2682.753253][T17091] ? avc_has_perm+0xd0/0x150 [ 2682.757875][T17091] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2682.764213][T17091] ? selinux_socket_setsockopt+0x145/0x170 [ 2682.770007][T17091] udpv6_setsockopt+0x85/0x90 [ 2682.774742][T17091] sock_common_setsockopt+0x5d/0x70 [ 2682.779926][T17091] ? sock_common_recvmsg+0xe0/0xe0 [ 2682.785065][T17091] __sys_setsockopt+0x212/0x2b0 [ 2682.790028][T17091] __x64_sys_setsockopt+0x62/0x70 [ 2682.795054][T17091] do_syscall_64+0x2b/0x70 [ 2682.799519][T17091] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2682.805483][T17091] RIP: 0033:0x7f53e730f209 [ 2682.809954][T17091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2682.829564][T17091] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2682.838008][T17091] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2682.846059][T17091] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2682.854056][T17091] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2682.862129][T17091] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2682.870106][T17091] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2682.878085][T17091] [ 2682.881279][T17091] memory: usage 307172kB, limit 307200kB, failcnt 33053 [ 2682.888244][T17091] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2682.895171][T17091] Memory cgroup stats for /syz2: [ 2682.902969][T17091] anon 122880 [ 2682.902969][T17091] file 53248 [ 2682.902969][T17091] kernel 314368000 [ 2682.902969][T17091] kernel_stack 16384 [ 2682.902969][T17091] pagetables 77824 [ 2682.902969][T17091] percpu 1184 [ 2682.902969][T17091] sock 0 [ 2682.902969][T17091] vmalloc 0 [ 2682.902969][T17091] shmem 49152 [ 2682.902969][T17091] file_mapped 49152 [ 2682.902969][T17091] file_dirty 0 [ 2682.902969][T17091] file_writeback 0 [ 2682.902969][T17091] swapcached 0 [ 2682.902969][T17091] inactive_anon 139264 [ 2682.902969][T17091] active_anon 32768 [ 2682.902969][T17091] inactive_file 0 [ 2682.902969][T17091] active_file 4096 [ 2682.902969][T17091] unevictable 0 [ 2682.902969][T17091] slab_reclaimable 22376 [ 2682.902969][T17091] slab_unreclaimable 209456 [ 2682.902969][T17091] slab 231832 [ 2682.902969][T17091] workingset_refault_anon 0 [ 2682.902969][T17091] workingset_refault_file 115 [ 2682.902969][T17091] workingset_activate_anon 0 [ 2682.902969][T17091] workingset_activate_file 0 [ 2682.997947][T17091] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17090,uid=0 [ 2683.013719][T17091] Memory cgroup out of memory: Killed process 17091 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xf802}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x3000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89a1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x404080) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 18:39:38 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x27000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2ac, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20002000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x87e9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3e6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff0c9}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x608b9544}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004090) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r12, &(0x7f0000000000)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000500)={0xffffffffffffff48, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}}, 0x4) (async, rerun: 32) r13 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) io_uring_setup(0x2741, &(0x7f0000000400)={0x0, 0x169c, 0x1, 0x1, 0x125}) (async) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:38 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x38}}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89a1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x404080) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 18:39:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:38 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:38 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2ac, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20002000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x87e9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3e6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff0c9}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x608b9544}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004090) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r12, &(0x7f0000000000)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000500)={0xffffffffffffff48, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}}, 0x4) (async) r13 = socket$inet6(0xa, 0x2, 0x0) io_uring_setup(0x2741, &(0x7f0000000400)={0x0, 0x169c, 0x1, 0x1, 0x125}) (async) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 2683.764442][T17129] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2683.778146][T17129] CPU: 1 PID: 17129 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2683.788801][T17129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2683.798952][T17129] Call Trace: [ 2683.802216][T17129] [ 2683.805130][T17129] dump_stack_lvl+0xd6/0x122 [ 2683.809767][T17129] dump_stack+0x11/0x12 [ 2683.813923][T17129] dump_header+0x98/0x410 [ 2683.818347][T17129] oom_kill_process+0x100/0x550 [ 2683.823207][T17129] out_of_memory+0x620/0x880 [ 2683.827858][T17129] mem_cgroup_oom+0x475/0x4f0 [ 2683.832573][T17129] try_charge_memcg+0x746/0x960 [ 2683.837473][T17129] __memcg_kmem_charge_page+0x2e4/0x480 [ 2683.843079][T17129] __alloc_pages+0x1c1/0x340 [ 2683.847676][T17129] alloc_pages+0x34d/0x450 [ 2683.852097][T17129] __vmalloc_node_range+0x730/0xef0 [ 2683.857295][T17129] kvmalloc_node+0xf3/0x140 [ 2683.861852][T17129] ? xt_alloc_table_info+0x39/0x70 [ 2683.867029][T17129] xt_alloc_table_info+0x39/0x70 [ 2683.872004][T17129] do_ip6t_set_ctl+0x645/0x1790 [ 2683.876843][T17129] ? rmqueue_pcplist+0x157/0x1e0 [ 2683.881815][T17129] ? rmqueue+0x4a/0xbc0 [ 2683.886185][T17129] ? page_counter_cancel+0xa4/0x1f0 [ 2683.891386][T17129] nf_setsockopt+0x1a6/0x1c0 [ 2683.896005][T17129] ipv6_setsockopt+0x2724/0x2a90 [ 2683.900927][T17129] ? _raw_spin_unlock+0x2d/0x50 [ 2683.905775][T17129] ? finish_task_switch+0xc5/0x260 [ 2683.910935][T17129] ? __schedule+0x50d/0x6e0 [ 2683.915421][T17129] ? schedule+0x5b/0x80 [ 2683.919597][T17129] ? futex_wait_queue+0x11c/0x160 [ 2683.924683][T17129] ? __rcu_read_unlock+0x4a/0x70 [ 2683.929602][T17129] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2683.935043][T17129] ? avc_has_perm+0x6b/0x150 [ 2683.939668][T17129] ? avc_has_perm+0xd0/0x150 [ 2683.944262][T17129] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2683.950669][T17129] ? selinux_socket_setsockopt+0x145/0x170 [ 2683.956501][T17129] udpv6_setsockopt+0x85/0x90 [ 2683.961203][T17129] sock_common_setsockopt+0x5d/0x70 [ 2683.966387][T17129] ? sock_common_recvmsg+0xe0/0xe0 [ 2683.971506][T17129] __sys_setsockopt+0x212/0x2b0 [ 2683.976369][T17129] __x64_sys_setsockopt+0x62/0x70 [ 2683.981553][T17129] do_syscall_64+0x2b/0x70 [ 2683.986085][T17129] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2683.992001][T17129] RIP: 0033:0x7f53e730f209 [ 2683.996499][T17129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2684.016231][T17129] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2684.024698][T17129] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2684.032685][T17129] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2684.040793][T17129] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2684.048773][T17129] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2684.056763][T17129] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2684.064747][T17129] [ 2684.067899][T17129] memory: usage 307172kB, limit 307200kB, failcnt 33120 [ 2684.074840][T17129] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2684.081748][T17129] Memory cgroup stats for /syz2: [ 2684.085367][T17129] anon 122880 [ 2684.085367][T17129] file 53248 [ 2684.085367][T17129] kernel 314368000 [ 2684.085367][T17129] kernel_stack 16384 [ 2684.085367][T17129] pagetables 77824 [ 2684.085367][T17129] percpu 1184 [ 2684.085367][T17129] sock 0 [ 2684.085367][T17129] vmalloc 0 [ 2684.085367][T17129] shmem 49152 [ 2684.085367][T17129] file_mapped 49152 [ 2684.085367][T17129] file_dirty 0 [ 2684.085367][T17129] file_writeback 0 [ 2684.085367][T17129] swapcached 0 [ 2684.085367][T17129] inactive_anon 139264 [ 2684.085367][T17129] active_anon 32768 [ 2684.085367][T17129] inactive_file 0 [ 2684.085367][T17129] active_file 4096 [ 2684.085367][T17129] unevictable 0 [ 2684.085367][T17129] slab_reclaimable 22376 [ 2684.085367][T17129] slab_unreclaimable 209456 [ 2684.085367][T17129] slab 231832 [ 2684.085367][T17129] workingset_refault_anon 0 [ 2684.085367][T17129] workingset_refault_file 115 [ 2684.085367][T17129] workingset_activate_anon 0 [ 2684.085367][T17129] workingset_activate_file 0 [ 2684.180782][T17129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17127,uid=0 [ 2684.196157][T17129] Memory cgroup out of memory: Killed process 17129 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x4000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89a1, 0x0) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x404080) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 18:39:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:39 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x40000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x3a7) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:39:39 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:39 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x8f0a]}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x3a7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x3a7) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:39:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:39 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x8f0a]}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x8f0a]}, 0x8) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (async) 18:39:39 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x4) [ 2684.985212][T17169] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2684.999008][T17169] CPU: 0 PID: 17169 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2685.009730][T17169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2685.019872][T17169] Call Trace: [ 2685.023144][T17169] [ 2685.026068][T17169] dump_stack_lvl+0xd6/0x122 [ 2685.030670][T17169] dump_stack+0x11/0x12 [ 2685.034865][T17169] dump_header+0x98/0x410 [ 2685.039223][T17169] oom_kill_process+0x100/0x550 [ 2685.044078][T17169] out_of_memory+0x620/0x880 [ 2685.048730][T17169] mem_cgroup_oom+0x475/0x4f0 [ 2685.053509][T17169] try_charge_memcg+0x746/0x960 [ 2685.058389][T17169] ? debug_smp_processor_id+0x13/0x20 [ 2685.063824][T17169] ? delay_tsc+0xc1/0xe0 [ 2685.068125][T17169] __memcg_kmem_charge_page+0x2e4/0x480 [ 2685.073687][T17169] __alloc_pages+0x1c1/0x340 [ 2685.078292][T17169] alloc_pages+0x34d/0x450 [ 2685.082714][T17169] __vmalloc_node_range+0x730/0xef0 [ 2685.088001][T17169] kvmalloc_node+0xf3/0x140 [ 2685.092563][T17169] ? xt_alloc_table_info+0x39/0x70 [ 2685.097675][T17169] xt_alloc_table_info+0x39/0x70 [ 2685.102602][T17169] do_ip6t_set_ctl+0x645/0x1790 [ 2685.107448][T17169] ? rmqueue_pcplist+0x157/0x1e0 [ 2685.112380][T17169] ? rmqueue+0x4a/0xbc0 [ 2685.116519][T17169] ? page_counter_cancel+0xa4/0x1f0 [ 2685.121707][T17169] nf_setsockopt+0x1a6/0x1c0 [ 2685.126280][T17169] ipv6_setsockopt+0x2724/0x2a90 [ 2685.131220][T17169] ? _raw_spin_unlock+0x2d/0x50 [ 2685.136225][T17169] ? finish_task_switch+0xc5/0x260 [ 2685.141411][T17169] ? __schedule+0x50d/0x6e0 [ 2685.145922][T17169] ? schedule+0x5b/0x80 [ 2685.150065][T17169] ? futex_wait_queue+0x11c/0x160 [ 2685.155238][T17169] ? __rcu_read_unlock+0x4a/0x70 [ 2685.160230][T17169] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2685.165717][T17169] ? avc_has_perm+0x6b/0x150 [ 2685.170294][T17169] ? avc_has_perm+0xd0/0x150 [ 2685.174918][T17169] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2685.181291][T17169] udpv6_setsockopt+0x85/0x90 [ 2685.186027][T17169] sock_common_setsockopt+0x5d/0x70 [ 2685.191215][T17169] ? sock_common_recvmsg+0xe0/0xe0 [ 2685.196312][T17169] __sys_setsockopt+0x212/0x2b0 [ 2685.201151][T17169] __x64_sys_setsockopt+0x62/0x70 [ 2685.206252][T17169] do_syscall_64+0x2b/0x70 [ 2685.210678][T17169] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2685.216729][T17169] RIP: 0033:0x7f53e730f209 [ 2685.221152][T17169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2685.240998][T17169] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2685.249469][T17169] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2685.257499][T17169] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2685.265508][T17169] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2685.273486][T17169] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2685.281465][T17169] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2685.289470][T17169] [ 2685.292613][T17169] memory: usage 307172kB, limit 307200kB, failcnt 33185 [ 2685.299638][T17169] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2685.306510][T17169] Memory cgroup stats for /syz2: [ 2685.308236][T17169] anon 122880 [ 2685.308236][T17169] file 53248 [ 2685.308236][T17169] kernel 314368000 [ 2685.308236][T17169] kernel_stack 16384 [ 2685.308236][T17169] pagetables 77824 [ 2685.308236][T17169] percpu 1184 [ 2685.308236][T17169] sock 0 [ 2685.308236][T17169] vmalloc 0 [ 2685.308236][T17169] shmem 49152 [ 2685.308236][T17169] file_mapped 49152 [ 2685.308236][T17169] file_dirty 0 [ 2685.308236][T17169] file_writeback 0 [ 2685.308236][T17169] swapcached 0 [ 2685.308236][T17169] inactive_anon 139264 [ 2685.308236][T17169] active_anon 32768 [ 2685.308236][T17169] inactive_file 0 [ 2685.308236][T17169] active_file 4096 [ 2685.308236][T17169] unevictable 0 [ 2685.308236][T17169] slab_reclaimable 22376 [ 2685.308236][T17169] slab_unreclaimable 209456 [ 2685.308236][T17169] slab 231832 [ 2685.308236][T17169] workingset_refault_anon 0 [ 2685.308236][T17169] workingset_refault_file 115 [ 2685.308236][T17169] workingset_activate_anon 0 [ 2685.308236][T17169] workingset_activate_file 0 [ 2685.403456][T17169] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17162,uid=0 [ 2685.418785][T17169] Memory cgroup out of memory: Killed process 17169 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x6000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:41 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000040)={[0x8f0a]}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:41 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x4) 18:39:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x80000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100bef99bbf293ccff02d78beebf4369567093bea58fccedd12a1fed4e3b1bc54807f7b7cd601a5d09899863f2313a192d74eb736e760298710429eaa050000007455bdf04ec9664145ed1425634be5fd03c74d5cc6772cec592d3e9d2ebc609877c2f9f6075b30ce1ebcfb4f330200c8e2f7aa276372983058", @ANYRES32=r5, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', r1, 0x700, 0x700, 0x7, 0x0, {{0x1e, 0x4, 0x3, 0x17, 0x78, 0x64, 0x0, 0x4, 0x4, 0x0, @remote, @empty, {[@lsrr={0x83, 0x7, 0x6d, [@loopback]}, @end, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xd, [{@private=0xa010101, 0x7}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@multicast1, 0x7}, {@empty}, {@local, 0x4}, {@rand_addr=0x64010101, 0x82}]}, @end, @lsrr={0x83, 0x13, 0xf5, [@empty, @private=0xa010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1d4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100bef99bbf293ccff02d78beebf4369567093bea58fccedd12a1fed4e3b1bc54807f7b7cd601a5d09899863f2313a192d74eb736e760298710429eaa050000007455bdf04ec9664145ed1425634be5fd03c74d5cc6772cec592d3e9d2ebc609877c2f9f6075b30ce1ebcfb4f330200c8e2f7aa276372983058", @ANYRES32=r5, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', r1, 0x700, 0x700, 0x7, 0x0, {{0x1e, 0x4, 0x3, 0x17, 0x78, 0x64, 0x0, 0x4, 0x4, 0x0, @remote, @empty, {[@lsrr={0x83, 0x7, 0x6d, [@loopback]}, @end, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xd, [{@private=0xa010101, 0x7}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@multicast1, 0x7}, {@empty}, {@local, 0x4}, {@rand_addr=0x64010101, 0x82}]}, @end, @lsrr={0x83, 0x13, 0xf5, [@empty, @private=0xa010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1d4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:41 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x4) 18:39:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='./file0\x00', r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x3f, 0x8}, 'port0\x00', 0x84, 0x11, 0x10000, 0x5, 0x7, 0x6, 0x8, 0x0, 0x2, 0x2c}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000005d1df1a366a1c6c00000000000000017000000000002000000ffffffff0000000000000000013aad0000000000"], 0x50}}, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$xdp(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="82ecf9420d9db100cfc8169f391be359b98a7ae18f81f6b13a8de3667a749562695288689edf88e9d3952ba34eca9a61e4da57f3c49483c7276fd62c5f93f989b8186bace800809eb7545fd61bf04209e0211ac03d0d5730f557549fb9af9490facd6218bd326fc4d67664116349ba62893f780a26c52c4bc885680bd06f4cb057c78bc2efeca3a32712203a58b30003bb112afdcc9383ac27a084db42ddd84cc5ef9c353c91eccecf271dbf27f59b12ffb0b470ad627b389223b6f3abccf193d335fd44072e426968b4ee21ccf7a5127932e9e18ce1ba5569cdf1703db289301bd668cbaee92571ae", 0xe9}, {&(0x7f0000000300)="93a5e5f801c227467c72cfb4e15d2c028ad8dcabba489e9d268768fda781b24bc9405aa03a3318ccccc799d5101df5467e54491433306fdc91717f418e39d2aee55b60e7f512992cfdcba35ac652e744eb896c3d79daf44f20149760bc2f625caf87ff12cbe3334d9bee5988ca32fc2ab40e1103d808a89e29b06e053fbcf7db0375022a61eb4aeb87d52278ad0351e7879e3b8d8fb357da3c8b810ae02d1e315877f2959ee82242a35fbe3a77e648605f5a9981632b2b2efe9704361541efd4c6a3405e6af569d0def099cc8f3b4d", 0xcf}], 0x2}, 0x400c4) 18:39:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100bef99bbf293ccff02d78beebf4369567093bea58fccedd12a1fed4e3b1bc54807f7b7cd601a5d09899863f2313a192d74eb736e760298710429eaa050000007455bdf04ec9664145ed1425634be5fd03c74d5cc6772cec592d3e9d2ebc609877c2f9f6075b30ce1ebcfb4f330200c8e2f7aa276372983058", @ANYRES32=r5, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', r1, 0x700, 0x700, 0x7, 0x0, {{0x1e, 0x4, 0x3, 0x17, 0x78, 0x64, 0x0, 0x4, 0x4, 0x0, @remote, @empty, {[@lsrr={0x83, 0x7, 0x6d, [@loopback]}, @end, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xd, [{@private=0xa010101, 0x7}, {@private=0xa010101, 0x8}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@multicast1, 0x7}, {@empty}, {@local, 0x4}, {@rand_addr=0x64010101, 0x82}]}, @end, @lsrr={0x83, 0x13, 0xf5, [@empty, @private=0xa010101, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1d4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='./file0\x00', r1) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x3f, 0x8}, 'port0\x00', 0x84, 0x11, 0x10000, 0x5, 0x7, 0x6, 0x8, 0x0, 0x2, 0x2c}) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000005d1df1a366a1c6c00000000000000017000000000002000000ffffffff0000000000000000013aad0000000000"], 0x50}}, 0x0) (async) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$xdp(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="82ecf9420d9db100cfc8169f391be359b98a7ae18f81f6b13a8de3667a749562695288689edf88e9d3952ba34eca9a61e4da57f3c49483c7276fd62c5f93f989b8186bace800809eb7545fd61bf04209e0211ac03d0d5730f557549fb9af9490facd6218bd326fc4d67664116349ba62893f780a26c52c4bc885680bd06f4cb057c78bc2efeca3a32712203a58b30003bb112afdcc9383ac27a084db42ddd84cc5ef9c353c91eccecf271dbf27f59b12ffb0b470ad627b389223b6f3abccf193d335fd44072e426968b4ee21ccf7a5127932e9e18ce1ba5569cdf1703db289301bd668cbaee92571ae", 0xe9}, {&(0x7f0000000300)="93a5e5f801c227467c72cfb4e15d2c028ad8dcabba489e9d268768fda781b24bc9405aa03a3318ccccc799d5101df5467e54491433306fdc91717f418e39d2aee55b60e7f512992cfdcba35ac652e744eb896c3d79daf44f20149760bc2f625caf87ff12cbe3334d9bee5988ca32fc2ab40e1103d808a89e29b06e053fbcf7db0375022a61eb4aeb87d52278ad0351e7879e3b8d8fb357da3c8b810ae02d1e315877f2959ee82242a35fbe3a77e648605f5a9981632b2b2efe9704361541efd4c6a3405e6af569d0def099cc8f3b4d", 0xcf}], 0x2}, 0x400c4) [ 2686.154047][T17199] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2686.167640][T17199] CPU: 0 PID: 17199 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2686.178337][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2686.188384][T17199] Call Trace: [ 2686.191653][T17199] [ 2686.194566][T17199] dump_stack_lvl+0xd6/0x122 [ 2686.199734][T17199] dump_stack+0x11/0x12 [ 2686.203871][T17199] dump_header+0x98/0x410 [ 2686.208205][T17199] oom_kill_process+0x100/0x550 [ 2686.213143][T17199] out_of_memory+0x620/0x880 [ 2686.217780][T17199] mem_cgroup_oom+0x475/0x4f0 [ 2686.222491][T17199] try_charge_memcg+0x746/0x960 [ 2686.227332][T17199] ? debug_smp_processor_id+0x13/0x20 [ 2686.232801][T17199] ? delay_tsc+0xc1/0xe0 [ 2686.237028][T17199] __memcg_kmem_charge_page+0x2e4/0x480 [ 2686.242561][T17199] __alloc_pages+0x1c1/0x340 [ 2686.247202][T17199] alloc_pages+0x34d/0x450 [ 2686.251697][T17199] __vmalloc_node_range+0x730/0xef0 [ 2686.256938][T17199] kvmalloc_node+0xf3/0x140 [ 2686.261428][T17199] ? xt_alloc_table_info+0x39/0x70 [ 2686.266569][T17199] xt_alloc_table_info+0x39/0x70 [ 2686.271520][T17199] do_ip6t_set_ctl+0x645/0x1790 [ 2686.276364][T17199] ? rmqueue_pcplist+0x157/0x1e0 [ 2686.281289][T17199] ? rmqueue+0x4a/0xbc0 [ 2686.285463][T17199] nf_setsockopt+0x1a6/0x1c0 [ 2686.290103][T17199] ipv6_setsockopt+0x2724/0x2a90 [ 2686.295029][T17199] ? _raw_spin_unlock+0x2d/0x50 [ 2686.299884][T17199] ? finish_task_switch+0xc5/0x260 [ 2686.305057][T17199] ? __schedule+0x50d/0x6e0 [ 2686.309548][T17199] ? schedule+0x5b/0x80 [ 2686.313708][T17199] ? futex_wait_queue+0x11c/0x160 [ 2686.318842][T17199] ? __rcu_read_unlock+0x4a/0x70 [ 2686.323784][T17199] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2686.329148][T17199] ? avc_has_perm+0x6b/0x150 [ 2686.333788][T17199] ? avc_has_perm+0xd0/0x150 [ 2686.338358][T17199] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2686.344739][T17199] ? selinux_socket_setsockopt+0x145/0x170 [ 2686.350594][T17199] udpv6_setsockopt+0x85/0x90 [ 2686.355280][T17199] sock_common_setsockopt+0x5d/0x70 [ 2686.360490][T17199] ? sock_common_recvmsg+0xe0/0xe0 [ 2686.365737][T17199] __sys_setsockopt+0x212/0x2b0 [ 2686.370660][T17199] __x64_sys_setsockopt+0x62/0x70 [ 2686.375705][T17199] do_syscall_64+0x2b/0x70 [ 2686.380305][T17199] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2686.386203][T17199] RIP: 0033:0x7f53e730f209 [ 2686.390663][T17199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2686.410326][T17199] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2686.418738][T17199] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2686.426795][T17199] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2686.434880][T17199] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2686.442866][T17199] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2686.450882][T17199] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2686.458975][T17199] [ 2686.462177][T17199] memory: usage 307172kB, limit 307200kB, failcnt 33249 [ 2686.469130][T17199] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2686.476050][T17199] Memory cgroup stats for /syz2: [ 2686.478146][T17199] anon 122880 [ 2686.478146][T17199] file 53248 [ 2686.478146][T17199] kernel 314368000 [ 2686.478146][T17199] kernel_stack 16384 [ 2686.478146][T17199] pagetables 77824 [ 2686.478146][T17199] percpu 1184 [ 2686.478146][T17199] sock 0 [ 2686.478146][T17199] vmalloc 0 [ 2686.478146][T17199] shmem 49152 [ 2686.478146][T17199] file_mapped 49152 [ 2686.478146][T17199] file_dirty 0 [ 2686.478146][T17199] file_writeback 0 [ 2686.478146][T17199] swapcached 0 [ 2686.478146][T17199] inactive_anon 139264 [ 2686.478146][T17199] active_anon 32768 [ 2686.478146][T17199] inactive_file 0 [ 2686.478146][T17199] active_file 4096 [ 2686.478146][T17199] unevictable 0 [ 2686.478146][T17199] slab_reclaimable 22376 [ 2686.478146][T17199] slab_unreclaimable 209456 [ 2686.478146][T17199] slab 231832 [ 2686.478146][T17199] workingset_refault_anon 0 [ 2686.478146][T17199] workingset_refault_file 115 [ 2686.478146][T17199] workingset_activate_anon 0 [ 2686.478146][T17199] workingset_activate_file 0 [ 2686.573773][T17199] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17194,uid=0 [ 2686.589172][T17199] Memory cgroup out of memory: Killed process 17199 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x7000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) 18:39:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0x138, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'team0\x00', {}, 'vxcan1\x00', {}, 0x9, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "6bff"}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x3, 0x0, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'bond_slave_1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0xc, 0x2, 0x2, 0x76}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) epoll_wait(r1, &(0x7f0000000880)=[{}], 0x1, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) fspick(r3, &(0x7f00000008c0)='./file0\x00', 0x1) 18:39:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:42 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='./file0\x00', r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x3f, 0x8}, 'port0\x00', 0x84, 0x11, 0x10000, 0x5, 0x7, 0x6, 0x8, 0x0, 0x2, 0x2c}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000005d1df1a366a1c6c00000000000000017000000000002000000ffffffff0000000000000000013aad0000000000"], 0x50}}, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$xdp(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="82ecf9420d9db100cfc8169f391be359b98a7ae18f81f6b13a8de3667a749562695288689edf88e9d3952ba34eca9a61e4da57f3c49483c7276fd62c5f93f989b8186bace800809eb7545fd61bf04209e0211ac03d0d5730f557549fb9af9490facd6218bd326fc4d67664116349ba62893f780a26c52c4bc885680bd06f4cb057c78bc2efeca3a32712203a58b30003bb112afdcc9383ac27a084db42ddd84cc5ef9c353c91eccecf271dbf27f59b12ffb0b470ad627b389223b6f3abccf193d335fd44072e426968b4ee21ccf7a5127932e9e18ce1ba5569cdf1703db289301bd668cbaee92571ae", 0xe9}, {&(0x7f0000000300)="93a5e5f801c227467c72cfb4e15d2c028ad8dcabba489e9d268768fda781b24bc9405aa03a3318ccccc799d5101df5467e54491433306fdc91717f418e39d2aee55b60e7f512992cfdcba35ac652e744eb896c3d79daf44f20149760bc2f625caf87ff12cbe3334d9bee5988ca32fc2ab40e1103d808a89e29b06e053fbcf7db0375022a61eb4aeb87d52278ad0351e7879e3b8d8fb357da3c8b810ae02d1e315877f2959ee82242a35fbe3a77e648605f5a9981632b2b2efe9704361541efd4c6a3405e6af569d0def099cc8f3b4d", 0xcf}], 0x2}, 0x400c4) socket$key(0xf, 0x3, 0x2) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='./file0\x00', r1) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x3f, 0x8}, 'port0\x00', 0x84, 0x11, 0x10000, 0x5, 0x7, 0x6, 0x8, 0x0, 0x2, 0x2c}) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a0000000000000000000000040004000000000000005d1df1a366a1c6c00000000000000017000000000002000000ffffffff0000000000000000013aad0000000000"], 0x50}}, 0x0) (async) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) sendmsg$xdp(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="82ecf9420d9db100cfc8169f391be359b98a7ae18f81f6b13a8de3667a749562695288689edf88e9d3952ba34eca9a61e4da57f3c49483c7276fd62c5f93f989b8186bace800809eb7545fd61bf04209e0211ac03d0d5730f557549fb9af9490facd6218bd326fc4d67664116349ba62893f780a26c52c4bc885680bd06f4cb057c78bc2efeca3a32712203a58b30003bb112afdcc9383ac27a084db42ddd84cc5ef9c353c91eccecf271dbf27f59b12ffb0b470ad627b389223b6f3abccf193d335fd44072e426968b4ee21ccf7a5127932e9e18ce1ba5569cdf1703db289301bd668cbaee92571ae", 0xe9}, {&(0x7f0000000300)="93a5e5f801c227467c72cfb4e15d2c028ad8dcabba489e9d268768fda781b24bc9405aa03a3318ccccc799d5101df5467e54491433306fdc91717f418e39d2aee55b60e7f512992cfdcba35ac652e744eb896c3d79daf44f20149760bc2f625caf87ff12cbe3334d9bee5988ca32fc2ab40e1103d808a89e29b06e053fbcf7db0375022a61eb4aeb87d52278ad0351e7879e3b8d8fb357da3c8b810ae02d1e315877f2959ee82242a35fbe3a77e648605f5a9981632b2b2efe9704361541efd4c6a3405e6af569d0def099cc8f3b4d", 0xcf}], 0x2}, 0x400c4) (async) 18:39:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x101000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) 18:39:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:42 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x50}}, 0x8000) 18:39:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4) 18:39:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0x138, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'team0\x00', {}, 'vxcan1\x00', {}, 0x9, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "6bff"}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x3, 0x0, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'bond_slave_1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0xc, 0x2, 0x2, 0x76}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) epoll_wait(r1, &(0x7f0000000880)=[{}], 0x1, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) fspick(r3, &(0x7f00000008c0)='./file0\x00', 0x1) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0x138, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'team0\x00', {}, 'vxcan1\x00', {}, 0x9, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "6bff"}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x3, 0x0, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'bond_slave_1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0xc, 0x2, 0x2, 0x76}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) epoll_wait(r1, &(0x7f0000000880)=[{}], 0x1, 0x6) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) fspick(r3, &(0x7f00000008c0)='./file0\x00', 0x1) (async) [ 2686.748497][T17235] x_tables: duplicate underflow at hook 2 18:39:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2686.806910][T17249] x_tables: duplicate underflow at hook 2 [ 2686.855015][T17253] x_tables: duplicate underflow at hook 2 [ 2687.321238][T17236] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2687.334782][T17236] CPU: 1 PID: 17236 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2687.345437][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2687.355616][T17236] Call Trace: [ 2687.359000][T17236] [ 2687.361947][T17236] dump_stack_lvl+0xd6/0x122 [ 2687.366603][T17236] dump_stack+0x11/0x12 [ 2687.370792][T17236] dump_header+0x98/0x410 [ 2687.375166][T17236] oom_kill_process+0x100/0x550 [ 2687.380142][T17236] out_of_memory+0x620/0x880 [ 2687.384751][T17236] mem_cgroup_oom+0x475/0x4f0 [ 2687.389487][T17236] try_charge_memcg+0x746/0x960 [ 2687.394381][T17236] ? clear_page_erms+0x9/0x10 [ 2687.399625][T17236] __memcg_kmem_charge_page+0x2e4/0x480 [ 2687.405166][T17236] __alloc_pages+0x1c1/0x340 [ 2687.409847][T17236] alloc_pages+0x34d/0x450 [ 2687.414254][T17236] __vmalloc_node_range+0x730/0xef0 [ 2687.419488][T17236] kvmalloc_node+0xf3/0x140 [ 2687.423998][T17236] ? xt_alloc_table_info+0x39/0x70 [ 2687.429159][T17236] xt_alloc_table_info+0x39/0x70 [ 2687.434103][T17236] do_ip6t_set_ctl+0x645/0x1790 [ 2687.438938][T17236] ? rmqueue_pcplist+0x157/0x1e0 [ 2687.443870][T17236] ? rmqueue+0x4a/0xbc0 [ 2687.448064][T17236] ? page_counter_cancel+0xa4/0x1f0 [ 2687.453260][T17236] nf_setsockopt+0x1a6/0x1c0 [ 2687.457916][T17236] ipv6_setsockopt+0x2724/0x2a90 [ 2687.462845][T17236] ? _raw_spin_unlock+0x2d/0x50 [ 2687.467761][T17236] ? finish_task_switch+0xc5/0x260 [ 2687.472897][T17236] ? __schedule+0x50d/0x6e0 [ 2687.477390][T17236] ? schedule+0x5b/0x80 [ 2687.481529][T17236] ? futex_wait_queue+0x11c/0x160 [ 2687.486623][T17236] ? __rcu_read_unlock+0x4a/0x70 [ 2687.491566][T17236] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2687.496931][T17236] ? avc_has_perm+0x6b/0x150 [ 2687.501504][T17236] ? avc_has_perm+0xd0/0x150 [ 2687.506076][T17236] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2687.512555][T17236] ? selinux_socket_setsockopt+0x145/0x170 [ 2687.520170][T17236] udpv6_setsockopt+0x85/0x90 [ 2687.524861][T17236] sock_common_setsockopt+0x5d/0x70 [ 2687.530145][T17236] ? sock_common_recvmsg+0xe0/0xe0 [ 2687.535247][T17236] __sys_setsockopt+0x212/0x2b0 [ 2687.540088][T17236] __x64_sys_setsockopt+0x62/0x70 [ 2687.545115][T17236] do_syscall_64+0x2b/0x70 [ 2687.549570][T17236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2687.555518][T17236] RIP: 0033:0x7f1d726c3209 [ 2687.559912][T17236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2687.579602][T17236] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2687.588008][T17236] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2687.595995][T17236] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2687.603996][T17236] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2687.612056][T17236] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2687.620053][T17236] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2687.628032][T17236] [ 2687.631186][T17236] memory: usage 307184kB, limit 307200kB, failcnt 12630 [ 2687.638135][T17236] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2687.645034][T17236] Memory cgroup stats for /syz5: [ 2687.646615][T17236] anon 126976 [ 2687.646615][T17236] file 40960 [ 2687.646615][T17236] kernel 314388480 [ 2687.646615][T17236] kernel_stack 16384 [ 2687.646615][T17236] pagetables 73728 [ 2687.646615][T17236] percpu 5920 [ 2687.646615][T17236] sock 0 [ 2687.646615][T17236] vmalloc 0 [ 2687.646615][T17236] shmem 40960 [ 2687.646615][T17236] file_mapped 40960 [ 2687.646615][T17236] file_dirty 0 [ 2687.646615][T17236] file_writeback 0 [ 2687.646615][T17236] swapcached 0 [ 2687.646615][T17236] inactive_anon 131072 [ 2687.646615][T17236] active_anon 36864 [ 2687.646615][T17236] inactive_file 0 [ 2687.646615][T17236] active_file 0 [ 2687.646615][T17236] unevictable 0 [ 2687.646615][T17236] slab_reclaimable 30960 [ 2687.646615][T17236] slab_unreclaimable 403584 [ 2687.646615][T17236] slab 434544 [ 2687.646615][T17236] workingset_refault_anon 0 [ 2687.646615][T17236] workingset_refault_file 178 [ 2687.646615][T17236] workingset_activate_anon 0 [ 2687.646615][T17236] workingset_activate_file 0 [ 2687.741407][T17236] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17234,uid=0 [ 2687.756729][T17236] Memory cgroup out of memory: Killed process 17236 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x9000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x50}}, 0x8000) 18:39:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4) 18:39:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0x138, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'team0\x00', {}, 'vxcan1\x00', {}, 0x9, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "6bff"}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x3, 0x0, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'bond_slave_1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0xc, 0x2, 0x2, 0x76}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) epoll_wait(r1, &(0x7f0000000880)=[{}], 0x1, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) fspick(r3, &(0x7f00000008c0)='./file0\x00', 0x1) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x400, 0xffffffff, 0x260, 0x260, 0x138, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'team0\x00', {}, 'vxcan1\x00', {}, 0x9, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "6bff"}}, @common=@ah={{0x30}, {[0x4d2, 0x4d2], 0x3, 0x0, 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'bond_slave_1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0xc, 0x2, 0x2, 0x76}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) epoll_wait(r1, &(0x7f0000000880)=[{}], 0x1, 0x6) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) fspick(r3, &(0x7f00000008c0)='./file0\x00', 0x1) (async) 18:39:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x700200], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4) 18:39:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x50}}, 0x8000) [ 2687.898000][T17266] x_tables: duplicate underflow at hook 2 [ 2687.936161][T17270] x_tables: duplicate underflow at hook 2 18:39:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4) 18:39:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400f5ffffffffffffff00000000000000000000000000000000000000000000030017000000000002000000ffffff7f00000000000000000100000000000000b65a7dc55201abae09940b4224fd768ed7bc6451a26479a27eec683c56c8f98e6ae1a9845a343a2ccc0e26034eb46f42f34cb019a0ad50f3c683ee4f0a9b56b2f8887b71c03eb33aec8728e6c7c080da6d2a135039aa007604f7c6996ff24409ad2e37903e8099f2ce1623840de79f61df6224fff5"], 0x50}}, 0x0) 18:39:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2688.581188][T17269] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2688.594771][T17269] CPU: 1 PID: 17269 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2688.605455][T17269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2688.615574][T17269] Call Trace: [ 2688.618855][T17269] [ 2688.621838][T17269] dump_stack_lvl+0xd6/0x122 [ 2688.626415][T17269] dump_stack+0x11/0x12 [ 2688.630557][T17269] dump_header+0x98/0x410 [ 2688.635010][T17269] oom_kill_process+0x100/0x550 [ 2688.639908][T17269] out_of_memory+0x620/0x880 [ 2688.644564][T17269] mem_cgroup_oom+0x475/0x4f0 [ 2688.649237][T17269] try_charge_memcg+0x746/0x960 [ 2688.654210][T17269] ? debug_smp_processor_id+0x13/0x20 [ 2688.659612][T17269] __memcg_kmem_charge_page+0x2e4/0x480 [ 2688.665141][T17269] __alloc_pages+0x1c1/0x340 [ 2688.669794][T17269] alloc_pages+0x34d/0x450 [ 2688.674216][T17269] __vmalloc_node_range+0x730/0xef0 [ 2688.679460][T17269] kvmalloc_node+0xf3/0x140 [ 2688.684021][T17269] ? xt_alloc_table_info+0x39/0x70 [ 2688.689199][T17269] xt_alloc_table_info+0x39/0x70 [ 2688.694239][T17269] do_ip6t_set_ctl+0x645/0x1790 [ 2688.699166][T17269] ? rmqueue_pcplist+0x157/0x1e0 [ 2688.704106][T17269] ? rmqueue+0x4a/0xbc0 [ 2688.708248][T17269] nf_setsockopt+0x1a6/0x1c0 [ 2688.712906][T17269] ipv6_setsockopt+0x2724/0x2a90 [ 2688.717887][T17269] ? rb_insert_color+0x2b5/0x2c0 [ 2688.722838][T17269] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2688.728372][T17269] ? debug_smp_processor_id+0x13/0x20 [ 2688.733882][T17269] ? resched_curr+0x1d/0xc0 [ 2688.738399][T17269] ? check_preempt_wakeup+0x1c4/0x380 [ 2688.743755][T17269] ? __rcu_read_unlock+0x4a/0x70 [ 2688.748695][T17269] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2688.754066][T17269] ? avc_has_perm+0x6b/0x150 [ 2688.758651][T17269] ? avc_has_perm+0xd0/0x150 [ 2688.763367][T17269] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2688.769743][T17269] ? selinux_socket_setsockopt+0x145/0x170 [ 2688.775549][T17269] udpv6_setsockopt+0x85/0x90 [ 2688.780220][T17269] sock_common_setsockopt+0x5d/0x70 [ 2688.785491][T17269] ? sock_common_recvmsg+0xe0/0xe0 [ 2688.790664][T17269] __sys_setsockopt+0x212/0x2b0 [ 2688.795648][T17269] __x64_sys_setsockopt+0x62/0x70 [ 2688.800714][T17269] do_syscall_64+0x2b/0x70 [ 2688.805145][T17269] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2688.811127][T17269] RIP: 0033:0x7f53e730f209 [ 2688.815528][T17269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2688.835140][T17269] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2688.843607][T17269] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2688.851583][T17269] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2688.859565][T17269] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2688.867555][T17269] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2688.875523][T17269] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2688.883553][T17269] [ 2688.886691][T17269] memory: usage 307176kB, limit 307200kB, failcnt 33379 [ 2688.893632][T17269] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2688.900500][T17269] Memory cgroup stats for /syz2: [ 2688.901574][T17269] anon 122880 [ 2688.901574][T17269] file 53248 [ 2688.901574][T17269] kernel 314372096 [ 2688.901574][T17269] kernel_stack 16384 [ 2688.901574][T17269] pagetables 77824 [ 2688.901574][T17269] percpu 1184 [ 2688.901574][T17269] sock 0 [ 2688.901574][T17269] vmalloc 0 [ 2688.901574][T17269] shmem 49152 [ 2688.901574][T17269] file_mapped 49152 [ 2688.901574][T17269] file_dirty 0 [ 2688.901574][T17269] file_writeback 0 [ 2688.901574][T17269] swapcached 0 [ 2688.901574][T17269] inactive_anon 139264 [ 2688.901574][T17269] active_anon 32768 [ 2688.901574][T17269] inactive_file 0 [ 2688.901574][T17269] active_file 4096 [ 2688.901574][T17269] unevictable 0 [ 2688.901574][T17269] slab_reclaimable 22376 [ 2688.901574][T17269] slab_unreclaimable 202792 [ 2688.901574][T17269] slab 225168 [ 2688.901574][T17269] workingset_refault_anon 0 [ 2688.901574][T17269] workingset_refault_file 115 [ 2688.901574][T17269] workingset_activate_anon 0 [ 2688.901574][T17269] workingset_activate_file 0 [ 2688.996761][T17269] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17268,uid=0 [ 2689.012076][T17269] Memory cgroup out of memory: Killed process 17269 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xa000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400f5ffffffffffffff00000000000000000000000000000000000000000000030017000000000002000000ffffff7f00000000000000000100000000000000b65a7dc55201abae09940b4224fd768ed7bc6451a26479a27eec683c56c8f98e6ae1a9845a343a2ccc0e26034eb46f42f34cb019a0ad50f3c683ee4f0a9b56b2f8887b71c03eb33aec8728e6c7c080da6d2a135039aa007604f7c6996ff24409ad2e37903e8099f2ce1623840de79f61df6224fff5"], 0x50}}, 0x0) 18:39:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:44 executing program 1: socket$inet6(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="73797a746e6c3000b46f8114c6b7b1e13d6000000000000000000000410a4c9846a5a35d260b0ba40fe391db23ce37d1afc191dc6db2be30ff8b792d31a866f955b94d768b0197bc35ecb9e22b5146d6f8420c73134420880a5e2e3ea31a26e72b45024c0092b7f14349a7185272b0d5542eef5c76e310f2b8c20561a5122cc5f095fdb57438f770eba8c35b12593134b7a94cf32468a60cd5f29a7ae25ccbbcbb8b768bc74e1121c83a85b79ab39ac1526bc2f4c84f7a43093a09", @ANYRES32=0x0, @ANYBLOB="73c00010000003d900008001453e0094006700007d049078ac1414aa640101024444ec91640101027fffffff6401010200000005ac14141c000007587f00000100000200e0000002ffffffffac14142600000005e0000001000000060a0101010000000789071fac14142d862900000000060aa00ab5e1d532b00a010ed522df74ed2839e82ae6da1a010ba099eb23499bb63304440ce6d37f00000100000003"]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x120, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x6, 0x1}, 'port1\x00', 0x64, 0x131068, 0x0, 0x4, 0x6, 0x0, 0x8001, 0x0, 0x7, 0x4}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x2, 0x370, 0xffffffff, 0xd0, 0xd0, 0x1d0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private0, [0xffffff00, 0x0, 0x0, 0xff000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x42], 0xa851, 0x2, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{}, {0x47d, 0x9c2, 0xdd5e, 0x3623, 0x80000000, 0x1, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffd8c) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, 0x0) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004}, 0x20040004) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000010c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000dc0)={0x2cc, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4004010}, 0x4044840) 18:39:44 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x1000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:44 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400f5ffffffffffffff00000000000000000000000000000000000000000000030017000000000002000000ffffff7f00000000000000000100000000000000b65a7dc55201abae09940b4224fd768ed7bc6451a26479a27eec683c56c8f98e6ae1a9845a343a2ccc0e26034eb46f42f34cb019a0ad50f3c683ee4f0a9b56b2f8887b71c03eb33aec8728e6c7c080da6d2a135039aa007604f7c6996ff24409ad2e37903e8099f2ce1623840de79f61df6224fff5"], 0x50}}, 0x0) 18:39:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:44 executing program 1: socket$inet6(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="73797a746e6c3000b46f8114c6b7b1e13d6000000000000000000000410a4c9846a5a35d260b0ba40fe391db23ce37d1afc191dc6db2be30ff8b792d31a866f955b94d768b0197bc35ecb9e22b5146d6f8420c73134420880a5e2e3ea31a26e72b45024c0092b7f14349a7185272b0d5542eef5c76e310f2b8c20561a5122cc5f095fdb57438f770eba8c35b12593134b7a94cf32468a60cd5f29a7ae25ccbbcbb8b768bc74e1121c83a85b79ab39ac1526bc2f4c84f7a43093a09", @ANYRES32=0x0, @ANYBLOB="73c00010000003d900008001453e0094006700007d049078ac1414aa640101024444ec91640101027fffffff6401010200000005ac14141c000007587f00000100000200e0000002ffffffffac14142600000005e0000001000000060a0101010000000789071fac14142d862900000000060aa00ab5e1d532b00a010ed522df74ed2839e82ae6da1a010ba099eb23499bb63304440ce6d37f00000100000003"]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x120, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x6, 0x1}, 'port1\x00', 0x64, 0x131068, 0x0, 0x4, 0x6, 0x0, 0x8001, 0x0, 0x7, 0x4}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x2, 0x370, 0xffffffff, 0xd0, 0xd0, 0x1d0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private0, [0xffffff00, 0x0, 0x0, 0xff000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x42], 0xa851, 0x2, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{}, {0x47d, 0x9c2, 0xdd5e, 0x3623, 0x80000000, 0x1, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffd8c) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, 0x0) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004}, 0x20040004) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000010c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000dc0)={0x2cc, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4004010}, 0x4044840) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="73797a746e6c3000b46f8114c6b7b1e13d6000000000000000000000410a4c9846a5a35d260b0ba40fe391db23ce37d1afc191dc6db2be30ff8b792d31a866f955b94d768b0197bc35ecb9e22b5146d6f8420c73134420880a5e2e3ea31a26e72b45024c0092b7f14349a7185272b0d5542eef5c76e310f2b8c20561a5122cc5f095fdb57438f770eba8c35b12593134b7a94cf32468a60cd5f29a7ae25ccbbcbb8b768bc74e1121c83a85b79ab39ac1526bc2f4c84f7a43093a09", @ANYRES32=0x0, @ANYBLOB="73c00010000003d900008001453e0094006700007d049078ac1414aa640101024444ec91640101027fffffff6401010200000005ac14141c000007587f00000100000200e0000002ffffffffac14142600000005e0000001000000060a0101010000000789071fac14142d862900000000060aa00ab5e1d532b00a010ed522df74ed2839e82ae6da1a010ba099eb23499bb63304440ce6d37f00000100000003"]}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x120, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x6, 0x1}, 'port1\x00', 0x64, 0x131068, 0x0, 0x4, 0x6, 0x0, 0x8001, 0x0, 0x7, 0x4}) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x2, 0x370, 0xffffffff, 0xd0, 0xd0, 0x1d0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private0, [0xffffff00, 0x0, 0x0, 0xff000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x42], 0xa851, 0x2, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{}, {0x47d, 0x9c2, 0xdd5e, 0x3623, 0x80000000, 0x1, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffd8c) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, 0x0) (async) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004}, 0x20040004) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000010c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000dc0)={0x2cc, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4004010}, 0x4044840) (async) 18:39:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, 0x1, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:44 executing program 4: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r1, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xbc, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x4040010) r2 = socket$key(0xf, 0x3, 0x2) socketpair(0x22, 0x5, 0x8000, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x40) [ 2689.735649][T17306] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2689.749371][T17306] CPU: 1 PID: 17306 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2689.760138][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2689.770182][T17306] Call Trace: [ 2689.773494][T17306] [ 2689.776424][T17306] dump_stack_lvl+0xd6/0x122 [ 2689.781085][T17306] dump_stack+0x11/0x12 [ 2689.785305][T17306] dump_header+0x98/0x410 [ 2689.789623][T17306] oom_kill_process+0x100/0x550 [ 2689.794461][T17306] out_of_memory+0x620/0x880 [ 2689.800516][T17306] mem_cgroup_oom+0x475/0x4f0 [ 2689.805240][T17306] try_charge_memcg+0x746/0x960 [ 2689.810080][T17306] ? debug_smp_processor_id+0x13/0x20 [ 2689.815497][T17306] __memcg_kmem_charge_page+0x2e4/0x480 [ 2689.821037][T17306] __alloc_pages+0x1c1/0x340 [ 2689.825654][T17306] alloc_pages+0x34d/0x450 [ 2689.830056][T17306] __vmalloc_node_range+0x730/0xef0 [ 2689.835281][T17306] kvmalloc_node+0xf3/0x140 [ 2689.839795][T17306] ? xt_alloc_table_info+0x39/0x70 [ 2689.844983][T17306] xt_alloc_table_info+0x39/0x70 [ 2689.849909][T17306] do_ip6t_set_ctl+0x645/0x1790 [ 2689.854755][T17306] ? rmqueue_pcplist+0x157/0x1e0 [ 2689.859678][T17306] ? rmqueue+0x4a/0xbc0 [ 2689.863822][T17306] nf_setsockopt+0x1a6/0x1c0 [ 2689.868398][T17306] ipv6_setsockopt+0x2724/0x2a90 [ 2689.873320][T17306] ? _raw_spin_unlock+0x2d/0x50 [ 2689.878246][T17306] ? finish_task_switch+0xc5/0x260 [ 2689.883407][T17306] ? __schedule+0x50d/0x6e0 [ 2689.887895][T17306] ? schedule+0x5b/0x80 [ 2689.892062][T17306] ? futex_wait_queue+0x11c/0x160 [ 2689.897165][T17306] ? __rcu_read_unlock+0x4a/0x70 [ 2689.902103][T17306] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2689.907467][T17306] ? avc_has_perm+0x6b/0x150 [ 2689.912072][T17306] ? avc_has_perm+0xd0/0x150 [ 2689.916676][T17306] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2689.923122][T17306] ? selinux_socket_setsockopt+0x145/0x170 [ 2689.929055][T17306] udpv6_setsockopt+0x85/0x90 [ 2689.933920][T17306] sock_common_setsockopt+0x5d/0x70 [ 2689.939107][T17306] ? sock_common_recvmsg+0xe0/0xe0 [ 2689.944264][T17306] __sys_setsockopt+0x212/0x2b0 [ 2689.949148][T17306] __x64_sys_setsockopt+0x62/0x70 [ 2689.954240][T17306] do_syscall_64+0x2b/0x70 [ 2689.958654][T17306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2689.964570][T17306] RIP: 0033:0x7f1d726c3209 [ 2689.968963][T17306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2689.988618][T17306] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2689.997164][T17306] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2690.005120][T17306] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2690.013079][T17306] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2690.021049][T17306] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2690.029028][T17306] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2690.037014][T17306] [ 2690.040215][T17306] memory: usage 307200kB, limit 307200kB, failcnt 12745 [ 2690.047226][T17306] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2690.054077][T17306] Memory cgroup stats for /syz5: [ 2690.054967][T17306] anon 126976 [ 2690.054967][T17306] file 40960 [ 2690.054967][T17306] kernel 314392576 [ 2690.054967][T17306] kernel_stack 32768 [ 2690.054967][T17306] pagetables 73728 [ 2690.054967][T17306] percpu 5920 [ 2690.054967][T17306] sock 0 [ 2690.054967][T17306] vmalloc 0 [ 2690.054967][T17306] shmem 40960 [ 2690.054967][T17306] file_mapped 40960 [ 2690.054967][T17306] file_dirty 0 [ 2690.054967][T17306] file_writeback 0 [ 2690.054967][T17306] swapcached 0 [ 2690.054967][T17306] inactive_anon 131072 [ 2690.054967][T17306] active_anon 36864 [ 2690.054967][T17306] inactive_file 0 [ 2690.054967][T17306] active_file 0 [ 2690.054967][T17306] unevictable 0 [ 2690.054967][T17306] slab_reclaimable 30960 [ 2690.054967][T17306] slab_unreclaimable 404856 [ 2690.054967][T17306] slab 435816 [ 2690.054967][T17306] workingset_refault_anon 0 [ 2690.054967][T17306] workingset_refault_file 178 [ 2690.054967][T17306] workingset_activate_anon 0 [ 2690.054967][T17306] workingset_activate_file 0 [ 2690.149846][T17306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17300,uid=0 [ 2690.165164][T17306] Memory cgroup out of memory: Killed process 17306 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:45 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xc000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x120}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:45 executing program 4: socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r1, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xbc, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x4040010) r2 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) socketpair(0x22, 0x5, 0x8000, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) (async, rerun: 32) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x40) (rerun: 32) 18:39:45 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x2, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:45 executing program 1: socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="73797a746e6c3000b46f8114c6b7b1e13d6000000000000000000000410a4c9846a5a35d260b0ba40fe391db23ce37d1afc191dc6db2be30ff8b792d31a866f955b94d768b0197bc35ecb9e22b5146d6f8420c73134420880a5e2e3ea31a26e72b45024c0092b7f14349a7185272b0d5542eef5c76e310f2b8c20561a5122cc5f095fdb57438f770eba8c35b12593134b7a94cf32468a60cd5f29a7ae25ccbbcbb8b768bc74e1121c83a85b79ab39ac1526bc2f4c84f7a43093a09", @ANYRES32=0x0, @ANYBLOB="73c00010000003d900008001453e0094006700007d049078ac1414aa640101024444ec91640101027fffffff6401010200000005ac14141c000007587f00000100000200e0000002ffffffffac14142600000005e0000001000000060a0101010000000789071fac14142d862900000000060aa00ab5e1d532b00a010ed522df74ed2839e82ae6da1a010ba099eb23499bb63304440ce6d37f00000100000003"]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x120, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x6, 0x1}, 'port1\x00', 0x64, 0x131068, 0x0, 0x4, 0x6, 0x0, 0x8001, 0x0, 0x7, 0x4}) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x2, 0x370, 0xffffffff, 0xd0, 0xd0, 0x1d0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @private0, [0xffffff00, 0x0, 0x0, 0xff000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x42], 0xa851, 0x2, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{}, {0x47d, 0x9c2, 0xdd5e, 0x3623, 0x80000000, 0x1, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffd8c) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, 0x0) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004}, 0x20040004) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000010c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000dc0)={0x2cc, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4004010}, 0x4044840) 18:39:45 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x2000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x218}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:45 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x450, 0xffffffff, 0x1d0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xff000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:audisp_exec_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:39:45 executing program 4: socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r1, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xbc, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x4040010) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) socketpair(0x22, 0x5, 0x8000, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x40) 18:39:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x2f8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x450, 0xffffffff, 0x1d0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xff000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:audisp_exec_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2690.850950][T17348] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2690.864553][T17348] CPU: 1 PID: 17348 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2690.875233][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2690.885381][T17348] Call Trace: [ 2690.888660][T17348] [ 2690.891596][T17348] dump_stack_lvl+0xd6/0x122 [ 2690.896270][T17348] dump_stack+0x11/0x12 [ 2690.900437][T17348] dump_header+0x98/0x410 [ 2690.904855][T17348] oom_kill_process+0x100/0x550 [ 2690.909739][T17348] out_of_memory+0x620/0x880 [ 2690.914381][T17348] mem_cgroup_oom+0x475/0x4f0 [ 2690.919121][T17348] try_charge_memcg+0x746/0x960 [ 2690.924017][T17348] ? sip_help_tcp+0x430/0x740 [ 2690.928772][T17348] ? debug_smp_processor_id+0x13/0x20 [ 2690.934158][T17348] __memcg_kmem_charge_page+0x2e4/0x480 [ 2690.939770][T17348] __alloc_pages+0x1c1/0x340 [ 2690.944411][T17348] alloc_pages+0x34d/0x450 [ 2690.948809][T17348] __vmalloc_node_range+0x730/0xef0 [ 2690.954039][T17348] kvmalloc_node+0xf3/0x140 [ 2690.958524][T17348] ? xt_alloc_table_info+0x39/0x70 [ 2690.963652][T17348] xt_alloc_table_info+0x39/0x70 [ 2690.968584][T17348] do_ip6t_set_ctl+0x645/0x1790 [ 2690.973467][T17348] ? rmqueue_pcplist+0x157/0x1e0 [ 2690.978395][T17348] ? rmqueue+0x4a/0xbc0 [ 2690.982649][T17348] nf_setsockopt+0x1a6/0x1c0 [ 2690.987606][T17348] ipv6_setsockopt+0x2724/0x2a90 [ 2690.992552][T17348] ? rb_insert_color+0x7e/0x2c0 [ 2690.997396][T17348] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2691.003001][T17348] ? reweight_entity+0x22/0x120 [ 2691.007891][T17348] ? enqueue_task_fair+0x333/0x410 [ 2691.012999][T17348] ? __rcu_read_unlock+0x4a/0x70 [ 2691.017934][T17348] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2691.023436][T17348] ? avc_has_perm+0x6b/0x150 [ 2691.028030][T17348] ? avc_has_perm+0xd0/0x150 [ 2691.032621][T17348] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2691.038934][T17348] ? selinux_socket_setsockopt+0x145/0x170 [ 2691.044750][T17348] udpv6_setsockopt+0x85/0x90 [ 2691.049417][T17348] sock_common_setsockopt+0x5d/0x70 [ 2691.054685][T17348] ? sock_common_recvmsg+0xe0/0xe0 [ 2691.059891][T17348] __sys_setsockopt+0x212/0x2b0 [ 2691.064878][T17348] __x64_sys_setsockopt+0x62/0x70 [ 2691.069970][T17348] do_syscall_64+0x2b/0x70 [ 2691.074377][T17348] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2691.080254][T17348] RIP: 0033:0x7f53e730f209 [ 2691.084646][T17348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2691.104408][T17348] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2691.112870][T17348] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2691.120838][T17348] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2691.128797][T17348] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2691.136779][T17348] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2691.144811][T17348] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2691.152790][T17348] [ 2691.155894][T17348] memory: usage 307200kB, limit 307200kB, failcnt 33524 [ 2691.162997][T17348] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2691.169849][T17348] Memory cgroup stats for /syz2: [ 2691.170137][T17348] anon 122880 [ 2691.170137][T17348] file 53248 [ 2691.170137][T17348] kernel 314392576 [ 2691.170137][T17348] kernel_stack 32768 [ 2691.170137][T17348] pagetables 77824 [ 2691.170137][T17348] percpu 1184 [ 2691.170137][T17348] sock 0 [ 2691.170137][T17348] vmalloc 0 [ 2691.170137][T17348] shmem 49152 [ 2691.170137][T17348] file_mapped 49152 [ 2691.170137][T17348] file_dirty 0 [ 2691.170137][T17348] file_writeback 0 [ 2691.170137][T17348] swapcached 0 [ 2691.170137][T17348] inactive_anon 139264 [ 2691.170137][T17348] active_anon 32768 [ 2691.170137][T17348] inactive_file 0 [ 2691.170137][T17348] active_file 4096 [ 2691.170137][T17348] unevictable 0 [ 2691.170137][T17348] slab_reclaimable 22376 [ 2691.170137][T17348] slab_unreclaimable 202792 [ 2691.170137][T17348] slab 225168 [ 2691.170137][T17348] workingset_refault_anon 0 [ 2691.170137][T17348] workingset_refault_file 115 [ 2691.170137][T17348] workingset_activate_anon 0 [ 2691.170137][T17348] workingset_activate_file 0 [ 2691.265486][T17348] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17347,uid=0 [ 2691.280900][T17348] Memory cgroup out of memory: Killed process 17348 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:46 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000000000000000000000030017000000030000006a5d0e6d93337d404b3d57e5a000000000000000ffffffff0000000000000000010000"], 0x50}}, 0x0) 18:39:46 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x450, 0xffffffff, 0x1d0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xff000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:audisp_exec_t:s0\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:39:46 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x3000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x370}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x20200fff], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x1802}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:46 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b}]}, 0x20}}, 0x4) 18:39:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000000000000000000000030017000000030000006a5d0e6d93337d404b3d57e5a000000000000000ffffffff0000000000000000010000"], 0x50}}, 0x0) 18:39:47 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x4) 18:39:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x2001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:47 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000000000000000000000030017000000030000006a5d0e6d93337d404b3d57e5a000000000000000ffffffff0000000000000000010000"], 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000000000000000000000030017000000030000006a5d0e6d93337d404b3d57e5a000000000000000ffffffff0000000000000000010000"], 0x50}}, 0x0) (async) 18:39:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x7003}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:47 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18:39:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xd000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2692.071995][T17379] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2692.085547][T17379] CPU: 1 PID: 17379 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2692.096327][T17379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2692.106365][T17379] Call Trace: [ 2692.109637][T17379] [ 2692.112562][T17379] dump_stack_lvl+0xd6/0x122 [ 2692.117149][T17379] dump_stack+0x11/0x12 [ 2692.121352][T17379] dump_header+0x98/0x410 [ 2692.125667][T17379] oom_kill_process+0x100/0x550 [ 2692.130669][T17379] out_of_memory+0x620/0x880 [ 2692.135272][T17379] mem_cgroup_oom+0x475/0x4f0 [ 2692.139961][T17379] try_charge_memcg+0x746/0x960 [ 2692.144842][T17379] __memcg_kmem_charge_page+0x2e4/0x480 [ 2692.150375][T17379] __alloc_pages+0x1c1/0x340 [ 2692.155220][T17379] alloc_pages+0x34d/0x450 [ 2692.159640][T17379] __vmalloc_node_range+0x730/0xef0 [ 2692.164877][T17379] kvmalloc_node+0xf3/0x140 [ 2692.169502][T17379] ? xt_alloc_table_info+0x39/0x70 [ 2692.174736][T17379] xt_alloc_table_info+0x39/0x70 [ 2692.179834][T17379] do_ip6t_set_ctl+0x645/0x1790 [ 2692.184673][T17379] ? rmqueue_pcplist+0x157/0x1e0 [ 2692.189629][T17379] ? rmqueue+0x4a/0xbc0 [ 2692.193780][T17379] ? page_counter_cancel+0xa4/0x1f0 [ 2692.198979][T17379] nf_setsockopt+0x1a6/0x1c0 [ 2692.203580][T17379] ipv6_setsockopt+0x2724/0x2a90 [ 2692.208546][T17379] ? rb_insert_color+0x2b5/0x2c0 [ 2692.213521][T17379] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2692.219071][T17379] ? debug_smp_processor_id+0x13/0x20 [ 2692.224484][T17379] ? resched_curr+0x1d/0xc0 [ 2692.229106][T17379] ? check_preempt_wakeup+0x1c4/0x380 [ 2692.234479][T17379] ? __rcu_read_unlock+0x4a/0x70 [ 2692.239404][T17379] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2692.244767][T17379] ? avc_has_perm+0x6b/0x150 [ 2692.249338][T17379] ? avc_has_perm+0xd0/0x150 [ 2692.253913][T17379] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2692.260232][T17379] ? selinux_socket_setsockopt+0x145/0x170 [ 2692.266032][T17379] udpv6_setsockopt+0x85/0x90 [ 2692.270808][T17379] sock_common_setsockopt+0x5d/0x70 [ 2692.275990][T17379] ? sock_common_recvmsg+0xe0/0xe0 [ 2692.281155][T17379] __sys_setsockopt+0x212/0x2b0 [ 2692.286019][T17379] __x64_sys_setsockopt+0x62/0x70 [ 2692.291206][T17379] do_syscall_64+0x2b/0x70 [ 2692.296391][T17379] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2692.302294][T17379] RIP: 0033:0x7f53e730f209 [ 2692.306694][T17379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2692.326300][T17379] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2692.334846][T17379] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2692.342830][T17379] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2692.350913][T17379] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2692.358940][T17379] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2692.367004][T17379] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2692.374977][T17379] [ 2692.378153][T17379] memory: usage 307184kB, limit 307200kB, failcnt 33591 [ 2692.385171][T17379] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2692.392123][T17379] Memory cgroup stats for /syz2: [ 2692.393796][T17379] anon 122880 [ 2692.393796][T17379] file 53248 [ 2692.393796][T17379] kernel 314380288 [ 2692.393796][T17379] kernel_stack 16384 [ 2692.393796][T17379] pagetables 77824 [ 2692.393796][T17379] percpu 1184 [ 2692.393796][T17379] sock 0 [ 2692.393796][T17379] vmalloc 0 [ 2692.393796][T17379] shmem 49152 [ 2692.393796][T17379] file_mapped 49152 [ 2692.393796][T17379] file_dirty 0 [ 2692.393796][T17379] file_writeback 0 [ 2692.393796][T17379] swapcached 0 [ 2692.393796][T17379] inactive_anon 139264 [ 2692.393796][T17379] active_anon 32768 [ 2692.393796][T17379] inactive_file 0 [ 2692.393796][T17379] active_file 4096 [ 2692.393796][T17379] unevictable 0 [ 2692.393796][T17379] slab_reclaimable 22376 [ 2692.393796][T17379] slab_unreclaimable 208184 [ 2692.393796][T17379] slab 230560 [ 2692.393796][T17379] workingset_refault_anon 0 [ 2692.393796][T17379] workingset_refault_file 115 [ 2692.393796][T17379] workingset_activate_anon 0 [ 2692.393796][T17379] workingset_activate_file 0 [ 2692.488864][T17379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17378,uid=0 [ 2692.504206][T17379] Memory cgroup out of memory: Killed process 17379 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x26000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xc000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x3, 0x26, 0x6}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0217000008000000000000000000000002000100000004d203003c0300000020030017000000000002000000ffffff1b0fb8d689075e00000000000000000100"], 0x40}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x1ff]}, &(0x7f0000000100), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x10, 0x8000, 0x0, 0x3, {{0x3b, 0x4, 0x3, 0x2, 0xec, 0x64, 0x0, 0x40, 0x29, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x8, 0x56, 0x0, 0x9, [0x200]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0x7, [0x0]}, @timestamp_prespec={0x44, 0x14, 0xeb, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x39a3}, {@multicast1, 0x40}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x69, 0x3, [{0x5, 0x6, "e5335fbb"}, {0x2, 0x3, "94"}, {0x2, 0xc, "0c4cfe4f7bd7532da942"}, {0x6, 0xb, "141fd364b48f2d4c78"}, {0x5, 0x12, "6c19b4b0a1c315e921b0bb9635ba603e"}, {0x5, 0x7, "57a95b8cbb"}, {0x2, 0x11, "f1f1d351924e8b04c2d0a3107bea51"}, {0x5, 0xb, "e9c1f0f8488b749dd8"}, {0x7, 0x3, "ac"}, {0x2, 0xb, "45fb84139b37e55c9c"}]}, @lsrr={0x83, 0x7, 0x71, [@private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0x62, 0x1, 0x4, [{@remote, 0x3}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x1f, 0xc0, [@remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @multicast1, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0xb, 0xe2, [@local, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x184, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x1}, 0xc885) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="c460e0ff0800000018290000", @ANYRES32=0x1, @ANYBLOB="171d02762cb3c0e6d4819a"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xf9, &(0x7f0000000240)=""/249, 0x41000, 0x6, '\x00', r1, 0x25, r5, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x3, 0x6, 0x2fe70000}, 0x10}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0xe1}, 0x1}, 0x2) 18:39:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xf802}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0xe, 0x2, 0x3d0, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x81, 0xff, 0x8, 0x1, 0x1ff, 0xffff, 0x200, 0x2]}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7, 0xfffff549, 0xe347450b, {0x9}}}, @common=@srh={{0x30}, {0x2e, 0x9, 0x6, 0x81, 0x2, 0x0, 0x2e30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x220}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c000000000000000007000000180001801400020076657468305f766c616e00000000000014000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="8c8899ee66c395f2bb936f0ab626330ce5e02c75a31e766569485dbdddb491a2b94ca523b5877093924c10530166f5a3f2f1b7db9d734e86e449bf5c1895adf9ebcd0689c0ecf349fca9f40920ad34a10ec705d5244d5554bc644669e6b91fa631185427848a29218f143bbf80397cf77af9f072c8e3e773df01046bbba34742ed087e8acc92db2f25534461597bc63a839a27003c17f44968e9d3eb45f413140fceee41532971cea167e31228"], 0x40}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) sendmsg$xdp(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, 0x0, r5, 0x1f}, 0x10, &(0x7f0000000480)=[{&(0x7f00000018c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x91}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x134, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) 18:39:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x4000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0xe, 0x2, 0x3d0, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x81, 0xff, 0x8, 0x1, 0x1ff, 0xffff, 0x200, 0x2]}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7, 0xfffff549, 0xe347450b, {0x9}}}, @common=@srh={{0x30}, {0x2e, 0x9, 0x6, 0x81, 0x2, 0x0, 0x2e30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x220}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c000000000000000007000000180001801400020076657468305f766c616e00000000000014000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="8c8899ee66c395f2bb936f0ab626330ce5e02c75a31e766569485dbdddb491a2b94ca523b5877093924c10530166f5a3f2f1b7db9d734e86e449bf5c1895adf9ebcd0689c0ecf349fca9f40920ad34a10ec705d5244d5554bc644669e6b91fa631185427848a29218f143bbf80397cf77af9f072c8e3e773df01046bbba34742ed087e8acc92db2f25534461597bc63a839a27003c17f44968e9d3eb45f413140fceee41532971cea167e31228"], 0x40}}, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) sendmsg$xdp(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, 0x0, r5, 0x1f}, 0x10, &(0x7f0000000480)=[{&(0x7f00000018c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x91}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x134, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0xe, 0x2, 0x3d0, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x81, 0xff, 0x8, 0x1, 0x1ff, 0xffff, 0x200, 0x2]}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7, 0xfffff549, 0xe347450b, {0x9}}}, @common=@srh={{0x30}, {0x2e, 0x9, 0x6, 0x81, 0x2, 0x0, 0x2e30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x220}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c000000000000000007000000180001801400020076657468305f766c616e00000000000014000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="8c8899ee66c395f2bb936f0ab626330ce5e02c75a31e766569485dbdddb491a2b94ca523b5877093924c10530166f5a3f2f1b7db9d734e86e449bf5c1895adf9ebcd0689c0ecf349fca9f40920ad34a10ec705d5244d5554bc644669e6b91fa631185427848a29218f143bbf80397cf77af9f072c8e3e773df01046bbba34742ed087e8acc92db2f25534461597bc63a839a27003c17f44968e9d3eb45f413140fceee41532971cea167e31228"], 0x40}}, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) (async) sendmsg$xdp(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, 0x0, r5, 0x1f}, 0x10, &(0x7f0000000480)=[{&(0x7f00000018c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x91}, 0x20000000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x134, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async) 18:39:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x3, 0x26, 0x6}) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0217000008000000000000000000000002000100000004d203003c0300000020030017000000000002000000ffffff1b0fb8d689075e00000000000000000100"], 0x40}}, 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x1ff]}, &(0x7f0000000100), 0x8) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x10, 0x8000, 0x0, 0x3, {{0x3b, 0x4, 0x3, 0x2, 0xec, 0x64, 0x0, 0x40, 0x29, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x8, 0x56, 0x0, 0x9, [0x200]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0x7, [0x0]}, @timestamp_prespec={0x44, 0x14, 0xeb, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x39a3}, {@multicast1, 0x40}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x69, 0x3, [{0x5, 0x6, "e5335fbb"}, {0x2, 0x3, "94"}, {0x2, 0xc, "0c4cfe4f7bd7532da942"}, {0x6, 0xb, "141fd364b48f2d4c78"}, {0x5, 0x12, "6c19b4b0a1c315e921b0bb9635ba603e"}, {0x5, 0x7, "57a95b8cbb"}, {0x2, 0x11, "f1f1d351924e8b04c2d0a3107bea51"}, {0x5, 0xb, "e9c1f0f8488b749dd8"}, {0x7, 0x3, "ac"}, {0x2, 0xb, "45fb84139b37e55c9c"}]}, @lsrr={0x83, 0x7, 0x71, [@private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0x62, 0x1, 0x4, [{@remote, 0x3}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x1f, 0xc0, [@remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @multicast1, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0xb, 0xe2, [@local, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x184, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x1}, 0xc885) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="c460e0ff0800000018290000", @ANYRES32=0x1, @ANYBLOB="171d02762cb3c0e6d4819a"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xf9, &(0x7f0000000240)=""/249, 0x41000, 0x6, '\x00', r1, 0x25, r5, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x3, 0x6, 0x2fe70000}, 0x10}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0xe1}, 0x1}, 0x2) 18:39:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000000)={0x3, 0x26, 0x6}) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0217000008000000000000000000000002000100000004d203003c0300000020030017000000000002000000ffffff1b0fb8d689075e00000000000000000100"], 0x40}}, 0x0) (async) rt_sigprocmask(0x2, &(0x7f0000000080)={[0x1ff]}, &(0x7f0000000100), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x10, 0x8000, 0x0, 0x3, {{0x3b, 0x4, 0x3, 0x2, 0xec, 0x64, 0x0, 0x40, 0x29, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x8, 0x56, 0x0, 0x9, [0x200]}, @timestamp={0x44, 0x8, 0x83, 0x0, 0x7, [0x0]}, @timestamp_prespec={0x44, 0x14, 0xeb, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x39a3}, {@multicast1, 0x40}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x69, 0x3, [{0x5, 0x6, "e5335fbb"}, {0x2, 0x3, "94"}, {0x2, 0xc, "0c4cfe4f7bd7532da942"}, {0x6, 0xb, "141fd364b48f2d4c78"}, {0x5, 0x12, "6c19b4b0a1c315e921b0bb9635ba603e"}, {0x5, 0x7, "57a95b8cbb"}, {0x2, 0x11, "f1f1d351924e8b04c2d0a3107bea51"}, {0x5, 0xb, "e9c1f0f8488b749dd8"}, {0x7, 0x3, "ac"}, {0x2, 0xb, "45fb84139b37e55c9c"}]}, @lsrr={0x83, 0x7, 0x71, [@private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0x62, 0x1, 0x4, [{@remote, 0x3}, {@broadcast, 0x3}]}, @ssrr={0x89, 0x1f, 0xc0, [@remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @multicast1, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0xb, 0xe2, [@local, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x184, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x1}, 0xc885) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x101000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="c460e0ff0800000018290000", @ANYRES32=0x1, @ANYBLOB="171d02762cb3c0e6d4819a"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xf9, &(0x7f0000000240)=""/249, 0x41000, 0x6, '\x00', r1, 0x25, r5, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x3, 0x6, 0x2fe70000}, 0x10}, 0x80) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0xe1}, 0x1}, 0x2) 18:39:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0xe, 0x2, 0x3d0, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x81, 0xff, 0x8, 0x1, 0x1ff, 0xffff, 0x200, 0x2]}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7, 0xfffff549, 0xe347450b, {0x9}}}, @common=@srh={{0x30}, {0x2e, 0x9, 0x6, 0x81, 0x2, 0x0, 0x2e30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x220}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c000000000000000007000000180001801400020076657468305f766c616e00000000000014000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="8c8899ee66c395f2bb936f0ab626330ce5e02c75a31e766569485dbdddb491a2b94ca523b5877093924c10530166f5a3f2f1b7db9d734e86e449bf5c1895adf9ebcd0689c0ecf349fca9f40920ad34a10ec705d5244d5554bc644669e6b91fa631185427848a29218f143bbf80397cf77af9f072c8e3e773df01046bbba34742ed087e8acc92db2f25534461597bc63a839a27003c17f44968e9d3eb45f413140fceee41532971cea167e31228"], 0x40}}, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) (async) sendmsg$xdp(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, 0x0, r5, 0x1f}, 0x10, &(0x7f0000000480)=[{&(0x7f00000018c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x91}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) (async, rerun: 32) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x134, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) [ 2693.378812][T17414] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2693.392375][T17414] CPU: 0 PID: 17414 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2693.403070][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2693.413133][T17414] Call Trace: [ 2693.416480][T17414] [ 2693.419408][T17414] dump_stack_lvl+0xd6/0x122 [ 2693.424074][T17414] dump_stack+0x11/0x12 [ 2693.428238][T17414] dump_header+0x98/0x410 [ 2693.432642][T17414] oom_kill_process+0x100/0x550 [ 2693.437506][T17414] out_of_memory+0x620/0x880 [ 2693.442178][T17414] mem_cgroup_oom+0x475/0x4f0 [ 2693.446867][T17414] try_charge_memcg+0x746/0x960 [ 2693.451749][T17414] ? debug_smp_processor_id+0x13/0x20 [ 2693.457211][T17414] ? delay_tsc+0xc1/0xe0 [ 2693.461488][T17414] __memcg_kmem_charge_page+0x2e4/0x480 [ 2693.467067][T17414] __alloc_pages+0x1c1/0x340 [ 2693.471722][T17414] alloc_pages+0x34d/0x450 [ 2693.476148][T17414] __vmalloc_node_range+0x730/0xef0 [ 2693.481433][T17414] kvmalloc_node+0xf3/0x140 [ 2693.485975][T17414] ? xt_alloc_table_info+0x39/0x70 [ 2693.491100][T17414] xt_alloc_table_info+0x39/0x70 [ 2693.496102][T17414] do_ip6t_set_ctl+0x645/0x1790 [ 2693.500970][T17414] ? rmqueue_pcplist+0x157/0x1e0 [ 2693.505976][T17414] ? rmqueue+0x4a/0xbc0 [ 2693.510142][T17414] ? page_counter_cancel+0xa4/0x1f0 [ 2693.515459][T17414] nf_setsockopt+0x1a6/0x1c0 [ 2693.520185][T17414] ipv6_setsockopt+0x2724/0x2a90 [ 2693.525166][T17414] ? _raw_spin_unlock+0x2d/0x50 [ 2693.530076][T17414] ? finish_task_switch+0xc5/0x260 [ 2693.535239][T17414] ? __schedule+0x50d/0x6e0 [ 2693.539759][T17414] ? schedule+0x5b/0x80 [ 2693.543939][T17414] ? futex_wait_queue+0x11c/0x160 [ 2693.549056][T17414] ? __rcu_read_unlock+0x4a/0x70 [ 2693.554006][T17414] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2693.559401][T17414] ? avc_has_perm+0x6b/0x150 [ 2693.564098][T17414] ? avc_has_perm+0xd0/0x150 [ 2693.568796][T17414] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2693.575195][T17414] ? selinux_socket_setsockopt+0x145/0x170 [ 2693.581084][T17414] udpv6_setsockopt+0x85/0x90 [ 2693.585773][T17414] sock_common_setsockopt+0x5d/0x70 [ 2693.590972][T17414] ? sock_common_recvmsg+0xe0/0xe0 [ 2693.596100][T17414] __sys_setsockopt+0x212/0x2b0 [ 2693.601088][T17414] __x64_sys_setsockopt+0x62/0x70 [ 2693.606114][T17414] do_syscall_64+0x2b/0x70 [ 2693.610525][T17414] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2693.616420][T17414] RIP: 0033:0x7f53e730f209 [ 2693.620902][T17414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2693.640516][T17414] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2693.648925][T17414] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2693.656938][T17414] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2693.664947][T17414] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2693.672919][T17414] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2693.680915][T17414] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2693.688948][T17414] [ 2693.692119][T17414] memory: usage 307184kB, limit 307200kB, failcnt 33657 [ 2693.699146][T17414] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2693.705993][T17414] Memory cgroup stats for /syz2: [ 2693.804489][T17414] anon 122880 [ 2693.804489][T17414] file 53248 [ 2693.804489][T17414] kernel 314380288 [ 2693.804489][T17414] kernel_stack 16384 [ 2693.804489][T17414] pagetables 77824 [ 2693.804489][T17414] percpu 1184 [ 2693.804489][T17414] sock 0 [ 2693.804489][T17414] vmalloc 0 [ 2693.804489][T17414] shmem 49152 [ 2693.804489][T17414] file_mapped 49152 [ 2693.804489][T17414] file_dirty 4096 [ 2693.804489][T17414] file_writeback 0 [ 2693.804489][T17414] swapcached 0 [ 2693.804489][T17414] inactive_anon 139264 [ 2693.804489][T17414] active_anon 32768 [ 2693.804489][T17414] inactive_file 4096 [ 2693.804489][T17414] active_file 0 [ 2693.804489][T17414] unevictable 0 [ 2693.804489][T17414] slab_reclaimable 22376 [ 2693.804489][T17414] slab_unreclaimable 208184 [ 2693.804489][T17414] slab 230560 [ 2693.804489][T17414] workingset_refault_anon 0 [ 2693.804489][T17414] workingset_refault_file 115 [ 2693.804489][T17414] workingset_activate_anon 0 [ 2693.804489][T17414] workingset_activate_file 0 [ 2693.899901][T17414] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17409,uid=0 [ 2693.915262][T17414] Memory cgroup out of memory: Killed process 17414 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x3f000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000002974eba2578f9977030017000000000002000000ffffffff000000000000000001009c0000000000"], 0x50}}, 0x0) 18:39:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x7000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x7000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000002974eba2578f9977030017000000000002000000ffffffff000000000000000001009c0000000000"], 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000002974eba2578f9977030017000000000002000000ffffffff000000000000000001009c0000000000"], 0x50}}, 0x0) (async) 18:39:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:39:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021700000a00000000000000000000000400040000000000000000000000000000000000000000002974eba2578f9977030017000000000002000000ffffffff000000000000000001009c0000000000"], 0x50}}, 0x0) [ 2694.846047][T17463] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2694.859652][T17463] CPU: 1 PID: 17463 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2694.870337][T17463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2694.880400][T17463] Call Trace: [ 2694.883683][T17463] [ 2694.886662][T17463] dump_stack_lvl+0xd6/0x122 [ 2694.891261][T17463] dump_stack+0x11/0x12 [ 2694.895488][T17463] dump_header+0x98/0x410 [ 2694.899892][T17463] oom_kill_process+0x100/0x550 [ 2694.904755][T17463] out_of_memory+0x620/0x880 [ 2694.909415][T17463] mem_cgroup_oom+0x475/0x4f0 [ 2694.914110][T17463] try_charge_memcg+0x746/0x960 [ 2694.919069][T17463] ? debug_smp_processor_id+0x13/0x20 [ 2694.924465][T17463] __memcg_kmem_charge_page+0x2e4/0x480 [ 2694.930025][T17463] __alloc_pages+0x1c1/0x340 [ 2694.934678][T17463] alloc_pages+0x34d/0x450 [ 2694.939107][T17463] __vmalloc_node_range+0x730/0xef0 [ 2694.944391][T17463] kvmalloc_node+0xf3/0x140 [ 2694.948949][T17463] ? xt_alloc_table_info+0x39/0x70 [ 2694.954074][T17463] xt_alloc_table_info+0x39/0x70 [ 2694.959084][T17463] do_ip6t_set_ctl+0x645/0x1790 [ 2694.964029][T17463] ? rmqueue_pcplist+0x157/0x1e0 [ 2694.969003][T17463] ? rmqueue+0x4a/0xbc0 [ 2694.973197][T17463] nf_setsockopt+0x1a6/0x1c0 [ 2694.977799][T17463] ipv6_setsockopt+0x2724/0x2a90 [ 2694.982749][T17463] ? rb_insert_color+0x2b5/0x2c0 [ 2694.987727][T17463] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2694.993298][T17463] ? debug_smp_processor_id+0x13/0x20 [ 2694.998746][T17463] ? resched_curr+0x1d/0xc0 [ 2695.003304][T17463] ? check_preempt_wakeup+0x1c4/0x380 [ 2695.008684][T17463] ? __rcu_read_unlock+0x4a/0x70 [ 2695.013766][T17463] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2695.019136][T17463] ? avc_has_perm+0x6b/0x150 [ 2695.023859][T17463] ? avc_has_perm+0xd0/0x150 [ 2695.028448][T17463] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2695.034849][T17463] ? selinux_socket_setsockopt+0x145/0x170 [ 2695.040693][T17463] udpv6_setsockopt+0x85/0x90 [ 2695.045444][T17463] sock_common_setsockopt+0x5d/0x70 [ 2695.050723][T17463] ? sock_common_recvmsg+0xe0/0xe0 [ 2695.055861][T17463] __sys_setsockopt+0x212/0x2b0 [ 2695.060746][T17463] __x64_sys_setsockopt+0x62/0x70 [ 2695.065802][T17463] do_syscall_64+0x2b/0x70 [ 2695.070237][T17463] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2695.076180][T17463] RIP: 0033:0x7f53e730f209 [ 2695.080606][T17463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2695.100221][T17463] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2695.108629][T17463] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2695.116674][T17463] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2695.124651][T17463] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2695.132803][T17463] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2695.140786][T17463] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2695.148820][T17463] [ 2695.151956][T17463] memory: usage 307184kB, limit 307200kB, failcnt 33711 [ 2695.158919][T17463] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2695.165768][T17463] Memory cgroup stats for /syz2: [ 2695.305341][T17463] anon 122880 [ 2695.305341][T17463] file 53248 [ 2695.305341][T17463] kernel 314380288 [ 2695.305341][T17463] kernel_stack 16384 [ 2695.305341][T17463] pagetables 77824 [ 2695.305341][T17463] percpu 1184 [ 2695.305341][T17463] sock 0 [ 2695.305341][T17463] vmalloc 0 [ 2695.305341][T17463] shmem 49152 [ 2695.305341][T17463] file_mapped 49152 [ 2695.305341][T17463] file_dirty 4096 [ 2695.305341][T17463] file_writeback 0 [ 2695.305341][T17463] swapcached 0 [ 2695.305341][T17463] inactive_anon 139264 [ 2695.305341][T17463] active_anon 32768 [ 2695.305341][T17463] inactive_file 4096 [ 2695.305341][T17463] active_file 0 [ 2695.305341][T17463] unevictable 0 [ 2695.305341][T17463] slab_reclaimable 22376 [ 2695.305341][T17463] slab_unreclaimable 208184 [ 2695.305341][T17463] slab 230560 [ 2695.305341][T17463] workingset_refault_anon 0 [ 2695.305341][T17463] workingset_refault_file 115 [ 2695.305341][T17463] workingset_activate_anon 0 [ 2695.305341][T17463] workingset_activate_file 0 [ 2695.400914][T17463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17462,uid=0 [ 2695.416258][T17463] Memory cgroup out of memory: Killed process 17463 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x40000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:51 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x340, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'tunl0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xfffc}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0x0, 0xff], [0x0, 0xff], 'nr0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 18:39:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x800) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x2ac, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x18c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20002000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x87e9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3e6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff0c9}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x608b9544}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004090) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r12, &(0x7f0000000000)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000500)={0xffffffffffffff48, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}}, 0x4) r13 = socket$inet6(0xa, 0x2, 0x0) io_uring_setup(0x2741, &(0x7f0000000400)={0x0, 0x169c, 0x1, 0x1, 0x125}) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xa000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x800) (async) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:39:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:51 executing program 1: socket$inet6(0xa, 0x2, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x340, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'tunl0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xfffc}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0x0, 0xff], [0x0, 0xff], 'nr0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 18:39:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:51 executing program 1: socket$inet6(0xa, 0x2, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r2) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x340, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'tunl0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xfffc}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0x0, 0xff], [0x0, 0xff], 'nr0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 18:39:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x800) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) (rerun: 32) [ 2696.158939][T17497] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2696.172473][T17497] CPU: 1 PID: 17497 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2696.183381][T17497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2696.193523][T17497] Call Trace: [ 2696.196850][T17497] [ 2696.199774][T17497] dump_stack_lvl+0xd6/0x122 [ 2696.204445][T17497] dump_stack+0x11/0x12 [ 2696.208699][T17497] dump_header+0x98/0x410 [ 2696.213120][T17497] oom_kill_process+0x100/0x550 [ 2696.218031][T17497] out_of_memory+0x620/0x880 [ 2696.222665][T17497] mem_cgroup_oom+0x475/0x4f0 [ 2696.227337][T17497] try_charge_memcg+0x746/0x960 [ 2696.232245][T17497] ? debug_smp_processor_id+0x13/0x20 [ 2696.237615][T17497] ? delay_tsc+0xc1/0xe0 [ 2696.241857][T17497] __memcg_kmem_charge_page+0x2e4/0x480 [ 2696.247412][T17497] __alloc_pages+0x1c1/0x340 [ 2696.252176][T17497] alloc_pages+0x34d/0x450 [ 2696.256664][T17497] __vmalloc_node_range+0x730/0xef0 [ 2696.261873][T17497] kvmalloc_node+0xf3/0x140 [ 2696.266373][T17497] ? xt_alloc_table_info+0x39/0x70 [ 2696.271666][T17497] xt_alloc_table_info+0x39/0x70 [ 2696.276670][T17497] do_ip6t_set_ctl+0x645/0x1790 [ 2696.281508][T17497] ? rmqueue_pcplist+0x157/0x1e0 [ 2696.286495][T17497] ? rmqueue+0x4a/0xbc0 [ 2696.290637][T17497] nf_setsockopt+0x1a6/0x1c0 [ 2696.295257][T17497] ipv6_setsockopt+0x2724/0x2a90 [ 2696.300306][T17497] ? _raw_spin_unlock+0x2d/0x50 [ 2696.305143][T17497] ? finish_task_switch+0xc5/0x260 [ 2696.310333][T17497] ? __schedule+0x50d/0x6e0 [ 2696.314845][T17497] ? schedule+0x5b/0x80 [ 2696.319053][T17497] ? futex_wait_queue+0x11c/0x160 [ 2696.324104][T17497] ? __rcu_read_unlock+0x4a/0x70 [ 2696.329103][T17497] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2696.334499][T17497] ? avc_has_perm+0x6b/0x150 [ 2696.339080][T17497] ? avc_has_perm+0xd0/0x150 [ 2696.343794][T17497] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2696.350152][T17497] ? selinux_socket_setsockopt+0x145/0x170 [ 2696.355955][T17497] udpv6_setsockopt+0x85/0x90 [ 2696.360620][T17497] sock_common_setsockopt+0x5d/0x70 [ 2696.365823][T17497] ? sock_common_recvmsg+0xe0/0xe0 [ 2696.370943][T17497] __sys_setsockopt+0x212/0x2b0 [ 2696.375904][T17497] __x64_sys_setsockopt+0x62/0x70 [ 2696.381017][T17497] do_syscall_64+0x2b/0x70 [ 2696.385426][T17497] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2696.391325][T17497] RIP: 0033:0x7f53e730f209 [ 2696.395721][T17497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2696.415366][T17497] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2696.423817][T17497] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2696.431856][T17497] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2696.439837][T17497] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2696.447875][T17497] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2696.455875][T17497] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2696.463865][T17497] [ 2696.466963][T17497] memory: usage 307184kB, limit 307200kB, failcnt 33777 [ 2696.473902][T17497] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2696.480893][T17497] Memory cgroup stats for /syz2: [ 2696.481622][T17497] anon 122880 [ 2696.481622][T17497] file 53248 [ 2696.481622][T17497] kernel 314380288 [ 2696.481622][T17497] kernel_stack 16384 [ 2696.481622][T17497] pagetables 77824 [ 2696.481622][T17497] percpu 1184 [ 2696.481622][T17497] sock 0 [ 2696.481622][T17497] vmalloc 0 [ 2696.481622][T17497] shmem 49152 [ 2696.481622][T17497] file_mapped 49152 [ 2696.481622][T17497] file_dirty 4096 [ 2696.481622][T17497] file_writeback 0 [ 2696.481622][T17497] swapcached 0 [ 2696.481622][T17497] inactive_anon 139264 [ 2696.481622][T17497] active_anon 32768 [ 2696.481622][T17497] inactive_file 0 [ 2696.481622][T17497] active_file 4096 [ 2696.481622][T17497] unevictable 0 [ 2696.481622][T17497] slab_reclaimable 22376 [ 2696.481622][T17497] slab_unreclaimable 208184 [ 2696.481622][T17497] slab 230560 [ 2696.481622][T17497] workingset_refault_anon 0 [ 2696.481622][T17497] workingset_refault_file 115 [ 2696.481622][T17497] workingset_activate_anon 0 [ 2696.481622][T17497] workingset_activate_file 0 [ 2696.576955][T17497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17495,uid=0 [ 2696.592333][T17497] Memory cgroup out of memory: Killed process 17497 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x6a030000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:52 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) 18:39:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000004c0)='!\\#:}}\'\'\\-:/!\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:52 executing program 0: socket$key(0xf, 0x3, 0x2) socketpair(0xa, 0x3, 0x80, &(0x7f0000000000)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) 18:39:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x14000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000004c0)='!\\#:}}\'\'\\-:/!\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:52 executing program 0: socket$key(0xf, 0x3, 0x2) socketpair(0xa, 0x3, 0x80, &(0x7f0000000000)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) 18:39:52 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) 18:39:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x0, 0xd0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:52 executing program 0: socket$key(0xf, 0x3, 0x2) socketpair(0xa, 0x3, 0x80, &(0x7f0000000000)) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) 18:39:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000004c0)='!\\#:}}\'\'\\-:/!\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000004c0)='!\\#:}}\'\'\\-:/!\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) [ 2697.315470][T17540] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2697.329200][T17540] CPU: 1 PID: 17540 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2697.339859][T17540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2697.349911][T17540] Call Trace: [ 2697.353252][T17540] [ 2697.356192][T17540] dump_stack_lvl+0xd6/0x122 [ 2697.360864][T17540] dump_stack+0x11/0x12 [ 2697.365002][T17540] dump_header+0x98/0x410 [ 2697.369362][T17540] oom_kill_process+0x100/0x550 [ 2697.374223][T17540] out_of_memory+0x620/0x880 [ 2697.378876][T17540] mem_cgroup_oom+0x475/0x4f0 [ 2697.383561][T17540] try_charge_memcg+0x746/0x960 [ 2697.388451][T17540] __memcg_kmem_charge_page+0x2e4/0x480 [ 2697.393995][T17540] __alloc_pages+0x1c1/0x340 [ 2697.398570][T17540] alloc_pages+0x34d/0x450 [ 2697.402972][T17540] __vmalloc_node_range+0x730/0xef0 [ 2697.408206][T17540] kvmalloc_node+0xf3/0x140 [ 2697.412693][T17540] ? xt_alloc_table_info+0x39/0x70 [ 2697.417797][T17540] xt_alloc_table_info+0x39/0x70 [ 2697.422803][T17540] do_ip6t_set_ctl+0x645/0x1790 [ 2697.427635][T17540] ? rmqueue_pcplist+0x157/0x1e0 [ 2697.432614][T17540] ? rmqueue+0x4a/0xbc0 [ 2697.436841][T17540] ? page_counter_cancel+0xa4/0x1f0 [ 2697.442163][T17540] nf_setsockopt+0x1a6/0x1c0 [ 2697.446735][T17540] ipv6_setsockopt+0x2724/0x2a90 [ 2697.451659][T17540] ? _raw_spin_unlock+0x2d/0x50 [ 2697.456524][T17540] ? finish_task_switch+0xc5/0x260 [ 2697.461651][T17540] ? __schedule+0x50d/0x6e0 [ 2697.466145][T17540] ? schedule+0x5b/0x80 [ 2697.470346][T17540] ? futex_wait_queue+0x11c/0x160 [ 2697.475363][T17540] ? __rcu_read_unlock+0x4a/0x70 [ 2697.480288][T17540] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2697.485715][T17540] ? avc_has_perm+0x6b/0x150 [ 2697.490303][T17540] ? avc_has_perm+0xd0/0x150 [ 2697.494873][T17540] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2697.501188][T17540] ? selinux_socket_setsockopt+0x145/0x170 [ 2697.507026][T17540] udpv6_setsockopt+0x85/0x90 [ 2697.511708][T17540] sock_common_setsockopt+0x5d/0x70 [ 2697.516925][T17540] ? sock_common_recvmsg+0xe0/0xe0 [ 2697.522078][T17540] __sys_setsockopt+0x212/0x2b0 [ 2697.526979][T17540] __x64_sys_setsockopt+0x62/0x70 [ 2697.532031][T17540] do_syscall_64+0x2b/0x70 [ 2697.536468][T17540] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2697.542346][T17540] RIP: 0033:0x7f53e730f209 [ 2697.546743][T17540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2697.566428][T17540] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2697.574907][T17540] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2697.582885][T17540] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2697.590921][T17540] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2697.598934][T17540] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2697.606954][T17540] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2697.614961][T17540] [ 2697.618065][T17540] memory: usage 307200kB, limit 307200kB, failcnt 33841 [ 2697.625061][T17540] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2697.632060][T17540] Memory cgroup stats for /syz2: [ 2697.632820][T17540] anon 122880 [ 2697.632820][T17540] file 53248 [ 2697.632820][T17540] kernel 314384384 [ 2697.632820][T17540] kernel_stack 32768 [ 2697.632820][T17540] pagetables 77824 [ 2697.632820][T17540] percpu 1184 [ 2697.632820][T17540] sock 0 [ 2697.632820][T17540] vmalloc 0 [ 2697.632820][T17540] shmem 49152 [ 2697.632820][T17540] file_mapped 49152 [ 2697.632820][T17540] file_dirty 4096 [ 2697.632820][T17540] file_writeback 0 [ 2697.632820][T17540] swapcached 0 [ 2697.632820][T17540] inactive_anon 139264 [ 2697.632820][T17540] active_anon 32768 [ 2697.632820][T17540] inactive_file 0 [ 2697.632820][T17540] active_file 4096 [ 2697.632820][T17540] unevictable 0 [ 2697.632820][T17540] slab_reclaimable 22376 [ 2697.632820][T17540] slab_unreclaimable 209456 [ 2697.632820][T17540] slab 231832 [ 2697.632820][T17540] workingset_refault_anon 0 [ 2697.632820][T17540] workingset_refault_file 115 [ 2697.632820][T17540] workingset_activate_anon 0 [ 2697.632820][T17540] workingset_activate_file 0 [ 2697.728163][T17540] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17536,uid=0 [ 2697.743538][T17540] Memory cgroup out of memory: Killed process 17540 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x832a0100], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:53 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000003c0)={'custom1\x00'}) 18:39:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:53 executing program 0: socket$key(0xf, 0x3, 0x2) socketpair(0xa, 0x3, 0x80, &(0x7f0000000000)) 18:39:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x20200fff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:53 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:53 executing program 0: socketpair(0xa, 0x3, 0x80, &(0x7f0000000000)) 18:39:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:53 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$key(0xf, 0x3, 0x2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:39:53 executing program 0: socketpair(0x0, 0x3, 0x80, &(0x7f0000000000)) 18:39:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2698.448254][T17560] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2698.461853][T17560] CPU: 1 PID: 17560 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2698.472532][T17560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2698.482726][T17560] Call Trace: [ 2698.486011][T17560] [ 2698.488945][T17560] dump_stack_lvl+0xd6/0x122 [ 2698.493570][T17560] dump_stack+0x11/0x12 [ 2698.497726][T17560] dump_header+0x98/0x410 [ 2698.502134][T17560] oom_kill_process+0x100/0x550 [ 2698.507074][T17560] out_of_memory+0x620/0x880 [ 2698.511675][T17560] mem_cgroup_oom+0x475/0x4f0 [ 2698.516342][T17560] try_charge_memcg+0x746/0x960 [ 2698.521257][T17560] ? debug_smp_processor_id+0x13/0x20 [ 2698.526695][T17560] __memcg_kmem_charge_page+0x2e4/0x480 [ 2698.532302][T17560] __alloc_pages+0x1c1/0x340 [ 2698.536906][T17560] alloc_pages+0x34d/0x450 [ 2698.541306][T17560] __vmalloc_node_range+0x730/0xef0 [ 2698.546535][T17560] kvmalloc_node+0xf3/0x140 [ 2698.551057][T17560] ? xt_alloc_table_info+0x39/0x70 [ 2698.556191][T17560] xt_alloc_table_info+0x39/0x70 [ 2698.561160][T17560] do_ip6t_set_ctl+0x645/0x1790 [ 2698.565995][T17560] ? rmqueue_pcplist+0x157/0x1e0 [ 2698.570926][T17560] ? rmqueue+0x4a/0xbc0 [ 2698.575090][T17560] nf_setsockopt+0x1a6/0x1c0 [ 2698.579674][T17560] ipv6_setsockopt+0x2724/0x2a90 [ 2698.584669][T17560] ? rb_insert_color+0x2b5/0x2c0 [ 2698.589658][T17560] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2698.595191][T17560] ? debug_smp_processor_id+0x13/0x20 [ 2698.600772][T17560] ? resched_curr+0x1d/0xc0 [ 2698.605260][T17560] ? check_preempt_wakeup+0x1c4/0x380 [ 2698.610618][T17560] ? __rcu_read_unlock+0x4a/0x70 [ 2698.615538][T17560] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2698.620957][T17560] ? avc_has_perm+0x6b/0x150 [ 2698.625671][T17560] ? avc_has_perm+0xd0/0x150 [ 2698.630255][T17560] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2698.636610][T17560] ? selinux_socket_setsockopt+0x145/0x170 [ 2698.642496][T17560] udpv6_setsockopt+0x85/0x90 [ 2698.647189][T17560] sock_common_setsockopt+0x5d/0x70 [ 2698.652516][T17560] ? sock_common_recvmsg+0xe0/0xe0 [ 2698.657885][T17560] __sys_setsockopt+0x212/0x2b0 [ 2698.662763][T17560] __x64_sys_setsockopt+0x62/0x70 [ 2698.667911][T17560] do_syscall_64+0x2b/0x70 [ 2698.672417][T17560] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2698.678317][T17560] RIP: 0033:0x7f53e730f209 [ 2698.682796][T17560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2698.702417][T17560] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2698.710947][T17560] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2698.718993][T17560] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2698.727029][T17560] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2698.735134][T17560] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2698.743103][T17560] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2698.751077][T17560] [ 2698.754193][T17560] memory: usage 307200kB, limit 307200kB, failcnt 33905 [ 2698.761161][T17560] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2698.768023][T17560] Memory cgroup stats for /syz2: [ 2698.768546][T17560] anon 122880 [ 2698.768546][T17560] file 53248 [ 2698.768546][T17560] kernel 314372096 [ 2698.768546][T17560] kernel_stack 16384 [ 2698.768546][T17560] pagetables 77824 [ 2698.768546][T17560] percpu 1184 [ 2698.768546][T17560] sock 0 [ 2698.768546][T17560] vmalloc 0 [ 2698.768546][T17560] shmem 49152 [ 2698.768546][T17560] file_mapped 49152 [ 2698.768546][T17560] file_dirty 4096 [ 2698.768546][T17560] file_writeback 0 [ 2698.768546][T17560] swapcached 0 [ 2698.768546][T17560] inactive_anon 139264 [ 2698.768546][T17560] active_anon 32768 [ 2698.768546][T17560] inactive_file 0 [ 2698.768546][T17560] active_file 4096 [ 2698.768546][T17560] unevictable 0 [ 2698.768546][T17560] slab_reclaimable 22376 [ 2698.768546][T17560] slab_unreclaimable 209456 [ 2698.768546][T17560] slab 231832 [ 2698.768546][T17560] workingset_refault_anon 0 [ 2698.768546][T17560] workingset_refault_file 115 [ 2698.768546][T17560] workingset_activate_anon 0 [ 2698.768546][T17560] workingset_activate_file 0 [ 2698.864126][T17560] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17554,uid=0 [ 2698.879580][T17560] Memory cgroup out of memory: Killed process 17560 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x93190000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:54 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:54 executing program 0: socketpair(0x0, 0x3, 0x80, &(0x7f0000000000)) 18:39:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:54 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000005c0), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) socket$key(0xf, 0x3, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000015) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:39:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x26000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0xd0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:54 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:54 executing program 0: socketpair(0x0, 0x3, 0x80, &(0x7f0000000000)) 18:39:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x120}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x8000, 0x40, 0x7fffffff, 0x3, {{0x1f, 0x4, 0x1, 0x3, 0x7c, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @multicast2, {[@generic={0x88, 0x11, "bc4a50a7caa4ffdcfc76bf9fe2c605"}, @ssrr={0x89, 0x1b, 0xa8, [@rand_addr=0x64010102, @remote, @broadcast, @rand_addr=0x64010102, @private=0xa010102, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x18, 0x0, 0x3, [0x2]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0xc, "335656a23eb907638628"}, {0x5, 0x9, "388d4007ca04b7"}, {0x0, 0xc, "f6fe2355cfb53ec62dab"}, {0x7, 0xd, "154a0b6aef8a7af32564fe"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x0, 0x401, 0xc, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, 0x10, 0x700, 0x5, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x4e4, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "5fbe0415602221bf41cc5e5d193c6b1cd9f4aeee67e57c3e022e2b6c7e8152f28f5362b74a37a449826d5f3f89e67af501e5428041a337accbec0a823561085a136ed0276d818304f1678e12d2cd2574b3cc885aa56439804fc106cac9e67fb6a16eeb6605b69ba20e90255fa07e19f972c75dae87a63f1ec9baece35385c3a1ca5b8bdfdd9bd453f33522b2fd18eeefd1d74ca7b74ab84a608f224909599939a2e351db900a94ed0808cb5f80bba3a86e6b97b4a46b682215e991a6e3448e102448c4e92de6dead105907fa383ac6f66b16f716ece8f305b80c024213aae2bcc097d4005daeec71c4f8ab5e89e86e9c"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "60ce860b95fbecae74df4d710ae9081bd3e6b117305dcb68e9eae59a4f74902f97fee045e1e620eb779599a087ee8f90853d78661d3d919835747ff1a64767b9efe420eb4c255275494f295322171058c92753da4f32e7175706986b15cf0bbab9acd947e9e7db91371e6aeda32c2a0838250f929efca5685f3f9b1add0078"}, @ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "399bbbe82950cb7328bc49ac954d5491234139b70cba5db0946c2ebc1f0d890d507eeacfcabf391e5017f72b182282182f89f2984ee7473949dad6daf80f155dbb46e1866ecc5b702cbc29bd6eaa1a73c6ae3faedf0a020301f293669785a923daa07ef896b423e71dfdb29087ef2bec058dc3c2da12b59f6756bc1ed51dde362cf77405e406f9fad2c97fd0ffd22ec1f3e426fc51d7b17ee0577531b3472ebcec58a51e25cc997d2bf53fe4239db126"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "12a7473a543bfe1d7ef8"}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "381de50f9354a63a2015b1ea0f934cb5cbf4f6788258d6c6854a93cb7a8a851e16f033ad879c9c"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff328}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "696dcc3edcf9"}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "5434ffd829dfc2c763d9ebe038e5312e84a5b0732ac5fda991afeacf3eb7e84f8707715db2bce3b068eccd422655e7fe1c0d029612ad71b061b35e2563dde04640487f97971a6f281695ff91a53850c8aeae3906e429163d0e3b0f795b1b6b6d45d6abdaae3b1a36f08c92c5edc956b075b7381e18b6ebf4c2680a118a674a9090ccc658dd971e77932d340ee0accaeb1c91f9d6b80f5acfe24ed378ff1ea669af5a1d924a80145a9ad554197c5aef26b9664f2db2c913b6611c441bd3911a1d4c78b005de692c6f97401d5b33be68590414422518219a870805dc50a827f37813f0237926867e7322ca10e37612edcb647506"}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 18:39:54 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) [ 2699.646183][T17582] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2699.659721][T17582] CPU: 0 PID: 17582 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2699.670539][T17582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2699.680717][T17582] Call Trace: [ 2699.684071][T17582] [ 2699.687053][T17582] dump_stack_lvl+0xd6/0x122 [ 2699.691625][T17582] dump_stack+0x11/0x12 [ 2699.695927][T17582] dump_header+0x98/0x410 [ 2699.700268][T17582] oom_kill_process+0x100/0x550 [ 2699.705109][T17582] out_of_memory+0x620/0x880 [ 2699.709783][T17582] mem_cgroup_oom+0x475/0x4f0 [ 2699.714530][T17582] try_charge_memcg+0x746/0x960 [ 2699.719369][T17582] ? debug_smp_processor_id+0x13/0x20 [ 2699.724809][T17582] ? delay_tsc+0xc1/0xe0 [ 2699.729043][T17582] __memcg_kmem_charge_page+0x2e4/0x480 [ 2699.734757][T17582] __alloc_pages+0x1c1/0x340 [ 2699.739335][T17582] alloc_pages+0x34d/0x450 [ 2699.743743][T17582] __vmalloc_node_range+0x730/0xef0 [ 2699.748926][T17582] kvmalloc_node+0xf3/0x140 [ 2699.753457][T17582] ? xt_alloc_table_info+0x39/0x70 [ 2699.758613][T17582] xt_alloc_table_info+0x39/0x70 [ 2699.763553][T17582] do_ip6t_set_ctl+0x645/0x1790 [ 2699.768394][T17582] ? rmqueue_pcplist+0x157/0x1e0 [ 2699.773323][T17582] ? rmqueue+0x4a/0xbc0 [ 2699.777535][T17582] nf_setsockopt+0x1a6/0x1c0 [ 2699.782185][T17582] ipv6_setsockopt+0x2724/0x2a90 [ 2699.787105][T17582] ? rb_insert_color+0x2b5/0x2c0 [ 2699.792023][T17582] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2699.797596][T17582] ? debug_smp_processor_id+0x13/0x20 [ 2699.803005][T17582] ? resched_curr+0x1d/0xc0 [ 2699.807493][T17582] ? check_preempt_wakeup+0x1c4/0x380 [ 2699.812863][T17582] ? __rcu_read_unlock+0x4a/0x70 [ 2699.817783][T17582] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2699.823142][T17582] ? avc_has_perm+0x6b/0x150 [ 2699.827752][T17582] ? avc_has_perm+0xd0/0x150 [ 2699.832372][T17582] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2699.838779][T17582] ? selinux_socket_setsockopt+0x145/0x170 [ 2699.844575][T17582] udpv6_setsockopt+0x85/0x90 [ 2699.849347][T17582] sock_common_setsockopt+0x5d/0x70 [ 2699.854573][T17582] ? sock_common_recvmsg+0xe0/0xe0 [ 2699.859677][T17582] __sys_setsockopt+0x212/0x2b0 [ 2699.864610][T17582] __x64_sys_setsockopt+0x62/0x70 [ 2699.869706][T17582] do_syscall_64+0x2b/0x70 [ 2699.874122][T17582] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2699.880036][T17582] RIP: 0033:0x7f53e730f209 [ 2699.884433][T17582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2699.904100][T17582] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2699.912586][T17582] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2699.920547][T17582] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2699.928523][T17582] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2699.936502][T17582] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2699.944588][T17582] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2699.952618][T17582] [ 2699.955710][T17582] memory: usage 307172kB, limit 307200kB, failcnt 33969 [ 2699.962665][T17582] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2699.969541][T17582] Memory cgroup stats for /syz2: [ 2699.969869][T17582] anon 122880 [ 2699.969869][T17582] file 53248 [ 2699.969869][T17582] kernel 314368000 [ 2699.969869][T17582] kernel_stack 16384 [ 2699.969869][T17582] pagetables 77824 [ 2699.969869][T17582] percpu 1184 [ 2699.969869][T17582] sock 0 [ 2699.969869][T17582] vmalloc 0 [ 2699.969869][T17582] shmem 49152 [ 2699.969869][T17582] file_mapped 49152 [ 2699.969869][T17582] file_dirty 4096 [ 2699.969869][T17582] file_writeback 0 [ 2699.969869][T17582] swapcached 0 [ 2699.969869][T17582] inactive_anon 139264 [ 2699.969869][T17582] active_anon 32768 [ 2699.969869][T17582] inactive_file 0 [ 2699.969869][T17582] active_file 4096 [ 2699.969869][T17582] unevictable 0 [ 2699.969869][T17582] slab_reclaimable 22376 [ 2699.969869][T17582] slab_unreclaimable 209456 [ 2699.969869][T17582] slab 231832 [ 2699.969869][T17582] workingset_refault_anon 0 [ 2699.969869][T17582] workingset_refault_file 115 [ 2699.969869][T17582] workingset_activate_anon 0 [ 2699.969869][T17582] workingset_activate_file 0 [ 2700.065334][T17582] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17580,uid=0 [ 2700.080640][T17582] Memory cgroup out of memory: Killed process 17582 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x96190000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:55 executing program 0: socketpair(0xa, 0x0, 0x80, &(0x7f0000000000)) 18:39:55 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r7, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000d80)={0x230, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0xc010}, 0x20000040) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x8000, 0x40, 0x7fffffff, 0x3, {{0x1f, 0x4, 0x1, 0x3, 0x7c, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @multicast2, {[@generic={0x88, 0x11, "bc4a50a7caa4ffdcfc76bf9fe2c605"}, @ssrr={0x89, 0x1b, 0xa8, [@rand_addr=0x64010102, @remote, @broadcast, @rand_addr=0x64010102, @private=0xa010102, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x18, 0x0, 0x3, [0x2]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0xc, "335656a23eb907638628"}, {0x5, 0x9, "388d4007ca04b7"}, {0x0, 0xc, "f6fe2355cfb53ec62dab"}, {0x7, 0xd, "154a0b6aef8a7af32564fe"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x0, 0x401, 0xc, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, 0x10, 0x700, 0x5, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x4e4, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "5fbe0415602221bf41cc5e5d193c6b1cd9f4aeee67e57c3e022e2b6c7e8152f28f5362b74a37a449826d5f3f89e67af501e5428041a337accbec0a823561085a136ed0276d818304f1678e12d2cd2574b3cc885aa56439804fc106cac9e67fb6a16eeb6605b69ba20e90255fa07e19f972c75dae87a63f1ec9baece35385c3a1ca5b8bdfdd9bd453f33522b2fd18eeefd1d74ca7b74ab84a608f224909599939a2e351db900a94ed0808cb5f80bba3a86e6b97b4a46b682215e991a6e3448e102448c4e92de6dead105907fa383ac6f66b16f716ece8f305b80c024213aae2bcc097d4005daeec71c4f8ab5e89e86e9c"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "60ce860b95fbecae74df4d710ae9081bd3e6b117305dcb68e9eae59a4f74902f97fee045e1e620eb779599a087ee8f90853d78661d3d919835747ff1a64767b9efe420eb4c255275494f295322171058c92753da4f32e7175706986b15cf0bbab9acd947e9e7db91371e6aeda32c2a0838250f929efca5685f3f9b1add0078"}, @ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "399bbbe82950cb7328bc49ac954d5491234139b70cba5db0946c2ebc1f0d890d507eeacfcabf391e5017f72b182282182f89f2984ee7473949dad6daf80f155dbb46e1866ecc5b702cbc29bd6eaa1a73c6ae3faedf0a020301f293669785a923daa07ef896b423e71dfdb29087ef2bec058dc3c2da12b59f6756bc1ed51dde362cf77405e406f9fad2c97fd0ffd22ec1f3e426fc51d7b17ee0577531b3472ebcec58a51e25cc997d2bf53fe4239db126"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "12a7473a543bfe1d7ef8"}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "381de50f9354a63a2015b1ea0f934cb5cbf4f6788258d6c6854a93cb7a8a851e16f033ad879c9c"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff328}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "696dcc3edcf9"}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "5434ffd829dfc2c763d9ebe038e5312e84a5b0732ac5fda991afeacf3eb7e84f8707715db2bce3b068eccd422655e7fe1c0d029612ad71b061b35e2563dde04640487f97971a6f281695ff91a53850c8aeae3906e429163d0e3b0f795b1b6b6d45d6abdaae3b1a36f08c92c5edc956b075b7381e18b6ebf4c2680a118a674a9090ccc658dd971e77932d340ee0accaeb1c91f9d6b80f5acfe24ed378ff1ea669af5a1d924a80145a9ad554197c5aef26b9664f2db2c913b6611c441bd3911a1d4c78b005de692c6f97401d5b33be68590414422518219a870805dc50a827f37813f0237926867e7322ca10e37612edcb647506"}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 18:39:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x218}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:55 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x3f000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x8000, 0x40, 0x7fffffff, 0x3, {{0x1f, 0x4, 0x1, 0x3, 0x7c, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @multicast2, {[@generic={0x88, 0x11, "bc4a50a7caa4ffdcfc76bf9fe2c605"}, @ssrr={0x89, 0x1b, 0xa8, [@rand_addr=0x64010102, @remote, @broadcast, @rand_addr=0x64010102, @private=0xa010102, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x18, 0x0, 0x3, [0x2]}, @cipso={0x86, 0x34, 0x0, [{0x5, 0xc, "335656a23eb907638628"}, {0x5, 0x9, "388d4007ca04b7"}, {0x0, 0xc, "f6fe2355cfb53ec62dab"}, {0x7, 0xd, "154a0b6aef8a7af32564fe"}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x0, 0x401, 0xc, @dev={0xfe, 0x80, '\x00', 0xf}, @mcast2, 0x10, 0x700, 0x5, 0x5}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000b40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x4e4, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "5fbe0415602221bf41cc5e5d193c6b1cd9f4aeee67e57c3e022e2b6c7e8152f28f5362b74a37a449826d5f3f89e67af501e5428041a337accbec0a823561085a136ed0276d818304f1678e12d2cd2574b3cc885aa56439804fc106cac9e67fb6a16eeb6605b69ba20e90255fa07e19f972c75dae87a63f1ec9baece35385c3a1ca5b8bdfdd9bd453f33522b2fd18eeefd1d74ca7b74ab84a608f224909599939a2e351db900a94ed0808cb5f80bba3a86e6b97b4a46b682215e991a6e3448e102448c4e92de6dead105907fa383ac6f66b16f716ece8f305b80c024213aae2bcc097d4005daeec71c4f8ab5e89e86e9c"}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "60ce860b95fbecae74df4d710ae9081bd3e6b117305dcb68e9eae59a4f74902f97fee045e1e620eb779599a087ee8f90853d78661d3d919835747ff1a64767b9efe420eb4c255275494f295322171058c92753da4f32e7175706986b15cf0bbab9acd947e9e7db91371e6aeda32c2a0838250f929efca5685f3f9b1add0078"}, @ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "399bbbe82950cb7328bc49ac954d5491234139b70cba5db0946c2ebc1f0d890d507eeacfcabf391e5017f72b182282182f89f2984ee7473949dad6daf80f155dbb46e1866ecc5b702cbc29bd6eaa1a73c6ae3faedf0a020301f293669785a923daa07ef896b423e71dfdb29087ef2bec058dc3c2da12b59f6756bc1ed51dde362cf77405e406f9fad2c97fd0ffd22ec1f3e426fc51d7b17ee0577531b3472ebcec58a51e25cc997d2bf53fe4239db126"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe, 0x4, "12a7473a543bfe1d7ef8"}, @ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "381de50f9354a63a2015b1ea0f934cb5cbf4f6788258d6c6854a93cb7a8a851e16f033ad879c9c"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff328}, @ETHTOOL_A_BITSET_MASK={0xa, 0x5, "696dcc3edcf9"}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "5434ffd829dfc2c763d9ebe038e5312e84a5b0732ac5fda991afeacf3eb7e84f8707715db2bce3b068eccd422655e7fe1c0d029612ad71b061b35e2563dde04640487f97971a6f281695ff91a53850c8aeae3906e429163d0e3b0f795b1b6b6d45d6abdaae3b1a36f08c92c5edc956b075b7381e18b6ebf4c2680a118a674a9090ccc658dd971e77932d340ee0accaeb1c91f9d6b80f5acfe24ed378ff1ea669af5a1d924a80145a9ad554197c5aef26b9664f2db2c913b6611c441bd3911a1d4c78b005de692c6f97401d5b33be68590414422518219a870805dc50a827f37813f0237926867e7322ca10e37612edcb647506"}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 18:39:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x2f8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:55 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r6, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:55 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d79c3673100000000040000000000000000627269644d655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=r6, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:55 executing program 0: socketpair(0xa, 0x0, 0x80, &(0x7f0000000000)) 18:39:55 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) [ 2700.805730][T17627] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2700.819293][T17627] CPU: 0 PID: 17627 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2700.830048][T17627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2700.840104][T17627] Call Trace: [ 2700.843383][T17627] [ 2700.846307][T17627] dump_stack_lvl+0xd6/0x122 [ 2700.850882][T17627] dump_stack+0x11/0x12 [ 2700.855029][T17627] dump_header+0x98/0x410 [ 2700.859346][T17627] oom_kill_process+0x100/0x550 [ 2700.864245][T17627] out_of_memory+0x620/0x880 [ 2700.868885][T17627] mem_cgroup_oom+0x475/0x4f0 [ 2700.873603][T17627] try_charge_memcg+0x746/0x960 [ 2700.878437][T17627] ? debug_smp_processor_id+0x13/0x20 [ 2700.883830][T17627] ? delay_tsc+0xc1/0xe0 [ 2700.888119][T17627] __memcg_kmem_charge_page+0x2e4/0x480 [ 2700.893745][T17627] __alloc_pages+0x1c1/0x340 [ 2700.898328][T17627] alloc_pages+0x34d/0x450 [ 2700.902736][T17627] __vmalloc_node_range+0x730/0xef0 [ 2700.907983][T17627] kvmalloc_node+0xf3/0x140 [ 2700.912602][T17627] ? xt_alloc_table_info+0x39/0x70 [ 2700.917774][T17627] xt_alloc_table_info+0x39/0x70 [ 2700.922700][T17627] do_ip6t_set_ctl+0x645/0x1790 [ 2700.927716][T17627] ? rmqueue_pcplist+0x157/0x1e0 [ 2700.932675][T17627] ? rmqueue+0x4a/0xbc0 [ 2700.936812][T17627] nf_setsockopt+0x1a6/0x1c0 [ 2700.941420][T17627] ipv6_setsockopt+0x2724/0x2a90 [ 2700.946344][T17627] ? rb_insert_color+0x2b5/0x2c0 [ 2700.951265][T17627] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2700.956843][T17627] ? debug_smp_processor_id+0x13/0x20 [ 2700.962346][T17627] ? resched_curr+0x1d/0xc0 [ 2700.966982][T17627] ? check_preempt_wakeup+0x1c4/0x380 [ 2700.972390][T17627] ? __rcu_read_unlock+0x4a/0x70 [ 2700.977313][T17627] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2700.982667][T17627] ? avc_has_perm+0x6b/0x150 [ 2700.987295][T17627] ? avc_has_perm+0xd0/0x150 [ 2700.991951][T17627] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2700.998298][T17627] ? selinux_socket_setsockopt+0x145/0x170 [ 2701.004091][T17627] udpv6_setsockopt+0x85/0x90 [ 2701.008860][T17627] sock_common_setsockopt+0x5d/0x70 [ 2701.014115][T17627] ? sock_common_recvmsg+0xe0/0xe0 [ 2701.019219][T17627] __sys_setsockopt+0x212/0x2b0 [ 2701.024070][T17627] __x64_sys_setsockopt+0x62/0x70 [ 2701.029116][T17627] do_syscall_64+0x2b/0x70 [ 2701.033640][T17627] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2701.039569][T17627] RIP: 0033:0x7f53e730f209 [ 2701.044021][T17627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2701.063874][T17627] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2701.072273][T17627] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2701.080241][T17627] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2701.088222][T17627] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2701.096243][T17627] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2701.104223][T17627] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2701.112221][T17627] [ 2701.115381][T17627] memory: usage 307184kB, limit 307200kB, failcnt 34015 [ 2701.122343][T17627] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2701.129216][T17627] Memory cgroup stats for /syz2: [ 2701.129951][T17627] anon 122880 [ 2701.129951][T17627] file 53248 [ 2701.129951][T17627] kernel 314372096 [ 2701.129951][T17627] kernel_stack 16384 [ 2701.129951][T17627] pagetables 77824 [ 2701.129951][T17627] percpu 1184 [ 2701.129951][T17627] sock 0 [ 2701.129951][T17627] vmalloc 0 [ 2701.129951][T17627] shmem 49152 [ 2701.129951][T17627] file_mapped 49152 [ 2701.129951][T17627] file_dirty 4096 [ 2701.129951][T17627] file_writeback 0 [ 2701.129951][T17627] swapcached 0 [ 2701.129951][T17627] inactive_anon 139264 [ 2701.129951][T17627] active_anon 32768 [ 2701.129951][T17627] inactive_file 0 [ 2701.129951][T17627] active_file 4096 [ 2701.129951][T17627] unevictable 0 [ 2701.129951][T17627] slab_reclaimable 22376 [ 2701.129951][T17627] slab_unreclaimable 209456 [ 2701.129951][T17627] slab 231832 [ 2701.129951][T17627] workingset_refault_anon 0 [ 2701.129951][T17627] workingset_refault_file 115 [ 2701.129951][T17627] workingset_activate_anon 0 [ 2701.129951][T17627] workingset_activate_file 0 [ 2701.225277][T17627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17626,uid=0 [ 2701.240698][T17627] Memory cgroup out of memory: Killed process 17627 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x97190000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x370}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:56 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:56 executing program 0: socketpair(0xa, 0x0, 0x80, &(0x7f0000000000)) 18:39:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) pipe2$watch_queue(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x40, 0x4, 0x800000, 0x85a, r1, 0x5d, '\x00', 0x0, r1, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x2, 0xc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x76}, @generic={0x3, 0x2, 0x9, 0x9, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0xba, &(0x7f0000000700)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x7, 0x9, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r3, r4]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000126bf7000fedbdf25010000000500020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r6 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000400)='bridge_slave_1\x00', &(0x7f0000000440)='.\x00', 0xffffffffffffff9c) 18:39:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x40000000], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x1802}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:56 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) pipe2$watch_queue(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x40, 0x4, 0x800000, 0x85a, r1, 0x5d, '\x00', 0x0, r1, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x2, 0xc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x76}, @generic={0x3, 0x2, 0x9, 0x9, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0xba, &(0x7f0000000700)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x7, 0x9, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r3, r4]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000126bf7000fedbdf25010000000500020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r6 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000400)='bridge_slave_1\x00', &(0x7f0000000440)='.\x00', 0xffffffffffffff9c) socket$inet6(0xa, 0x1, 0x9) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) pipe2$watch_queue(&(0x7f0000000680), 0x80) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x40, 0x4, 0x800000, 0x85a, r1, 0x5d, '\x00', 0x0, r1, 0x4, 0x4, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x2, 0xc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x76}, @generic={0x3, 0x2, 0x9, 0x9, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0xba, &(0x7f0000000700)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x7, 0x9, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r3, r4]}, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000126bf7000fedbdf25010000000500020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000400)='bridge_slave_1\x00', &(0x7f0000000440)='.\x00', 0xffffffffffffff9c) (async) 18:39:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x2001}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:56 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)) 18:39:56 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) [ 2702.015494][T17658] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2702.029054][T17658] CPU: 0 PID: 17658 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2702.039710][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2702.049757][T17658] Call Trace: [ 2702.053079][T17658] [ 2702.056008][T17658] dump_stack_lvl+0xd6/0x122 [ 2702.060593][T17658] dump_stack+0x11/0x12 [ 2702.064841][T17658] dump_header+0x98/0x410 [ 2702.069237][T17658] oom_kill_process+0x100/0x550 [ 2702.074193][T17658] out_of_memory+0x620/0x880 [ 2702.078836][T17658] mem_cgroup_oom+0x475/0x4f0 [ 2702.083580][T17658] try_charge_memcg+0x746/0x960 [ 2702.088484][T17658] ? debug_smp_processor_id+0x13/0x20 [ 2702.094015][T17658] ? delay_tsc+0xc1/0xe0 [ 2702.098276][T17658] __memcg_kmem_charge_page+0x2e4/0x480 [ 2702.103809][T17658] __alloc_pages+0x1c1/0x340 [ 2702.108412][T17658] alloc_pages+0x34d/0x450 [ 2702.112813][T17658] __vmalloc_node_range+0x730/0xef0 [ 2702.118009][T17658] kvmalloc_node+0xf3/0x140 [ 2702.122498][T17658] ? xt_alloc_table_info+0x39/0x70 [ 2702.127616][T17658] xt_alloc_table_info+0x39/0x70 [ 2702.132667][T17658] do_ip6t_set_ctl+0x645/0x1790 [ 2702.137521][T17658] ? rmqueue_pcplist+0x157/0x1e0 [ 2702.142543][T17658] ? rmqueue+0x4a/0xbc0 [ 2702.146748][T17658] nf_setsockopt+0x1a6/0x1c0 [ 2702.151438][T17658] ipv6_setsockopt+0x2724/0x2a90 [ 2702.156363][T17658] ? rb_insert_color+0x2b5/0x2c0 [ 2702.161312][T17658] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2702.166901][T17658] ? debug_smp_processor_id+0x13/0x20 [ 2702.172279][T17658] ? resched_curr+0x1d/0xc0 [ 2702.176938][T17658] ? check_preempt_wakeup+0x1c4/0x380 [ 2702.182310][T17658] ? __rcu_read_unlock+0x4a/0x70 [ 2702.187348][T17658] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2702.192722][T17658] ? avc_has_perm+0x6b/0x150 [ 2702.197295][T17658] ? avc_has_perm+0xd0/0x150 [ 2702.201893][T17658] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2702.208252][T17658] ? selinux_socket_setsockopt+0x145/0x170 [ 2702.214126][T17658] udpv6_setsockopt+0x85/0x90 [ 2702.218888][T17658] sock_common_setsockopt+0x5d/0x70 [ 2702.224090][T17658] ? sock_common_recvmsg+0xe0/0xe0 [ 2702.229186][T17658] __sys_setsockopt+0x212/0x2b0 [ 2702.234109][T17658] __x64_sys_setsockopt+0x62/0x70 [ 2702.239170][T17658] do_syscall_64+0x2b/0x70 [ 2702.243598][T17658] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2702.249510][T17658] RIP: 0033:0x7f1d726c3209 [ 2702.254021][T17658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2702.273795][T17658] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2702.282303][T17658] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2702.290281][T17658] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2702.298354][T17658] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2702.306340][T17658] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2702.314324][T17658] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2702.322318][T17658] [ 2702.325397][T17658] memory: usage 307184kB, limit 307200kB, failcnt 13318 [ 2702.332368][T17658] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2702.339311][T17658] Memory cgroup stats for /syz5: [ 2702.341095][T17658] anon 126976 [ 2702.341095][T17658] file 40960 [ 2702.341095][T17658] kernel 314388480 [ 2702.341095][T17658] kernel_stack 16384 [ 2702.341095][T17658] pagetables 73728 [ 2702.341095][T17658] percpu 5920 [ 2702.341095][T17658] sock 0 [ 2702.341095][T17658] vmalloc 0 [ 2702.341095][T17658] shmem 40960 [ 2702.341095][T17658] file_mapped 40960 [ 2702.341095][T17658] file_dirty 0 [ 2702.341095][T17658] file_writeback 0 [ 2702.341095][T17658] swapcached 0 [ 2702.341095][T17658] inactive_anon 131072 [ 2702.341095][T17658] active_anon 36864 [ 2702.341095][T17658] inactive_file 0 [ 2702.341095][T17658] active_file 0 [ 2702.341095][T17658] unevictable 0 [ 2702.341095][T17658] slab_reclaimable 30960 [ 2702.341095][T17658] slab_unreclaimable 403584 [ 2702.341095][T17658] slab 434544 [ 2702.341095][T17658] workingset_refault_anon 0 [ 2702.341095][T17658] workingset_refault_file 178 [ 2702.341095][T17658] workingset_activate_anon 0 [ 2702.341095][T17658] workingset_activate_file 0 [ 2702.436051][T17658] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17649,uid=0 18:39:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xfeffffff], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) pipe2$watch_queue(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x40, 0x4, 0x800000, 0x85a, r1, 0x5d, '\x00', 0x0, r1, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x0, 0x7, 0x5, 0x2, 0xc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x76}, @generic={0x3, 0x2, 0x9, 0x9, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0xba, &(0x7f0000000700)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f00000007c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x7, 0x9, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r3, r4]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000126bf7000fedbdf25010000000500020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) r6 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000400)='bridge_slave_1\x00', &(0x7f0000000440)='.\x00', 0xffffffffffffff9c) 18:39:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x7003}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:57 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:57 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)) [ 2702.451444][T17658] Memory cgroup out of memory: Killed process 17658 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:39:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xb12a0100], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0xd000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:58 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00087800000000030001000048ce0020005463332b87027244683ab1015a65000002049078e0000001000000004b0cef291085b04c1cfff01d1b363d191c76dcab4d0b300d0a4b2f8c2655ed2fbf0b1d4ede0369bd2a1249768c4e1c47e5dc120c7690d044214b88de6be01362cbfbc5b83c"]}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf25110000006800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626174616476001400020076657468305f766972745f776966690008000108", @ANYRES32=r1, @ANYBLOB="0800030000000000140002006873723000000000000000000000592c08000100", @ANYRES32=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) fspick(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) 18:39:58 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)) 18:39:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0xf802}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:58 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) [ 2703.097057][T17706] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2703.110653][T17706] CPU: 1 PID: 17706 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2703.121382][T17706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2703.131440][T17706] Call Trace: [ 2703.134722][T17706] [ 2703.137669][T17706] dump_stack_lvl+0xd6/0x122 [ 2703.142352][T17706] dump_stack+0x11/0x12 [ 2703.146561][T17706] dump_header+0x98/0x410 [ 2703.150901][T17706] oom_kill_process+0x100/0x550 [ 2703.155786][T17706] out_of_memory+0x620/0x880 [ 2703.160458][T17706] mem_cgroup_oom+0x475/0x4f0 [ 2703.165140][T17706] try_charge_memcg+0x746/0x960 [ 2703.170058][T17706] ? debug_smp_processor_id+0x13/0x20 [ 2703.175481][T17706] ? delay_tsc+0xc1/0xe0 [ 2703.179726][T17706] __memcg_kmem_charge_page+0x2e4/0x480 [ 2703.185275][T17706] __alloc_pages+0x1c1/0x340 [ 2703.189961][T17706] alloc_pages+0x34d/0x450 [ 2703.194421][T17706] __vmalloc_node_range+0x730/0xef0 [ 2703.199604][T17706] kvmalloc_node+0xf3/0x140 [ 2703.204190][T17706] ? xt_alloc_table_info+0x39/0x70 [ 2703.209382][T17706] xt_alloc_table_info+0x39/0x70 [ 2703.214306][T17706] do_ip6t_set_ctl+0x645/0x1790 [ 2703.219142][T17706] ? rmqueue_pcplist+0x157/0x1e0 [ 2703.224075][T17706] ? rmqueue+0x4a/0xbc0 [ 2703.228221][T17706] ? page_counter_cancel+0xa4/0x1f0 [ 2703.233492][T17706] nf_setsockopt+0x1a6/0x1c0 [ 2703.238155][T17706] ipv6_setsockopt+0x2724/0x2a90 [ 2703.243273][T17706] ? _raw_spin_unlock+0x2d/0x50 [ 2703.248107][T17706] ? finish_task_switch+0xc5/0x260 [ 2703.253207][T17706] ? __schedule+0x50d/0x6e0 [ 2703.257705][T17706] ? schedule+0x5b/0x80 [ 2703.261889][T17706] ? futex_wait_queue+0x11c/0x160 [ 2703.266912][T17706] ? __rcu_read_unlock+0x4a/0x70 [ 2703.271872][T17706] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2703.277265][T17706] ? avc_has_perm+0x6b/0x150 [ 2703.281886][T17706] ? avc_has_perm+0xd0/0x150 [ 2703.286636][T17706] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2703.292982][T17706] ? selinux_socket_setsockopt+0x145/0x170 [ 2703.298853][T17706] udpv6_setsockopt+0x85/0x90 [ 2703.303533][T17706] sock_common_setsockopt+0x5d/0x70 [ 2703.308739][T17706] ? sock_common_recvmsg+0xe0/0xe0 [ 2703.313898][T17706] __sys_setsockopt+0x212/0x2b0 [ 2703.318802][T17706] __x64_sys_setsockopt+0x62/0x70 [ 2703.323947][T17706] do_syscall_64+0x2b/0x70 [ 2703.328361][T17706] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2703.334307][T17706] RIP: 0033:0x7f53e730f209 [ 2703.338714][T17706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2703.358327][T17706] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2703.366739][T17706] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2703.374725][T17706] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2703.382693][T17706] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2703.390660][T17706] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2703.398704][T17706] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2703.406666][T17706] [ 2703.409849][T17706] memory: usage 307200kB, limit 307200kB, failcnt 34120 [ 2703.416820][T17706] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2703.423670][T17706] Memory cgroup stats for /syz2: [ 2703.424278][T17706] anon 122880 [ 2703.424278][T17706] file 53248 [ 2703.424278][T17706] kernel 314376192 [ 2703.424278][T17706] kernel_stack 16384 [ 2703.424278][T17706] pagetables 77824 [ 2703.424278][T17706] percpu 1184 [ 2703.424278][T17706] sock 0 [ 2703.424278][T17706] vmalloc 0 [ 2703.424278][T17706] shmem 49152 [ 2703.424278][T17706] file_mapped 49152 [ 2703.424278][T17706] file_dirty 4096 [ 2703.424278][T17706] file_writeback 0 [ 2703.424278][T17706] swapcached 0 [ 2703.424278][T17706] inactive_anon 139264 [ 2703.424278][T17706] active_anon 32768 [ 2703.424278][T17706] inactive_file 0 [ 2703.424278][T17706] active_file 4096 [ 2703.424278][T17706] unevictable 0 [ 2703.424278][T17706] slab_reclaimable 22376 [ 2703.424278][T17706] slab_unreclaimable 202792 [ 2703.424278][T17706] slab 225168 [ 2703.424278][T17706] workingset_refault_anon 0 [ 2703.424278][T17706] workingset_refault_file 115 [ 2703.424278][T17706] workingset_activate_anon 0 [ 2703.424278][T17706] workingset_activate_file 0 [ 2703.519573][T17706] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17702,uid=0 [ 2703.534881][T17706] Memory cgroup out of memory: Killed process 17706 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:39:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xff0f2020], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00087800000000030001000048ce0020005463332b87027244683ab1015a65000002049078e0000001000000004b0cef291085b04c1cfff01d1b363d191c76dcab4d0b300d0a4b2f8c2655ed2fbf0b1d4ede0369bd2a1249768c4e1c47e5dc120c7690d044214b88de6be01362cbfbc5b83c"]}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf25110000006800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626174616476001400020076657468305f766972745f776966690008000108", @ANYRES32=r1, @ANYBLOB="0800030000000000140002006873723000000000000000000000592c08000100", @ANYRES32=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) fspick(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) 18:39:59 executing program 0: socketpair(0xa, 0x3, 0x80, 0x0) 18:39:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x1000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:59 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf2513000000840001801400020070696d72656731000000000000000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="ea09b9d0", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007465616d5f736c6176655f30000000001400020076657468305f746f5f6272696467650008000300010000001400018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="240001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006d616376746170300000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfeffffff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:59 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:59 executing program 0: socketpair(0xa, 0x3, 0x80, 0x0) 18:39:59 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:39:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00087800000000030001000048ce0020005463332b87027244683ab1015a65000002049078e0000001000000004b0cef291085b04c1cfff01d1b363d191c76dcab4d0b300d0a4b2f8c2655ed2fbf0b1d4ede0369bd2a1249768c4e1c47e5dc120c7690d044214b88de6be01362cbfbc5b83c"]}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf25110000006800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626174616476001400020076657468305f766972745f776966690008000108", @ANYRES32=r1, @ANYBLOB="0800030000000000140002006873723000000000000000000000592c08000100", @ANYRES32=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) fspick(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) 18:39:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x2000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:39:59 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) [ 2704.263952][T17741] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2704.277485][T17741] CPU: 0 PID: 17741 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2704.288288][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2704.298378][T17741] Call Trace: [ 2704.301640][T17741] [ 2704.304605][T17741] dump_stack_lvl+0xd6/0x122 [ 2704.309216][T17741] dump_stack+0x11/0x12 [ 2704.313351][T17741] dump_header+0x98/0x410 [ 2704.317667][T17741] oom_kill_process+0x100/0x550 [ 2704.322610][T17741] out_of_memory+0x620/0x880 [ 2704.327193][T17741] mem_cgroup_oom+0x475/0x4f0 [ 2704.331902][T17741] try_charge_memcg+0x746/0x960 [ 2704.336812][T17741] __memcg_kmem_charge_page+0x2e4/0x480 [ 2704.342342][T17741] __alloc_pages+0x1c1/0x340 [ 2704.346991][T17741] alloc_pages+0x34d/0x450 [ 2704.351424][T17741] __vmalloc_node_range+0x730/0xef0 [ 2704.356625][T17741] kvmalloc_node+0xf3/0x140 [ 2704.361112][T17741] ? xt_alloc_table_info+0x39/0x70 [ 2704.366286][T17741] xt_alloc_table_info+0x39/0x70 [ 2704.371250][T17741] do_ip6t_set_ctl+0x645/0x1790 [ 2704.376695][T17741] ? rmqueue_pcplist+0x157/0x1e0 [ 2704.381630][T17741] ? rmqueue+0x4a/0xbc0 [ 2704.385823][T17741] nf_setsockopt+0x1a6/0x1c0 [ 2704.390418][T17741] ipv6_setsockopt+0x2724/0x2a90 [ 2704.395342][T17741] ? _raw_spin_unlock+0x2d/0x50 [ 2704.400257][T17741] ? finish_task_switch+0xc5/0x260 [ 2704.405546][T17741] ? __schedule+0x50d/0x6e0 [ 2704.410061][T17741] ? schedule+0x5b/0x80 [ 2704.414314][T17741] ? futex_wait_queue+0x11c/0x160 [ 2704.419333][T17741] ? __rcu_read_unlock+0x4a/0x70 [ 2704.424258][T17741] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2704.429704][T17741] ? avc_has_perm+0x6b/0x150 [ 2704.434277][T17741] ? avc_has_perm+0xd0/0x150 [ 2704.438849][T17741] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2704.445197][T17741] ? selinux_socket_setsockopt+0x145/0x170 [ 2704.451001][T17741] udpv6_setsockopt+0x85/0x90 [ 2704.455671][T17741] sock_common_setsockopt+0x5d/0x70 [ 2704.460852][T17741] ? sock_common_recvmsg+0xe0/0xe0 [ 2704.466018][T17741] __sys_setsockopt+0x212/0x2b0 [ 2704.470902][T17741] __x64_sys_setsockopt+0x62/0x70 [ 2704.475991][T17741] do_syscall_64+0x2b/0x70 [ 2704.480436][T17741] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2704.486368][T17741] RIP: 0033:0x7f53e730f209 [ 2704.490774][T17741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2704.510388][T17741] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2704.518783][T17741] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2704.526754][T17741] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2704.534768][T17741] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2704.542723][T17741] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2704.550682][T17741] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2704.558678][T17741] [ 2704.561880][T17741] memory: usage 307200kB, limit 307200kB, failcnt 34187 [ 2704.568827][T17741] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2704.575668][T17741] Memory cgroup stats for /syz2: [ 2704.575949][T17741] anon 122880 [ 2704.575949][T17741] file 53248 [ 2704.575949][T17741] kernel 314396672 [ 2704.575949][T17741] kernel_stack 32768 [ 2704.575949][T17741] pagetables 77824 [ 2704.575949][T17741] percpu 1184 [ 2704.575949][T17741] sock 0 [ 2704.575949][T17741] vmalloc 0 [ 2704.575949][T17741] shmem 49152 [ 2704.575949][T17741] file_mapped 49152 [ 2704.575949][T17741] file_dirty 4096 [ 2704.575949][T17741] file_writeback 0 [ 2704.575949][T17741] swapcached 0 [ 2704.575949][T17741] inactive_anon 139264 [ 2704.575949][T17741] active_anon 32768 [ 2704.575949][T17741] inactive_file 0 [ 2704.575949][T17741] active_file 4096 [ 2704.575949][T17741] unevictable 0 [ 2704.575949][T17741] slab_reclaimable 22376 [ 2704.575949][T17741] slab_unreclaimable 208184 [ 2704.575949][T17741] slab 230560 [ 2704.575949][T17741] workingset_refault_anon 0 [ 2704.575949][T17741] workingset_refault_file 115 [ 2704.575949][T17741] workingset_activate_anon 0 [ 2704.575949][T17741] workingset_activate_file 0 [ 2704.671166][T17741] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17738,uid=0 [ 2704.686501][T17741] Memory cgroup out of memory: Killed process 17741 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xfffdffff], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:00 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:00 executing program 0: socketpair(0xa, 0x3, 0x80, 0x0) 18:40:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x4000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xff0f2020], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x8000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:00 executing program 4: socket$inet6(0xa, 0x6, 0xffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000004c0)='!\\#:}}\'\'\\-:/!\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x18020000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000004c0)='!\\#:}}\'\'\\-:/!\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 2705.433746][T17766] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2705.447313][T17766] CPU: 1 PID: 17766 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2705.458003][T17766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2705.468045][T17766] Call Trace: [ 2705.471419][T17766] [ 2705.474335][T17766] dump_stack_lvl+0xd6/0x122 [ 2705.478911][T17766] dump_stack+0x11/0x12 [ 2705.483051][T17766] dump_header+0x98/0x410 [ 2705.487473][T17766] oom_kill_process+0x100/0x550 [ 2705.492335][T17766] out_of_memory+0x620/0x880 [ 2705.496968][T17766] mem_cgroup_oom+0x475/0x4f0 [ 2705.501711][T17766] try_charge_memcg+0x746/0x960 [ 2705.506569][T17766] ? debug_smp_processor_id+0x13/0x20 [ 2705.511948][T17766] __memcg_kmem_charge_page+0x2e4/0x480 [ 2705.517478][T17766] __alloc_pages+0x1c1/0x340 [ 2705.522093][T17766] alloc_pages+0x34d/0x450 [ 2705.526493][T17766] __vmalloc_node_range+0x730/0xef0 [ 2705.531754][T17766] kvmalloc_node+0xf3/0x140 [ 2705.536273][T17766] ? xt_alloc_table_info+0x39/0x70 [ 2705.541384][T17766] xt_alloc_table_info+0x39/0x70 [ 2705.546329][T17766] do_ip6t_set_ctl+0x645/0x1790 [ 2705.551218][T17766] ? rmqueue_pcplist+0x157/0x1e0 [ 2705.556138][T17766] ? rmqueue+0x4a/0xbc0 [ 2705.560293][T17766] nf_setsockopt+0x1a6/0x1c0 [ 2705.564912][T17766] ipv6_setsockopt+0x2724/0x2a90 [ 2705.569912][T17766] ? rb_insert_color+0x2b5/0x2c0 [ 2705.574833][T17766] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2705.580520][T17766] ? debug_smp_processor_id+0x13/0x20 [ 2705.585915][T17766] ? resched_curr+0x1d/0xc0 [ 2705.590402][T17766] ? check_preempt_wakeup+0x1c4/0x380 [ 2705.595821][T17766] ? __rcu_read_unlock+0x4a/0x70 [ 2705.600808][T17766] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2705.606243][T17766] ? avc_has_perm+0x6b/0x150 [ 2705.610812][T17766] ? avc_has_perm+0xd0/0x150 [ 2705.615427][T17766] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2705.621757][T17766] ? selinux_socket_setsockopt+0x145/0x170 [ 2705.627659][T17766] udpv6_setsockopt+0x85/0x90 [ 2705.632489][T17766] sock_common_setsockopt+0x5d/0x70 [ 2705.637670][T17766] ? sock_common_recvmsg+0xe0/0xe0 [ 2705.642765][T17766] __sys_setsockopt+0x212/0x2b0 [ 2705.647764][T17766] __x64_sys_setsockopt+0x62/0x70 [ 2705.652867][T17766] do_syscall_64+0x2b/0x70 [ 2705.657292][T17766] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2705.663196][T17766] RIP: 0033:0x7f53e730f209 [ 2705.667614][T17766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2705.687220][T17766] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2705.695647][T17766] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2705.703628][T17766] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2705.711679][T17766] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2705.719657][T17766] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2705.727659][T17766] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2705.735645][T17766] [ 2705.738814][T17766] memory: usage 307188kB, limit 307200kB, failcnt 34251 [ 2705.745807][T17766] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2705.752685][T17766] Memory cgroup stats for /syz2: [ 2705.754086][T17766] anon 122880 [ 2705.754086][T17766] file 53248 [ 2705.754086][T17766] kernel 314368000 [ 2705.754086][T17766] kernel_stack 16384 [ 2705.754086][T17766] pagetables 77824 [ 2705.754086][T17766] percpu 1184 [ 2705.754086][T17766] sock 0 [ 2705.754086][T17766] vmalloc 0 [ 2705.754086][T17766] shmem 49152 [ 2705.754086][T17766] file_mapped 49152 [ 2705.754086][T17766] file_dirty 4096 [ 2705.754086][T17766] file_writeback 0 [ 2705.754086][T17766] swapcached 0 [ 2705.754086][T17766] inactive_anon 139264 [ 2705.754086][T17766] active_anon 32768 [ 2705.754086][T17766] inactive_file 0 [ 2705.754086][T17766] active_file 4096 [ 2705.754086][T17766] unevictable 0 [ 2705.754086][T17766] slab_reclaimable 22376 [ 2705.754086][T17766] slab_unreclaimable 209456 [ 2705.754086][T17766] slab 231832 [ 2705.754086][T17766] workingset_refault_anon 0 [ 2705.754086][T17766] workingset_refault_file 115 [ 2705.754086][T17766] workingset_activate_anon 0 [ 2705.754086][T17766] workingset_activate_file 0 [ 2705.849328][T17766] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17764,uid=0 [ 2705.864707][T17766] Memory cgroup out of memory: Killed process 17766 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xfffffdff], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x20010000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:01 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x5) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000004c0)='!\\#:}}\'\'\\-:/!\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:01 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfffdffff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x70030000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:01 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000004c0)='!\\#:}}\'\'\\-:/!\x00', &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff) 18:40:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) 18:40:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0xd0000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:01 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) [ 2706.570126][T17793] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2706.583663][T17793] CPU: 0 PID: 17793 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2706.594349][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2706.604413][T17793] Call Trace: [ 2706.607750][T17793] [ 2706.610755][T17793] dump_stack_lvl+0xd6/0x122 [ 2706.615343][T17793] dump_stack+0x11/0x12 [ 2706.619484][T17793] dump_header+0x98/0x410 [ 2706.623798][T17793] oom_kill_process+0x100/0x550 [ 2706.628859][T17793] out_of_memory+0x620/0x880 [ 2706.633499][T17793] mem_cgroup_oom+0x475/0x4f0 [ 2706.638173][T17793] try_charge_memcg+0x746/0x960 [ 2706.643012][T17793] ? debug_smp_processor_id+0x13/0x20 [ 2706.648457][T17793] ? delay_tsc+0xc1/0xe0 [ 2706.652754][T17793] __memcg_kmem_charge_page+0x2e4/0x480 [ 2706.658311][T17793] __alloc_pages+0x1c1/0x340 [ 2706.662950][T17793] alloc_pages+0x34d/0x450 [ 2706.667401][T17793] __vmalloc_node_range+0x730/0xef0 [ 2706.672678][T17793] kvmalloc_node+0xf3/0x140 [ 2706.677179][T17793] ? xt_alloc_table_info+0x39/0x70 [ 2706.682366][T17793] xt_alloc_table_info+0x39/0x70 [ 2706.687299][T17793] do_ip6t_set_ctl+0x645/0x1790 [ 2706.692178][T17793] ? rmqueue_pcplist+0x157/0x1e0 [ 2706.697113][T17793] ? rmqueue+0x4a/0xbc0 [ 2706.701370][T17793] nf_setsockopt+0x1a6/0x1c0 [ 2706.705946][T17793] ipv6_setsockopt+0x2724/0x2a90 [ 2706.710976][T17793] ? rb_insert_color+0x2b5/0x2c0 [ 2706.715896][T17793] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2706.721426][T17793] ? debug_smp_processor_id+0x13/0x20 [ 2706.726833][T17793] ? resched_curr+0x1d/0xc0 [ 2706.731326][T17793] ? check_preempt_wakeup+0x1c4/0x380 [ 2706.736710][T17793] ? __rcu_read_unlock+0x4a/0x70 [ 2706.741668][T17793] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2706.747026][T17793] ? avc_has_perm+0x6b/0x150 [ 2706.751598][T17793] ? avc_has_perm+0xd0/0x150 [ 2706.756169][T17793] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2706.762484][T17793] ? selinux_socket_setsockopt+0x145/0x170 [ 2706.768303][T17793] udpv6_setsockopt+0x85/0x90 [ 2706.772966][T17793] sock_common_setsockopt+0x5d/0x70 [ 2706.778205][T17793] ? sock_common_recvmsg+0xe0/0xe0 [ 2706.783419][T17793] __sys_setsockopt+0x212/0x2b0 [ 2706.788329][T17793] __x64_sys_setsockopt+0x62/0x70 [ 2706.793382][T17793] do_syscall_64+0x2b/0x70 [ 2706.797793][T17793] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2706.803755][T17793] RIP: 0033:0x7f53e730f209 [ 2706.808152][T17793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2706.827755][T17793] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2706.836152][T17793] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2706.844139][T17793] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2706.852106][T17793] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2706.860075][T17793] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2706.868129][T17793] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2706.876126][T17793] [ 2706.879304][T17793] memory: usage 307188kB, limit 307200kB, failcnt 34315 [ 2706.886393][T17793] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2706.893301][T17793] Memory cgroup stats for /syz2: [ 2706.896626][T17793] anon 122880 [ 2706.896626][T17793] file 53248 [ 2706.896626][T17793] kernel 314368000 [ 2706.896626][T17793] kernel_stack 16384 [ 2706.896626][T17793] pagetables 77824 [ 2706.896626][T17793] percpu 1184 [ 2706.896626][T17793] sock 0 [ 2706.896626][T17793] vmalloc 0 [ 2706.896626][T17793] shmem 49152 [ 2706.896626][T17793] file_mapped 49152 [ 2706.896626][T17793] file_dirty 4096 [ 2706.896626][T17793] file_writeback 0 [ 2706.896626][T17793] swapcached 0 [ 2706.896626][T17793] inactive_anon 139264 [ 2706.896626][T17793] active_anon 32768 [ 2706.896626][T17793] inactive_file 0 [ 2706.896626][T17793] active_file 4096 [ 2706.896626][T17793] unevictable 0 [ 2706.896626][T17793] slab_reclaimable 22376 [ 2706.896626][T17793] slab_unreclaimable 209456 [ 2706.896626][T17793] slab 231832 [ 2706.896626][T17793] workingset_refault_anon 0 [ 2706.896626][T17793] workingset_refault_file 115 [ 2706.896626][T17793] workingset_activate_anon 0 [ 2706.896626][T17793] workingset_activate_file 0 [ 2706.991946][T17793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17789,uid=0 [ 2707.007390][T17793] Memory cgroup out of memory: Killed process 17793 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0xf8020000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xffffff7f], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) 18:40:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:02 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfffffdff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:02 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) 18:40:02 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) 18:40:02 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) 18:40:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:02 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) [ 2707.761432][T17820] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2707.775150][T17820] CPU: 0 PID: 17820 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2707.785854][T17820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2707.796004][T17820] Call Trace: [ 2707.799266][T17820] [ 2707.802218][T17820] dump_stack_lvl+0xd6/0x122 [ 2707.806804][T17820] dump_stack+0x11/0x12 [ 2707.811014][T17820] dump_header+0x98/0x410 [ 2707.815458][T17820] oom_kill_process+0x100/0x550 [ 2707.820361][T17820] out_of_memory+0x620/0x880 [ 2707.825007][T17820] mem_cgroup_oom+0x475/0x4f0 [ 2707.829747][T17820] try_charge_memcg+0x746/0x960 [ 2707.834579][T17820] ? debug_smp_processor_id+0x13/0x20 [ 2707.839939][T17820] ? delay_tsc+0xc1/0xe0 [ 2707.844181][T17820] __memcg_kmem_charge_page+0x2e4/0x480 [ 2707.849785][T17820] __alloc_pages+0x1c1/0x340 [ 2707.854380][T17820] alloc_pages+0x34d/0x450 [ 2707.858831][T17820] __vmalloc_node_range+0x730/0xef0 [ 2707.864156][T17820] kvmalloc_node+0xf3/0x140 [ 2707.868655][T17820] ? xt_alloc_table_info+0x39/0x70 [ 2707.873757][T17820] xt_alloc_table_info+0x39/0x70 [ 2707.878819][T17820] do_ip6t_set_ctl+0x645/0x1790 [ 2707.883659][T17820] ? rmqueue_pcplist+0x157/0x1e0 [ 2707.888587][T17820] ? rmqueue+0x4a/0xbc0 [ 2707.892726][T17820] nf_setsockopt+0x1a6/0x1c0 [ 2707.897302][T17820] ipv6_setsockopt+0x2724/0x2a90 [ 2707.902308][T17820] ? _raw_spin_unlock+0x2d/0x50 [ 2707.907150][T17820] ? finish_task_switch+0xc5/0x260 [ 2707.912278][T17820] ? __schedule+0x50d/0x6e0 [ 2707.916807][T17820] ? schedule+0x5b/0x80 [ 2707.920951][T17820] ? futex_wait_queue+0x11c/0x160 [ 2707.926035][T17820] ? __rcu_read_unlock+0x4a/0x70 [ 2707.931002][T17820] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2707.936378][T17820] ? avc_has_perm+0x6b/0x150 [ 2707.941006][T17820] ? avc_has_perm+0xd0/0x150 [ 2707.945588][T17820] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2707.951969][T17820] ? selinux_socket_setsockopt+0x145/0x170 [ 2707.957766][T17820] udpv6_setsockopt+0x85/0x90 [ 2707.962484][T17820] sock_common_setsockopt+0x5d/0x70 [ 2707.967697][T17820] ? sock_common_recvmsg+0xe0/0xe0 [ 2707.972877][T17820] __sys_setsockopt+0x212/0x2b0 [ 2707.977761][T17820] __x64_sys_setsockopt+0x62/0x70 [ 2707.982937][T17820] do_syscall_64+0x2b/0x70 [ 2707.987342][T17820] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2707.993242][T17820] RIP: 0033:0x7f1d726c3209 [ 2707.997640][T17820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2708.017287][T17820] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2708.025733][T17820] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2708.033721][T17820] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2708.041710][T17820] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2708.049708][T17820] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2708.057698][T17820] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2708.065696][T17820] [ 2708.068825][T17820] memory: usage 307184kB, limit 307200kB, failcnt 13577 [ 2708.075870][T17820] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2708.082797][T17820] Memory cgroup stats for /syz5: [ 2708.083083][T17820] anon 126976 [ 2708.083083][T17820] file 40960 [ 2708.083083][T17820] kernel 314388480 [ 2708.083083][T17820] kernel_stack 16384 [ 2708.083083][T17820] pagetables 73728 [ 2708.083083][T17820] percpu 5920 [ 2708.083083][T17820] sock 0 [ 2708.083083][T17820] vmalloc 0 [ 2708.083083][T17820] shmem 40960 [ 2708.083083][T17820] file_mapped 40960 [ 2708.083083][T17820] file_dirty 0 [ 2708.083083][T17820] file_writeback 0 [ 2708.083083][T17820] swapcached 0 [ 2708.083083][T17820] inactive_anon 131072 [ 2708.083083][T17820] active_anon 36864 [ 2708.083083][T17820] inactive_file 0 [ 2708.083083][T17820] active_file 0 [ 2708.083083][T17820] unevictable 0 [ 2708.083083][T17820] slab_reclaimable 30960 [ 2708.083083][T17820] slab_unreclaimable 403584 [ 2708.083083][T17820] slab 434544 18:40:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xfffffffe], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x1e81e0508a74a38d}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x40000) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000040) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x6, 0x13, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x370, 0x238, 0x238, 0xf8, 0xf8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "746d0f48b5460d0d28b76f8eebeb934800d76d8f6af1eeeb9617bfed1f92"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x24008081) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 2708.083083][T17820] workingset_refault_anon 0 [ 2708.083083][T17820] workingset_refault_file 178 [ 2708.083083][T17820] workingset_activate_anon 0 [ 2708.083083][T17820] workingset_activate_file 0 [ 2708.178019][T17820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17816,uid=0 [ 2708.193352][T17820] Memory cgroup out of memory: Killed process 17820 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:40:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff7f], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:03 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) 18:40:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x1e81e0508a74a38d}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x40000) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000040) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x6, 0x13, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x370, 0x238, 0x238, 0xf8, 0xf8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "746d0f48b5460d0d28b76f8eebeb934800d76d8f6af1eeeb9617bfed1f92"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x24008081) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x1e81e0508a74a38d}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x40000) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000040) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x6, 0x13, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x370, 0x238, 0x238, 0xf8, 0xf8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "746d0f48b5460d0d28b76f8eebeb934800d76d8f6af1eeeb9617bfed1f92"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000cc0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x24008081) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 2708.814621][T17850] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2708.828169][T17850] CPU: 1 PID: 17850 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2708.838851][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2708.848910][T17850] Call Trace: [ 2708.852192][T17850] [ 2708.855126][T17850] dump_stack_lvl+0xd6/0x122 [ 2708.859816][T17850] dump_stack+0x11/0x12 [ 2708.864004][T17850] dump_header+0x98/0x410 [ 2708.868350][T17850] oom_kill_process+0x100/0x550 [ 2708.873269][T17850] out_of_memory+0x620/0x880 [ 2708.877903][T17850] mem_cgroup_oom+0x475/0x4f0 [ 2708.882664][T17850] try_charge_memcg+0x746/0x960 [ 2708.887548][T17850] ? debug_smp_processor_id+0x13/0x20 [ 2708.893139][T17850] ? delay_tsc+0xc1/0xe0 [ 2708.897399][T17850] __memcg_kmem_charge_page+0x2e4/0x480 [ 2708.902952][T17850] __alloc_pages+0x1c1/0x340 [ 2708.907629][T17850] alloc_pages+0x34d/0x450 [ 2708.912051][T17850] __vmalloc_node_range+0x730/0xef0 [ 2708.917326][T17850] kvmalloc_node+0xf3/0x140 [ 2708.921884][T17850] ? xt_alloc_table_info+0x39/0x70 [ 2708.927012][T17850] xt_alloc_table_info+0x39/0x70 [ 2708.931984][T17850] do_ip6t_set_ctl+0x645/0x1790 [ 2708.936845][T17850] ? rmqueue_pcplist+0x157/0x1e0 [ 2708.941794][T17850] ? rmqueue+0x4a/0xbc0 [ 2708.945961][T17850] nf_setsockopt+0x1a6/0x1c0 [ 2708.950706][T17850] ipv6_setsockopt+0x2724/0x2a90 [ 2708.955684][T17850] ? rb_insert_color+0x2b5/0x2c0 [ 2708.960640][T17850] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2708.966210][T17850] ? debug_smp_processor_id+0x13/0x20 [ 2708.971595][T17850] ? resched_curr+0x1d/0xc0 [ 2708.976242][T17850] ? check_preempt_wakeup+0x1c4/0x380 [ 2708.981625][T17850] ? __rcu_read_unlock+0x4a/0x70 [ 2708.987002][T17850] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2708.992386][T17850] ? avc_has_perm+0x6b/0x150 [ 2708.996980][T17850] ? avc_has_perm+0xd0/0x150 [ 2709.001574][T17850] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2709.007921][T17850] ? selinux_socket_setsockopt+0x145/0x170 [ 2709.013795][T17850] udpv6_setsockopt+0x85/0x90 [ 2709.018545][T17850] sock_common_setsockopt+0x5d/0x70 [ 2709.023731][T17850] ? sock_common_recvmsg+0xe0/0xe0 [ 2709.028824][T17850] __sys_setsockopt+0x212/0x2b0 [ 2709.033728][T17850] __x64_sys_setsockopt+0x62/0x70 [ 2709.038808][T17850] do_syscall_64+0x2b/0x70 [ 2709.043233][T17850] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2709.049215][T17850] RIP: 0033:0x7f53e730f209 [ 2709.053665][T17850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2709.073277][T17850] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2709.081669][T17850] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2709.089622][T17850] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2709.097582][T17850] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2709.105546][T17850] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2709.113537][T17850] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2709.121500][T17850] [ 2709.124642][T17850] memory: usage 307200kB, limit 307200kB, failcnt 34411 [ 2709.131603][T17850] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2709.138522][T17850] Memory cgroup stats for /syz2: [ 2709.138710][T17850] anon 122880 [ 2709.138710][T17850] file 53248 [ 2709.138710][T17850] kernel 314376192 [ 2709.138710][T17850] kernel_stack 16384 [ 2709.138710][T17850] pagetables 77824 [ 2709.138710][T17850] percpu 1184 [ 2709.138710][T17850] sock 0 [ 2709.138710][T17850] vmalloc 0 [ 2709.138710][T17850] shmem 49152 [ 2709.138710][T17850] file_mapped 49152 [ 2709.138710][T17850] file_dirty 4096 [ 2709.138710][T17850] file_writeback 0 [ 2709.138710][T17850] swapcached 0 [ 2709.138710][T17850] inactive_anon 139264 [ 2709.138710][T17850] active_anon 32768 [ 2709.138710][T17850] inactive_file 0 [ 2709.138710][T17850] active_file 4096 [ 2709.138710][T17850] unevictable 0 [ 2709.138710][T17850] slab_reclaimable 22376 [ 2709.138710][T17850] slab_unreclaimable 202792 [ 2709.138710][T17850] slab 225168 [ 2709.138710][T17850] workingset_refault_anon 0 [ 2709.138710][T17850] workingset_refault_file 115 [ 2709.138710][T17850] workingset_activate_anon 0 [ 2709.138710][T17850] workingset_activate_file 0 [ 2709.233857][T17850] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17849,uid=0 [ 2709.249156][T17850] Memory cgroup out of memory: Killed process 17850 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 2709.267955][T17870] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2709.281470][T17870] CPU: 0 PID: 17870 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2709.292271][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2709.302396][T17870] Call Trace: [ 2709.305667][T17870] [ 2709.308876][T17870] dump_stack_lvl+0xd6/0x122 [ 2709.313480][T17870] dump_stack+0x11/0x12 [ 2709.317705][T17870] dump_header+0x98/0x410 [ 2709.322099][T17870] oom_kill_process+0x100/0x550 [ 2709.326949][T17870] out_of_memory+0x620/0x880 [ 2709.331623][T17870] mem_cgroup_oom+0x475/0x4f0 [ 2709.336321][T17870] try_charge_memcg+0x746/0x960 [ 2709.341228][T17870] ? debug_smp_processor_id+0x13/0x20 [ 2709.346681][T17870] __memcg_kmem_charge_page+0x2e4/0x480 [ 2709.352222][T17870] __alloc_pages+0x1c1/0x340 [ 2709.356812][T17870] alloc_pages+0x34d/0x450 [ 2709.361290][T17870] __vmalloc_node_range+0x730/0xef0 [ 2709.366552][T17870] kvmalloc_node+0xf3/0x140 [ 2709.371052][T17870] ? xt_alloc_table_info+0x39/0x70 [ 2709.376253][T17870] xt_alloc_table_info+0x39/0x70 [ 2709.381219][T17870] do_ip6t_set_ctl+0x645/0x1790 [ 2709.386154][T17870] ? rmqueue_pcplist+0x157/0x1e0 [ 2709.391139][T17870] ? rmqueue+0x4a/0xbc0 [ 2709.395288][T17870] ? page_counter_cancel+0xa4/0x1f0 [ 2709.400489][T17870] nf_setsockopt+0x1a6/0x1c0 [ 2709.405147][T17870] ipv6_setsockopt+0x2724/0x2a90 [ 2709.410086][T17870] ? _raw_spin_unlock+0x2d/0x50 [ 2709.414928][T17870] ? finish_task_switch+0xc5/0x260 [ 2709.420112][T17870] ? __schedule+0x50d/0x6e0 [ 2709.424611][T17870] ? schedule+0x5b/0x80 [ 2709.428845][T17870] ? futex_wait_queue+0x11c/0x160 [ 2709.433867][T17870] ? __rcu_read_unlock+0x4a/0x70 [ 2709.438860][T17870] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2709.444286][T17870] ? avc_has_perm+0x6b/0x150 [ 2709.448922][T17870] ? avc_has_perm+0xd0/0x150 [ 2709.453503][T17870] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2709.459866][T17870] ? selinux_socket_setsockopt+0x145/0x170 [ 2709.465735][T17870] udpv6_setsockopt+0x85/0x90 [ 2709.470438][T17870] sock_common_setsockopt+0x5d/0x70 [ 2709.475726][T17870] ? sock_common_recvmsg+0xe0/0xe0 [ 2709.480871][T17870] __sys_setsockopt+0x212/0x2b0 [ 2709.485777][T17870] __x64_sys_setsockopt+0x62/0x70 [ 2709.490844][T17870] do_syscall_64+0x2b/0x70 [ 2709.495341][T17870] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2709.501273][T17870] RIP: 0033:0x7f1d726c3209 [ 2709.505682][T17870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2709.525291][T17870] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2709.533697][T17870] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2709.541666][T17870] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2709.549638][T17870] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2709.557790][T17870] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2709.565765][T17870] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2709.573810][T17870] [ 2709.576933][T17870] memory: usage 307200kB, limit 307200kB, failcnt 13626 [ 2709.583872][T17870] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2709.590782][T17870] Memory cgroup stats for /syz5: [ 2709.592338][T17870] anon 126976 [ 2709.592338][T17870] file 40960 [ 2709.592338][T17870] kernel 314388480 [ 2709.592338][T17870] kernel_stack 16384 [ 2709.592338][T17870] pagetables 73728 [ 2709.592338][T17870] percpu 5920 [ 2709.592338][T17870] sock 0 [ 2709.592338][T17870] vmalloc 0 [ 2709.592338][T17870] shmem 40960 [ 2709.592338][T17870] file_mapped 40960 [ 2709.592338][T17870] file_dirty 0 [ 2709.592338][T17870] file_writeback 0 [ 2709.592338][T17870] swapcached 0 [ 2709.592338][T17870] inactive_anon 131072 [ 2709.592338][T17870] active_anon 36864 [ 2709.592338][T17870] inactive_file 0 [ 2709.592338][T17870] active_file 0 [ 2709.592338][T17870] unevictable 0 [ 2709.592338][T17870] slab_reclaimable 30960 [ 2709.592338][T17870] slab_unreclaimable 410248 [ 2709.592338][T17870] slab 441208 18:40:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0xd0}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:05 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) 18:40:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 2709.592338][T17870] workingset_refault_anon 0 [ 2709.592338][T17870] workingset_refault_file 178 [ 2709.592338][T17870] workingset_activate_anon 0 [ 2709.592338][T17870] workingset_activate_file 0 [ 2709.687004][T17870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17869,uid=0 [ 2709.702347][T17870] Memory cgroup out of memory: Killed process 17870 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:40:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xfffffffe], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x1e81e0508a74a38d}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x40000) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000040) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x6, 0x13, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x370, 0x238, 0x238, 0xf8, 0xf8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "746d0f48b5460d0d28b76f8eebeb934800d76d8f6af1eeeb9617bfed1f92"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x24008081) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r3, 0x1e81e0508a74a38d}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x40000) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0xa17, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000040) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x6, 0x13, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0x370, 0x238, 0x238, 0xf8, 0xf8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "746d0f48b5460d0d28b76f8eebeb934800d76d8f6af1eeeb9617bfed1f92"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000cc0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000000dc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x24008081) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xff000000], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x120}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:05 executing program 0: socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) 18:40:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[], 0x8000, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x218}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:05 executing program 0: socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) [ 2710.360684][T17905] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2710.374232][T17905] CPU: 0 PID: 17905 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2710.384949][T17905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2710.395134][T17905] Call Trace: [ 2710.398411][T17905] [ 2710.401344][T17905] dump_stack_lvl+0xd6/0x122 [ 2710.405949][T17905] dump_stack+0x11/0x12 [ 2710.410109][T17905] dump_header+0x98/0x410 [ 2710.414453][T17905] oom_kill_process+0x100/0x550 [ 2710.419317][T17905] out_of_memory+0x620/0x880 [ 2710.423974][T17905] mem_cgroup_oom+0x475/0x4f0 [ 2710.428658][T17905] try_charge_memcg+0x746/0x960 [ 2710.433512][T17905] ? debug_smp_processor_id+0x13/0x20 [ 2710.438968][T17905] ? delay_tsc+0xc1/0xe0 [ 2710.443313][T17905] __memcg_kmem_charge_page+0x2e4/0x480 [ 2710.448884][T17905] __alloc_pages+0x1c1/0x340 [ 2710.453519][T17905] alloc_pages+0x34d/0x450 [ 2710.458028][T17905] __vmalloc_node_range+0x730/0xef0 [ 2710.463237][T17905] kvmalloc_node+0xf3/0x140 [ 2710.467784][T17905] ? xt_alloc_table_info+0x39/0x70 [ 2710.472913][T17905] xt_alloc_table_info+0x39/0x70 [ 2710.477939][T17905] do_ip6t_set_ctl+0x645/0x1790 [ 2710.482876][T17905] ? rmqueue_pcplist+0x157/0x1e0 [ 2710.487810][T17905] ? rmqueue+0x4a/0xbc0 [ 2710.491952][T17905] nf_setsockopt+0x1a6/0x1c0 [ 2710.496530][T17905] ipv6_setsockopt+0x2724/0x2a90 [ 2710.501510][T17905] ? rb_insert_color+0x2b5/0x2c0 [ 2710.506464][T17905] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2710.511993][T17905] ? debug_smp_processor_id+0x13/0x20 [ 2710.517405][T17905] ? resched_curr+0x1d/0xc0 [ 2710.521989][T17905] ? check_preempt_wakeup+0x1c4/0x380 [ 2710.527439][T17905] ? __rcu_read_unlock+0x4a/0x70 [ 2710.532356][T17905] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2710.537710][T17905] ? avc_has_perm+0x6b/0x150 [ 2710.542348][T17905] ? avc_has_perm+0xd0/0x150 [ 2710.546923][T17905] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2710.553251][T17905] ? selinux_socket_setsockopt+0x145/0x170 [ 2710.559044][T17905] udpv6_setsockopt+0x85/0x90 [ 2710.563837][T17905] sock_common_setsockopt+0x5d/0x70 [ 2710.569045][T17905] ? sock_common_recvmsg+0xe0/0xe0 [ 2710.574192][T17905] __sys_setsockopt+0x212/0x2b0 [ 2710.579119][T17905] __x64_sys_setsockopt+0x62/0x70 [ 2710.584161][T17905] do_syscall_64+0x2b/0x70 [ 2710.588567][T17905] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2710.594527][T17905] RIP: 0033:0x7f53e730f209 [ 2710.598925][T17905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2710.618562][T17905] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2710.626985][T17905] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2710.634953][T17905] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2710.642904][T17905] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2710.650855][T17905] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2710.658835][T17905] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2710.666830][T17905] [ 2710.669931][T17905] memory: usage 307200kB, limit 307200kB, failcnt 34467 [ 2710.676884][T17905] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2710.683803][T17905] Memory cgroup stats for /syz2: [ 2710.684001][T17905] anon 122880 [ 2710.684001][T17905] file 53248 [ 2710.684001][T17905] kernel 314396672 [ 2710.684001][T17905] kernel_stack 32768 [ 2710.684001][T17905] pagetables 77824 [ 2710.684001][T17905] percpu 1184 [ 2710.684001][T17905] sock 0 [ 2710.684001][T17905] vmalloc 0 [ 2710.684001][T17905] shmem 49152 [ 2710.684001][T17905] file_mapped 49152 [ 2710.684001][T17905] file_dirty 4096 [ 2710.684001][T17905] file_writeback 0 [ 2710.684001][T17905] swapcached 0 [ 2710.684001][T17905] inactive_anon 139264 [ 2710.684001][T17905] active_anon 32768 [ 2710.684001][T17905] inactive_file 0 [ 2710.684001][T17905] active_file 4096 [ 2710.684001][T17905] unevictable 0 [ 2710.684001][T17905] slab_reclaimable 22376 [ 2710.684001][T17905] slab_unreclaimable 208184 [ 2710.684001][T17905] slab 230560 [ 2710.684001][T17905] workingset_refault_anon 0 [ 2710.684001][T17905] workingset_refault_file 115 [ 2710.684001][T17905] workingset_activate_anon 0 [ 2710.684001][T17905] workingset_activate_file 0 [ 2710.779225][T17905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17904,uid=0 [ 2710.794509][T17905] Memory cgroup out of memory: Killed process 17905 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x3, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x2f8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:06 executing program 0: socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000400)={{0x9, 0x9}, 'port0\x00', 0xc0, 0x40, 0x4, 0x6, 0x100, 0x9, 0x1, 0x0, 0x0, 0x1f}) 18:40:06 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) syz_io_uring_setup(0x23d5, &(0x7f0000000100)={0x0, 0x4c89, 0x15, 0x1, 0x31a, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x3a8, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'syzkaller1\x00', 'netpci0\x00', {0xff}, {0xff}, 0xfb, 0xf7, 0x6, 0x55}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0x0, 0x0, 0xff000000], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff], 'ipvlan0\x00', 'syz_tun\x00', {0xff}, {}, 0x8b, 0x20, 0x2, 0xd}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d3], 0xba2, 0x7, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0x0, 0x0, 0xffffff00, 0xffffff00], 0x4e20, 0x4e24, 0x4e22, 0x4e24, 0x6, 0x101, 0x2, 0x7fd, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x1, 0x6, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1, 0x37, 0xde, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x20008800) 18:40:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffffff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x370}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x1802}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x2001}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, 0x0) 18:40:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x0, {0x8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:06 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) syz_io_uring_setup(0x23d5, &(0x7f0000000100)={0x0, 0x4c89, 0x15, 0x1, 0x31a, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x3a8, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'syzkaller1\x00', 'netpci0\x00', {0xff}, {0xff}, 0xfb, 0xf7, 0x6, 0x55}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0x0, 0x0, 0xff000000], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff], 'ipvlan0\x00', 'syz_tun\x00', {0xff}, {}, 0x8b, 0x20, 0x2, 0xd}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d3], 0xba2, 0x7, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0x0, 0x0, 0xffffff00, 0xffffff00], 0x4e20, 0x4e24, 0x4e22, 0x4e24, 0x6, 0x101, 0x2, 0x7fd, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x1, 0x6, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1, 0x37, 0xde, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x20008800) [ 2711.543323][T17951] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2711.556859][T17951] CPU: 0 PID: 17951 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2711.567555][T17951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2711.577618][T17951] Call Trace: [ 2711.580973][T17951] [ 2711.583946][T17951] dump_stack_lvl+0xd6/0x122 [ 2711.588596][T17951] dump_stack+0x11/0x12 [ 2711.592803][T17951] dump_header+0x98/0x410 [ 2711.597188][T17951] oom_kill_process+0x100/0x550 [ 2711.602111][T17951] out_of_memory+0x620/0x880 [ 2711.606711][T17951] mem_cgroup_oom+0x475/0x4f0 [ 2711.611402][T17951] try_charge_memcg+0x746/0x960 [ 2711.616405][T17951] ? debug_smp_processor_id+0x13/0x20 [ 2711.621769][T17951] __memcg_kmem_charge_page+0x2e4/0x480 [ 2711.627385][T17951] __alloc_pages+0x1c1/0x340 [ 2711.631986][T17951] alloc_pages+0x34d/0x450 [ 2711.636477][T17951] __vmalloc_node_range+0x730/0xef0 [ 2711.641758][T17951] kvmalloc_node+0xf3/0x140 [ 2711.646289][T17951] ? xt_alloc_table_info+0x39/0x70 [ 2711.651556][T17951] xt_alloc_table_info+0x39/0x70 [ 2711.656489][T17951] do_ip6t_set_ctl+0x645/0x1790 [ 2711.661339][T17951] ? rmqueue_pcplist+0x157/0x1e0 [ 2711.666258][T17951] ? rmqueue+0x4a/0xbc0 [ 2711.670397][T17951] nf_setsockopt+0x1a6/0x1c0 [ 2711.674992][T17951] ipv6_setsockopt+0x2724/0x2a90 [ 2711.679915][T17951] ? rb_insert_color+0x2b5/0x2c0 [ 2711.684902][T17951] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2711.690433][T17951] ? reweight_entity+0x22/0x120 [ 2711.695284][T17951] ? enqueue_task_fair+0x333/0x410 [ 2711.700405][T17951] ? __rcu_read_unlock+0x4a/0x70 [ 2711.705379][T17951] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2711.710894][T17951] ? avc_has_perm+0x6b/0x150 [ 2711.715475][T17951] ? avc_has_perm+0xd0/0x150 [ 2711.720049][T17951] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2711.726405][T17951] ? selinux_socket_setsockopt+0x145/0x170 [ 2711.732314][T17951] udpv6_setsockopt+0x85/0x90 [ 2711.737030][T17951] sock_common_setsockopt+0x5d/0x70 [ 2711.742209][T17951] ? sock_common_recvmsg+0xe0/0xe0 [ 2711.747397][T17951] __sys_setsockopt+0x212/0x2b0 [ 2711.752345][T17951] __x64_sys_setsockopt+0x62/0x70 [ 2711.757571][T17951] do_syscall_64+0x2b/0x70 [ 2711.761975][T17951] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2711.767873][T17951] RIP: 0033:0x7f1d726c3209 [ 2711.772304][T17951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2711.792005][T17951] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2711.800466][T17951] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2711.808448][T17951] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2711.816426][T17951] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2711.824481][T17951] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2711.832439][T17951] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2711.840449][T17951] [ 2711.843589][T17951] memory: usage 307200kB, limit 307200kB, failcnt 13728 [ 2711.850551][T17951] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2711.857510][T17951] Memory cgroup stats for /syz5: [ 2711.881218][T17951] anon 126976 [ 2711.881218][T17951] file 40960 [ 2711.881218][T17951] kernel 314376192 [ 2711.881218][T17951] kernel_stack 16384 [ 2711.881218][T17951] pagetables 73728 [ 2711.881218][T17951] percpu 5920 [ 2711.881218][T17951] sock 0 [ 2711.881218][T17951] vmalloc 0 [ 2711.881218][T17951] shmem 40960 [ 2711.881218][T17951] file_mapped 40960 [ 2711.881218][T17951] file_dirty 0 [ 2711.881218][T17951] file_writeback 0 [ 2711.881218][T17951] swapcached 0 [ 2711.881218][T17951] inactive_anon 131072 [ 2711.881218][T17951] active_anon 36864 [ 2711.881218][T17951] inactive_file 0 [ 2711.881218][T17951] active_file 0 [ 2711.881218][T17951] unevictable 0 [ 2711.881218][T17951] slab_reclaimable 30960 [ 2711.881218][T17951] slab_unreclaimable 404856 [ 2711.881218][T17951] slab 435816 [ 2711.881218][T17951] workingset_refault_anon 0 [ 2711.881218][T17951] workingset_refault_file 178 [ 2711.881218][T17951] workingset_activate_anon 0 [ 2711.881218][T17951] workingset_activate_file 0 [ 2711.975991][T17951] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17950,uid=0 [ 2711.991364][T17951] Memory cgroup out of memory: Killed process 17951 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:40:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x2], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x7003}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:07 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) syz_io_uring_setup(0x23d5, &(0x7f0000000100)={0x0, 0x4c89, 0x15, 0x1, 0x31a, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x2, 0x3a8, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'syzkaller1\x00', 'netpci0\x00', {0xff}, {0xff}, 0xfb, 0xf7, 0x6, 0x55}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0x0, 0x0, 0xff000000], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff], 'ipvlan0\x00', 'syz_tun\x00', {0xff}, {}, 0x8b, 0x20, 0x2, 0xd}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d3], 0xba2, 0x7, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, [0x0, 0x0, 0xffffff00, 0xffffff00], 0x4e20, 0x4e24, 0x4e22, 0x4e24, 0x6, 0x101, 0x2, 0x7fd, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x1, 0x6, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1, 0x37, 0xde, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x20008800) 18:40:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0xd000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:07 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x390, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 18:40:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) add_key$user(&(0x7f0000000000), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="0a87cc91ea9c2d49f176bb3c5c112910007fd2e342edae67a6255fe7eb4f17a59814b5a7b8afa2e3dfd07c5093dbefabf9acf48bb3f14d871ecf5f8944ce2e9be4f0400e363040039a274393776c6e155db5757ce2a4dbdb924412effa9166caa3a657e393fbdc7ce34aad0670c07ab1aa38ced6d7c11df6431d988249349dc826126d5ce10166fa8d52c0bd18331a68571872f56294e4b7c4964f710c17412b520895c085e7ac8f8333c3200b0d227ab93ab8a7fbc9bc39a1", 0xb9, 0xffffffffffffffff) 18:40:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0xf802}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 2712.651018][T17978] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2712.664606][T17978] CPU: 0 PID: 17978 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2712.675286][T17978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2712.685341][T17978] Call Trace: [ 2712.688618][T17978] [ 2712.691568][T17978] dump_stack_lvl+0xd6/0x122 [ 2712.696201][T17978] dump_stack+0x11/0x12 [ 2712.700457][T17978] dump_header+0x98/0x410 [ 2712.704829][T17978] oom_kill_process+0x100/0x550 [ 2712.709801][T17978] out_of_memory+0x620/0x880 [ 2712.714406][T17978] mem_cgroup_oom+0x475/0x4f0 [ 2712.719093][T17978] try_charge_memcg+0x746/0x960 [ 2712.723950][T17978] ? debug_smp_processor_id+0x13/0x20 [ 2712.729381][T17978] ? delay_tsc+0xc1/0xe0 [ 2712.733633][T17978] __memcg_kmem_charge_page+0x2e4/0x480 [ 2712.739196][T17978] __alloc_pages+0x1c1/0x340 [ 2712.743932][T17978] alloc_pages+0x34d/0x450 [ 2712.748360][T17978] __vmalloc_node_range+0x730/0xef0 [ 2712.753599][T17978] kvmalloc_node+0xf3/0x140 [ 2712.758163][T17978] ? xt_alloc_table_info+0x39/0x70 [ 2712.763358][T17978] xt_alloc_table_info+0x39/0x70 [ 2712.768369][T17978] do_ip6t_set_ctl+0x645/0x1790 [ 2712.773278][T17978] ? rmqueue_pcplist+0x157/0x1e0 [ 2712.778247][T17978] ? __this_cpu_preempt_check+0xf/0x10 [ 2712.783732][T17978] ? xfd_validate_state+0x4e/0xf0 [ 2712.788812][T17978] ? save_fpregs_to_fpstate+0xfa/0x140 [ 2712.794327][T17978] ? _raw_spin_unlock+0x2d/0x50 [ 2712.799180][T17978] ? finish_task_switch+0xc5/0x260 [ 2712.804393][T17978] nf_setsockopt+0x1a6/0x1c0 [ 2712.808978][T17978] ipv6_setsockopt+0x2724/0x2a90 [ 2712.813915][T17978] ? rb_insert_color+0x2b5/0x2c0 [ 2712.818851][T17978] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2712.824392][T17978] ? debug_smp_processor_id+0x13/0x20 [ 2712.829776][T17978] ? resched_curr+0x1d/0xc0 [ 2712.834263][T17978] ? check_preempt_wakeup+0x1c4/0x380 [ 2712.839620][T17978] ? __rcu_read_unlock+0x4a/0x70 [ 2712.844578][T17978] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2712.849969][T17978] ? avc_has_perm+0x6b/0x150 [ 2712.854701][T17978] ? avc_has_perm+0xd0/0x150 [ 2712.859272][T17978] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2712.865624][T17978] ? selinux_socket_setsockopt+0x145/0x170 [ 2712.871430][T17978] udpv6_setsockopt+0x85/0x90 [ 2712.876205][T17978] sock_common_setsockopt+0x5d/0x70 [ 2712.881430][T17978] ? sock_common_recvmsg+0xe0/0xe0 [ 2712.886566][T17978] __sys_setsockopt+0x212/0x2b0 [ 2712.891478][T17978] __x64_sys_setsockopt+0x62/0x70 [ 2712.896514][T17978] do_syscall_64+0x2b/0x70 [ 2712.900981][T17978] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2712.906934][T17978] RIP: 0033:0x7f53e730f209 [ 2712.911350][T17978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2712.931042][T17978] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2712.939484][T17978] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2712.947456][T17978] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2712.955461][T17978] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2712.963497][T17978] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2712.971453][T17978] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2712.979413][T17978] [ 2712.982474][T17978] memory: usage 307200kB, limit 307200kB, failcnt 34596 [ 2712.989517][T17978] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2712.996459][T17978] Memory cgroup stats for /syz2: [ 2712.997503][T17978] anon 122880 [ 2712.997503][T17978] file 53248 [ 2712.997503][T17978] kernel 314372096 [ 2712.997503][T17978] kernel_stack 16384 [ 2712.997503][T17978] pagetables 77824 [ 2712.997503][T17978] percpu 1184 [ 2712.997503][T17978] sock 0 [ 2712.997503][T17978] vmalloc 0 [ 2712.997503][T17978] shmem 49152 [ 2712.997503][T17978] file_mapped 49152 [ 2712.997503][T17978] file_dirty 4096 [ 2712.997503][T17978] file_writeback 0 [ 2712.997503][T17978] swapcached 0 [ 2712.997503][T17978] inactive_anon 139264 [ 2712.997503][T17978] active_anon 32768 [ 2712.997503][T17978] inactive_file 0 [ 2712.997503][T17978] active_file 4096 [ 2712.997503][T17978] unevictable 0 [ 2712.997503][T17978] slab_reclaimable 22376 [ 2712.997503][T17978] slab_unreclaimable 202792 [ 2712.997503][T17978] slab 225168 [ 2712.997503][T17978] workingset_refault_anon 0 [ 2712.997503][T17978] workingset_refault_file 115 [ 2712.997503][T17978] workingset_activate_anon 0 [ 2712.997503][T17978] workingset_activate_file 0 [ 2713.092656][T17978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=17977,uid=0 [ 2713.108054][T17978] Memory cgroup out of memory: Killed process 17978 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x3], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) add_key$user(&(0x7f0000000000), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="0a87cc91ea9c2d49f176bb3c5c112910007fd2e342edae67a6255fe7eb4f17a59814b5a7b8afa2e3dfd07c5093dbefabf9acf48bb3f14d871ecf5f8944ce2e9be4f0400e363040039a274393776c6e155db5757ce2a4dbdb924412effa9166caa3a657e393fbdc7ce34aad0670c07ab1aa38ced6d7c11df6431d988249349dc826126d5ce10166fa8d52c0bd18331a68571872f56294e4b7c4964f710c17412b520895c085e7ac8f8333c3200b0d227ab93ab8a7fbc9bc39a1", 0xb9, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="0a87cc91ea9c2d49f176bb3c5c112910007fd2e342edae67a6255fe7eb4f17a59814b5a7b8afa2e3dfd07c5093dbefabf9acf48bb3f14d871ecf5f8944ce2e9be4f0400e363040039a274393776c6e155db5757ce2a4dbdb924412effa9166caa3a657e393fbdc7ce34aad0670c07ab1aa38ced6d7c11df6431d988249349dc826126d5ce10166fa8d52c0bd18331a68571872f56294e4b7c4964f710c17412b520895c085e7ac8f8333c3200b0d227ab93ab8a7fbc9bc39a1", 0xb9, 0xffffffffffffffff) (async) 18:40:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x390, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 18:40:08 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x1000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x2], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="0a87cc91ea9c2d49f176bb3c5c112910007fd2e342edae67a6255fe7eb4f17a59814b5a7b8afa2e3dfd07c5093dbefabf9acf48bb3f14d871ecf5f8944ce2e9be4f0400e363040039a274393776c6e155db5757ce2a4dbdb924412effa9166caa3a657e393fbdc7ce34aad0670c07ab1aa38ced6d7c11df6431d988249349dc826126d5ce10166fa8d52c0bd18331a68571872f56294e4b7c4964f710c17412b520895c085e7ac8f8333c3200b0d227ab93ab8a7fbc9bc39a1", 0xb9, 0xffffffffffffffff) 18:40:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x2000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x390, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 18:40:08 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:08 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x4000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x7fe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 2713.876726][T18008] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2713.890271][T18008] CPU: 0 PID: 18008 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2713.900982][T18008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2713.911116][T18008] Call Trace: [ 2713.914382][T18008] [ 2713.917314][T18008] dump_stack_lvl+0xd6/0x122 [ 2713.921985][T18008] dump_stack+0x11/0x12 [ 2713.926186][T18008] dump_header+0x98/0x410 [ 2713.930505][T18008] oom_kill_process+0x100/0x550 [ 2713.935425][T18008] out_of_memory+0x620/0x880 [ 2713.940021][T18008] mem_cgroup_oom+0x475/0x4f0 [ 2713.944763][T18008] try_charge_memcg+0x746/0x960 [ 2713.949602][T18008] __memcg_kmem_charge_page+0x2e4/0x480 [ 2713.955135][T18008] __alloc_pages+0x1c1/0x340 [ 2713.959819][T18008] alloc_pages+0x34d/0x450 [ 2713.964219][T18008] __vmalloc_node_range+0x730/0xef0 [ 2713.969411][T18008] kvmalloc_node+0xf3/0x140 [ 2713.973983][T18008] ? xt_alloc_table_info+0x39/0x70 [ 2713.979202][T18008] xt_alloc_table_info+0x39/0x70 [ 2713.984125][T18008] do_ip6t_set_ctl+0x645/0x1790 [ 2713.989006][T18008] ? rmqueue_pcplist+0x157/0x1e0 [ 2713.994002][T18008] ? rmqueue+0x4a/0xbc0 [ 2713.998212][T18008] nf_setsockopt+0x1a6/0x1c0 [ 2714.002797][T18008] ipv6_setsockopt+0x2724/0x2a90 [ 2714.007733][T18008] ? rb_insert_color+0x2b5/0x2c0 [ 2714.012713][T18008] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2714.018286][T18008] ? debug_smp_processor_id+0x13/0x20 [ 2714.023663][T18008] ? resched_curr+0x1d/0xc0 [ 2714.028151][T18008] ? check_preempt_wakeup+0x1c4/0x380 [ 2714.033519][T18008] ? __rcu_read_unlock+0x4a/0x70 [ 2714.038441][T18008] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2714.043871][T18008] ? avc_has_perm+0x6b/0x150 [ 2714.048533][T18008] ? avc_has_perm+0xd0/0x150 [ 2714.053128][T18008] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2714.059441][T18008] ? selinux_socket_setsockopt+0x145/0x170 [ 2714.065257][T18008] udpv6_setsockopt+0x85/0x90 [ 2714.069939][T18008] sock_common_setsockopt+0x5d/0x70 [ 2714.075122][T18008] ? sock_common_recvmsg+0xe0/0xe0 [ 2714.080239][T18008] __sys_setsockopt+0x212/0x2b0 [ 2714.085083][T18008] __x64_sys_setsockopt+0x62/0x70 [ 2714.090201][T18008] do_syscall_64+0x2b/0x70 [ 2714.094602][T18008] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2714.100491][T18008] RIP: 0033:0x7f1d726c3209 [ 2714.104891][T18008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2714.124496][T18008] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2714.132891][T18008] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2714.140864][T18008] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2714.148844][T18008] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2714.156891][T18008] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2714.164846][T18008] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2714.172820][T18008] [ 2714.175967][T18008] memory: usage 307172kB, limit 307200kB, failcnt 13826 [ 2714.182925][T18008] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2714.189806][T18008] Memory cgroup stats for /syz5: [ 2714.191392][T18008] anon 126976 [ 2714.191392][T18008] file 40960 [ 2714.191392][T18008] kernel 314376192 [ 2714.191392][T18008] kernel_stack 16384 [ 2714.191392][T18008] pagetables 73728 [ 2714.191392][T18008] percpu 5920 [ 2714.191392][T18008] sock 0 [ 2714.191392][T18008] vmalloc 0 [ 2714.191392][T18008] shmem 40960 [ 2714.191392][T18008] file_mapped 40960 [ 2714.191392][T18008] file_dirty 0 [ 2714.191392][T18008] file_writeback 0 [ 2714.191392][T18008] swapcached 0 [ 2714.191392][T18008] inactive_anon 131072 [ 2714.191392][T18008] active_anon 36864 [ 2714.191392][T18008] inactive_file 0 [ 2714.191392][T18008] active_file 0 [ 2714.191392][T18008] unevictable 0 [ 2714.191392][T18008] slab_reclaimable 30960 [ 2714.191392][T18008] slab_unreclaimable 404856 [ 2714.191392][T18008] slab 435816 [ 2714.191392][T18008] workingset_refault_anon 0 [ 2714.191392][T18008] workingset_refault_file 178 [ 2714.191392][T18008] workingset_activate_anon 0 [ 2714.191392][T18008] workingset_activate_file 0 [ 2714.286003][T18008] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18007,uid=0 [ 2714.301335][T18008] Memory cgroup out of memory: Killed process 18008 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:40:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x4], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x7fe) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:09 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x8000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x3], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:10 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x7fe) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x18020000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x20010000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:10 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) [ 2715.027096][T18034] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2715.040692][T18034] CPU: 0 PID: 18034 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2715.051485][T18034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2715.061553][T18034] Call Trace: [ 2715.064819][T18034] [ 2715.067792][T18034] dump_stack_lvl+0xd6/0x122 [ 2715.072451][T18034] dump_stack+0x11/0x12 [ 2715.076604][T18034] dump_header+0x98/0x410 [ 2715.080986][T18034] oom_kill_process+0x100/0x550 [ 2715.085982][T18034] out_of_memory+0x620/0x880 [ 2715.090558][T18034] mem_cgroup_oom+0x475/0x4f0 [ 2715.095302][T18034] try_charge_memcg+0x746/0x960 [ 2715.100173][T18034] ? debug_smp_processor_id+0x13/0x20 [ 2715.105538][T18034] ? delay_tsc+0xc1/0xe0 [ 2715.109789][T18034] __memcg_kmem_charge_page+0x2e4/0x480 [ 2715.115366][T18034] __alloc_pages+0x1c1/0x340 [ 2715.119974][T18034] alloc_pages+0x34d/0x450 [ 2715.124378][T18034] __vmalloc_node_range+0x730/0xef0 [ 2715.129569][T18034] kvmalloc_node+0xf3/0x140 [ 2715.134108][T18034] ? xt_alloc_table_info+0x39/0x70 [ 2715.139325][T18034] xt_alloc_table_info+0x39/0x70 [ 2715.144255][T18034] do_ip6t_set_ctl+0x645/0x1790 [ 2715.149114][T18034] ? rmqueue_pcplist+0x157/0x1e0 [ 2715.154070][T18034] ? rmqueue+0x4a/0xbc0 [ 2715.158222][T18034] ? page_counter_cancel+0xa4/0x1f0 [ 2715.163474][T18034] nf_setsockopt+0x1a6/0x1c0 [ 2715.168060][T18034] ipv6_setsockopt+0x2724/0x2a90 [ 2715.173024][T18034] ? _raw_spin_unlock+0x2d/0x50 [ 2715.177920][T18034] ? finish_task_switch+0xc5/0x260 [ 2715.183100][T18034] ? __schedule+0x50d/0x6e0 [ 2715.187620][T18034] ? schedule+0x5b/0x80 [ 2715.191969][T18034] ? futex_wait_queue+0x11c/0x160 [ 2715.196999][T18034] ? __rcu_read_unlock+0x4a/0x70 [ 2715.201922][T18034] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2715.207319][T18034] ? avc_has_perm+0x6b/0x150 [ 2715.211915][T18034] ? avc_has_perm+0xd0/0x150 [ 2715.216580][T18034] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2715.222920][T18034] ? selinux_socket_setsockopt+0x145/0x170 [ 2715.228719][T18034] udpv6_setsockopt+0x85/0x90 [ 2715.233436][T18034] sock_common_setsockopt+0x5d/0x70 [ 2715.238628][T18034] ? sock_common_recvmsg+0xe0/0xe0 [ 2715.243918][T18034] __sys_setsockopt+0x212/0x2b0 [ 2715.248791][T18034] __x64_sys_setsockopt+0x62/0x70 [ 2715.253865][T18034] do_syscall_64+0x2b/0x70 [ 2715.258277][T18034] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2715.264285][T18034] RIP: 0033:0x7f53e730f209 [ 2715.268684][T18034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2715.288411][T18034] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2715.296830][T18034] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2715.304883][T18034] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2715.312839][T18034] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2715.320847][T18034] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2715.328828][T18034] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2715.336856][T18034] [ 2715.340007][T18034] memory: usage 307200kB, limit 307200kB, failcnt 34729 [ 2715.346961][T18034] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2715.353884][T18034] Memory cgroup stats for /syz2: [ 2715.354409][T18034] anon 122880 [ 2715.354409][T18034] file 53248 [ 2715.354409][T18034] kernel 314388480 [ 2715.354409][T18034] kernel_stack 32768 [ 2715.354409][T18034] pagetables 77824 [ 2715.354409][T18034] percpu 1184 [ 2715.354409][T18034] sock 0 [ 2715.354409][T18034] vmalloc 0 [ 2715.354409][T18034] shmem 49152 [ 2715.354409][T18034] file_mapped 49152 [ 2715.354409][T18034] file_dirty 4096 [ 2715.354409][T18034] file_writeback 0 [ 2715.354409][T18034] swapcached 0 [ 2715.354409][T18034] inactive_anon 139264 [ 2715.354409][T18034] active_anon 32768 [ 2715.354409][T18034] inactive_file 0 [ 2715.354409][T18034] active_file 4096 [ 2715.354409][T18034] unevictable 0 [ 2715.354409][T18034] slab_reclaimable 22376 [ 2715.354409][T18034] slab_unreclaimable 202792 [ 2715.354409][T18034] slab 225168 [ 2715.354409][T18034] workingset_refault_anon 0 [ 2715.354409][T18034] workingset_refault_file 115 [ 2715.354409][T18034] workingset_activate_anon 0 [ 2715.354409][T18034] workingset_activate_file 0 [ 2715.449805][T18034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18033,uid=0 [ 2715.465132][T18034] Memory cgroup out of memory: Killed process 18034 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x6], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:11 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:11 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x70030000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:11 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x4], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x3b8, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hl={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 18:40:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0xd0000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:11 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0xf8020000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2716.222308][T18061] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2716.235907][T18061] CPU: 1 PID: 18061 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2716.246590][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2716.256642][T18061] Call Trace: [ 2716.260009][T18061] [ 2716.262923][T18061] dump_stack_lvl+0xd6/0x122 [ 2716.267652][T18061] dump_stack+0x11/0x12 [ 2716.271792][T18061] dump_header+0x98/0x410 [ 2716.276138][T18061] oom_kill_process+0x100/0x550 [ 2716.280986][T18061] out_of_memory+0x620/0x880 [ 2716.285575][T18061] mem_cgroup_oom+0x475/0x4f0 [ 2716.290246][T18061] try_charge_memcg+0x746/0x960 [ 2716.295104][T18061] ? debug_smp_processor_id+0x13/0x20 [ 2716.300510][T18061] ? delay_tsc+0xc1/0xe0 [ 2716.304859][T18061] __memcg_kmem_charge_page+0x2e4/0x480 [ 2716.310472][T18061] __alloc_pages+0x1c1/0x340 [ 2716.315115][T18061] alloc_pages+0x34d/0x450 [ 2716.319641][T18061] __vmalloc_node_range+0x730/0xef0 [ 2716.324910][T18061] kvmalloc_node+0xf3/0x140 [ 2716.329430][T18061] ? xt_alloc_table_info+0x39/0x70 [ 2716.334530][T18061] xt_alloc_table_info+0x39/0x70 [ 2716.339517][T18061] do_ip6t_set_ctl+0x645/0x1790 [ 2716.344353][T18061] ? rmqueue_pcplist+0x157/0x1e0 [ 2716.349314][T18061] ? rmqueue+0x4a/0xbc0 [ 2716.353547][T18061] nf_setsockopt+0x1a6/0x1c0 [ 2716.358127][T18061] ipv6_setsockopt+0x2724/0x2a90 [ 2716.363137][T18061] ? rb_insert_color+0x2b5/0x2c0 [ 2716.368126][T18061] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2716.373814][T18061] ? debug_smp_processor_id+0x13/0x20 [ 2716.379208][T18061] ? resched_curr+0x1d/0xc0 [ 2716.383827][T18061] ? check_preempt_wakeup+0x1c4/0x380 [ 2716.389184][T18061] ? __rcu_read_unlock+0x4a/0x70 [ 2716.394173][T18061] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2716.399583][T18061] ? avc_has_perm+0x6b/0x150 [ 2716.404170][T18061] ? avc_has_perm+0xd0/0x150 [ 2716.408813][T18061] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2716.415188][T18061] ? selinux_socket_setsockopt+0x145/0x170 [ 2716.421093][T18061] udpv6_setsockopt+0x85/0x90 [ 2716.425762][T18061] sock_common_setsockopt+0x5d/0x70 [ 2716.431009][T18061] ? sock_common_recvmsg+0xe0/0xe0 [ 2716.436154][T18061] __sys_setsockopt+0x212/0x2b0 [ 2716.440998][T18061] __x64_sys_setsockopt+0x62/0x70 [ 2716.446085][T18061] do_syscall_64+0x2b/0x70 [ 2716.450661][T18061] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2716.456579][T18061] RIP: 0033:0x7f53e730f209 [ 2716.461029][T18061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2716.480685][T18061] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2716.489236][T18061] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2716.497220][T18061] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2716.505191][T18061] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2716.513207][T18061] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2716.521226][T18061] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2716.529207][T18061] [ 2716.532473][T18061] memory: usage 307184kB, limit 307200kB, failcnt 34796 [ 2716.539433][T18061] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2716.546391][T18061] Memory cgroup stats for /syz2: [ 2716.550115][T18061] anon 122880 [ 2716.550115][T18061] file 53248 [ 2716.550115][T18061] kernel 314380288 [ 2716.550115][T18061] kernel_stack 16384 [ 2716.550115][T18061] pagetables 77824 [ 2716.550115][T18061] percpu 1184 [ 2716.550115][T18061] sock 0 [ 2716.550115][T18061] vmalloc 0 [ 2716.550115][T18061] shmem 49152 [ 2716.550115][T18061] file_mapped 49152 [ 2716.550115][T18061] file_dirty 4096 [ 2716.550115][T18061] file_writeback 0 [ 2716.550115][T18061] swapcached 0 [ 2716.550115][T18061] inactive_anon 139264 [ 2716.550115][T18061] active_anon 32768 [ 2716.550115][T18061] inactive_file 0 [ 2716.550115][T18061] active_file 4096 [ 2716.550115][T18061] unevictable 0 [ 2716.550115][T18061] slab_reclaimable 22376 [ 2716.550115][T18061] slab_unreclaimable 208184 [ 2716.550115][T18061] slab 230560 [ 2716.550115][T18061] workingset_refault_anon 0 [ 2716.550115][T18061] workingset_refault_file 115 [ 2716.550115][T18061] workingset_activate_anon 0 [ 2716.550115][T18061] workingset_activate_file 0 [ 2716.645440][T18061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18060,uid=0 [ 2716.660874][T18061] Memory cgroup out of memory: Killed process 18061 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x7], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:12 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x7], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x8001, 0x100, {{0x7, 0x4, 0x3, 0x36, 0x1c, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x8, 0x7d, 0x0, 0x0, [0x10000]}]}}}}}) 18:40:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x2, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x8001, 0x100, {{0x7, 0x4, 0x3, 0x36, 0x1c, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x8, 0x7d, 0x0, 0x0, [0x10000]}]}}}}}) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x8001, 0x100, {{0x7, 0x4, 0x3, 0x36, 0x1c, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x8, 0x7d, 0x0, 0x0, [0x10000]}]}}}}}) (async) 18:40:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x4, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2717.472944][T18082] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2717.486538][T18082] CPU: 1 PID: 18082 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2717.497492][T18082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2717.507642][T18082] Call Trace: [ 2717.510921][T18082] [ 2717.513871][T18082] dump_stack_lvl+0xd6/0x122 [ 2717.518595][T18082] dump_stack+0x11/0x12 [ 2717.522977][T18082] dump_header+0x98/0x410 [ 2717.527325][T18082] oom_kill_process+0x100/0x550 [ 2717.532261][T18082] out_of_memory+0x620/0x880 [ 2717.536954][T18082] mem_cgroup_oom+0x475/0x4f0 [ 2717.541645][T18082] try_charge_memcg+0x746/0x960 [ 2717.546554][T18082] __memcg_kmem_charge_page+0x2e4/0x480 [ 2717.552114][T18082] __alloc_pages+0x1c1/0x340 [ 2717.556740][T18082] alloc_pages+0x34d/0x450 [ 2717.561167][T18082] __vmalloc_node_range+0x730/0xef0 [ 2717.566387][T18082] kvmalloc_node+0xf3/0x140 [ 2717.570949][T18082] ? xt_alloc_table_info+0x39/0x70 [ 2717.576099][T18082] xt_alloc_table_info+0x39/0x70 [ 2717.581107][T18082] do_ip6t_set_ctl+0x645/0x1790 [ 2717.585973][T18082] ? rmqueue_pcplist+0x157/0x1e0 [ 2717.590931][T18082] ? rmqueue+0x4a/0xbc0 [ 2717.595107][T18082] nf_setsockopt+0x1a6/0x1c0 [ 2717.599708][T18082] ipv6_setsockopt+0x2724/0x2a90 [ 2717.604759][T18082] ? rb_insert_color+0x2b5/0x2c0 [ 2717.609792][T18082] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2717.615619][T18082] ? debug_smp_processor_id+0x13/0x20 [ 2717.621051][T18082] ? resched_curr+0x1d/0xc0 [ 2717.625630][T18082] ? check_preempt_wakeup+0x1c4/0x380 [ 2717.631088][T18082] ? __rcu_read_unlock+0x4a/0x70 [ 2717.636060][T18082] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2717.641446][T18082] ? avc_has_perm+0x6b/0x150 [ 2717.646124][T18082] ? avc_has_perm+0xd0/0x150 [ 2717.650726][T18082] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2717.657078][T18082] ? selinux_socket_setsockopt+0x145/0x170 [ 2717.662915][T18082] udpv6_setsockopt+0x85/0x90 [ 2717.667665][T18082] sock_common_setsockopt+0x5d/0x70 [ 2717.672888][T18082] ? sock_common_recvmsg+0xe0/0xe0 [ 2717.678092][T18082] __sys_setsockopt+0x212/0x2b0 [ 2717.683035][T18082] __x64_sys_setsockopt+0x62/0x70 [ 2717.688119][T18082] do_syscall_64+0x2b/0x70 [ 2717.692605][T18082] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2717.698593][T18082] RIP: 0033:0x7f53e730f209 [ 2717.703015][T18082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2717.722755][T18082] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2717.731184][T18082] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2717.739165][T18082] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2717.747161][T18082] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2717.755141][T18082] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2717.763169][T18082] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2717.771142][T18082] [ 2717.774339][T18082] memory: usage 307184kB, limit 307200kB, failcnt 34837 [ 2717.781306][T18082] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2717.788173][T18082] Memory cgroup stats for /syz2: [ 2717.790970][T18082] anon 122880 [ 2717.790970][T18082] file 53248 [ 2717.790970][T18082] kernel 314368000 [ 2717.790970][T18082] kernel_stack 16384 [ 2717.790970][T18082] pagetables 77824 [ 2717.790970][T18082] percpu 1184 [ 2717.790970][T18082] sock 0 [ 2717.790970][T18082] vmalloc 0 [ 2717.790970][T18082] shmem 49152 [ 2717.790970][T18082] file_mapped 49152 [ 2717.790970][T18082] file_dirty 4096 [ 2717.790970][T18082] file_writeback 0 [ 2717.790970][T18082] swapcached 0 [ 2717.790970][T18082] inactive_anon 139264 [ 2717.790970][T18082] active_anon 32768 [ 2717.790970][T18082] inactive_file 0 [ 2717.790970][T18082] active_file 4096 [ 2717.790970][T18082] unevictable 0 [ 2717.790970][T18082] slab_reclaimable 22376 [ 2717.790970][T18082] slab_unreclaimable 209456 [ 2717.790970][T18082] slab 231832 [ 2717.790970][T18082] workingset_refault_anon 0 [ 2717.790970][T18082] workingset_refault_file 115 [ 2717.790970][T18082] workingset_activate_anon 0 [ 2717.790970][T18082] workingset_activate_file 0 [ 2717.886347][T18082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18081,uid=0 [ 2717.901708][T18082] Memory cgroup out of memory: Killed process 18082 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x8001, 0x100, {{0x7, 0x4, 0x3, 0x36, 0x1c, 0x68, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x8, 0x7d, 0x0, 0x0, [0x10000]}]}}}}}) 18:40:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x9], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x8, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0xa], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0xd0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:13 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xffffffff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0xff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'sit0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x3}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x120, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:13 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xffffffff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0xff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'sit0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x3}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xffffffff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0xff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'sit0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x3}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x218, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2718.859393][T18119] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2718.872976][T18119] CPU: 1 PID: 18119 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2718.883707][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2718.893920][T18119] Call Trace: [ 2718.897196][T18119] [ 2718.900185][T18119] dump_stack_lvl+0xd6/0x122 [ 2718.904787][T18119] dump_stack+0x11/0x12 [ 2718.909021][T18119] dump_header+0x98/0x410 [ 2718.913362][T18119] oom_kill_process+0x100/0x550 [ 2718.918235][T18119] out_of_memory+0x620/0x880 [ 2718.922882][T18119] mem_cgroup_oom+0x475/0x4f0 [ 2718.927581][T18119] try_charge_memcg+0x746/0x960 [ 2718.932476][T18119] ? debug_smp_processor_id+0x13/0x20 [ 2718.937871][T18119] ? delay_tsc+0xc1/0xe0 [ 2718.942138][T18119] __memcg_kmem_charge_page+0x2e4/0x480 [ 2718.947777][T18119] __alloc_pages+0x1c1/0x340 [ 2718.952459][T18119] alloc_pages+0x34d/0x450 [ 2718.956890][T18119] __vmalloc_node_range+0x730/0xef0 [ 2718.962117][T18119] kvmalloc_node+0xf3/0x140 [ 2718.966656][T18119] ? xt_alloc_table_info+0x39/0x70 [ 2718.971896][T18119] xt_alloc_table_info+0x39/0x70 [ 2718.976850][T18119] do_ip6t_set_ctl+0x645/0x1790 [ 2718.981715][T18119] ? rmqueue_pcplist+0x157/0x1e0 [ 2718.986699][T18119] ? rmqueue+0x4a/0xbc0 [ 2718.990863][T18119] ? page_counter_cancel+0xa4/0x1f0 [ 2718.996078][T18119] nf_setsockopt+0x1a6/0x1c0 [ 2719.000687][T18119] ipv6_setsockopt+0x2724/0x2a90 [ 2719.005701][T18119] ? _raw_spin_unlock+0x2d/0x50 [ 2719.010553][T18119] ? finish_task_switch+0xc5/0x260 [ 2719.015696][T18119] ? __schedule+0x50d/0x6e0 [ 2719.020195][T18119] ? schedule+0x5b/0x80 [ 2719.024512][T18119] ? futex_wait_queue+0x11c/0x160 [ 2719.029577][T18119] ? __rcu_read_unlock+0x4a/0x70 [ 2719.034510][T18119] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2719.039907][T18119] ? avc_has_perm+0x6b/0x150 [ 2719.044514][T18119] ? avc_has_perm+0xd0/0x150 [ 2719.049105][T18119] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2719.055459][T18119] ? selinux_socket_setsockopt+0x145/0x170 [ 2719.061313][T18119] udpv6_setsockopt+0x85/0x90 [ 2719.066025][T18119] sock_common_setsockopt+0x5d/0x70 [ 2719.071290][T18119] ? sock_common_recvmsg+0xe0/0xe0 [ 2719.076457][T18119] __sys_setsockopt+0x212/0x2b0 [ 2719.081378][T18119] __x64_sys_setsockopt+0x62/0x70 [ 2719.086416][T18119] do_syscall_64+0x2b/0x70 [ 2719.090904][T18119] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2719.096796][T18119] RIP: 0033:0x7f53e730f209 [ 2719.101291][T18119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2719.121168][T18119] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2719.129591][T18119] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2719.137558][T18119] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2719.145521][T18119] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2719.153491][T18119] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2719.161500][T18119] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2719.169528][T18119] [ 2719.172683][T18119] memory: usage 307184kB, limit 307200kB, failcnt 34893 [ 2719.179638][T18119] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2719.186485][T18119] Memory cgroup stats for /syz2: [ 2719.197860][T18119] anon 122880 [ 2719.197860][T18119] file 53248 [ 2719.197860][T18119] kernel 314380288 [ 2719.197860][T18119] kernel_stack 16384 [ 2719.197860][T18119] pagetables 77824 [ 2719.197860][T18119] percpu 1184 [ 2719.197860][T18119] sock 0 [ 2719.197860][T18119] vmalloc 0 [ 2719.197860][T18119] shmem 49152 [ 2719.197860][T18119] file_mapped 49152 [ 2719.197860][T18119] file_dirty 4096 [ 2719.197860][T18119] file_writeback 0 [ 2719.197860][T18119] swapcached 0 [ 2719.197860][T18119] inactive_anon 139264 [ 2719.197860][T18119] active_anon 32768 [ 2719.197860][T18119] inactive_file 4096 [ 2719.197860][T18119] active_file 0 [ 2719.197860][T18119] unevictable 0 [ 2719.197860][T18119] slab_reclaimable 22376 [ 2719.197860][T18119] slab_unreclaimable 208184 [ 2719.197860][T18119] slab 230560 [ 2719.197860][T18119] workingset_refault_anon 0 [ 2719.197860][T18119] workingset_refault_file 115 [ 2719.197860][T18119] workingset_activate_anon 0 [ 2719.197860][T18119] workingset_activate_file 0 [ 2719.293439][T18119] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18118,uid=0 [ 2719.308901][T18119] Memory cgroup out of memory: Killed process 18119 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xa], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:14 executing program 1: socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xffffffff], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0xff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'sit0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x0, 0x3}, {0x0, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x2f8, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:14 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x14], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x378, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 18:40:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socketpair(0x5, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x1c880, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x25, 0x3, "92296230a074ca032497f95c30dd6389ca011b66bd557c84bbaafdda866f37abfa"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "f6c45a4ac06d18f9bb80b80a311f5872d2bdf36dacab6648518a8d4f292e20d02f4cfec05cebb6911b897cf3743d786d28"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040890) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r4}, 0xc) 18:40:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x370, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x12a83], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 2720.295733][T18147] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2720.309342][T18147] CPU: 1 PID: 18147 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2720.320024][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2720.330080][T18147] Call Trace: [ 2720.333477][T18147] [ 2720.336413][T18147] dump_stack_lvl+0xd6/0x122 [ 2720.341029][T18147] dump_stack+0x11/0x12 [ 2720.345232][T18147] dump_header+0x98/0x410 [ 2720.349578][T18147] oom_kill_process+0x100/0x550 [ 2720.354496][T18147] out_of_memory+0x620/0x880 [ 2720.359104][T18147] mem_cgroup_oom+0x475/0x4f0 [ 2720.363791][T18147] try_charge_memcg+0x746/0x960 [ 2720.368700][T18147] ? debug_smp_processor_id+0x13/0x20 [ 2720.374164][T18147] ? delay_tsc+0xc1/0xe0 [ 2720.378427][T18147] __memcg_kmem_charge_page+0x2e4/0x480 [ 2720.383970][T18147] __alloc_pages+0x1c1/0x340 [ 2720.388607][T18147] alloc_pages+0x34d/0x450 [ 2720.393019][T18147] __vmalloc_node_range+0x730/0xef0 [ 2720.398220][T18147] kvmalloc_node+0xf3/0x140 [ 2720.402749][T18147] ? xt_alloc_table_info+0x39/0x70 [ 2720.407862][T18147] xt_alloc_table_info+0x39/0x70 [ 2720.412840][T18147] do_ip6t_set_ctl+0x645/0x1790 [ 2720.417699][T18147] ? rmqueue_pcplist+0x157/0x1e0 [ 2720.422633][T18147] ? rmqueue+0x4a/0xbc0 [ 2720.426789][T18147] nf_setsockopt+0x1a6/0x1c0 [ 2720.431377][T18147] ipv6_setsockopt+0x2724/0x2a90 [ 2720.436384][T18147] ? rb_insert_color+0x2b5/0x2c0 [ 2720.441329][T18147] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2720.446980][T18147] ? debug_smp_processor_id+0x13/0x20 [ 2720.452352][T18147] ? resched_curr+0x1d/0xc0 [ 2720.457114][T18147] ? check_preempt_wakeup+0x1c4/0x380 [ 2720.462546][T18147] ? __rcu_read_unlock+0x4a/0x70 [ 2720.467480][T18147] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2720.472928][T18147] ? avc_has_perm+0x6b/0x150 [ 2720.477576][T18147] ? avc_has_perm+0xd0/0x150 [ 2720.482173][T18147] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2720.488553][T18147] ? selinux_socket_setsockopt+0x145/0x170 [ 2720.494391][T18147] udpv6_setsockopt+0x85/0x90 [ 2720.499138][T18147] sock_common_setsockopt+0x5d/0x70 [ 2720.504386][T18147] ? sock_common_recvmsg+0xe0/0xe0 [ 2720.509524][T18147] __sys_setsockopt+0x212/0x2b0 [ 2720.514498][T18147] __x64_sys_setsockopt+0x62/0x70 [ 2720.519522][T18147] do_syscall_64+0x2b/0x70 [ 2720.523978][T18147] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2720.529891][T18147] RIP: 0033:0x7f53e730f209 [ 2720.534378][T18147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2720.553982][T18147] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2720.562390][T18147] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2720.570397][T18147] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2720.578360][T18147] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2720.586375][T18147] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2720.594351][T18147] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2720.602319][T18147] [ 2720.605477][T18147] memory: usage 307184kB, limit 307200kB, failcnt 34956 [ 2720.612447][T18147] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2720.619345][T18147] Memory cgroup stats for /syz2: [ 2720.764550][T18147] anon 122880 [ 2720.764550][T18147] file 53248 [ 2720.764550][T18147] kernel 314380288 [ 2720.764550][T18147] kernel_stack 16384 [ 2720.764550][T18147] pagetables 77824 [ 2720.764550][T18147] percpu 1184 [ 2720.764550][T18147] sock 0 [ 2720.764550][T18147] vmalloc 0 [ 2720.764550][T18147] shmem 49152 [ 2720.764550][T18147] file_mapped 49152 [ 2720.764550][T18147] file_dirty 4096 [ 2720.764550][T18147] file_writeback 0 [ 2720.764550][T18147] swapcached 0 [ 2720.764550][T18147] inactive_anon 139264 [ 2720.764550][T18147] active_anon 32768 [ 2720.764550][T18147] inactive_file 0 [ 2720.764550][T18147] active_file 4096 [ 2720.764550][T18147] unevictable 0 [ 2720.764550][T18147] slab_reclaimable 22376 [ 2720.764550][T18147] slab_unreclaimable 208184 [ 2720.764550][T18147] slab 230560 [ 2720.764550][T18147] workingset_refault_anon 0 [ 2720.764550][T18147] workingset_refault_file 115 [ 2720.764550][T18147] workingset_activate_anon 0 [ 2720.764550][T18147] workingset_activate_file 0 [ 2720.859805][T18147] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18146,uid=0 [ 2720.875186][T18147] Memory cgroup out of memory: Killed process 18147 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xc], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x1802, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socketpair(0x5, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x1c880, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x25, 0x3, "92296230a074ca032497f95c30dd6389ca011b66bd557c84bbaafdda866f37abfa"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "f6c45a4ac06d18f9bb80b80a311f5872d2bdf36dacab6648518a8d4f292e20d02f4cfec05cebb6911b897cf3743d786d28"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040890) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r4}, 0xc) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) socketpair(0x5, 0x5, 0x0, &(0x7f0000000440)) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x1c880, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x25, 0x3, "92296230a074ca032497f95c30dd6389ca011b66bd557c84bbaafdda866f37abfa"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "f6c45a4ac06d18f9bb80b80a311f5872d2bdf36dacab6648518a8d4f292e20d02f4cfec05cebb6911b897cf3743d786d28"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040890) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r4}, 0xc) (async) 18:40:16 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x26], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffff01f8, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x2001, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:16 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) socketpair(0x5, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x1c880, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xbc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x25, 0x3, "92296230a074ca032497f95c30dd6389ca011b66bd557c84bbaafdda866f37abfa"}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "f6c45a4ac06d18f9bb80b80a311f5872d2bdf36dacab6648518a8d4f292e20d02f4cfec05cebb6911b897cf3743d786d28"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040890) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) (async, rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r4}, 0xc) (rerun: 32) 18:40:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x7003, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:16 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0xd000, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:16 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 2721.297811][T18166] ================================================================== [ 2721.305919][T18166] BUG: KCSAN: data-race in drain_all_stock / refill_stock [ 2721.313040][T18166] [ 2721.315361][T18166] read-write to 0xffff888237d283b0 of 4 bytes by task 18168 on cpu 1: [ 2721.323598][T18166] refill_stock+0xcf/0x130 [ 2721.328020][T18166] obj_cgroup_uncharge_pages+0x75/0x130 [ 2721.333573][T18166] __memcg_kmem_uncharge_page+0x4f/0x100 [ 2721.339207][T18166] free_pcp_prepare+0x5e/0x1d0 [ 2721.344498][T18166] free_unref_page+0x23/0x100 [ 2721.349190][T18166] __vunmap+0x615/0x750 [ 2721.353357][T18166] __vmalloc_node_range+0xdfd/0xef0 [ 2721.358578][T18166] kvmalloc_node+0xf3/0x140 [ 2721.363092][T18166] xt_alloc_table_info+0x39/0x70 [ 2721.368041][T18166] do_ip6t_set_ctl+0x645/0x1790 [ 2721.372901][T18166] nf_setsockopt+0x1a6/0x1c0 [ 2721.377501][T18166] ipv6_setsockopt+0x2724/0x2a90 [ 2721.382449][T18166] udpv6_setsockopt+0x85/0x90 [ 2721.387132][T18166] sock_common_setsockopt+0x5d/0x70 [ 2721.392340][T18166] __sys_setsockopt+0x212/0x2b0 [ 2721.397208][T18166] __x64_sys_setsockopt+0x62/0x70 [ 2721.402251][T18166] do_syscall_64+0x2b/0x70 [ 2721.406677][T18166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2721.412587][T18166] [ 2721.414914][T18166] read to 0xffff888237d283b0 of 4 bytes by task 18166 on cpu 0: [ 2721.422548][T18166] drain_all_stock+0xb5/0x2e0 [ 2721.427262][T18166] try_charge_memcg+0x68a/0x960 [ 2721.432123][T18166] __memcg_kmem_charge_page+0x2e4/0x480 [ 2721.437690][T18166] __alloc_pages+0x1c1/0x340 [ 2721.442298][T18166] alloc_pages+0x34d/0x450 [ 2721.446728][T18166] __vmalloc_node_range+0x730/0xef0 [ 2721.451947][T18166] kvmalloc_node+0xf3/0x140 [ 2721.456462][T18166] xt_alloc_table_info+0x39/0x70 [ 2721.461416][T18166] do_ip6t_set_ctl+0x645/0x1790 [ 2721.466276][T18166] nf_setsockopt+0x1a6/0x1c0 [ 2721.470877][T18166] ipv6_setsockopt+0x2724/0x2a90 [ 2721.475820][T18166] udpv6_setsockopt+0x85/0x90 [ 2721.480507][T18166] sock_common_setsockopt+0x5d/0x70 [ 2721.485710][T18166] __sys_setsockopt+0x212/0x2b0 [ 2721.490665][T18166] __x64_sys_setsockopt+0x62/0x70 [ 2721.495701][T18166] do_syscall_64+0x2b/0x70 [ 2721.500124][T18166] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2721.506023][T18166] [ 2721.508353][T18166] value changed: 0x0000000b -> 0x00000012 [ 2721.514157][T18166] [ 2721.516482][T18166] Reported by Kernel Concurrency Sanitizer on: [ 2721.522715][T18166] CPU: 0 PID: 18166 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2721.533396][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2721.543459][T18166] ================================================================== [ 2721.822800][T18168] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2721.836360][T18168] CPU: 0 PID: 18168 Comm: syz-executor.0 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2721.847102][T18168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2721.857331][T18168] Call Trace: [ 2721.860618][T18168] [ 2721.863558][T18168] dump_stack_lvl+0xd6/0x122 [ 2721.868167][T18168] dump_stack+0x11/0x12 [ 2721.872416][T18168] dump_header+0x98/0x410 [ 2721.876820][T18168] oom_kill_process+0x100/0x550 [ 2721.881685][T18168] out_of_memory+0x620/0x880 [ 2721.886300][T18168] mem_cgroup_oom+0x475/0x4f0 [ 2721.890991][T18168] try_charge_memcg+0x746/0x960 [ 2721.895851][T18168] ? debug_smp_processor_id+0x13/0x20 [ 2721.901281][T18168] __memcg_kmem_charge_page+0x2e4/0x480 [ 2721.906852][T18168] __alloc_pages+0x1c1/0x340 [ 2721.911460][T18168] alloc_pages+0x34d/0x450 [ 2721.915927][T18168] __vmalloc_node_range+0x730/0xef0 [ 2721.921142][T18168] kvmalloc_node+0xf3/0x140 [ 2721.925713][T18168] ? xt_alloc_table_info+0x39/0x70 [ 2721.930841][T18168] xt_alloc_table_info+0x39/0x70 [ 2721.935810][T18168] do_ip6t_set_ctl+0x645/0x1790 [ 2721.940756][T18168] ? rmqueue_pcplist+0x157/0x1e0 [ 2721.945691][T18168] ? rmqueue+0x4a/0xbc0 [ 2721.949879][T18168] nf_setsockopt+0x1a6/0x1c0 [ 2721.954494][T18168] ipv6_setsockopt+0x2724/0x2a90 [ 2721.959443][T18168] ? _raw_spin_unlock+0x2d/0x50 [ 2721.964288][T18168] ? finish_task_switch+0xc5/0x260 [ 2721.969404][T18168] ? __schedule+0x50d/0x6e0 [ 2721.973944][T18168] ? schedule+0x5b/0x80 [ 2721.978114][T18168] ? futex_wait_queue+0x11c/0x160 [ 2721.983165][T18168] ? __rcu_read_unlock+0x4a/0x70 [ 2721.988132][T18168] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2721.993522][T18168] ? avc_has_perm+0x6b/0x150 [ 2721.998150][T18168] ? avc_has_perm+0xd0/0x150 [ 2722.002739][T18168] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2722.009104][T18168] ? selinux_socket_setsockopt+0x145/0x170 [ 2722.014909][T18168] udpv6_setsockopt+0x85/0x90 [ 2722.019751][T18168] sock_common_setsockopt+0x5d/0x70 [ 2722.025044][T18168] ? sock_common_recvmsg+0xe0/0xe0 [ 2722.030151][T18168] __sys_setsockopt+0x212/0x2b0 [ 2722.035018][T18168] __x64_sys_setsockopt+0x62/0x70 [ 2722.040200][T18168] do_syscall_64+0x2b/0x70 [ 2722.044711][T18168] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2722.050691][T18168] RIP: 0033:0x7f8c94f73209 [ 2722.055108][T18168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2722.074805][T18168] RSP: 002b:00007f8c946e9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2722.083279][T18168] RAX: ffffffffffffffda RBX: 00007f8c95085f60 RCX: 00007f8c94f73209 [ 2722.091246][T18168] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2722.099292][T18168] RBP: 00007f8c94fcd161 R08: 0000000000000428 R09: 0000000000000000 [ 2722.107260][T18168] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2722.115226][T18168] R13: 00007ffd7502a81f R14: 00007f8c946e9300 R15: 0000000000022000 [ 2722.123267][T18168] [ 2722.126463][T18168] memory: usage 307184kB, limit 307200kB, failcnt 1491 [ 2722.133362][T18168] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2722.140233][T18168] Memory cgroup stats for /syz0: [ 2722.146911][T18168] anon 126976 [ 2722.146911][T18168] file 45056 [ 2722.146911][T18168] kernel 314384384 [ 2722.146911][T18168] kernel_stack 16384 [ 2722.146911][T18168] pagetables 77824 [ 2722.146911][T18168] percpu 1184 [ 2722.146911][T18168] sock 0 [ 2722.146911][T18168] vmalloc 0 [ 2722.146911][T18168] shmem 40960 [ 2722.146911][T18168] file_mapped 40960 [ 2722.146911][T18168] file_dirty 4096 [ 2722.146911][T18168] file_writeback 0 [ 2722.146911][T18168] swapcached 0 [ 2722.146911][T18168] inactive_anon 126976 [ 2722.146911][T18168] active_anon 40960 [ 2722.146911][T18168] inactive_file 0 [ 2722.146911][T18168] active_file 4096 [ 2722.146911][T18168] unevictable 0 [ 2722.146911][T18168] slab_reclaimable 132608 [ 2722.146911][T18168] slab_unreclaimable 942736 [ 2722.146911][T18168] slab 1075344 [ 2722.146911][T18168] workingset_refault_anon 0 [ 2722.146911][T18168] workingset_refault_file 131 [ 2722.146911][T18168] workingset_activate_anon 0 [ 2722.146911][T18168] workingset_activate_file 0 [ 2722.242452][T18168] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18165,uid=0 18:40:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x26], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x22) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0xf802, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:17 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0xfe], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2722.258079][T18168] Memory cgroup out of memory: Killed process 18168 (syz-executor.0) total-vm:48360kB, anon-rss:424kB, file-rss:8912kB, shmem-rss:72kB, UID:0 pgtables:80kB oom_score_adj:1000 18:40:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x26], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x1000000, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x22) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x3, 0x22) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:17 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:17 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x22) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x3, 0x22) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:17 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x2000000, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2723.062831][T18206] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2723.076427][T18206] CPU: 1 PID: 18206 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2723.087184][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2723.097250][T18206] Call Trace: [ 2723.100550][T18206] [ 2723.103561][T18206] dump_stack_lvl+0xd6/0x122 [ 2723.108237][T18206] dump_stack+0x11/0x12 [ 2723.112438][T18206] dump_header+0x98/0x410 [ 2723.117027][T18206] oom_kill_process+0x100/0x550 [ 2723.121895][T18206] out_of_memory+0x620/0x880 [ 2723.126501][T18206] mem_cgroup_oom+0x475/0x4f0 [ 2723.131250][T18206] try_charge_memcg+0x746/0x960 [ 2723.136123][T18206] ? debug_smp_processor_id+0x13/0x20 [ 2723.141517][T18206] ? delay_tsc+0xc1/0xe0 [ 2723.145797][T18206] __memcg_kmem_charge_page+0x2e4/0x480 [ 2723.151425][T18206] __alloc_pages+0x1c1/0x340 [ 2723.156031][T18206] alloc_pages+0x34d/0x450 [ 2723.160585][T18206] __vmalloc_node_range+0x730/0xef0 [ 2723.165800][T18206] kvmalloc_node+0xf3/0x140 [ 2723.170318][T18206] ? xt_alloc_table_info+0x39/0x70 [ 2723.175508][T18206] xt_alloc_table_info+0x39/0x70 [ 2723.180463][T18206] do_ip6t_set_ctl+0x645/0x1790 [ 2723.185370][T18206] ? rmqueue_pcplist+0x157/0x1e0 [ 2723.190345][T18206] ? rmqueue+0x4a/0xbc0 [ 2723.194506][T18206] ? page_counter_cancel+0xa4/0x1f0 [ 2723.199730][T18206] nf_setsockopt+0x1a6/0x1c0 [ 2723.204333][T18206] ipv6_setsockopt+0x2724/0x2a90 [ 2723.209275][T18206] ? _raw_spin_unlock+0x2d/0x50 [ 2723.214221][T18206] ? finish_task_switch+0xc5/0x260 [ 2723.219368][T18206] ? __schedule+0x50d/0x6e0 [ 2723.223943][T18206] ? schedule+0x5b/0x80 [ 2723.228227][T18206] ? futex_wait_queue+0x11c/0x160 [ 2723.233297][T18206] ? __rcu_read_unlock+0x4a/0x70 [ 2723.238282][T18206] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2723.243655][T18206] ? avc_has_perm+0x6b/0x150 [ 2723.248271][T18206] ? avc_has_perm+0xd0/0x150 [ 2723.252926][T18206] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2723.259289][T18206] ? selinux_socket_setsockopt+0x145/0x170 [ 2723.265109][T18206] udpv6_setsockopt+0x85/0x90 [ 2723.269815][T18206] sock_common_setsockopt+0x5d/0x70 [ 2723.275072][T18206] ? sock_common_recvmsg+0xe0/0xe0 [ 2723.280184][T18206] __sys_setsockopt+0x212/0x2b0 [ 2723.285066][T18206] __x64_sys_setsockopt+0x62/0x70 [ 2723.290094][T18206] do_syscall_64+0x2b/0x70 [ 2723.294548][T18206] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2723.300461][T18206] RIP: 0033:0x7f53e730f209 [ 2723.304988][T18206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2723.324656][T18206] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2723.333219][T18206] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2723.341184][T18206] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2723.349149][T18206] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2723.357115][T18206] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2723.365134][T18206] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2723.373167][T18206] [ 2723.376383][T18206] memory: usage 307184kB, limit 307200kB, failcnt 35028 [ 2723.383389][T18206] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2723.390260][T18206] Memory cgroup stats for /syz2: [ 2723.486904][T18206] anon 122880 [ 2723.486904][T18206] file 53248 [ 2723.486904][T18206] kernel 314380288 [ 2723.486904][T18206] kernel_stack 16384 [ 2723.486904][T18206] pagetables 77824 [ 2723.486904][T18206] percpu 1184 [ 2723.486904][T18206] sock 0 [ 2723.486904][T18206] vmalloc 0 [ 2723.486904][T18206] shmem 49152 [ 2723.486904][T18206] file_mapped 49152 [ 2723.486904][T18206] file_dirty 0 [ 2723.486904][T18206] file_writeback 0 [ 2723.486904][T18206] swapcached 0 [ 2723.486904][T18206] inactive_anon 139264 [ 2723.486904][T18206] active_anon 32768 [ 2723.486904][T18206] inactive_file 4096 [ 2723.486904][T18206] active_file 0 [ 2723.486904][T18206] unevictable 0 [ 2723.486904][T18206] slab_reclaimable 22376 [ 2723.486904][T18206] slab_unreclaimable 201520 [ 2723.486904][T18206] slab 223896 [ 2723.486904][T18206] workingset_refault_anon 0 [ 2723.486904][T18206] workingset_refault_file 115 [ 2723.486904][T18206] workingset_activate_anon 0 [ 2723.486904][T18206] workingset_activate_file 0 [ 2723.581761][T18206] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18204,uid=0 [ 2723.597283][T18206] Memory cgroup out of memory: Killed process 18206 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xfe], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:19 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x25, 0xc5cc7eff7d643eff}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x4000000, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x300], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x8000000, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:19 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x25, 0xc5cc7eff7d643eff}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x25, 0xc5cc7eff7d643eff}, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:19 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:19 executing program 1: getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r0, 0x25, 0xc5cc7eff7d643eff}, 0x10) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x18020000, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2724.315476][T18230] syz-executor.5 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2724.329073][T18230] CPU: 0 PID: 18230 Comm: syz-executor.5 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2724.339742][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2724.349956][T18230] Call Trace: [ 2724.353298][T18230] [ 2724.356254][T18230] dump_stack_lvl+0xd6/0x122 [ 2724.360989][T18230] dump_stack+0x11/0x12 [ 2724.365174][T18230] dump_header+0x98/0x410 [ 2724.369490][T18230] oom_kill_process+0x100/0x550 [ 2724.374372][T18230] out_of_memory+0x620/0x880 [ 2724.378966][T18230] mem_cgroup_oom+0x475/0x4f0 [ 2724.383685][T18230] try_charge_memcg+0x746/0x960 [ 2724.388532][T18230] ? debug_smp_processor_id+0x13/0x20 [ 2724.393921][T18230] ? delay_tsc+0xc1/0xe0 [ 2724.398209][T18230] __memcg_kmem_charge_page+0x2e4/0x480 [ 2724.403888][T18230] __alloc_pages+0x1c1/0x340 [ 2724.408465][T18230] alloc_pages+0x34d/0x450 [ 2724.412934][T18230] __vmalloc_node_range+0x730/0xef0 [ 2724.418220][T18230] kvmalloc_node+0xf3/0x140 [ 2724.422724][T18230] ? xt_alloc_table_info+0x39/0x70 [ 2724.427834][T18230] xt_alloc_table_info+0x39/0x70 [ 2724.432831][T18230] do_ip6t_set_ctl+0x645/0x1790 [ 2724.437777][T18230] ? rmqueue_pcplist+0x157/0x1e0 [ 2724.442722][T18230] ? rmqueue+0x4a/0xbc0 [ 2724.446961][T18230] nf_setsockopt+0x1a6/0x1c0 [ 2724.451593][T18230] ipv6_setsockopt+0x2724/0x2a90 [ 2724.456528][T18230] ? rb_insert_color+0x2b5/0x2c0 [ 2724.461502][T18230] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2724.467056][T18230] ? debug_smp_processor_id+0x13/0x20 [ 2724.472432][T18230] ? resched_curr+0x1d/0xc0 [ 2724.476926][T18230] ? check_preempt_wakeup+0x1c4/0x380 [ 2724.482306][T18230] ? __rcu_read_unlock+0x4a/0x70 [ 2724.487294][T18230] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2724.492709][T18230] ? avc_has_perm+0x6b/0x150 [ 2724.497285][T18230] ? avc_has_perm+0xd0/0x150 [ 2724.501871][T18230] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2724.508228][T18230] ? selinux_socket_setsockopt+0x145/0x170 [ 2724.514014][T18230] udpv6_setsockopt+0x85/0x90 [ 2724.518720][T18230] sock_common_setsockopt+0x5d/0x70 [ 2724.523900][T18230] ? sock_common_recvmsg+0xe0/0xe0 [ 2724.529069][T18230] __sys_setsockopt+0x212/0x2b0 [ 2724.533905][T18230] __x64_sys_setsockopt+0x62/0x70 [ 2724.538915][T18230] do_syscall_64+0x2b/0x70 [ 2724.543358][T18230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2724.549238][T18230] RIP: 0033:0x7f1d726c3209 [ 2724.553689][T18230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2724.573279][T18230] RSP: 002b:00007f1d71e39168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2724.581671][T18230] RAX: ffffffffffffffda RBX: 00007f1d727d5f60 RCX: 00007f1d726c3209 [ 2724.589630][T18230] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2724.597600][T18230] RBP: 00007f1d7271d161 R08: 0000000000000428 R09: 0000000000000000 [ 2724.605585][T18230] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2724.613572][T18230] R13: 00007ffc4cfaaeff R14: 00007f1d71e39300 R15: 0000000000022000 [ 2724.621537][T18230] [ 2724.624696][T18230] memory: usage 307184kB, limit 307200kB, failcnt 14118 [ 2724.631723][T18230] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2724.638640][T18230] Memory cgroup stats for /syz5: [ 2724.640138][T18230] anon 126976 [ 2724.640138][T18230] file 40960 [ 2724.640138][T18230] kernel 314388480 [ 2724.640138][T18230] kernel_stack 16384 [ 2724.640138][T18230] pagetables 73728 [ 2724.640138][T18230] percpu 5920 [ 2724.640138][T18230] sock 0 [ 2724.640138][T18230] vmalloc 0 [ 2724.640138][T18230] shmem 40960 [ 2724.640138][T18230] file_mapped 40960 [ 2724.640138][T18230] file_dirty 0 [ 2724.640138][T18230] file_writeback 0 [ 2724.640138][T18230] swapcached 0 [ 2724.640138][T18230] inactive_anon 131072 [ 2724.640138][T18230] active_anon 36864 [ 2724.640138][T18230] inactive_file 0 [ 2724.640138][T18230] active_file 0 [ 2724.640138][T18230] unevictable 0 [ 2724.640138][T18230] slab_reclaimable 30960 [ 2724.640138][T18230] slab_unreclaimable 403584 [ 2724.640138][T18230] slab 434544 [ 2724.640138][T18230] workingset_refault_anon 0 [ 2724.640138][T18230] workingset_refault_file 178 [ 2724.640138][T18230] workingset_activate_anon 0 [ 2724.640138][T18230] workingset_activate_file 0 [ 2724.734943][T18230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18226,uid=0 [ 2724.750295][T18230] Memory cgroup out of memory: Killed process 18230 (syz-executor.5) total-vm:46312kB, anon-rss:420kB, file-rss:8912kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000 18:40:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x300], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:40:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x20010000, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:20 executing program 1: socket$inet6(0xa, 0x800, 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x400100, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r4, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x20, 0x50f5, 0x9, {{0x32, 0x4, 0x1, 0x2c, 0xc8, 0x65, 0x0, 0xee, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x7, [{@broadcast, 0x3f}, {@rand_addr=0x64010102, 0x81}, {@loopback, 0x5}, {@multicast2, 0xfffffffa}, {@broadcast, 0xbf09}, {@remote, 0x3f}]}, @generic={0x94, 0x3, "fa"}, @rr={0x7, 0xb, 0x34, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}, @timestamp={0x44, 0x8, 0xdc, 0x0, 0xf, [0x7]}, @timestamp={0x44, 0x20, 0x69, 0x0, 0x7, [0x5, 0x3, 0x3ff, 0x80000000, 0x3, 0x2, 0x6]}, @generic={0x82, 0xa, "3d0c342f3573a336"}, @lsrr={0x83, 0xf, 0xc5, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0x5b, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8710, 0x10, 0x800, 0xc3, {{0x10, 0x4, 0x1, 0x20, 0x40, 0x67, 0x0, 0x20, 0x29, 0x0, @broadcast, @remote, {[@noop, @end, @ssrr={0x89, 0x7, 0x18, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @multicast2, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x6c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x4808) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0xd0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x700], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x70030000, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:20 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:20 executing program 1: socket$inet6(0xa, 0x800, 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x400100, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r4, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x20, 0x50f5, 0x9, {{0x32, 0x4, 0x1, 0x2c, 0xc8, 0x65, 0x0, 0xee, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x7, [{@broadcast, 0x3f}, {@rand_addr=0x64010102, 0x81}, {@loopback, 0x5}, {@multicast2, 0xfffffffa}, {@broadcast, 0xbf09}, {@remote, 0x3f}]}, @generic={0x94, 0x3, "fa"}, @rr={0x7, 0xb, 0x34, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}, @timestamp={0x44, 0x8, 0xdc, 0x0, 0xf, [0x7]}, @timestamp={0x44, 0x20, 0x69, 0x0, 0x7, [0x5, 0x3, 0x3ff, 0x80000000, 0x3, 0x2, 0x6]}, @generic={0x82, 0xa, "3d0c342f3573a336"}, @lsrr={0x83, 0xf, 0xc5, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0x5b, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8710, 0x10, 0x800, 0xc3, {{0x10, 0x4, 0x1, 0x20, 0x40, 0x67, 0x0, 0x20, 0x29, 0x0, @broadcast, @remote, {[@noop, @end, @ssrr={0x89, 0x7, 0x18, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @multicast2, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x6c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x4808) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0xd0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x800, 0x8) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x400100, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r4, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x20, 0x50f5, 0x9, {{0x32, 0x4, 0x1, 0x2c, 0xc8, 0x65, 0x0, 0xee, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x7, [{@broadcast, 0x3f}, {@rand_addr=0x64010102, 0x81}, {@loopback, 0x5}, {@multicast2, 0xfffffffa}, {@broadcast, 0xbf09}, {@remote, 0x3f}]}, @generic={0x94, 0x3, "fa"}, @rr={0x7, 0xb, 0x34, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}, @timestamp={0x44, 0x8, 0xdc, 0x0, 0xf, [0x7]}, @timestamp={0x44, 0x20, 0x69, 0x0, 0x7, [0x5, 0x3, 0x3ff, 0x80000000, 0x3, 0x2, 0x6]}, @generic={0x82, 0xa, "3d0c342f3573a336"}, @lsrr={0x83, 0xf, 0xc5, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0x5b, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8710, 0x10, 0x800, 0xc3, {{0x10, 0x4, 0x1, 0x20, 0x40, 0x67, 0x0, 0x20, 0x29, 0x0, @broadcast, @remote, {[@noop, @end, @ssrr={0x89, 0x7, 0x18, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @multicast2, @private=0xa010100]}]}}}}}) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x6c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x4808) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0xd0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:20 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0xd0000000, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2725.478300][T18262] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2725.491870][T18262] CPU: 0 PID: 18262 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2725.502566][T18262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2725.512627][T18262] Call Trace: [ 2725.515907][T18262] [ 2725.518836][T18262] dump_stack_lvl+0xd6/0x122 [ 2725.523481][T18262] dump_stack+0x11/0x12 [ 2725.527633][T18262] dump_header+0x98/0x410 [ 2725.532037][T18262] oom_kill_process+0x100/0x550 [ 2725.536914][T18262] out_of_memory+0x620/0x880 [ 2725.541501][T18262] mem_cgroup_oom+0x475/0x4f0 [ 2725.546256][T18262] try_charge_memcg+0x746/0x960 [ 2725.551269][T18262] ? debug_smp_processor_id+0x13/0x20 [ 2725.556741][T18262] __memcg_kmem_charge_page+0x2e4/0x480 [ 2725.562337][T18262] __alloc_pages+0x1c1/0x340 [ 2725.566925][T18262] alloc_pages+0x34d/0x450 [ 2725.571326][T18262] __vmalloc_node_range+0x730/0xef0 [ 2725.576571][T18262] kvmalloc_node+0xf3/0x140 [ 2725.581153][T18262] ? xt_alloc_table_info+0x39/0x70 [ 2725.586263][T18262] xt_alloc_table_info+0x39/0x70 [ 2725.591233][T18262] do_ip6t_set_ctl+0x645/0x1790 [ 2725.596073][T18262] ? rmqueue_pcplist+0x157/0x1e0 [ 2725.600999][T18262] ? rmqueue+0x4a/0xbc0 [ 2725.605137][T18262] nf_setsockopt+0x1a6/0x1c0 [ 2725.609835][T18262] ipv6_setsockopt+0x2724/0x2a90 [ 2725.614761][T18262] ? rb_insert_color+0x2b5/0x2c0 [ 2725.619682][T18262] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2725.625253][T18262] ? debug_smp_processor_id+0x13/0x20 [ 2725.630644][T18262] ? resched_curr+0x1d/0xc0 [ 2725.635131][T18262] ? check_preempt_wakeup+0x1c4/0x380 [ 2725.640496][T18262] ? __rcu_read_unlock+0x4a/0x70 [ 2725.645474][T18262] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2725.650835][T18262] ? avc_has_perm+0x6b/0x150 [ 2725.655431][T18262] ? avc_has_perm+0xd0/0x150 [ 2725.660022][T18262] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2725.666344][T18262] ? selinux_socket_setsockopt+0x145/0x170 [ 2725.672133][T18262] udpv6_setsockopt+0x85/0x90 [ 2725.676798][T18262] sock_common_setsockopt+0x5d/0x70 [ 2725.682087][T18262] ? sock_common_recvmsg+0xe0/0xe0 [ 2725.687282][T18262] __sys_setsockopt+0x212/0x2b0 [ 2725.692118][T18262] __x64_sys_setsockopt+0x62/0x70 [ 2725.697185][T18262] do_syscall_64+0x2b/0x70 [ 2725.701635][T18262] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2725.707544][T18262] RIP: 0033:0x7f53e730f209 [ 2725.711975][T18262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2725.731613][T18262] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2725.740069][T18262] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2725.748023][T18262] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2725.756061][T18262] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2725.764066][T18262] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2725.772071][T18262] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2725.780025][T18262] [ 2725.783181][T18262] memory: usage 307200kB, limit 307200kB, failcnt 35161 [ 2725.790123][T18262] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2725.796972][T18262] Memory cgroup stats for /syz2: [ 2725.797795][T18262] anon 122880 [ 2725.797795][T18262] file 53248 [ 2725.797795][T18262] kernel 314376192 [ 2725.797795][T18262] kernel_stack 16384 [ 2725.797795][T18262] pagetables 77824 [ 2725.797795][T18262] percpu 1184 [ 2725.797795][T18262] sock 0 [ 2725.797795][T18262] vmalloc 0 [ 2725.797795][T18262] shmem 49152 [ 2725.797795][T18262] file_mapped 49152 [ 2725.797795][T18262] file_dirty 0 [ 2725.797795][T18262] file_writeback 0 [ 2725.797795][T18262] swapcached 0 [ 2725.797795][T18262] inactive_anon 139264 [ 2725.797795][T18262] active_anon 32768 [ 2725.797795][T18262] inactive_file 0 [ 2725.797795][T18262] active_file 4096 [ 2725.797795][T18262] unevictable 0 [ 2725.797795][T18262] slab_reclaimable 22376 [ 2725.797795][T18262] slab_unreclaimable 202792 [ 2725.797795][T18262] slab 225168 [ 2725.797795][T18262] workingset_refault_anon 0 [ 2725.797795][T18262] workingset_refault_file 115 [ 2725.797795][T18262] workingset_activate_anon 0 [ 2725.797795][T18262] workingset_activate_file 0 [ 2725.892733][T18262] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18261,uid=0 [ 2725.908122][T18262] Memory cgroup out of memory: Killed process 18262 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x36a], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:21 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:21 executing program 1: socket$inet6(0xa, 0x800, 0x8) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x400100, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001780)={0x40, r4, 0xc01, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x40}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x20, 0x50f5, 0x9, {{0x32, 0x4, 0x1, 0x2c, 0xc8, 0x65, 0x0, 0xee, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x7, [{@broadcast, 0x3f}, {@rand_addr=0x64010102, 0x81}, {@loopback, 0x5}, {@multicast2, 0xfffffffa}, {@broadcast, 0xbf09}, {@remote, 0x3f}]}, @generic={0x94, 0x3, "fa"}, @rr={0x7, 0xb, 0x34, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}, @timestamp={0x44, 0x8, 0xdc, 0x0, 0xf, [0x7]}, @timestamp={0x44, 0x20, 0x69, 0x0, 0x7, [0x5, 0x3, 0x3ff, 0x80000000, 0x3, 0x2, 0x6]}, @generic={0x82, 0xa, "3d0c342f3573a336"}, @lsrr={0x83, 0xf, 0xc5, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x23, 0x5b, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp_addr={0x44, 0xc, 0xa5, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x8710, 0x10, 0x800, 0xc3, {{0x10, 0x4, 0x1, 0x20, 0x40, 0x67, 0x0, 0x20, 0x29, 0x0, @broadcast, @remote, {[@noop, @end, @ssrr={0x89, 0x7, 0x18, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x95, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @multicast2, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x6c, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x4808) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0xd0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x0, 0xff000000], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x33}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0xf8020000, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:21 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0xa00], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x120, 0xd0}, {0x28}}}}, 0x428) 18:40:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x208, 0xd0, 0x208, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:21 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:21 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x2, 0xa, 0x0, 0x3, 0x59, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sec_ctx={0x5, 0x18, 0xaf, 0x8, 0x1f, "fc96b8b9a1f0e13c4d4426f3c60c6dc801858e970fd105aebea96b0baa145f"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, @sadb_x_sec_ctx={0x12, 0x18, 0x8, 0x3, 0x87, "2f111cd2c1196c0fe3df5364790b3191844093cfc2e982bec9fd742cb62ef1fde48afbd4ea0b247e467f45b55808bc518289d2b3bd317cad948572b6f9e03cfc75cb582f414d627547aa310829a0b0fcd081b67a8331b35e87fe7b47b8b8fe7d2a86be569ba2d487624ec312e83b166cc6378bfeb7db6a533bf6b939444157c403cfcd24a21ac7"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3501}, @sadb_x_sec_ctx={0x11, 0x18, 0x80, 0x6, 0x7d, "8499da67e0c376cceb8380922a473a891eb5fb85ca42a68c4c7837644b815dfb0479ef880c0ab42442995e885aaa00f5ac52ace058c7fb87ee08fff013a11d3586e272c9089b68dfd3d5031ea9688f69d9af15cf0bb21a10add3d893ef7a4eb290d4daaa22c9c8956635e184620248b127abeb155816e1ec94098c7e8c"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x3, @empty, 0x8}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bb5, 0x9, {0x6, 0x32, 0x5, 0x7, 0x0, 0x2, 0x0, @in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x43}}}, @sadb_x_sec_ctx={0x15, 0x18, 0x5, 0x3, 0x9f, "42a726a49bd88e5c9469cc9c776529d38440bff4b39e656e7af66bae23edac39970bead37c2b375d195472eb57048bb6428a7cd809bf6be3492d65815f7951b096e12a619def0fe442d81bf2ec5513dda48e6ec7e8e198368d9061bfb5585e660999e7ded7e00db2c83d321d9b2c6bf87ca42d18fcf7e5b6d6576b5e3eacdfddb8c8ce563fe33d04d95d4b89e6d275dcd0eaf9d6b1f97b31e56a09c7ce3818"}]}, 0x2c8}}, 0x4880) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8805) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0xfe], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:21 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) [ 2726.781315][T18306] syz-executor.2 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2726.794869][T18306] CPU: 1 PID: 18306 Comm: syz-executor.2 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2726.805630][T18306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2726.815700][T18306] Call Trace: [ 2726.819009][T18306] [ 2726.821936][T18306] dump_stack_lvl+0xd6/0x122 [ 2726.826542][T18306] dump_stack+0x11/0x12 [ 2726.830699][T18306] dump_header+0x98/0x410 [ 2726.835147][T18306] oom_kill_process+0x100/0x550 [ 2726.840071][T18306] out_of_memory+0x620/0x880 [ 2726.844672][T18306] mem_cgroup_oom+0x475/0x4f0 [ 2726.849372][T18306] try_charge_memcg+0x746/0x960 [ 2726.854230][T18306] ? debug_smp_processor_id+0x13/0x20 [ 2726.859617][T18306] __memcg_kmem_charge_page+0x2e4/0x480 [ 2726.865173][T18306] __alloc_pages+0x1c1/0x340 [ 2726.869796][T18306] alloc_pages+0x34d/0x450 [ 2726.874237][T18306] __vmalloc_node_range+0x730/0xef0 [ 2726.879524][T18306] kvmalloc_node+0xf3/0x140 [ 2726.884037][T18306] ? xt_alloc_table_info+0x39/0x70 [ 2726.889170][T18306] xt_alloc_table_info+0x39/0x70 [ 2726.894122][T18306] do_ip6t_set_ctl+0x645/0x1790 [ 2726.899052][T18306] ? rmqueue_pcplist+0x157/0x1e0 [ 2726.903996][T18306] ? rmqueue+0x4a/0xbc0 [ 2726.908160][T18306] nf_setsockopt+0x1a6/0x1c0 [ 2726.912759][T18306] ipv6_setsockopt+0x2724/0x2a90 [ 2726.917709][T18306] ? rb_insert_color+0x2b5/0x2c0 [ 2726.922687][T18306] ? update_cfs_rq_load_avg+0x16e/0x180 [ 2726.928241][T18306] ? debug_smp_processor_id+0x13/0x20 [ 2726.933765][T18306] ? resched_curr+0x1d/0xc0 [ 2726.938275][T18306] ? check_preempt_wakeup+0x1c4/0x380 [ 2726.943656][T18306] ? __rcu_read_unlock+0x4a/0x70 [ 2726.948616][T18306] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2726.954077][T18306] ? avc_has_perm+0x6b/0x150 [ 2726.958682][T18306] ? avc_has_perm+0xd0/0x150 [ 2726.963277][T18306] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2726.969686][T18306] ? selinux_socket_setsockopt+0x145/0x170 [ 2726.975502][T18306] udpv6_setsockopt+0x85/0x90 [ 2726.980203][T18306] sock_common_setsockopt+0x5d/0x70 [ 2726.985482][T18306] ? sock_common_recvmsg+0xe0/0xe0 [ 2726.990606][T18306] __sys_setsockopt+0x212/0x2b0 [ 2726.995502][T18306] __x64_sys_setsockopt+0x62/0x70 [ 2727.000541][T18306] do_syscall_64+0x2b/0x70 [ 2727.004968][T18306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2727.010875][T18306] RIP: 0033:0x7f53e730f209 [ 2727.015341][T18306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2727.034968][T18306] RSP: 002b:00007f53e6a85168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2727.043457][T18306] RAX: ffffffffffffffda RBX: 00007f53e7421f60 RCX: 00007f53e730f209 [ 2727.051510][T18306] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2727.059576][T18306] RBP: 00007f53e7369161 R08: 0000000000000428 R09: 0000000000000000 [ 2727.067564][T18306] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2727.075961][T18306] R13: 00007ffd35a22bcf R14: 00007f53e6a85300 R15: 0000000000022000 [ 2727.084126][T18306] [ 2727.087451][T18306] memory: usage 307184kB, limit 307200kB, failcnt 35207 [ 2727.094409][T18306] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2727.101277][T18306] Memory cgroup stats for /syz2: [ 2727.186851][T18306] anon 122880 [ 2727.186851][T18306] file 53248 [ 2727.186851][T18306] kernel 314380288 [ 2727.186851][T18306] kernel_stack 16384 [ 2727.186851][T18306] pagetables 77824 [ 2727.186851][T18306] percpu 1184 [ 2727.186851][T18306] sock 0 [ 2727.186851][T18306] vmalloc 0 [ 2727.186851][T18306] shmem 49152 [ 2727.186851][T18306] file_mapped 49152 [ 2727.186851][T18306] file_dirty 0 [ 2727.186851][T18306] file_writeback 0 [ 2727.186851][T18306] swapcached 0 [ 2727.186851][T18306] inactive_anon 139264 [ 2727.186851][T18306] active_anon 32768 [ 2727.186851][T18306] inactive_file 0 [ 2727.186851][T18306] active_file 4096 [ 2727.186851][T18306] unevictable 0 [ 2727.186851][T18306] slab_reclaimable 22376 [ 2727.186851][T18306] slab_unreclaimable 208184 [ 2727.186851][T18306] slab 230560 [ 2727.186851][T18306] workingset_refault_anon 0 [ 2727.186851][T18306] workingset_refault_file 115 [ 2727.186851][T18306] workingset_activate_anon 0 [ 2727.186851][T18306] workingset_activate_file 0 [ 2727.281920][T18306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=18305,uid=0 [ 2727.297299][T18306] Memory cgroup out of memory: Killed process 18306 (syz-executor.2) total-vm:46312kB, anon-rss:420kB, file-rss:8928kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x600], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:22 executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r1) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x2, 0xa, 0x0, 0x3, 0x59, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sec_ctx={0x5, 0x18, 0xaf, 0x8, 0x1f, "fc96b8b9a1f0e13c4d4426f3c60c6dc801858e970fd105aebea96b0baa145f"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, @sadb_x_sec_ctx={0x12, 0x18, 0x8, 0x3, 0x87, "2f111cd2c1196c0fe3df5364790b3191844093cfc2e982bec9fd742cb62ef1fde48afbd4ea0b247e467f45b55808bc518289d2b3bd317cad948572b6f9e03cfc75cb582f414d627547aa310829a0b0fcd081b67a8331b35e87fe7b47b8b8fe7d2a86be569ba2d487624ec312e83b166cc6378bfeb7db6a533bf6b939444157c403cfcd24a21ac7"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3501}, @sadb_x_sec_ctx={0x11, 0x18, 0x80, 0x6, 0x7d, "8499da67e0c376cceb8380922a473a891eb5fb85ca42a68c4c7837644b815dfb0479ef880c0ab42442995e885aaa00f5ac52ace058c7fb87ee08fff013a11d3586e272c9089b68dfd3d5031ea9688f69d9af15cf0bb21a10add3d893ef7a4eb290d4daaa22c9c8956635e184620248b127abeb155816e1ec94098c7e8c"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x3, @empty, 0x8}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bb5, 0x9, {0x6, 0x32, 0x5, 0x7, 0x0, 0x2, 0x0, @in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x43}}}, @sadb_x_sec_ctx={0x15, 0x18, 0x5, 0x3, 0x9f, "42a726a49bd88e5c9469cc9c776529d38440bff4b39e656e7af66bae23edac39970bead37c2b375d195472eb57048bb6428a7cd809bf6be3492d65815f7951b096e12a619def0fe442d81bf2ec5513dda48e6ec7e8e198368d9061bfb5585e660999e7ded7e00db2c83d321d9b2c6bf87ca42d18fcf7e5b6d6576b5e3eacdfddb8c8ce563fe33d04d95d4b89e6d275dcd0eaf9d6b1f97b31e56a09c7ce3818"}]}, 0x2c8}}, 0x4880) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8805) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) socket$inet6(0xa, 0x2, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r1) (async) syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r1) (async) pipe2$watch_queue(&(0x7f0000000500), 0x80) (async) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x2, 0xa, 0x0, 0x3, 0x59, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sec_ctx={0x5, 0x18, 0xaf, 0x8, 0x1f, "fc96b8b9a1f0e13c4d4426f3c60c6dc801858e970fd105aebea96b0baa145f"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, @sadb_x_sec_ctx={0x12, 0x18, 0x8, 0x3, 0x87, "2f111cd2c1196c0fe3df5364790b3191844093cfc2e982bec9fd742cb62ef1fde48afbd4ea0b247e467f45b55808bc518289d2b3bd317cad948572b6f9e03cfc75cb582f414d627547aa310829a0b0fcd081b67a8331b35e87fe7b47b8b8fe7d2a86be569ba2d487624ec312e83b166cc6378bfeb7db6a533bf6b939444157c403cfcd24a21ac7"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3501}, @sadb_x_sec_ctx={0x11, 0x18, 0x80, 0x6, 0x7d, "8499da67e0c376cceb8380922a473a891eb5fb85ca42a68c4c7837644b815dfb0479ef880c0ab42442995e885aaa00f5ac52ace058c7fb87ee08fff013a11d3586e272c9089b68dfd3d5031ea9688f69d9af15cf0bb21a10add3d893ef7a4eb290d4daaa22c9c8956635e184620248b127abeb155816e1ec94098c7e8c"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x3, @empty, 0x8}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bb5, 0x9, {0x6, 0x32, 0x5, 0x7, 0x0, 0x2, 0x0, @in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x43}}}, @sadb_x_sec_ctx={0x15, 0x18, 0x5, 0x3, 0x9f, "42a726a49bd88e5c9469cc9c776529d38440bff4b39e656e7af66bae23edac39970bead37c2b375d195472eb57048bb6428a7cd809bf6be3492d65815f7951b096e12a619def0fe442d81bf2ec5513dda48e6ec7e8e198368d9061bfb5585e660999e7ded7e00db2c83d321d9b2c6bf87ca42d18fcf7e5b6d6576b5e3eacdfddb8c8ce563fe33d04d95d4b89e6d275dcd0eaf9d6b1f97b31e56a09c7ce3818"}]}, 0x2c8}}, 0x4880) (async) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8805) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) 18:40:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xc8}, {0x28}}}}, 0x428) 18:40:22 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:22 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x1400], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffff0fc0, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:22 executing program 1: socket$inet6(0xa, 0x2, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0), r1) (async) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$key(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x2, 0xa, 0x0, 0x3, 0x59, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sec_ctx={0x5, 0x18, 0xaf, 0x8, 0x1f, "fc96b8b9a1f0e13c4d4426f3c60c6dc801858e970fd105aebea96b0baa145f"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, @sadb_x_sec_ctx={0x12, 0x18, 0x8, 0x3, 0x87, "2f111cd2c1196c0fe3df5364790b3191844093cfc2e982bec9fd742cb62ef1fde48afbd4ea0b247e467f45b55808bc518289d2b3bd317cad948572b6f9e03cfc75cb582f414d627547aa310829a0b0fcd081b67a8331b35e87fe7b47b8b8fe7d2a86be569ba2d487624ec312e83b166cc6378bfeb7db6a533bf6b939444157c403cfcd24a21ac7"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3501}, @sadb_x_sec_ctx={0x11, 0x18, 0x80, 0x6, 0x7d, "8499da67e0c376cceb8380922a473a891eb5fb85ca42a68c4c7837644b815dfb0479ef880c0ab42442995e885aaa00f5ac52ace058c7fb87ee08fff013a11d3586e272c9089b68dfd3d5031ea9688f69d9af15cf0bb21a10add3d893ef7a4eb290d4daaa22c9c8956635e184620248b127abeb155816e1ec94098c7e8c"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x3, @empty, 0x8}, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bb5, 0x9, {0x6, 0x32, 0x5, 0x7, 0x0, 0x2, 0x0, @in=@private=0xa010100, @in=@dev={0xac, 0x14, 0x14, 0x43}}}, @sadb_x_sec_ctx={0x15, 0x18, 0x5, 0x3, 0x9f, "42a726a49bd88e5c9469cc9c776529d38440bff4b39e656e7af66bae23edac39970bead37c2b375d195472eb57048bb6428a7cd809bf6be3492d65815f7951b096e12a619def0fe442d81bf2ec5513dda48e6ec7e8e198368d9061bfb5585e660999e7ded7e00db2c83d321d9b2c6bf87ca42d18fcf7e5b6d6576b5e3eacdfddb8c8ce563fe33d04d95d4b89e6d275dcd0eaf9d6b1f97b31e56a09c7ce3818"}]}, 0x2c8}}, 0x4880) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x8805) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 18:40:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 18:40:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0x120}, {0x28}}}}, 0x428) 18:40:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0x370}, {0x28}}}}, 0x428) 18:40:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 18:40:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2728.240044][T18329] syz-executor.4 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 2728.253577][T18329] CPU: 0 PID: 18329 Comm: syz-executor.4 Not tainted 5.19.0-syzkaller-09084-gc040862bfbd9-dirty #0 [ 2728.264259][T18329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 2728.274488][T18329] Call Trace: [ 2728.277808][T18329] [ 2728.280741][T18329] dump_stack_lvl+0xd6/0x122 [ 2728.285369][T18329] dump_stack+0x11/0x12 [ 2728.289538][T18329] dump_header+0x98/0x410 [ 2728.293939][T18329] oom_kill_process+0x100/0x550 [ 2728.298941][T18329] out_of_memory+0x620/0x880 [ 2728.303551][T18329] mem_cgroup_oom+0x475/0x4f0 [ 2728.308239][T18329] try_charge_memcg+0x746/0x960 [ 2728.313099][T18329] ? debug_smp_processor_id+0x13/0x20 [ 2728.318548][T18329] ? delay_tsc+0xc1/0xe0 [ 2728.322875][T18329] __memcg_kmem_charge_page+0x2e4/0x480 [ 2728.328430][T18329] __alloc_pages+0x1c1/0x340 [ 2728.333077][T18329] alloc_pages+0x34d/0x450 [ 2728.337535][T18329] __vmalloc_node_range+0x730/0xef0 [ 2728.342755][T18329] kvmalloc_node+0xf3/0x140 [ 2728.347354][T18329] ? xt_alloc_table_info+0x39/0x70 [ 2728.352492][T18329] xt_alloc_table_info+0x39/0x70 [ 2728.357450][T18329] do_ip6t_set_ctl+0x645/0x1790 [ 2728.362418][T18329] ? rmqueue_pcplist+0x157/0x1e0 [ 2728.367349][T18329] ? rmqueue+0x4a/0xbc0 [ 2728.371496][T18329] ? page_counter_cancel+0xa4/0x1f0 [ 2728.376697][T18329] nf_setsockopt+0x1a6/0x1c0 [ 2728.381288][T18329] ipv6_setsockopt+0x2724/0x2a90 [ 2728.386231][T18329] ? put_task_struct_rcu_user+0x48/0x80 [ 2728.391856][T18329] ? __schedule+0x50d/0x6e0 [ 2728.396360][T18329] ? schedule+0x5b/0x80 [ 2728.400583][T18329] ? futex_wait_queue+0x11c/0x160 [ 2728.405621][T18329] ? __rcu_read_unlock+0x4a/0x70 [ 2728.410569][T18329] ? avc_has_perm_noaudit+0x1c0/0x270 [ 2728.415952][T18329] ? avc_has_perm+0x6b/0x150 [ 2728.420541][T18329] ? avc_has_perm+0xd0/0x150 [ 2728.425136][T18329] ? selinux_netlbl_socket_setsockopt+0xd7/0x2c0 [ 2728.431465][T18329] ? selinux_socket_setsockopt+0x145/0x170 [ 2728.437299][T18329] udpv6_setsockopt+0x85/0x90 [ 2728.441986][T18329] sock_common_setsockopt+0x5d/0x70 [ 2728.447241][T18329] ? sock_common_recvmsg+0xe0/0xe0 [ 2728.452359][T18329] __sys_setsockopt+0x212/0x2b0 [ 2728.457351][T18329] __x64_sys_setsockopt+0x62/0x70 [ 2728.462412][T18329] do_syscall_64+0x2b/0x70 [ 2728.466902][T18329] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2728.472790][T18329] RIP: 0033:0x7f7d6b3e6209 [ 2728.477259][T18329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2728.496877][T18329] RSP: 002b:00007f7d6ab5c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2728.505295][T18329] RAX: ffffffffffffffda RBX: 00007f7d6b4f8f60 RCX: 00007f7d6b3e6209 [ 2728.513260][T18329] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 2728.521230][T18329] RBP: 00007f7d6b440161 R08: 0000000000000428 R09: 0000000000000000 [ 2728.529200][T18329] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 2728.537171][T18329] R13: 00007ffeb6b706af R14: 00007f7d6ab5c300 R15: 0000000000022000 [ 2728.545144][T18329] [ 2728.548355][T18329] memory: usage 307184kB, limit 307200kB, failcnt 1109 [ 2728.555204][T18329] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2728.562076][T18329] Memory cgroup stats for /syz4: [ 2728.684505][T18329] anon 126976 [ 2728.684505][T18329] file 40960 [ 2728.684505][T18329] kernel 314388480 [ 2728.684505][T18329] kernel_stack 16384 [ 2728.684505][T18329] pagetables 77824 [ 2728.684505][T18329] percpu 1184 [ 2728.684505][T18329] sock 0 [ 2728.684505][T18329] vmalloc 0 [ 2728.684505][T18329] shmem 40960 [ 2728.684505][T18329] file_mapped 40960 [ 2728.684505][T18329] file_dirty 0 [ 2728.684505][T18329] file_writeback 0 [ 2728.684505][T18329] swapcached 0 18:40:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0x700], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 18:40:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 18:40:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x2}, {0x28}}}}, 0x428) 18:40:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x20, 0x3, {{0x17, 0x4, 0x2, 0x36, 0x5c, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @remote, {[@ssrr={0x89, 0xb, 0x9d, [@multicast2, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xb4, [@loopback]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x1, [{@loopback, 0x3}]}, @rr={0x7, 0x17, 0x83, [@private=0xa010100, @multicast2, @loopback, @remote, @loopback]}, @noop, @generic={0x94, 0x12, "2c0556ddb82caa242f9660e5ff180cdc"}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x7, 0x7, 0x3949c71b, 0xffff, {{0x3a, 0x4, 0x0, 0x0, 0xe8, 0x64, 0x0, 0x81, 0x2f, 0x0, @remote, @multicast2, {[@rr={0x7, 0x7, 0xb1, [@local]}, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x0, 0x4, 'gd'}, {0x7, 0xa, "427207ee8f8f84e6"}, {0x1, 0x10, "af8f856d678bd7371d1b0777bcf3"}, {0x2, 0x12, "2534566fe0941701a3372e111032316c"}, {0x0, 0xc, "4ca5766ce036b9856695"}, {0x6, 0x6, "1bd1c290"}, {0x1, 0x8, "39f642310b88"}, {0x2, 0x3, 'G'}]}, @timestamp_prespec={0x44, 0x1c, 0x98, 0x3, 0x9, [{@private=0xa010100, 0x8}, {@private=0xa010100, 0x9}, {@multicast1, 0x6e3}]}, @timestamp_addr={0x44, 0x44, 0x24, 0x1, 0x3, [{@empty, 0x3}, {@loopback, 0x1}, {@loopback, 0x8}, {@loopback, 0x2}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x5, 0x0}}, {@multicast1, 0xb88}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @ssrr={0x89, 0x7, 0xf7, [@loopback]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xc8, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f00000009c0)={0x784, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "1edbe136af876aa7f2028067e7aff6e2d9842fc5808709ee6fc9df7b"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "26d60eab6a99577a4a1a6bb59898d8e03a3b7a4ef5f462fab487805965b392fa30f0e71072878ddf0b26ec884af99642513b109e8838636ce02fe9c869878a4767d0f3124118967fcf49f7e215623ca9214e11d2dbe76b7191af3540cbc1f34f8936cc0d2d718c4a1e5f259b3eb60cd47340"}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%:%(\xdc-#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x180}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+{]*.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$*)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')&^^\\(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '^}^[)%\\$[}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x67}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x454, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_BITS={0x170, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '+}[%\x12,:@{}.*,-\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fe00000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3bb3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{&:$.\x97*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xfe\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'SET\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%!\\\'!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}+/\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'SET\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}]}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52f0}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'security\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'SET\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '].-!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}-\xbe\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'security\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf1c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']($\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+-}}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ')/\')#l+%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'I!%*{%)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x784}}, 0x10) 18:40:24 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x1fffffbf, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0x0, 0x2600], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) [ 2728.684505][T18329] inactive_anon 126976 [ 2728.684505][T18329] active_anon 40960 [ 2728.684505][T18329] inactive_file 0 [ 2728.684505][T18329] active_file 0 [ 2728.684505][T18329] unevictable 0 [ 2728.684505][T18329] slab_reclaimable 17280 [ 2728.684505][T18329] slab_unreclaimable 184480 [ 2728.684505][T18329] slab 201760 [ 2728.684505][T18329] workingset_refault_anon 0 [ 2728.684505][T18329] workingset_refault_file 135 [ 2728.684505][T18329] workingset_activate_anon 0 [ 2728.684505][T18329] workingset_activate_file 0 [ 2728.779204][T18329] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=18327,uid=0 [ 2728.794533][T18329] Memory cgroup out of memory: Killed process 18329 (syz-executor.4) total-vm:48360kB, anon-rss:424kB, file-rss:8964kB, shmem-rss:72kB, UID:0 pgtables:84kB oom_score_adj:1000 18:40:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x17, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x4}, @sadb_address={0x3, 0x1b, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_nat_t_port={0x1}]}, 0x50}}, 0x0) 18:40:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x2, 0x350, 0xffffffff, 0x120, 0x120, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'bridge_slave_1\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'nr0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x268}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x20, 0x3, {{0x17, 0x4, 0x2, 0x36, 0x5c, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @remote, {[@ssrr={0x89, 0xb, 0x9d, [@multicast2, @dev={0xac, 0x14, 0x14, 0xf}]}, @ssrr={0x89, 0x7, 0xb4, [@loopback]}, @timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x1, [{@loopback, 0x3}]}, @rr={0x7, 0x17, 0x83, [@private=0xa010100, @multicast2, @loopback, @remote, @loopback]}, @noop, @generic={0x94, 0x12, "2c0556ddb82caa242f9660e5ff180cdc"}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000840)={'gretap0\x00', 0x0, 0x7, 0x7, 0x3949c71b, 0xffff, {{0x3a, 0x4, 0x0, 0x0, 0xe8, 0x64, 0x0, 0x81, 0x2f, 0x0, @remote, @multicast2, {[@rr={0x7, 0x7, 0xb1, [@local]}, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x0, 0x4, 'gd'}, {0x7, 0xa, "427207ee8f8f84e6"}, {0x1, 0x10, "af8f856d678bd7371d1b0777bcf3"}, {0x2, 0x12, "2534566fe0941701a3372e111032316c"}, {0x0, 0xc, "4ca5766ce036b9856695"}, {0x6, 0x6, "1bd1c290"}, {0x1, 0x8, "39f642310b88"}, {0x2, 0x3, 'G'}]}, @timestamp_prespec={0x44, 0x1c, 0x98, 0x3, 0x9, [{@private=0xa010100, 0x8}, {@private=0xa010100, 0x9}, {@multicast1, 0x6e3}]}, @timestamp_addr={0x44, 0x44, 0x24, 0x1, 0x3, [{@empty, 0x3}, {@loopback, 0x1}, {@loopback, 0x8}, {@loopback, 0x2}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x5, 0x0}}, {@multicast1, 0xb88}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}]}, @ssrr={0x89, 0x7, 0xf7, [@loopback]}, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xc8, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0x208000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x780c8493f11073c0, 0x10, 0x3d9, 0x8001, {{0x25, 0x4, 0x2, 0xf, 0x94, 0x67, 0x0, 0x7d, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xec, 0x1, 0x9, [{@rand_addr=0x64010102, 0x7fffffff}, {@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x758}, {@loopback, 0x200}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@multicast1, 0x6}, {@private=0xa010101, 0x7}]}, @ssrr={0x89, 0x7, 0x1f, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "a00ab5e1d532b00a"}, {0x1, 0xe, "d522df74ed2839e82ae6da1a"}, {0x1, 0xb, "a099eb23499bb63304"}]}, @timestamp_prespec={0x44, 0xc, 0xe6, 0x3, 0xd, [{@loopback, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x7f, 0x2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x3, 0xff}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe0000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x128, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f00000009c0)={0x784, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x20, 0x4, "1edbe136af876aa7f2028067e7aff6e2d9842fc5808709ee6fc9df7b"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "26d60eab6a99577a4a1a6bb59898d8e03a3b7a4ef5f462fab487805965b392fa30f0e71072878ddf0b26ec884af99642513b109e8838636ce02fe9c869878a4767d0f3124118967fcf49f7e215623ca9214e11d2dbe76b7191af3540cbc1f34f8936cc0d2d718c4a1e5f259b3eb60cd47340"}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%:%(\xdc-#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x180}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+{]*.\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$*)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')&^^\\(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '^}^[)%\\$[}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x67}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x454, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_BITS={0x170, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '+}[%\x12,:@{}.*,-\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fe00000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3bb3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{&:$.\x97*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xfe\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'SET\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'netpci0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%!\\\'!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}+/\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'SET\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}]}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x52f0}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x14, 0x1